manualshive.com logo in svg

Xirrus Wi-Fi Array XR4420, User Manual

The Xirrus Wi-Fi Array XR4420 offers exceptional wireless connectivity. To fully utilize its features and settings, a comprehensive User Manual is available for free download at manualshive.com. This manual ensures an effortless setup and optimization process, maximizing your Wi-Fi Array experience.

Share
Download
background image

Wireless Array

Viewing Status on the Wireless Array

143

IDS Event Log Window

This status only window displays the Intrusion Detection System (IDS) Event log, 
listing any detected attacks on your network. For descriptions of the types of 
attacks detected, as well as the settings to fine-tune IDS on the Array, please see 
“Intrusion Detection” on page 291. 

The displayed messages may be filtered by using the 

Filter Event 

setting, which 

allows you to select just one type of intrusion to display. For example, you may 
choose to display only beacon flood attacks.

Figure 89. IDS Event Log 

Use the 

Highlight Event

 field if you wish to highlight all events of one particular 

type in the list. Click on the 

Refresh

 button to refresh the message list, or click the 

Auto Refresh

 check box to instruct the Array to refresh this window 

automatically. 

Although there are no configuration options available in this window, you do 
have the usual choice of deciding how the event messages are sorted by clicking 
in the column header for the desired field.

Time Stamp

 — the time that the event occurred.

IAP

 — the  affected  radio.

Channel

 — the  affected  channel.

Event

 — the type of attack, as described in 

Intrusion Detection

. 

SSID

 — the SSID that was attacked.

MAC Address

 — the MAC address of the attacker. 

Period

 — the length of the window used to determine whether the count 

of this type of event exceeded the threshold.

Summary of Contents for Wi-Fi Array XR4420

Page 1: ...USER S GUIDE High Performance Wireless Networks Wireless Arrays XR Series May 5 2012 Release 6 1 DRAFT5 ...

Page 2: ......

Page 3: ...ll rights reserved This document may not be reproduced or disclosed in whole or in part by any means without the written consent of Xirrus Inc Part Number 800 0022 001 Revision D Wireless Array XR Series ...

Page 4: ...heir respective holders Please see Legal Notices Warnings Compliance Statements and Warranty and License Agreements in Appendix C Notices on page 431 Xirrus Inc 2101 Corporate Center Drive Thousand Oaks CA 91320 USA Tel 1 805 262 1600 1 800 947 7871 Toll Free in the US Fax 1 866 462 3980 www xirrus com ...

Page 5: ...er over Gigabit Ethernet PoGE 10 Enterprise Class Management 10 Key Features and Benefits 12 High Capacity and High Performance 12 Extended Coverage 12 Non Overlapping Channels 13 SDMA Optimization 13 Fast Roaming 13 Easy Deployment 13 Secure Wireless Access 13 Applications Enablement 14 Advanced Feature Sets 14 Xirrus Advanced RF Performance Manager RPM 14 Xirrus Advanced RF Security Manager RSM ...

Page 6: ...siderations 30 Allocating Channels 30 Deployment Examples 33 IEEE 802 11n Deployment Considerations 35 MIMO Multiple In Multiple Out 36 Multiple Data Streams Spatial Multiplexing 37 Channel Bonding 38 Improved MAC Throughput 39 Short Guard Interval 39 Obtaining Higher Data Rates 40 802 11n Capacity 41 Failover Planning 41 Switch Failover Protection 43 Power Planning 44 Power over Gigabit Ethernet ...

Page 7: ...ng the WMI 67 Logging In 67 Entering the License 67 Performing the Express Setup Procedure 69 Procedure for Performing an Express Setup 70 Securing Low Level Access to the Array 76 The Web Management Interface 79 An Overview 80 Structure of the WMI 81 User Interface 83 Utility Buttons 85 Logging In 87 Applying Configuration Changes 87 Character Restrictions 88 Viewing Status on the Wireless Array ...

Page 8: ...annel History 114 Radio Assurance 116 Station Status Windows 118 Stations 119 Location Map 120 RSSI 125 Signal to Noise Ratio SNR 127 Noise Floor 129 Max by IAP 131 Station Assurance 132 Statistics Windows 134 IAP Statistics Summary 134 Per IAP Statistics 135 Network Statistics 137 VLAN Statistics 138 WDS Statistics 139 Filter Statistics 140 Station Statistics 140 Per Station Statistics 141 System...

Page 9: ...d Connecting Securely to the WMI 194 Using the Array s Default Certificate 194 Using an External Certificate Authority 195 Admin Management 196 Admin Privileges 198 Admin RADIUS 200 About Creating Admin Accounts on the RADIUS Server 200 Management Control 203 Access Control List 209 Global Settings 212 External Radius 216 About Creating User Accounts on the RADIUS Server 216 Internal Radius 219 Ro...

Page 10: ...261 Beacon Configuration 263 Station Management 263 Advanced Traffic Optimization 264 Global Settings 11an 270 Global Settings 11bgn 274 Global Settings 11n 279 Advanced RF Settings 282 About Standby Mode 282 RF Monitor 283 RF Resilience 284 RF Power Sensitivity 285 RF Spectrum Management 287 Station Assurance 288 Intrusion Detection 291 DoS Attacks 292 Impersonation Attacks 293 About Blocking Rog...

Page 11: ...320 About Licensing and Upgrades 321 System 322 Automatic Updates from Remote Image or Configuration File 323 Configuration 324 Diagnostics 326 Web Page Redirect 328 Network Tools 329 Progress and Status Frames 331 CLI 332 Options 333 Logout 336 The Command Line Interface 337 Establishing a Secure Shell SSH Connection 337 Getting Started with the CLI 339 Inputting Commands 339 Getting Help 339 Top...

Page 12: ... 359 filter 362 Air Cleaner 363 group 366 hostname 366 interface 367 load 367 location 368 management 368 more 370 netflow 371 no 372 quit 374 radius server 374 reboot 375 reset 375 restore 376 run tests 377 security 379 snmp 380 ssid 381 syslog 382 uptime 383 vlan 384 wifi tag 385 Sample Configuration Tasks 386 Configuring a Simple Open Global SSID 387 ...

Page 13: ... on an Open SSID 397 Configuring Radio Assurance Mode Loopback Tests 398 Appendices 401 Appendix A Quick Reference Guide 403 Factory Default Settings 403 Host Name 403 Network Interfaces 403 Serial 403 Gigabit 1 and Gigabit 2 404 Server Settings 404 NTP 404 Syslog 404 SNMP 405 DHCP 405 Default SSID 406 Security 406 Global Settings Encryption 406 External RADIUS Global 407 Internal RADIUS 408 Admin...

Page 14: ...Specific Attribute VSA for Xirrus 423 Upgrading the Array via CLI 424 Sample Output for the Upgrade Procedure 425 Contact Information 429 Appendix C Notices 431 Notices 431 EU Directive 1999 5 EC Compliance Information 435 Compliance Information Non EU 442 Safety Warnings 443 Translated Safety Warnings 444 Software License and Product Warranty Agreement 445 Hardware Warranty Agreement 451 Glossary...

Page 15: ... Manually 32 Figure 16 Deployment Scenario 54 Mbps Per Sector 33 Figure 17 Deployment Scenario 36 Mbps Per Sector 33 Figure 18 Deployment Scenario 18 Mbps Per Sector 34 Figure 19 Classic 802 11 Signal Transmission 36 Figure 20 MIMO Signal Processing 36 Figure 21 Spatial Multiplexing 37 Figure 22 Channel Bonding 38 Figure 23 MAC Throughput Improvements 39 Figure 24 Computing 802 11n Data Rates 40 F...

Page 16: ...Figure 49 Show Configuration 96 Figure 50 Admin Login History 97 Figure 51 Network Settings 98 Figure 52 Network Map 99 Figure 53 Spanning Tree Status 102 Figure 54 Routing Table 103 Figure 55 ARP Table 103 Figure 56 DHCP Leases 104 Figure 57 Connection Tracking 104 Figure 58 CDP Neighbors 105 Figure 59 Network Assurance 106 Figure 60 RF Monitor IAPs 108 Figure 61 RF Monitor IAPs 108 Figure 62 RF ...

Page 17: ...tistics 139 Figure 85 Filter Statistics 140 Figure 86 Station Statistics 140 Figure 87 Individual Station Statistics Page 141 Figure 88 System Log Alert Level Highlighted 142 Figure 89 IDS Event Log 143 Figure 90 WMI Express Setup 149 Figure 91 Network Interfaces 156 Figure 92 Network Settings 157 Figure 93 Network Interface Ports 158 Figure 94 Network Bonds 161 Figure 95 Port Modes a b 162 Figure...

Page 18: ...802 1p Layer 2 227 Figure 126 Priority Level DSCP DiffServ Layer 3 227 Figure 127 SSID Management 231 Figure 128 SSID Management 235 Figure 129 WPR Internal Splash Page Fields SSID Management 238 Figure 130 Customizing an Internal Login or Splash Page 241 Figure 131 Setting Active IAPs per SSID 243 Figure 132 Per SSID Access Control List 244 Figure 133 Groups 246 Figure 134 Group Management 248 Fi...

Page 19: ...R Splash Login page files 328 Figure 163 System Command Ping 329 Figure 164 Radius Ping Command 329 Figure 165 Radius Ping Output 330 Figure 166 CLI Window 332 Figure 167 WMI Display Options 333 Figure 168 iPhone Style Option 334 Figure 169 Login Window 336 Figure 170 Logging In 338 Figure 171 Help Window 339 Figure 172 Full Help 340 Figure 173 Partial Help 340 Figure 174 Air Cleaner Filter Rules ...

Page 20: ...igures Figure 183 Setting the Cell Size for All IAPs 395 Figure 184 Setting the Cell Size for a Specific IAP 396 Figure 185 Configuring VLANs on an Open SSID 397 Figure 186 Configuring Radio Assurance Mode Loopback Testing 399 ...

Page 21: ...us Arrays XR Series The Xirrus family of products includes the following The XR Series of Xirrus Wireless Arrays The newest Xirrus Wireless Arrays have been completely redesigned to provide distributed intelligence integrated switching capacity of up to 10 Gbps increased bandwidth and smaller size The radios support IEEE802 11 a b g and n clients and feature the capacity and performance needed to ...

Page 22: ...nts of the Xirrus Management System Users start the XMS client simply by entering the URL of the XMS server on a web browser The XMS server manages a number of Wireless Arrays via SNMP Figure 2 The Xirrus Management System If you need detailed information about this product refer to the XMS User s Guide Xirrus Power over Gigabit Ethernet PoGE The PoGE modules eliminate the need for running separat...

Page 23: ... Power over Gigabit Ethernet system may be referred to as PoGE Why Choose the Xirrus Wireless Array The deployment of wireless is a necessity as businesses strive for greater flexibility in the workplace and the need for employee mobility rises The user community is placing spiraling and often unanticipated demands on the wireless network with the rapid proliferation of devices such as iPads and w...

Page 24: ... backwards compatible with 802 11b 802 11n Uses multiple antennas per radio to boost transmission speed as high as 450Mbps increasing throughput range and maximum number of users 802 11n is backwards compatible with 802 11a b g Whether you have just a handful of users or thousands of users wireless has the scalability and flexibility to serve your needs See Also Key Features and Benefits Wireless ...

Page 25: ...rray XR Series The Wireless Array regardless of the product model is Wi Fi compliant and simultaneously supports 802 11a 802 11b 802 11g and 802 11n clients The multi state design allows you to assign radios to 2 4 GHz and 5 GHz bands or both in any desired arrangement Integrated switching and active enterprise class features such as VLAN support and multiple SSID capability enable robust network ...

Page 26: ...verage pattern produced by its directional antennas is ideal for covering facilities with central hallways and adjacent rooms commonly found in office buildings hotels and dormitories The Xirrus XR 2000 Series Wireless Array is a four slot chassis available in a four multi state 2 4GHz or 5GHz radio configuration supporting up to 320 users with up to 1 8Gbps of bandwidth These models support a ran...

Page 27: ...s Yes Yes Yes Yes 1 Gigabit Uplink Ports 1 1 1 1 1 1 Wireless bandwidth 600 Mbps 900 Mbps 600 Mbps 900 Mbps 1 2 Gbps 1 8 Gbps Users supported 480 480 480 480 960 960 Feature XR 4420 XR 4430 XR 4820 XR 4830 Number of radios 802 11a b g n monitor 4 4 8 8 Radio type 2x2 3x3 2x2 3x3 Integrated antennas 8 12 16 24 Integrated wireless switch ports 8 8 8 8 Integrated RF spectrum analyzer threat sensors Y...

Page 28: ...y with an optional Xirrus 10 Gig fiber optics adapter See Also Key Features and Benefits Wireless Array Product Overview Power over Gigabit Ethernet PoGE Feature XR 6820 XR 6830 XR 7220 XR 7230 XR 7620 XR 7630 Number of radios 802 11a b g n monitor 8 8 12 12 16 16 Radio type 2x2 3x3 2x2 3x3 2x2 3x3 Number of integrated antennas 16 24 24 36 32 48 Integrated wireless switch ports 16 16 16 16 16 16 I...

Page 29: ...come part of the wireless network With the Xirrus Advanced Feature Sets intrusion detection and prevention site monitoring and RF spectrum analysis are performed in the background by the Array automatically Deployment Flexibility Xirrus unique multi radio architecture generates 360 degrees of sectored high gain 802 11a b g n coverage that provides extended range and the highest possible data rates...

Page 30: ...om bleeding beyond the site s perimeter wall This configuration may also be used in those cases where you want to restrict wireless coverage to selected areas of the building s interior Power over Gigabit Ethernet PoGE The Xirrus Power over Gigabit Ethernet modules provide power to your Arrays over the same Cat 5e or Cat 6 cable used for data eliminating the need to run power cables and provide an...

Page 31: ...Command Line Interface CLI offers IT professionals a familiar management and control environment SNMP Simple Network Management Protocol is also supported to allow management from an SNMP compliant management tool such as the optional Xirrus Management System For deployments of more than five Arrays we recommend that you use the Xirrus Management System XMS The XMS offers a rich set of features fo...

Page 32: ...ts sixteen IAPs radios provide a maximum wireless capacity of 7 2 Gbps which offers ample reserves for the high demands of current and future applications Of the sixteen IAPs fifteen operate as radios which may be set up to serve your choice of client types any or all of 802 11a b g n 5 GHz or 2 4 GHz bands providing backwards compatibility with 802 11b and 802 11g In the recommended configuration...

Page 33: ...overage while allowing independent channel and power output customization Also supports fast inter zone handoffs for time sensitive applications and roaming Fast Roaming Utilizes the Xirrus Roaming Protocol XRP ensuring fast and seamless roaming capabilities between IAPs or Arrays at both Layer 2 and Layer 3 Easy Deployment The Xirrus Management System XMS offers real time monitoring and managemen...

Page 34: ...gn of the Xirrus Wireless Array RPM manages the allocation of wireless bandwidth to wireless stations across multiple RF channels The result maximizes overall network performance with superior flexibility and capacity Today s wireless infrastructure is faced with ever increasing numbers and variations of wireless enabled clients whether in the form of notebooks netbooks smart phones IP phones prin...

Page 35: ...erall network security with superior flexibility and performance Today s wireless networks face a number of potential security threats in the form of rogue access points ad hoc clients unauthorized clients wireless based attacks eavesdropping etc As 802 11n is increasingly adopted in enterprise networks defending against these threats becomes more critical With the Array s dedicated threat sensor ...

Page 36: ...over the next several years with additional performance and optional functions along with ongoing stream of IEEE 802 11 amendments This changing wireless landscape mandates that appropriate tools are available to the user to analyze optimize and troubleshoot their changing environments The distributed architecture of the Array enables the execution of powerful wireless and networking analysis at t...

Page 37: ...ed by function under the following chapter headings Introduction Provides a brief introduction to wireless technology an overview of the product including its key features and benefits and presents the product specifications Installing the Wireless Array Defines prerequisites for deploying and installing the Array and provides instructions to help you plan and complete a successful installation Th...

Page 38: ...des some sample key configuration tasks using the CLI Appendix A Quick Reference Guide Contains the product s factory default settings Appendix B Technical Support Offers guidance to resolve technical issues including general hints and tips to enhance your product experience and a procedure for isolating problems within an Array enabled wireless network Also includes Frequently Asked Questions FAQ...

Page 39: ...have Acrobat Reader you can download it free of charge from http www adobe com Hyperlinks If you click on body text that appears in the color TEAL with the exception of headings or notes the embedded hyperlink within the text will immediately take you to the referenced destination All internal and external cross references including page numbers within the List of Figures and the Index have associ...

Page 40: ...Wireless Array 20 Introduction Product Specifications XR Array Family Please refer to the Xirrus web site for the latest specifications for these Arrays www xirrus com ...

Page 41: ...ware and services in the host wired wireless network including Power Source Most Arrays are powered via Xirrus Power over Gigabit Ethernet PoGE supplies power over the same Cat 5e or Cat 6 cable used for data thus reducing cabling and installation effort PoGE power injector modules are available in 1 2 and 8 port configurations and are typically placed near your Gigabit Ethernet switch An AC outle...

Page 42: ... the same subnet as the Array or you must set a static route for management as described in the warning above Serial connection capability To connect directly to the console port on the Array all models except XR 1000 Series your computer must be equipped with a male 9 pin serial port and terminal emulation software for example HyperTerminal The Xirrus Array only supports serial cable lengths up t...

Page 43: ...all or large Wireless Array deployments External RADIUS server Although your Array comes with an embedded RADIUS server for 802 1x authentication in large deployments you may want to add an external RADIUS server Client Requirements The Wireless Array should only be used with Wi Fi certified client devices See Also Coverage and Capacity Planning Deployment Examples Failover Planning Planning Your ...

Page 44: ...on page 51 WDS Planning on page 52 Common Deployment Options on page 55 General Deployment Considerations The Wireless Array s unique multi radio architecture generates 360 degrees of sectored high gain 802 11a b g n coverage that provides extended range However the number thickness and location of walls ceilings or other objects that the wireless signals must pass through may affect the range Typ...

Page 45: ...ree angle the same wall is over 42 feet or 14 meters thick For best reception try to ensure that your wireless devices are positioned so that signals will travel straight through a wall or ceiling Figure 7 Wall Thickness Considerations 3 Try to position wireless client devices so that the signal passes through drywall between studs or open doorways and not other materials that can adversely affect...

Page 46: ...enerate RF noise Because the Array is generally mounted on ceilings be aware of its position relative to lighting especially fluorescent lighting we recommend maintaining a distance of at least 3 to 6 feet 1 to 2 meters Figure 8 Unit Placement 3 If using multiple Arrays in the same area maintain a distance of at least 100ft 30m between Arrays if there is direct line of sight between units or at le...

Page 47: ...or disabling individual sectors Full Normal Coverage In normal operation the Array provides a full 360 degrees of coverage Figure 9 Full Normal Coverage Half Coverage If installing a unit close to an exterior wall you can deactivate half of the radios to prevent redundant signals from bleeding beyond the wall and extending service into public areas The same principle applies if you want to restric...

Page 48: ...ing used for example data video voice and the number of Arrays available at the location The capacity of a cell is defined as the minimum data rate desired for each sector multiplied by the total number of sectors being used Figure 12 Connection Rate vs Distance Figure 12 shows relative connection rates for 802 11n vs 802 11a g and 802 11b and the effect of distance on the connection rates Wireles...

Page 49: ... Arrays to dynamically set radio power so that complete coverage is provided to all areas yet at the minimum power level required This helps to minimize potential interference with neighboring networks Additionally Arrays running Auto Cell automatically detect and compensate for coverage gaps caused by system interruptions To enable the Auto Cell Size feature go to RF Power Sensitivity on page 285...

Page 50: ... this feature see the Xirrus Sharp Cell Application Note in the Xirrus Resource Center Roaming Considerations Cells should overlap approximately 10 15 to accommodate client roaming Figure 14 Overlapping Cells Allocating Channels Because the Wireless Array is a multi channel device allocating the best channels to radios is important if peak performance is to be maintained Automatic Channel Selectio...

Page 51: ...time Auto Channel selection has significant advantages including Allows the Array to come up for the first time and not interfere with existing equipment that may be already running thereby limiting co channel interference More accurately tunes the RF characteristics of a wireless installation than manual configuration since the radios themselves are scanning the environment from their physical lo...

Page 52: ...basis though manual selection is not recommended and not necessary Figure 15 Allocating Channels Manually See Also Deployment Examples Failover Planning Installation Prerequisites To avoid co channel interference do not select adjacent channels for radios that are physically next to each other Maintain channel separation ...

Page 53: ... employ 802 11a cells each offering minimum throughputs of 54 Mbps 36 Mbps and 18 Mbps per sector respectively and assume a floor plan covering a total area of about 60 000 square feet 5574 sq m Figure 16 Deployment Scenario 54 Mbps Per Sector Figure 17 Deployment Scenario 36 Mbps Per Sector ...

Page 54: ...Wireless Array 34 Installing the Wireless Array Figure 18 Deployment Scenario 18 Mbps Per Sector See Also Coverage and Capacity Planning Failover Planning Planning Your Installation ...

Page 55: ...iscussed in MIMO Multiple In Multiple Out on page 36 Multiple Data Streams Spatial Multiplexing on page 37 Channel Bonding on page 38 Improved MAC Throughput on page 39 Short Guard Interval on page 39 Obtaining Higher Data Rates on page 40 802 11n Capacity on page 41 Two very important techniques to consider are Channel Bonding and Multiple Data Streams Spatial Multiplexing because they contribute...

Page 56: ...aintains broadband performance even with weak signals Prior to 802 11n a data stream was transmitted via one antenna At the receiving end the antenna with the best signal was selected to receive data Figure 19 Figure 19 Classic 802 11 Signal Transmission MIMO signal processing uses multiple antennas to send and receive data It takes advantage of multipath reflections to improve signal coherence an...

Page 57: ...nsmits completely separate data streams on different antennas in the same channel that are recombined to produce new 802 11n data rates Higher data rates are achieved by splitting the original data stream into separate data streams Each separate stream is transmitted on a different antenna using its own RF chain MIMO signal processing at the receiver can detect and recover each stream Streams are ...

Page 58: ...ou are using two channels for an IAP We recommend the use of the 5 GHz band since it has many more channels than the 2 4 GHz band and thus more channels are available for bonding The Array provides an Automatic Channel Bonding setting that will automatically select the best channel for bonding on each IAP If you enable this option you may select whether bonding will be dynamic the bonded channel c...

Page 59: ...creased by approximately 11 The short interval may be used in many environments especially indoors If the short guard interval is used in an inappropriate environment the signal quality will suffer and throughput will decrease See Global Settings 11n on page 279 to configure the guard interval N ACK Frame N Data Frame 2 Data Frame PHY Header MAC Header Data Frame Payload ACK Frame Payload Legacy O...

Page 60: ...ory in 802 11n apply multiplier to IAP if it is bonded Short Guard Interval Optional See Figure 24 to see the 802 11n data rate increase for an IAP Apply this increase to the 802 11 a b or g data rates selected for the Array Figure 24 Computing 802 11n Data Rates Optionally Multiply By 2 077 to Bond Two 20MHz Channels Optionally Multiply by 1 11 for Shorter Guard Interval to Increase Symbol Rate O...

Page 61: ...wo Gigabit Ethernet ports simultaneously as a bonded pair on Arrays with two or more Gigabit ports Figure 25 Port Failover Protection 802 11 Mode Channels Max Theoretical Capacity 802 11 a n 3 Streams 23 23 450 Mbps 10 2 Gbps 802 11 a n 2 Streams 23 23 300 Mbps 6 8 Gbps 802 11 a n 1 Stream 23 23 150 Mbps 3 4 Gbps 802 11 a 23 23 54 Mbps 1 2 Gbps 802 11 g n 3 Streams 3 3 450 Mbps 1 35 Gbps 1 or 2 st...

Page 62: ...thernet ports actually support a number of modes 802 3ad Link Aggregation Load Balancing Broadcast Link Backup Mirrored For more details on Gigabit port modes and their configuration please see Network Bonds on page 160 Interface Bridges Data Bridges Management Traffic Fails Over To IP address Gigabit port Yes Yes Bonded port DHCP or static Bonded Gigabit port Yes Yes Bonded port Same ...

Page 63: ...iple Gigabit ports to more than one Ethernet switch not a hub Figure 26 Switch Failover Protection See Also Coverage and Capacity Planning Deployment Examples Installation Prerequisites Network Management Planning Planning Your Installation Power Planning Security Planning Gigabit Ethernet connections must be on the same subnet Ethernet switch Backup switch Ethernet connections ...

Page 64: ...net PoGE modules They provide power over Cat 5e or Cat 6 cables to the Array without running power cables Specific models of the Array are compatible with specific PoGE modules For details please see the Power over Gigabit Ethernet Installation and User Guide See Also Coverage and Capacity Planning Deployment Examples Failover Planning Network Management Planning Security Planning When using Cat 5...

Page 65: ...han WEP and uses TKIP for encryption Wi Fi Protected Access WPA2 with AES This is government grade encryption available on most new client adapters and uses the AES CCM encryption mode Advanced Encryption Standard Counter Mode Authentication Authentication ensures users are who they say they are and occurs when users attempt to join the wireless network and periodically thereafter The following au...

Page 66: ...o client devices and entered into each Array MAC Access Control Lists ACLs MAC access control lists provide a list of client adapter MAC addresses that are allowed or denied access to the wireless network and can be used in addition to any of the above authentication methods ACLs are good for embedded devices like printers and bar code scanners though MAC addresses can be spoofed The Array support...

Page 67: ...quirements are illustrated in Figure 27 XMS requires ports 161 162 and 443 to be passed between Arrays and the XMS server Similarly ports 9090 and 9091 are required for communication between the XMS server and XMS clients and port 25 is typically used by the XMS server to access an SMTP server to send email notifications Figure 27 Port Requirements for XMS Firewall XMS Server XMS Client L2 Switchi...

Page 68: ...P TFTP Server No 123 udp NTP NTP Server No 161 udp SNMP XMS Server No 162 udp SNMP Traphost Note Up to four Traphosts may be configured XMS Server Yes but required by XMS 443 tcp HTTPS WMI WPR Client Yes 514 udp Syslog Syslog Server No 1812 1645 udp RADIUS some servers use 1645 RADIUS Server Yes 1813 1646 udp RADIUS Accounting some servers still use 1646 RADIUS Accounting Server Yes 2055 udp Netfl...

Page 69: ... 2000 tcp XMS Back end Server Internal No 3306 tcp MySQL Database Internal No 8001 tcp Status Viewer Internal No 8007 tcp Tomcat Shutdown Internal During installation 8009 tcp Web Container Internal During installation 9090 tcp XMS Webserver XMS client During installation 9091 tcp XMS Client Server XMS client Via XMS config file 9092 tcp XMS Client Server XMS client Via XMS config file 9443 tcp XM...

Page 70: ...Wireless Array 50 Installing the Wireless Array See Also Management Control External Radius Services VLAN Management ...

Page 71: ... good for small deployments one or two units Centralized Web based management using the optional Xirrus Management System XMS which can be run on a dedicated Xirrus appliance or your own server The XMS is used for managing large Wireless Array deployments from a centralized Web based interface and offers the following features Globally manage large numbers of Arrays up to 500 Seamless view of the ...

Page 72: ...gure 28 WDS features include One to three IAPs may be used to form a single WDS link yielding up to 1350 Mbps bandwidth per link Up to three different WDS links may be created on a single Array Automatic IAP Load Balancing If desired you may allow clients to associate to a BSS on the same radio interface used for a WDS Host Link This will take bandwidth from the WDS link Figure 28 WDS Link Multipl...

Page 73: ...53 Figure 29 A Multiple Hop WDS Connection Multiple WDS links can provide link redundancy failover capability see Figure 30 A network protocol Spanning Tree Protocol STP prevents Arrays from forming network loops Figure 30 WDS Failover Protection ...

Page 74: ...same way that a station associates to an IAP The client side of the link must be configured with the root MAC address of the target host Array A WDS Host Link acts like an IAP by allowing one WDS Client Link to associate to it An Array may have both client and host links WDS configuration is performed only on the client side Array See WDS on page 302 Note that both Arrays must be configured with t...

Page 75: ...Planning Security Planning Function Number of Wireless Arrays One or Two Three or More Power Power over Gigabit Ethernet Power over Gigabit Ethernet UPS backup recommended Failover Recommended Highly recommended VLANs Optional Optional use Can be used to put all APs on one VLAN or map to existing VLAN scheme Encryption WPA2 with AES recommended PSK or 802 1x WPA2 with AES recommended 802 1x keying...

Page 76: ... network Figure 31 Installation Workflow See Also Coverage and Capacity Planning Deployment Examples Determine the number of Arrays needed Choose the location s for your Wireless Arrays Install the mounting plate Connect the cables and turn on the power Verify that the Ethernet link and radio LEDs are functioning correctly Perform the Express Setup procedure Run Ethernet cables for PoGE 100m total...

Page 77: ...less Array Installing the Wireless Array 57 Common Deployment Options Failover Planning Installation Prerequisites Planning Your Installation Power Planning Wireless Array Product Overview Security Planning ...

Page 78: ...s designed to be mounted on a ceiling where the unit is unobtrusive and wireless transmissions can travel unimpeded throughout open plan areas You also have the option of mounting the Array on a wall using the optional wall mount assembly kit Choose a location that is central to your users see the following diagram for correct placement Figure 32 Array Placement Wiring Considerations Before using ...

Page 79: ...gabit POE2 For Arrays with a second POE port the same restrictions listed above apply Serial cable optional cable lengths up to 25 per the RS 232 specification Important Notes About Network Connections Read the following notes before making any network connections When the unit s IP address is unknown or a network connection has not been established the serial cable is used for connecting directly...

Page 80: ...Wireless Array 60 Installing the Wireless Array See Also Failover Planning Installation Prerequisites Installation Workflow Mounting the Array Power over Gigabit Ethernet PoGE ...

Page 81: ...gymnasium mount Factory enclosure A detailed Quick Installation Guide is provided with the mounting option that you selected when ordering your Array Please follow the provided instructions carefully Dismounting the Array To dismount any other Array model For all Array models push up on the Array i e push it against the mounting plate Then turn the Array to the left to remove it This is similar to...

Page 82: ...ress and following a successful boot will provide extensive status information Figure 33 LED Locations Array LED settings may be altered or disabled entirely for diagnostic purposes or for personal preference Changes are made via the Array s Command Line Interface or the Web Management Interface refer to LED Settings on page 297 Ethernet Activity and Status LEDs IAP LEDs ...

Page 83: ...Status LED IAP LEDs Power ON Blinking GREEN All OFF Boot loader power ON self test Blinking GREEN All ON Image load from compact FLASH Blinking GREEN Spinning pattern rotate all to ON then all to OFF Image load failure Blinking ORANGE All OFF Hand off to ArrayOS Solid GREEN All OFF System software initialization Solid GREEN Walking pattern LED rotating one position per second Up and running Solid ...

Page 84: ...AP is up but no associations and no traffic IAP LED heartbeat IAP is up with stations associated but no traffic IAP LED flashing Flashing at 10 Hz Flashing at 5 Hz Flashing at 2 5 Hz IAP is up passing traffic Traffic 1500 packets sec Traffic 150 packets sec Traffic 1 packet sec IAP LED is GREEN IAP is operating in the 2 4 GHz band IAP LED is ORANGE IAP is operating in the 5 GHz band IAP LED flashi...

Page 85: ...may use the CLI via the serial management port console on all Arrays except the XR 1000 Series or any of the Gigabit Ethernet ports You can use the WMI via any of the Array s Ethernet ports Figure 34 Network Interface Ports XR 1000 Series Figure 35 Network Interface Ports XR 2000 Series OK Figure 36 Network Interface Ports XR 4000 Series Gigabit POE gig1 Serial Console Gigabit POE gig1 Serial Cons...

Page 86: ...0 2 1 If the Array is connected to a network that provides DHCP addresses the IP address can be determined by the following three methods 1 The simplest way to address the Array is using its default hostname which is the Array s serial number for example XR40123091CACD If your network provides DHCP and DNS then you can use this hostname 2 Otherwise examine the DHCP tables on the server and find th...

Page 87: ...ming the Express Setup Procedure Powering Up the Wireless Array Entering the License A license is needed to operate the Wireless Array at full functionality Without a license the Array may only be powered up and have a basic network configuration The Array s license determines many of the features that are available on the Array For example automatic cell sizing and channel allocation require a li...

Page 88: ...he key was provided to you in an email as an attachment in the form of an Excel file xls Enter the key exactly as it appears in the file Click the Upgrade button to apply the key 4 Now you may verify the features provided by the key In the Status section of the left hand frame click Array and then click Information Check the items listed in the License Features row If you are installing a large nu...

Page 89: ...less Array 69 Performing the Express Setup Procedure The Express Setup procedure establishes global configuration settings that enable basic Array functionality Changes made in this window will affect all radios Figure 38 Express Setup ...

Page 90: ...mail Enter the email address of the admin contact you entered in Step 3 5 Admin Phone Enter the telephone number of the admin contact you entered in Step 3 6 License Key If Xirrus issued you a license that differs from the current value shown enter it now 7 Configure SNMPv2 Select whether to Enable SNMPv2 on the Array and change the SNMP Community Strings if desired If you are using the Xirrus Man...

Page 91: ...f the router that the Array uses to forward data to other networks Click the Apply button for this interface when done making IP changes 9 SSID Settings This section specifies the wireless network name and security settings a SSID Wireless Network Name The SSID Service Set Identifier is a unique name that identifies a wireless network All devices attempting to connect to a specific WLAN must use t...

Page 92: ...tronger data protection and network access control It offers Enterprise and consumer Wi Fi users with a high level of assurance that only authorized users can access their wireless networks Like WPA WPA2 is designed to secure all versions of 802 11 devices including 802 11a 802 11b 802 11g and 802 11n multi band and multi mode WPA Both WPA and WPA2 This option makes use of both WPA and WPA2 For mo...

Page 93: ...he configuration of the Array If you wish the new account to have different privileges select the desired level from the drop down list For more information about user privileges please see Admin Privileges on page 198 c New Admin Password Enter a new administration password for managing this Array If you forget this password you must reset the Array to its factory defaults so that the password is...

Page 94: ... If you are using NTP enter the IP address or domain name of the NTP server f NTP Primary Authentication If you are using authentication with NTP select the type of key MD5 or SHA1 Select None if you are not using authentication this is the default For more information on authenticated NTP see Time Settings NTP on page 171 g NTP Primary Authentication Key ID Enter the key ID which is a decimal int...

Page 95: ... adjust the current date this box should be left unchecked default 12 IAP Settings Enable Configure All IAPs Click on the Execute button to enable and auto configure all IAPs a message displays the countdown time in seconds to complete the auto configuration task When an IAP is enabled its LED is switched on see also Array LED Operating Sequences on page 63 13 Click on the Save changes to flash bu...

Page 96: ...really only necessary if Xircon is enabled There aren t other ways to get at XBL that would benefit from securing the password Xirrus also provides the Xircon utility for connecting to Xirrus XR Arrays that are not reachable via the normal access methods such as SSH or WMI and that do not have a physical console port XR 1000 or whose console port is not accessible Xircon discovers Arrays on your n...

Page 97: ...cedure for Securing Low Level Array Access Use the following steps to replace the default XBL username and password and optionally to change the type of Xircon management access that is allowed These steps use CLI commands 1 To access CLI via the WMI click CLI under the Tools section on the left for detailed instructions see CLI on page 332 Skip to Step 4 on page 78 To access CLI via SSH see Estab...

Page 98: ... newusername config boot env set password newpassword config save 5 Enter the following commands if you wish to change Xircon access permission config management config mgmt xircon management status config mgmt save config mgmt exit config management status may be one of on enables both CLI and XBL access off disables both CLI and XBL access aos only enables only CLI i e ArrayOS access boot only e...

Page 99: ...Xirrus Wireless Array s embedded Web Management Interface WMI used for establishing your network s configuration settings and wireless operating parameters It also includes login instructions The following topics are discussed An Overview Structure of the WMI User Interface Logging In Applying Configuration Changes ...

Page 100: ...Overview The WMI is an easy to use graphical interface to your Wireless Array It allows you to configure the product to suit your individual requirements and ensure that the unit functions efficiently and effectively Figure 39 Web Management Interface ...

Page 101: ... Network Map Spanning Tree Status Routing Table ARP Table DHCP Leases Connection Tracking NAT CDP Neighbors Network Assurance RF Monitor Windows IAPs Spectrum Analyzer Intrusion Detection Channel History Radio Assurance Station Status Windows Stations Location Map RSSI Signal to Noise Ratio SNR Noise Floor Max by IAP Station Assurance Statistics Windows IAP Statistics Summary Per IAP Statistics Ne...

Page 102: ...st Global Settings External Radius Internal Radius Rogue Control List SSIDs SSID Management Active IAPs Per SSID Access Control List Groups Group Management Configuration Windows cont d IAPs IAP Settings Global Settings IAP Global Settings 11an Global Settings 11bgn Global Settings 11n Advanced RF Settings Intrusion Detection LED Settings DSCP Mappings Roaming Assist WDS WDS Client Links Filters F...

Page 103: ...signed with simplicity in mind making navigation quick and easy In the following example you ll see that windows are divided into left and right frames Figure 40 WMI Frames Left frame Right frame Array info Click to configure view statistics Log Message counters Pull down menu Help ...

Page 104: ... session organized into Critical Warning and General messages Click on a counter to display the associated Syslog messages Messages at the selected level or higher will be shown For more information please see System Log Window on page 142 The Array representation contains shortcut links Click a radio to view statistics for it Click the center of the Array to display the IAP Settings window which ...

Page 105: ... left frame Clear screen when loading new page See Options on page 333 for more information Utility Buttons At the bottom of each window you will find a set of useful buttons a Feedback button a Print button and a Help button Figure 42 WMI Utility Buttons Click on the Feedback button to generate a Web page that allows you to submit your comments to Xirrus Inc You can also access the feedback Some ...

Page 106: ...r local printer Click on the Help button to access the Array s online help system Submitting Your Comments When submitting comments via the Feedback button Figure 43 ensure that you provide as much detail as possible including your contact information the product model number that the comment relates to and the ArrayOS software version if known When finished click on the Submit button to submit yo...

Page 107: ...t Interface enter admin for both the user name and password Figure 44 Logging In to the Wireless Array Applying Configuration Changes In most of the WMI configuration windows your changes to settings are applied to the Array as you make them In most cases there is no separate Apply button to click to make the changes take effect There are a few exceptions to this rule In these cases a particular s...

Page 108: ...ill save the entire current configuration not only the changes on current WMI page Character Restrictions When inputting strings in the WMI for example assigning SSIDs host name password etc use common alphanumeric characters Some of the fields in the WMI will not accept special characters so use of the following characters should typically be avoided ...

Page 109: ...navigation tree in the left frame of the WMI Array Status Windows on page 90 Network Status Windows on page 97 RF Monitor Windows on page 107 Station Status Windows on page 118 Statistics Windows on page 134 System Log Window on page 142 IDS Event Log Window on page 143 Configuration and Tools windows are not discussed here For information on these windows please see Configuring the Wireless Array...

Page 110: ... information for the Array in text format Admin History shows all current and past logins since the last reboot Array Summary This is a status only window that provides a snapshot of the global configuration settings for all Wireless Array network interfaces and IAPs You must go to the appropriate configuration window to make changes to any of the settings displayed here configuration changes cann...

Page 111: ...ce Auto Neg Shows whether auto negotiation is in use on this interface to determine settings for speed parity bits etc LED Shows whether LED display of interface status is enabled Link Shows whether the link on this interface is up or down Duplex Shows whether full duplex mode is in use Speed Shows the speed of this interface in Mbps MTU Size Shows the Maximum Transmission Unit size that has been ...

Page 112: ...s whether mirroring is enabled on this bond Integrated Access Points Section This section provides information about the Integrated Access Points IAPs that are contained within the Array How many IAPs are listed depends on which product model you are using To make configuration changes to these IAPs go to IAP Settings on page 256 IAP Lists the IAPs that are available on the Array State Shows the c...

Page 113: ... that the IAP has been configured to support Antenna Shows which antenna is being used by each IAP Cell Size Indicates which cell size setting is currently active for each IAP small medium large max automatic or manually defined by you The cell size of an IAP is a function of its transmit power and determines the IAP s overall coverage To define cell sizes go to IAP Settings on page 256 For additi...

Page 114: ...ations are currently associated with each IAP XN Arrays can handle up to 96 concurrent users per individual IAP thus 16 port XN models can handle 1536 users per Array WDS Link Distance The WDS Link on this radio if any and whether the link has been set to support Long Distance Links See WDS on page 302 MAC Address BSSID Shows the MAC address for each IAP Description The description if any that you...

Page 115: ...mestamps and current internal temperatures and fan speed Note that the License Features row lists the features that are supported by your Array s license See About Licensing and Upgrades on page 321 and Advanced Feature Sets on page 14 for more information Figure 48 Array Information You cannot make configuration changes in this window but if you are experiencing issues with network services you m...

Page 116: ...oot Factory displays the configuration established at the factory Figure 49 Show Configuration If you want to see just the differences between the Running Saved Lastboot and Factory configurations you can do this by choosing a configuration option from the Select Config pull down menu then selecting an alternative configuration option from the Select Diff pull down menu To also include the default...

Page 117: ...History Network Status Windows The following Network Status windows are available Network displays a summary of network interface settings Network Map displays information about this Array and neighboring Arrays that have been detected Spanning Tree Status displays the spanning tree status of network links on this Array Routing Table displays information about routing on this Array ARP Table displ...

Page 118: ...tablished for Array s wired interfaces This includes the Gigabit interfaces and their bonding settings DNS Settings are summarized as well You can click on any item in the Interface or Bond columns to go to the associated configuration window Figure 51 Network Settings WMI windows that allow you to change or view configuration settings associated with the network interfaces include Network Interfa...

Page 119: ...and icon Click Refresh to update the information at any time Click Auto Refresh to instruct the Array to refresh this window automatically Content of the Network Map Window By default the network map shows the following status information for each Array Array Name The host name assigned to the Array To establish the host name go to Express Setup on page 149 You may click the host name to access WM...

Page 120: ...you whether the Array is within wireless range of another Wireless Array Fast Roam Informs you whether or not the Xirrus fast roaming feature is enabled This feature utilizes the Xirrus Roaming Protocol XRP ensuring fast and seamless roaming capabilities between IAPs or Arrays at both Layer 2 and Layer 3 To enable or disable fast roaming go to Global Settings IAP on page 261 Uptime D H M Informs y...

Page 121: ... IAP Info enabled by default Enable disable display of the IAP Up columns Stations Stations Tells you how many stations are currently associated to each Array To deauthenticate a station go to Stations on page 119 The columns to the right H D W and M show the highest number of stations that have been associated over various periods of time the previous hour day week and month Default Sets the colu...

Page 122: ...d forces certain redundant data paths into a standby blocked state If one segment in the spanning tree becomes unreachable the spanning tree algorithm reconfigures the network topology and reestablishes the link by activating the standby path The spanning tree function is transparent to client stations Figure 53 Spanning Tree Status This window shows the spanning tree status forwarding or blocked ...

Page 123: ...k Figure 54 Routing Table See Also VLANs Configuring VLANs on an Open SSID ARP Table This status only window lists the entries in the Array s ARP table For a device with a given IP address this table lists the device s MAC address It also shows the Array interface through which this device may be reached The table typically includes devices that are on the same local area network segment as the Ar...

Page 124: ...is valid The same IP address is normally renewed at the expiration of the current lease Figure 56 DHCP Leases See Also DHCP Server Connection Tracking NAT This status only window lists the session connections that have been created on behalf of clients This table may also be used to view information about current NAT sessions Figure 57 Connection Tracking Click the Show Netbios checkbox at the bot...

Page 125: ...isco Discovery Protocol CDP Figure 58 CDP Neighbors The Array performs discovery on the network on an ongoing basis This list shows the devices that have been discovered Cisco devices and other devices on the network that have CDP running For each it shows the device s host name IP address manufacturer and model name the device interface that is connected to the network i e the port that was disco...

Page 126: ...rray checks connectivity to network servers that you have configured for example DNS and NTP servers on an ongoing basis For each server this list shows the server s host name if any IP address and status Network assurance must be enabled on the Array in order to perform these connectivity tests and display this information See Management Control on page 203 See Also Management Control ...

Page 127: ...of the Array s IAPs Spectrum Analyzer displays current statistics and RF measurements for each of the Array s channels Intrusion Detection displays rogue APs that have been detected by the Array Channel History charts ongoing statistics and RF measurements for one selected channel over time Radio Assurance displays counts of types of problems that caused each IAP to reset Some status information i...

Page 128: ...r a cumulative total To graph these values over time for a particular channel see Channel History on page 114 For detailed information on the measurements displayed please see Spectrum Analyzer Measurements on page 111 Figure 60 RF Monitor IAPs Figure 60 presents the data as a graphical display enabled by selecting the Graph checkbox on the upper left If this option is not selected data is present...

Page 129: ...adio This differs from the RF Monitor IAPs window which displays values measured by each IAP radio for its current assigned channel For the spectrum analyzer the monitor radio is in a listen only mode scanning across all wireless channels Each channel is scanned in sequence for a 250 millisecond interval per channel The spectrum analyzer window presents the data as a graphical display of vertical ...

Page 130: ...s To display horizontal bar graphs click the Rotate checkbox at the bottom of the data window In the rotated view if you wish to view data as a numerical table click the Text checkbox Click again to return to a graphical display The text option is only available in the rotated view Click Channel number to highlight Select Display Options ...

Page 131: ... second on the channel both valid and errored packets Bytes Sec Total number of wireless bytes per second on the channel valid packets only 802 11 Busy Percentage of time that 802 11 activity is seen on the channel Other Busy Percentage of time that the channel is unavailable due to non 802 11 activity The total busy time 802 11 Busy plus Other Busy will never total more than 100 The remaining tim...

Page 132: ...alue means no data rate information was available for the interval A higher date rate above 6 Mbps typically indicates user data traffic on the channel Otherwise the data rate reflects control packets at the lower basic rates Intrusion Detection This window displays all detected access points according to the classifications you select from the checkboxes at the top Blocked Unknown Known or Approv...

Page 133: ...classify them with the following actions Approve Set Known Block or Set Unknown You can sort the results based on the following parameters by clicking the desired column header You can refresh the list at any time by clicking on the Refresh button or click in the Auto Refresh check box to instruct the Array to refresh the list automatically See Also Network Map Rogue Control List SSIDs SSID Manage...

Page 134: ...dings is added every 10 seconds for a 5 GHz channel or every 5 seconds for a 2 4 GHz channel For descriptions of the measurements displayed please see Spectrum Analyzer Measurements on page 111 Figure 64 RF Monitor Channel History Figure 64 presents the data in graphical form New data appears at the left with older readings shifting to the right To make the data appear as a barchart click the Bar ...

Page 135: ...umn In other words the graph for each statistic will grow down the page as new readings display at the top Figure 65 Figure 65 RF Monitor Channel History Rotated If you select Rotate and Text together data is presented as a numerical table Figure 66 Click Pause to stop collecting data or Resume to continue Figure 66 RF Monitor Channel History Text ...

Page 136: ...action if a problem is detected Note that radio assurance requires RF Monitor Mode to be enabled in Advanced RF Settings to turn on self monitoring functions It also requires a radio to be set to monitoring mode For a detailed discussion of the operation of this feature and the types of resets performed see Radio Assurance on page 421 Figure 67 Radio Assurance For each of the Array s radios this w...

Page 137: ... any that radio assurance has performed each of the following types of resets since the last reboot as described in Radio Assurance Monitor Beacon Phy MAC System i e reboot the Array See Also IAPs Xirrus Advanced RF Analysis Manager RAM RF Resilience Radio Assurance ...

Page 138: ...displays the SNR at each of the Array s IAPs Noise Floor for each associated station this displays the ambient noise silence value at each of the Array s IAPs Max by IAP for each IAP this shows the historical maximum number of stations that have been associated to it over various periods of time Station Assurance displays stations that are having connectivity problems Some status information is on...

Page 139: ...a number of additional columns Identification shows more identifying information for the station its User Name Host Name Manufacturer Device Type and Device Class for example notebook iPad etc Security includes security settings used by the connection Enc ryption type Cipher used Key Mgmt used and Media supported by the station Connection Info shows the Band 5GHz or 2 4 GHz and Channel s used plus...

Page 140: ...ray to refresh this window automatically See Also Access Control List Station Status Windows Location Map The Location Map shows the approximate locations of stations relative to this Array The location of each station is computed based on the RSSI of its signal as received by the Array The distance is adjusted based on the environment setting that you selected You may display just the stations as...

Page 141: ...imize a station that is not of interest by clicking it There is also a Minimize All button You may replace the range finder background image above with your own custom image of the floorplan of the area served by the Array see Working with the Custom Image on page 124 Hover the mouse over a station to show detailed information Figure 69 For a station that is associated to this Array the details in...

Page 142: ...all rectangles clear the Minimize All checkbox Preferred Label This field is located on the top of the window towards the right It selects the type of label to be displayed for stations Netbios Name IP Address MAC Address or Manufacturer If you select NetBIOS this is the default then that name if known will be used to label each Array Else its IP or MAC address will be used in that order Auto Refr...

Page 143: ...om image click the Upload button to install it The map is redisplayed with your new background No hash marks for the map scale are added to the image display Reset Click this button to restore the map display to the factory settings All attributes are restored including the stations selected for display the scale the rotation and the background map Rotate Click this button to rotate the orientatio...

Page 144: ... Total Stations These view only values show the station counts observed by the Array See Also Station Status Windows Working with the Custom Image After you have uploaded a custom image see Custom Image and Upload in Controls and items displayed on the Location Map window on page 122 you should move the display of the Array on your map to correspond with its actual location at your site To move th...

Page 145: ... Stations as well with a checkbox at the bottom of the window Figure 72 Station RSSI Values By default the RSSI is displayed numerically You may display the relative strength using color if you select Colorize Intensity with the strongest signals indicated by the most intense color Figure 72 If you select Graph then the RSSI is shown on a representation of the Array either colorized or numerically...

Page 146: ... view you may sort the rows based on any column that has an active column header indicated when the mouse pointer changes to the hand icon Click on the Refresh button to refresh the station list or click in the Auto Refresh check box to instruct the Array to refresh this window automatically See Also Station Status Windows RF Monitor Windows ...

Page 147: ...duce sources of noise in the environment and or improve the signal from the station Figure 74 Station Signal to Noise Ratio Values You may choose to display Unassociated Stations as well with a checkbox at the bottom of the window By default the SNR is displayed numerically Figure 74 You may display the relative value using color if you select Colorize Intensity with the highest SNR indicated by t...

Page 148: ...view you may sort the rows based on any column that has an active column header indicated when the mouse pointer changes to the hand icon Click on the Refresh button to refresh the station list or click in the Auto Refresh check box to instruct the Array to refresh this window automatically See Also Station Status Windows RF Monitor Windows ...

Page 149: ...use of poor performance A relatively high value means that action may need to be taken to reduce sources of noise in the environment Figure 76 Station Noise Floor Values You may choose to display Unassociated Stations as well with a checkbox at the bottom of the window By default the noise floor is displayed numerically Figure 76 You may display the relative value using color if you select Coloriz...

Page 150: ...lar view you may sort the rows based on any column that has an active column header indicated when the mouse pointer changes to the hand icon Click on the Refresh button to refresh the station list or click in the Auto Refresh check box to instruct the Array to refresh this window automatically See Also Station Status Windows RF Monitor Windows ...

Page 151: ...hour day week month and year In other words the Max Station Count shows the high water mark over the selected period of time the maximum count of stations for the selected period rather than a cumulative count of all stations that have associated This information aids in network administration and in planning for additional capacity Figure 78 Max by IAP You may click an IAP to go to the IAP Settin...

Page 152: ... that a station has reached the threshold value for one or more of the issues checked it adds the station to this page In addition an event is triggered a trap is generated and a Syslog message is logged For each station this list shows the MAC address its IP address its host name its device type device class and manufacturer It also shows the values of the various statistics that were monitored f...

Page 153: ... and start fresh to add problem stations to the list as they are detected Click on the Refresh button to refresh the station list or click Auto Refresh to instruct the Array to refresh this window automatically See Also IAPs Station Status Windows Station Assurance ...

Page 154: ...atistics provides statistical data for all configured filters Station Statistics provides statistical data associated with each station IAP Statistics Summary This is a status only window that provides an overview of the statistical data associated with all IAPs It also shows the channel used by each IAP For detailed statistics for a specific IAP see Per IAP Statistics on page 135 Click the Unicas...

Page 155: ...ill show the sum of that statistic for all IAPs For a summary of statistics for all IAPs see IAP Statistics Summary on page 134 Use the Display Percentages checkbox at the lower left to select the output format check this option to express each statistic as a percentage of the total at the top of the column or leave it blank to display raw numbers A quick way to display the statistics for a partic...

Page 156: ... the latest information or Clear the data reset all content to zero and begin counting again at any time by clicking on the appropriate button You can also click in the Auto Refresh check box to instruct the Array to refresh this window automatically See Also System Log Window Global Settings IAP Global Settings 11an Global Settings 11bgn IAPs ...

Page 157: ...ndow with the latest information or Clear the data reset all content to zero and begin counting again at any time by clicking on the appropriate button You can also click in the Auto Refresh check box to instruct the Array to refresh this window automatically If you are experiencing problems on the Array you may also want to print this window for your records Figure 82 Network Statistics See Also ...

Page 158: ...d with your assigned VLANs You can refresh the information that is displayed on this page at any time by clicking on the Refresh button or select the Auto Refresh option for this window to refresh automatically The Clear All button at the lower left allows you to clear zero out all VLAN statistics Figure 83 VLAN Statistics See Also VLAN Management VLANs ...

Page 159: ...lient and host links To access data about a specific WDS client or host link simply click on the desired link in the left frame to access the appropriate window You may also choose to view a sum of the statistics for all client links all host links or all links both client and host links Figure 84 WDS Statistics See Also SSID Management WDS ...

Page 160: ...n a filter name to edit the filter settings Figure 85 Filter Statistics See Also Filters Station Statistics This status only window provides an overview of statistical data for all stations Stations are listed by MAC address and Receive and Transmit statistics are summarized for each For detailed statistics for a specific station click the desired MAC address in the Station column and see Per Stat...

Page 161: ...stics window click the MAC address of the desired entry in the Station column to display its Per Station Statistics window Receive and Transmit statistics are listed by Rate this is the data rate in Mbps For a summary of statistics for all stations see Station Statistics on page 140 You can Refresh the data update the window with the latest information or Clear the data reset all content to zero a...

Page 162: ...ol of the minimum priority level displayed For example you may choose under Services System Log to log messages at or above Debug level but use Filter Priority to display only those at Information level and above Figure 88 System Log Alert Level Highlighted Use the Highlight Priority field if you wish to highlight messages at the selected priority level Click on the Refresh button to refresh the m...

Page 163: ...hlight Event field if you wish to highlight all events of one particular type in the list Click on the Refresh button to refresh the message list or click the Auto Refresh check box to instruct the Array to refresh this window automatically Although there are no configuration options available in this window you do have the usual choice of deciding how the event messages are sorted by clicking in ...

Page 164: ...4 Viewing Status on the Wireless Array Current the count of this type of event for the current period Average the average count per period of this type of event Maximum the maximum count per period of this type of event ...

Page 165: ...Wireless Array Viewing Status on the Wireless Array 145 Use this Space for Your Notes ...

Page 166: ...Wireless Array 146 Viewing Status on the Wireless Array ...

Page 167: ...ps on page 246 IAPs on page 253 WDS on page 302 Filters on page 308 Clusters on page 314 After making changes to the configuration settings of an Array you must click on the Save changes to flash button at the top of the configuration window otherwise the changes you make will not be applied the next time the Array is rebooted Note that the Configuration menu section may be collapsed down to hide ...

Page 168: ...reless Array This chapter only discusses using the configuration windows on the Array To view status or use system tools on the Array please see Viewing Status on the Wireless Array on page 89 Using Tools on the Wireless Array on page 319 ...

Page 169: ...he Wireless Array 149 Express Setup Use the Express Setup page to establish global configuration settings that enable basic Array functionality Any changes you make in this window will affect all radios Figure 90 WMI Express Setup ...

Page 170: ...ering the Array at the designated location 4 Admin Email Enter the email address of the admin contact you entered in Step 3 5 Admin Phone Enter the telephone number of the admin contact you entered in Step 3 6 License Key If Xirrus issued you a license that differs from the current value shown enter it now 7 Configure SNMP Select whether to Enable SNMPv2 on the Array and set the SNMPv2 community s...

Page 171: ...es that are available on the routed subnet where the Array is located Default Gateway Enter a valid IP address for the default gateway This is the IP address of the router that the Array uses to forward data to other networks Click the Apply button for this interface when done making IP changes 9 SSID Settings This section specifies the wireless network name and security settings a The SSID Wirele...

Page 172: ... Wi Fi Protected Access 2 WPA2 is the follow on security method to WPA for wireless networks and provides stronger data protection and network access control It offers Enterprise and consumer Wi Fi users with a high level of assurance that only authorized users can access their wireless networks Like WPA WPA2 is designed to secure all versions of 802 11 devices including 802 11a 802 11b 802 11g an...

Page 173: ...be able to change the configuration of the Array If you wish the new account to have different privileges select the desired level from the drop down list For more information about user privileges please see Admin Privileges on page 198 Take care to make sure to leave yourself enough read write privileges on at least one account to be able to administer the Array c New Admin Password Enter a new ...

Page 174: ...ect Yes the NTP server fields are displayed If you don t want to use an NTP server select No default and set the system time on the Array manually e NTP Primary Server If you are using NTP enter the IP address or domain name of the NTP server f NTP Primary Authentication optional If you are using authentication with NTP select the type of key MD5 or SHA1 Select None if you are not using authentica...

Page 175: ...is box if you want to adjust the current system date When the box is checked the date fields become active Enter the revised date month day and year in the corresponding fields If you don t want to adjust the current date this box should be left unchecked default 12 IAP Settings Enable Configure All IAPs Click on the Execute button to enable and auto configure all IAPs a message displays the count...

Page 176: ... any of the settings displayed here configuration changes cannot be made from this window You can click on any item in the Interface column to jump to the associated configuration window Figure 91 Network Interfaces WMI windows that allow you to change or view configuration settings associated with the network interfaces include Network Interfaces on page 157 Network Bonds on page 160 DNS Settings...

Page 177: ...Interfaces XR 1000 and XR 2000 Series Arrays have one Gigabit Ethernet interface while XR 4000 Series Arrays have two and XR 6000 Series models have four This window allows you to establish configuration settings for these interfaces Figure 92 Network Settings ...

Page 178: ...he Array Figure 93 Network Interface Ports Procedure for Configuring the Network Interfaces Configure the Gigabit network interfaces The fields for each of these interfaces are the same and include 1 Enable Interface Choose Yes to enable this network interface or choose No to disable the interface 2 LED Indicator Choose Enabled to allow the LED for this interface to blink with traffic on the port ...

Page 179: ...ransmission in one direction at a time only for example a walkie talkie is a half duplex device If the Auto Negotiate feature is disabled you can manually choose Half or Full duplex for your data transmission preference b MTU the Maximum Transmission Unit size This is the largest packet size in bytes that the interface can pass along c Speed If the Auto Negotiate feature is disabled you must manua...

Page 180: ...ermanent See Also Network Bonds DNS Settings Network Network Statistics Spanning Tree Status Network Bonds On models with more than one Gigabit port these ports may be bonded i e configured to work together in sets For example one port may provide active backup or load balancing for another or other options as described in this section XR 6000 Series Arrays have four Gigabit ports and you may spec...

Page 181: ...ing options For a more detailed discussion of the use of the Gigabit ports and the options below please see the Xirrus Gigabit Ethernet Port Modes Application Note in the Xirrus Resource Center The modes below describe the relationship between a set of Gigabit ports for example load balancing or active backup Use the Bond Ports field to select the ports that are bonded set in Step 2 Two or more po...

Page 182: ... occurs in this mode Gigabity issues gratuitous ARPs to allow it to substitute for Gigabitx at Layer 3 as well as Layer 2 See Figure 95 a Are more than 2 ports in this bond OK How would it work Figure 95 Port Modes a b b Aggregate Traffic from gig ports using 802 3ad The Array sends network traffic across all member Gigabit ports to increase link speed to the network These ports act as a single lo...

Page 183: ...tination port number are all used to do the calculation The network switch must also support 802 3ad If a port fails the trunk degrades gracefully the other port still transmits See Figure 95 b c Transmit Traffic on all gig ports Transmits incoming traffic on all Gigabit ports Any traffic received on Gigabit ports is sent to the onboard processor This mode provides fault tolerance See Figure 96 c ...

Page 184: ...alancing and fault tolerance See Figure 97 d 2 Bond Ports Select the ports to be members of this bond for the behavior specified by Bond Mode By default Bondn contains only the Gign port for convenience in use with the Mirror option these default memberships are removed as appropriate when the ports are added to other bonds In Arrays that have four Gigabit ports you also have the option of bonding...

Page 185: ...rently defined VLANs and only this set until you make explicit changes to the Active VLANs list If you create new VLANs they will not be passed unless you take action to add them to the list All OK 5 Is this correct Mirror Specify one of the active bonds Bondx that is to be mirrored by this port Gigabity All wireless traffic received on the Array is transmitted out both Bondx and Gigabity All traf...

Page 186: ...eless Array Figure 98 Mirroring Traffic 6 When done configuring bonds as desired click Save changes to flash if you wish to make your changes permanent See Also Network Interfaces DNS Settings Network Network Statistics Spanning Tree Status ...

Page 187: ...e are not used by wireless clients servers for stations associated to the Array are defined along with DHCP pools See DHCP Server on page 182 At least one DNS server must be set up if you want to offer clients associating with the Array the ability to use meaningful host names instead of numerical IP addresses When finished click Save changes to flash if you wish to make your changes permanent Fig...

Page 188: ...sh to make your changes permanent See Also DHCP Server Network Network Interfaces Network Statistics Spanning Tree Status CDP Settings CDP Cisco Discovery Protocol is a layer 2 network protocol used to share information such as the device manufacturer and model network capabilities and IP address with other directly connected network devices Wireless Arrays can both advertise their presence by sen...

Page 189: ...e default is 60 seconds 3 CDP Hold Time CDP information received from neighbors is retained for this period of time before aging out of the Array s neighbor list Thus if a neighbor stops sending announcements it will no longer appear on the CDP Neighbors window after CDP Hold Time seconds from its last announcement The default is 180 seconds See Also CDP Neighbors Network Network Interfaces Networ...

Page 190: ... whether the pool is enabled the IP address range the gateway address lease times and the DNS domain being used There are no configuration options available in this window but if you are experiencing issues with network services you may want to print this window for your records Figure 101 Services The following sections discuss configuring services on the Array Time Settings NTP on page 171 NetFl...

Page 191: ...authentication with NTP to ensure that you are receiving synchronization from a known source For example the instructions for requesting a key for the NIST Authenticated NTP server are available at http www nist gov pml div688 grp00 upload ntp_instructions pdf The Array allows you to enter optional authentication information Figure 102 Time Settings Manual Time Procedure for Managing the Time Sett...

Page 192: ... unchecked default b Adjust Date month day year If you are not using NTP check this box if you want to adjust the current system date When the box is checked you may enter a revised date month day and year in the corresponding fields If you don t want to adjust the current date this box should be left unchecked default 6 Using an NTP Server a NTP Primary Server If you are using NTP enter the IP ad...

Page 193: ...ws you to enable or disable the sending of NetFlow information to a designated collector NetFlow is a proprietary but open network protocol developed by Cisco Systems for collecting IP traffic information When NetFlow is enabled the Array will send IP flow information traffic statistics to the designated collector NetFlow sends per flow network traffic information from the Array Network managers c...

Page 194: ... If you enabled NetFlow enter the domain name or IP address of the collector 3 NetFlow Collector Port If you enabled NetFlow enter the port on the collector host to which to send data Some features such as Netflow are only available if the Array s license includes the Xirrus Advanced RF Analysis Manager RAM If a setting is unavailable grayed out then your license does not support the feature See A...

Page 195: ...ure for Configuring Wi Fi Tag 1 Enable Wi Fi Tag Choose Yes to enable Wi Fi tag functionality or choose No to disable this feature 2 Wi Fi Tag UDP Port If you enabled Wi Fi tagging enter the port on the Array which the Wi Fi tagging server will use to query the Array for tagging data When queried the Array will send back information on the tags it has observed For each the Array sends information ...

Page 196: ...Syslog service will send Syslog messages that are at the selected severity or above to the defined Syslog servers and email address Figure 106 System Log Procedure for Configuring Syslog 1 Enable Syslog Server Choose Yes to enable Syslog functionality or choose No to disable this feature 2 Console Logging If you enabled Syslog select whether or not to echo Syslog messages to the console as they oc...

Page 197: ...ng parameters allow you to send an email to a designated address each time a Syslog message is generated The email will include the text of the Syslog message a Email Syslog SMTP Server Address Hostname or IP and Port The hostname or the IP address of the SMTP server to be used for sending the email Note that this specifies the mail server not the email recipient You may also change the port used ...

Page 198: ...o be stored on the Array s internal Syslog file choose your preferred level of Syslog reporting from the pull down list The default level is Debugging and more serious c Primary Server Choose the preferred level of Syslog reporting for the primary server The default level is Debugging and more serious d Secondary Tertiary Server Choose the preferred level of reporting for the secondary tertiary se...

Page 199: ...onger security You may enable either SNMP version neither or both Complete SNMP details for the Array including trap descriptions are found in the Xirrus MIB available at support xirrus com in the Downloads section login is required to download the MIB NOTE If you are managing your Arrays with XMS the Xirrus Management System it is very important to make sure that your SNMP settings match those th...

Page 200: ...ult for this feature is Yes enabled 5 Authentication Select the desired method for authenticating SNMPv3 packets SHA Secure Hash Algorithm or MD5 Message Digest Algorithm 5 6 Privacy Select the desired method for encrypting data DES Data Encryption Standard or the stronger AES Advanced Encryption Standard 7 Context Engine ID The unique identifier for this SNMP server We recommend that you do not c...

Reviews:

No comments

Related manuals for Wi-Fi Array XR4420

Jam Audio XT Quick Start Manual preview
XT
Brand: Jam Audio Pages: 6
GE Concord express Troubleshooting Instructions preview
Concord express
Brand: GE Pages: 3
GE Concord express User Manual preview
Concord express
Brand: GE Pages: 32
Dali CONCEPT 1 User Manual preview
CONCEPT 1
Brand: Dali Pages: 16
Garmin GMA 340 Supplemental Operation Manual preview
GMA 340
Brand: Garmin Pages: 10
salmson ZOOM Installation And Operating Instructions Manual preview
ZOOM
Brand: salmson Pages: 12
IDS X64 Quick Programming Manual preview
X64
Brand: IDS Pages: 36
Unipar Sentinel Manual preview
Sentinel
Brand: Unipar Pages: 10
S2G TRAVEL User Manual preview
TRAVEL
Brand: S2G Pages: 32
Cyrus CD7 User Instructions preview
CD7
Brand: Cyrus Pages: 6
iDance Energy XD2 Manual preview
Energy XD2
Brand: iDance Pages: 36
Salda RIRS 2500VE EKO 3.0 Technical Manual preview
RIRS 2500VE EKO 3.0
Brand: Salda Pages: 58
Laars Mighty Therm 2 Installation And Operation Manual preview
Mighty Therm 2
Brand: Laars Pages: 9
The Fisher FUTURA F-5593 Operating Instructions And Warranty preview
FUTURA F-5593
Brand: The Fisher Pages: 20
American Audio Lab GO-210 TUTTI User Manual preview
GO-210 TUTTI
Brand: American Audio Lab Pages: 31
Jensen Marine MSR3012 Installation And Operation Manual preview
MSR3012
Brand: Jensen Marine Pages: 18
Karma HPS T252 Instruction Manual preview
HPS T252
Brand: Karma Pages: 12
Clas Ohlson FWIP-108 Instruction Manual preview
FWIP-108
Brand: Clas Ohlson Pages: 2

Brands by name

Popular brands

Load more brands