User Guide Dell Networking W-AirWave 7.
Copyright © 2013 Aruba Networks, Inc. Aruba Networks trademarks include , Aruba Networks®, Aruba Wireless ® Networks , the registered Aruba the Mobile Edge Company logo, and Aruba Mobility Management System®. Dell™, the DELL™ logo, and PowerConnect™ are trademarks of Dell Inc. All rights reserved. Specifications in this manual are subject to change without notice. Originated in the USA. All other trademarks are the property of their respective owners.
Contents Introduction A Unified Wireless Network Command Center 13 13 AirWave Management Platform 13 Controller Configuration 14 VisualRF 14 RAPIDS 14 Master Console and Failover 15 Integrating AirWave into the Network and Organizational Hierarchy Administrative Roles Configuring AirWave 15 16 17 Before You Begin 17 Formatting the Top Header 17 Customizing Columns in Lists 19 Resetting Pagination Records 20 Using the Pagination Widget 21 Using Export CSV for Lists and Reports 21
Static Routes 40 Creating AirWave Users 40 AirWave User Roles 42 User Roles and VisualRF 42 Creating AirWave User Roles 42 Configuring Login Message, TACACS+, RADIUS, and LDAP Authentication Setting Up Login Configuration Options 47 Setting Up Single Sign-On 48 Setting Up Certificate Authentication 48 Specifying the Authentication Priority 48 Configuring RADIUS Authentication and Authorization 49 Integrating a RADIUS Accounting Server 50 Configuring TACACS+ Authentication 51 Configur
Configuring and Using Device Groups AirWave Groups Overview Viewing All Defined Device Groups 75 77 77 Configuring Basic Group Settings 79 Adding and Configuring Group AAA Servers 86 Configuring Group Security Settings 88 Configuring Group SSIDs and VLANs 92 Configuring Radio Settings for Device Groups 95 Cisco WLC Group Configuration 99 Accessing Cisco WLC Configuration 99 Navigating Cisco WLC Configuration 99 Configuring WLANs for Cisco WLC Devices 100 Defining and Configuring LWAPP AP
Understanding the APs/Devices > Monitor Pages for All Device Types 132 Monitoring Data Specific to Wireless Devices 133 Evaluating Radio Statistics for an AP 140 Overview of the Radio Statistics Page 140 Viewing Real-Time ARM Statistics 140 Issues Summary section 141 802.
Configuring Templates for AirMesh 181 Configuring Cisco IOS Templates 182 Applying Startup-config Files 182 WDS Settings in Templates 182 SCP Required Settings in Templates 183 Supporting Multiple Radio Types via a Single IOS Template 183 Configuring Single and Dual-Radio APs via a Single IOS Template 183 Configuring Cisco Catalyst Switch Templates 184 Configuring Symbol Controller / HP WESM Templates 184 Configuring a Global Template 186 Using RAPIDS and Rogue Classification 189 Intro
Using the System > Performance Page 223 Monitoring and Supporting WLAN Clients 226 Overview of the Clients Pages 227 Monitoring Your Network with the Clients > Overview Page 228 Monitoring WLAN Users in the Clients > Connected and Clients > All Pages 229 Monitoring Rogue Clients With the Clients > Rogue Clients Page 233 Supporting Guest WLAN Users With the Clients > Guest Users Page 234 Supporting VPN Users with the Clients > VPN Sessions Page 236 Supporting RFID Tags With the Clients > Tags
Logging out of AirWave Creating, Running, and Emailing Reports Overview of AirWave Reports 263 265 265 Reports > Definitions Page Overview 265 Reports > Generated Page Overview 267 Defining Reports 268 Using Daily Reports 274 Viewing Generated Reports 275 Using Custom Reports 275 Using the Dell Networking W License Report 276 Using the Capacity Planning Report 277 Example Using the Client Inventory Report Example 277 279 279 Using the Client Session Report 281 Using the Configuration
Edit Menu 312 Mesh View Navigation 313 Using the Settings in the VisualRF > Setup Page 314 Server Settings 315 Location Settings 316 Location Calculation Timer Settings 317 Attenuation Settings 318 Adding a New Attenuation 319 VisualRF Resource Utilization 10 | Contents 320 Configuring QuickView Personal Preferences 320 Increasing Location Accuracy 323 Adding Exterior Walls 324 Location Training for Stationary Devices 325 Adding Client Surveys 326 Adding Regions 328 Adding Loc
Auto-Matching Planned Devices 347 Printing a Bill of Materials Report 347 Importing and Exporting in VisualRF 348 Exporting a campus 348 Importing from CAD 348 Batch Importing CAD Files 349 Requirements 349 Pre Processing Steps 349 Upload Processing Steps 349 Post Processing Steps 350 Sample Upload Instruction XML File 350 Common Importation Problems 350 Importing from a Dell Networking W-Series Controller 350 Pre-Conversion Checklist 350 Process on Controller 351 Process on Ai
| Contents Dell Networking W-AirWave 7.
Chapter 1 Introduction Thank you for choosing Dell Networking W-AirWave 7.7. AirWave makes it easy and efficient to manage your wireless network by combining industry-leading functionality with an intuitive user interface, enabling network administrators and helpdesk staff to support and control even the largest wireless networks in the world. The User Guide provides instructions for the configuration and operation of Dell Networking W-AirWave.
l l n Configuration of APs & controllers n Automated compliance audits n Firmware distribution n Monitoring of every device and user connected to the network n Real-time and historical trend reports Granular administrative access n Role-based (for example, Administrator contrasted with Help Desk) n Network segment (for example, Retail Store network contrasted with Corporate HQ network) Flexible device support n Thin, thick, mesh network architecture n Multi-vendor support n Current and
l l Wireless detection: n Uses authorized wireless APs to report other devices within range. n Calculates and displays rogue location on VisualRF map. Wired network detection: n Discovers rogue APs located beyond the range of authorized APs/sensors. n Queries routers and switches. n Ranks devices according to the likelihood they are rogues. n Multiple tests to eliminate false positive results. n Provides rogue discovery that identifies the switch and port to which a rogue device is connected.
Component Description NMS Network Management Systems and Event Correlation (OpenView, Tivoli, and so forth) RADIUS Authentication RADIUS authentication servers (Funk, FreeRADIUS, ACS, or IAS) RADIUS Accounting AirWave itself serves as a RADIUS accounting client Wireless Gateways Provide HTML redirect and/or wireless VPNs TACACS+ and LDAP Used to authenticate AirWave administrative users Routers/Switches Provide AirWavewith data for user information and AP and Rogue discovery Help Desk Systems
Chapter 2 Configuring AirWave This section contains the following procedures to deploy initial AirWave configuration: l "Formatting the Top Header" on page 17 l "Customizing Columns in Lists" on page 19 l "Resetting Pagination Records" on page 20 l "Using the Pagination Widget" on page 21 l "Using Export CSV for Lists and Reports" on page 21 l "Defining Graph Display Preferences" on page 22 l "Customizing the Dashboard" on page 22 l "Setting Severe Alert Warning Behavior" on page 27 l "Def
Figure 1 Navigation Bar Displaying Down Device Statistics You can control the Top Header Stats links that appear from the AMP Setup > General page, as described in "Defining General AirWave Server Settings" on page 28. Top Header Stats can also be customized for individual users on the Home > User Info page. There you can select the statistics to display for certain device types and override the AMP Setup page. All possible display options for users are show in Figure 2.
Customizing Columns in Lists Customize the columns for any list table selecting Choose Columns, as shown in the figure below. Use the up/down arrows to change the order in which the column heads appear. Figure 3 Choose Columns Drop down List More information about the universal list elements is available in "Common List Settings" in the Dell Networking WAirWave 7.7 Installation Guide. You can also control which column heads appear for each user role.
Figure 4 Table with Choose Columns for Roles Menu Selected Resetting Pagination Records To control the number of records in any individual list, select the link with Records Per Page mouseover text at the top left of the table, as shown in Figure 5. AirWave remembers each list’s pagination preferences. Figure 5 Records Per Page Drop Down Menu To reset all Records Per Page preferences, click the Reset reset button in the Display Preferences section of the Home > User Info page, as shown in Figure 6.
Figure 6 Home > User Info > Display Preferences section Using the Pagination Widget The pagination widget is located at the top and bottom of every list table, as shown in Figure 7. Figure 7 Pagination Widget Use the down arrow next to Page 1 to see all the page numbers for that table in a drop down menu. From here, you can jump to any portion of the table. Select the > symbol to jump to the next page, and >| to jump to the last page.
Defining Graph Display Preferences Many of the graphs in AirWave are Highcharts, which allow you to adjust the graph settings attributes as shown in Figure 9. Figure 9 Interactive Graphs on the Home > Overview Page Highcharts are built with JavaScript, so the graphs can run directly through your browser without the need for additional client-side plugins. This makes it possible to view your AirWave charts on a mobile device. These charts can be used and customized as follows.
Figure 10 Customize Button on the Home > Overview Page The Customize workspace that appears is shown in Figure 11. Figure 11 Customize Overview Page Adding Widgets The Home > Overview page displays the currently selected widgets (charts/graphs). You can change the widgets on this page by selecting the Customize link in the upper-right corner. The Available Widgets section on the left holds all available graphical elements (widgets).
Table 2: Available Widgets Widget Description Client/Usage Graphs The Client graph is enabled by default and, by default, shows the maximum number of attached clients over the last two hours. Select the Show All link to view more specific client information on the graph, such as the total and average clients for a specific SSID, the maximum VPN sessions, etc. The available check boxes within this graph are determined by the SSIDs that AirWave is aware of from polling the device.
Widget Description The RAPIDS information appears from the moment a rogue is discovered until it is deleted. Note that ignored rogues are not included in this chart. This table can also be viewed on the RAPIDS > Overview page. IDS Events The IDS Events table shows the number and type of attacks logged by the intrusion detection system over the last 2 hours, the last 24 hours, and the total since the last AirWave reboot. This is the same table that displays on the RAPIDS > Overview page.
Widget Description Top Folders By BG Radio Client Count This chart shows the folders and the number of BG radios (2.4GHz) in each folder whose client count is greater than the cutoff. The cutoff represents 75% of the ‘maximum,’ where the ‘maximum’ is the radio that has the highest client count regardless of the folder. The cutoff value is displayed within the title and can vary. This chart takes into account approved APs with BG radios based on the last 24 hours.
l Active clients + all categories: This looks at all active clients (not historical) and all categories. This search is not case-sensitive. This search returns results on partial matches for usernames if that username is included in either the beginning or the end of a user name string l Active clients + all categories (exact match): This looks at all active clients (not historical) and all categories. This search returns only matches that are exactly as typed (IP, username, device name, etc).
Figure 13 Home > User Info > Severe Alert Threshold Drop Down Menu Defining General AirWave Server Settings This section describes all pages accessed from the AMP Setup tab. It also describes two pages in the Device Setup tab: the Communication and Upload Files pages. After required and optional configuration tasks in this chapter are complete, continue to later chapters in this document to create and deploy device groups and device configuration and discovery on the network.
l "Setting Up Device Types" on page 61 AMP Setup > General The first step in configuring AirWave is to specify the general settings for the AirWave server. Figure 14 illustrates the AMP Setup > General page. Select Save when the General Server settings are complete and whenever making subsequent changes. These settings are applied globally across the product (for all users).
Setting Default Description Send debugging messages Enabled If enabled, AirWave automatically emails any system errors to Dell support at dell.com/support to assist in debugging. 04:15 Specifies the local time of day AirWave should perform daily maintenance. During maintenance, AirWave cleans the database, performs backups, and completes a few other housekeeping tasks. Such processes should not be performed during peak hours of demand.
popup window rather than on the Home > Search page. This popup window includes top-level navigation that allows you to filter the results based on Clients, APs, Controllers, and Switches. l Active clients + all categories: This looks at all active clients (not historical) and all categories. This search is not case-sensitive. l Active clients + all categories (exact match): This looks at all active clients (not historical) and all categories.
Setting Default Description NOTE: This option is supported only for Cisco IOS, Dell Networking WSeries, Aruba Networks, and Alcatel-Lucent devices. Show vendorspecific device settings for All Devices Displays a drop-down menu that determines which Group tabs and options are viewable by default in new groups, and selects the device types that use fully qualified domain names. This field has three options, as follows: l All devices—When selected, AirWave displays all Group tabs and setting options.
Setting Default Description globally. NOTE: Changing this setting may require importing configuration on your devices. When an existing Dell Networking W configuration setup is to be converted from global to group, follow these steps: 1. Set all the devices to Monitor Only mode before setting the flag. 2. Each device Group will need to have an import performed from the Audit page of a controller in the AMP group. 3.
Setting Default Description Include event log messages No Select Yes to send event log messages to an external syslog server. Event log facility local1 Select the facility for the event log from the drop-down menu. This field is only available if the "Include event log messages" setting is Yes. Include audit log messages No Select Yes to send audit log messages to an external syslog server. Audit log facility local1 Select the facility for the audit log from the drop-down menu.
Setting Default Description Radius/ARM/IDS Events(0-550 days, zero disables) 14 Defines the number of days AirWave retains information about RADIUS, ARM, and IDS events. Setting this value to 0 disables this function, and the information will never expire or be deleted from the database. Archived Device Configurations (0100, zero disables) 10 Defines the number of configurations that will be retained for archived devices..
Table 11: AMP Setup > General > Firmware Upgrade Defaults Fields and Default Values Setting Default Description No If Yes is selected, AirWave upgrades the firmware for APs in Monitor Only mode. When AirWave upgrades the firmware in this mode, the desired configuration are not be pushed to AirWave. Only the firmware is applied. The firmware upgrade may result in configuration changes AirWave does not correct those changes when the AP is in Monitor Only mode.
Setting Default Description enter valid email addresses. Process user roaming traps from Cisco WLC Yes Whether AirWave should parse client association and authentication traps from Cisco WLC controllers to give real time information on users connected to the wireless network. Enable AMON data collection Yes Allows AirWave to collect enhanced data from Dell Networking W devices on certain firmware versions. See the Dell Networking W-AirWave Best Practices Guide on dell.
Setting Default Description Monitored Devices This setting is used for networks containing legacy controllers not available through Dell. Dell recommends not enabling this setting. RAPIDS Processing Priority Low Defines the processing and system resource priority for RAPIDS in relation to AirWave as a whole.
Table 14: Primary Network Interface Fields and Default Values Setting Default Description IP Address None Sets the IP address of the AirWave network interface. NOTE: This address must be a static IP address. Hostname None Sets the DNS name assigned to the AirWave server. Subnet Mask None Sets the subnet mask for the primary network interface. Gateway None Sets the default gateway for the network interface. Primary DNS IP None Sets the primary DNS IP address for the network interface.
Static Routes On the AMP Setup > Network page, locate the Static Routes area. This section displays network, subnet mask, and gateway settings that you have defined elsewhere from a command-line interface. This section does not enable you to configure new routes or remove existing routes. What Next? l Go to additional tabs in the AMP Setup section to continue additional setup configurations. The next section describes AirWave roles.
Figure 17 AMP Setup > Users > Add/Edit User Page Illustration 3. Enter or edit the settings on this page. Table 17 describes these settings in additional detail. Table 17: AMP Setup > Users > Add/Edit User Fields and Default Values Setting Default Description Username None Sets the username as an alphanumeric string. The Username is used when logging in to AirWave and appears in AirWave log files.
4. Select Add to create the new user, Save to retain changes to an existing user, or Cancel to cancel out of this screen. The user information you have configured appears on the AMP Setup > Users page, and the user propagates to all other AirWave pages and relevant functions. AirWave enables user roles to be created with access to folders within multiple branches of the overall hierarchy.
2. Select Add to create a new role, select the pencil icon to edit an existing role, or select a checkbox and select Delete to remove that role from AirWave. When you select Add or the edit icon, the Add/Edit Role page appears, illustrated in Figure 19. Figure 19 AMP Setup > Roles > Add/Edit Role Page Illustration 3. Enter or edit the settings on this page.
Setting Default Description Manager AirWave Administrator—The AirWave Administrator has full access to AirWave and all of the devices. Only theAirWave Administrator can create new users or access the AMP Setup page, the VisualRF > Setup page, VisualRF > Audit Log page, System > Event Log, and System > Performance. Dell Networking W Controller Role Disabled Enables or disables Single Sign-On for the role.
Setting Default Description None Sets the RAPIDS privileges, which are set separately from the APs/Devices. This field specifies the RAPIDS privileges for the role, and options are as follows: l None— Cannot view the RAPIDS tab or any Rogue APs. l Read Only—The user can view the RAPIDS pages but cannot make any changes to rogue APs or perform OS scans. l Read/Write—The user may edit individual rogues, classification, threat levels and notes, and perform OS scans.
Table 20: AMP Setup > Roles > Add/Edit Roles Fields and Default Values for AirWave Management Client Role Setting Default Description Name None Sets the administrator-definable string that names the role. The role name should indicate the devices and groups that are viewable, as well as the privileges granted to that role. Enabled Yes Disables or enables the role. Disabling a role prevents all users of that role from logging in to AirWave. Type AP/Device Manager Defines the type of role.
Setting Default Description Allow sponsor to change sponsorship username No Specifies whether a sponsor can change the sponsorship user name. Custom Message none A custom message can also be included. What Next? l Go to additional tabs in the AMP Setup section to continue additional setup configurations. The next section describes how to set up AirWave users. l Complete the required configurations in this chapter before proceeding.
Table 22: Login Configuration section of AMP Setup > Authentication Field Default Description Max AMP User Idle Timeout 60 Number of minutes of idle time until AirWave automatically ends the user session. Affects all users of this AirWave. The range is 5-240 minutes. Login message none A persistent message that will appear for all of this AirWave's users after they log in. 3.
Configuring RADIUS Authentication and Authorization For RADIUS capability, you must configure the IP/Hostname of the RADIUS server, the TCP port, and the server shared secret. Perform these steps to configure RADIUS authentication: 1. Go to the AMP Setup > Authentication page. This page displays current status of RADIUS. Figure 21 illustrates this page. Figure 21 AMP Setup > Authentication Page Illustration for RADIUS 2. Select No to disable or Yes to enable RADIUS authentication.
Integrating a RADIUS Accounting Server AirWave checks the local username and password before checking with the RADIUS server. If the user is found locally, the local password and role apply. When using RADIUS, it’s not necessary or recommended to define users on the AirWave server. The only recommended user is the backup admin, in case the RADIUS server goes down. Optionally, you can configure RADIUS server accounting on AMP Setup > RADIUS Accounting.
Setting Default Description Nickname None Sets a user-defined name for the authentication server. Shared Secret (Confirm) None Sets the Shared Secret that is used to establish communication between AirWave and the RADIUS authentication server. Configuring TACACS+ Authentication For TACACS+ capability, you must configure the IP/Hostname of the TACACS+ server, the TCP port, and the server shared secret. This TACACS+ configuration is for AirWave users and does not affect APs or users logging into APs.
Field Default Description Secondary Server Secret N/A Enter the shared secret for the secondary TACACS+ server. Confirm Secondary Server Secret N/A Re-enter the secondary server secret. 3. Select Save and continue with additional steps. Configuring Cisco ACS to Work with AirWave To configure Cisco ACS to work with AirWave, you must define a new service named AMP that uses https on the ACS server. 1.
Figure 25 AMP Setup > Authentication Page Illustration for LDAP 3. Complete the fields described in Table 26. Table 26: AMP Setup > Authentication Fields and Default Values for LDAP Authentication Field Default Description Primary Server Hostname/IP Address none Enter the IP address or the hostname of the primary LDAP server. Primary Server Port (1-65535) 389 Enter the port where the LDAP server is listening. The default port is 389.
Field Default Description require - The server must provide a valid certificate. A valid LDAP Server CA Certificate must be provided in case of optional or require. Certificates uploaded on the Device Setup > Certificates page with a type of Intermediate CA or Trusted CA are listed in the drop down for LDAP Server CA Certificate. l none Specify the LDAP server certificate to use to initiate encrypted communication.
This section contains the following procedures: l "Configuring Communication Settings for Discovered Devices" on page 55 l "Loading Device Firmware Onto AirWave (optional)" on page 57 Configuring Communication Settings for Discovered Devices To configure AirWave to communicate with your devices, to define the default shared secrets, and to set SNMP polling information, navigate to the Device Setup > Communication page, illustrated in Figure 26.
Setting Default Description 3 Sets the number of times AirWave tries to poll a device when it does not receive a response within the SNMP Timeout Period or the Group's Missed SNMP Poll Threshold setting (1-100). If AirWave does not receive an SNMP response from the device after the specified number of retries, AirWave classifies that device as Down. NOTE: Although the upper limit for this value is 40, some SNMP libraries still have a hard limit of 20 retries.
Table 30: Device Setup > Communication > ICMP Settings Fields and Default Values Setting Attempt to ping devices that were unreachable via SNMP Default Description When Yes is selected, AirWave attempts to ping the AP device. Select No if performance is affected in negative fashion by this function. If a large number of APs are unreachable by ICMP, likely to occur where there is in excess of 100 APs, the timeouts start to impede network performance.
Setting Default Description Server Protocol None Displays the file transfer protocol by which the firmware file was obtained from the server. This can be either FTP or TFTP. Use Group File Server None If enabled, displays the name of the file server supporting the group. Firmware Filename None Displays the name of the file that was uploaded to AirWave and to be transferred to an AP when the file is used in an upgrade.
Figure 27 Device Setup > Upload Firmware and Files > Add Page Illustration 3. Select the Supported Firmware Versions and Features link to view supported firmware versions. Unsupported and untested firmware may cause device mismatches and other problems. Please contact Dell support at dell.com/support before installing non-certified firmware. 4. Enter the appropriate information and select Add.
Setting Default Description Server Protocol TFTP Specify whether to use a built-in TFTP server or FTP to upload a firmware file. TFTP is recommended. If you select FTP, AirWave uses an anonymous user for file upload. Disabled If you opt to use an external firmware file server, this additional option appears. This setting instructs AirWave to use the server that is associated with the group instead of defining a server.
Figure 28 Add Web Auth Bundle Page Illustration 3. Enter a descriptive label in the description field. This is the label used to identify and track Web Auth bundles on the page. 4. Enter the path and filename of the Web Auth configuration file in the Web Auth Bundle field or select Choose File to locate the file. 5. Select Add to complete the Web Auth bundle creation, or Save if replacing a previous Web Auth configuration file, or Cancel to abort the Web Auth integration.
l "Introduction to Cisco WLSE" on page 62 l "Initial WLSE Configuration" on page 62 l "Configuring IOS APs for WDS Participation" on page 64 l "Configuring ACS for WDS Authentication" on page 65 l "Configuring Cisco WLSE Rogue Scanning" on page 65 You must enter one or more CiscoWorks WLSE hosts to be polled for discovery of Cisco devices and rogue AP information.
Enabling Rogue Alerts for Cisco WLSE 1. Go to the Faults > Network Wide Settings > Rogue AP Detection page. 2. Select the Enable. 3. Select Apply. Additional information about rogue device detection is available in "Configuring Cisco WLSE Rogue Scanning" on page 65. Configuring WLSE to Communicate with APs 1. Go to the Device Setup > Discover page. 2. Configure SNMP Information. 3. Configure HTTP Information. 4. Configure Telnet/SSH Credentials 5. Configure HTTP ports for IOS access points. 6.
Defining Access AirWave requires System Admin access to WLSE. Use these pages to make these configurations. 1. Go to Administration > User Admin. 2. Configure Role and User. Grouping It’s much easier to generate reports or faults if APs are grouped in WLSE. Use these pages to make such configurations. 1. Go to Devices > Group Management. 2. Configure Role and User.
Configuring ACS for WDS Authentication ACS authenticates all components of the WDS and must be configured first. Perform these steps to make this configuration. 1. Login to the ACS. 2. Go to the System Configuration > ACS Certificate Setup page. 3. Install a New Certificate by selecting the Install New Certificate button, or skip to the next step if the certificate was previously installed. 4. Select User Setup in the left frame. 5.
Table 35: AMP Setup > WLSE Fields and Default Values Setting Default Description Hostname/IP Address None Designates the IP address or DNS Hostname for the WLSE server, which must already be configured on the Cisco WLSE server. Protocol HTTP Specify whether to use HTTP or HTTPS when polling the WLSE. Port 1741 Defines the port AirWave uses to communicate with the WLSE server. None Defines the username AirWave uses to communicate with the WLSE server.
Figure 31 AMP Setup > ACS Page Illustration 2. Select Add to create a new ACS server, or select a pencil icon to edit an existing server. To delete an ACS server, select that server and select Delete. When selecting Add or edit, the Details page appears, as illustrated in Figure 32. Figure 32 AMP Setup > ACS > Add/Edit Details Page Illustration 3. Complete the settings on AMP Setup > ACS > Add/Edit Details.
5. The ACS server must have logging enabled for passed authentications. Enable the Log to CSV Passed Authentications report option, as follows: n Log in to the ACS server, select System Configuration, then in the Select frame, select Logging. n Under Enable Logging, select CSV Passed Authentications. The default logging options function and support AirWave. These include the two columns AirWave requires: User-Name and Caller-ID.
2. Select Add to integrate a new NMS server, or select the pencil icon to edit an existing server. Provide the information described in Table 37: Table 37: AMP Setup > NMS Integration Add/Edit Fields and Default Values Setting Default Description Hostname None Cites the DNS name or the IP address of the NMS. Port 162 Sets the port AirWave uses to communicate with the NMS. NOTE: AirWave generally communicates via SNMP traps on port 162.
https://www.pcisecuritystandards.org/pdfs/pci_ssc_quick_guide.pdf PCI Auditing PCI Auditing in AirWave allows you to monitor, audit, and demonstrate PCI compliance on the network. There are five primary pages in which you establish, monitor, and access PCI auditing, as follows: l The AMP Setup > PCI Compliance page enables or disables PCI Compliance monitoring on the network, and displays the current compliance status on the network. See "Enabling or Disabling PCI Auditing" on page 71.
Requirement Description When Enabled: A device fails requirement 2.1.1 if the passwords, SSIDs, or other security-related settings are on a list of forbidden values that AirWave establishes and tracks. The list includes common vendor default passwords. The user can input new values to achieve compliance. When Disabled: network devices are not checked for forbidden information and PCI Compliance is not established. 4.1.
Figure 34 AMP Setup > PCI Compliance page illustration 2. To enable, disable, or edit any category of PCI Compliance monitoring in AirWave, select the pencil icon next to the category. The Default Credential Compliance page displays for the respective PCI standard. 3. Create changes as required. The edit pages will vary based on the PCI Requirement that you select. Figure 35 shows an example of how to edit the PCI 2.1 requirement. Figure 35 Default Credential Compliance for PCI Requirements 4.
b. Select a specific device. The Monitor page for that device displays. The APs/Devices page also displays a Compliance subtab in the menu bar. c. Select Compliance to view complete PCI compliance auditing for that specific device. Deploying WMS Offload Overview of WMS Offload in AirWave This section describes the Dell Networking W-Series Wireless LAN Management Server (WMS) offload infrastructure. WMS Offload is supported with the following two requirements: l ArubaOS Version 2.5.
a. Enable RTLS service on the AirWave server. b. Enable RTLS on ArubaOS infrastructure. Additional Information Supporting WMS Offload Refer to the Dell Networking W-AirWave 7.7 Best Practices Guide at dell.com/support/manuals for additional information, including detailed concepts, configuration procedures, restrictions, ArubaOS infrastructure, and AirWave version differences in support of WMS Offload. 74 | Configuring AirWave Dell Networking W-AirWave 7.
Chapter 3 Configuring and Using Device Groups This section describes the deployment of device groups within AirWave. The section below describes the pages or focused subtabs available on the Groups tab. Note that the available subtabs can vary significantly from one device group to another—one or more subtabs may not appear, depending on the Default Group display option selected on the AMP SetupSetup > General page and the types of devices you add to AirWave.
Menu Item Description Refer to Radio This page defines general 802.11 radio settings for device groups. "Configuring Radio Settings for Device Groups" on page 95 Controller Config This page manages ArubaOS Device Groups, AP Overrides, and other profiles specific to Dell Networking W-Series devices on the network. Use this page as an alternative to the Device Setup > Dell Networking W > Configuration page.
l "Changing Multiple Group Configurations " on page 113 l "Modifying Multiple Devices" on page 114 l "Using Global Groups for Group Configuration" on page 117 AirWave Groups Overview Enterprise APs, controllers, routers, and switches have hundreds of variable settings that must be configured precisely to achieve optimal performance and network security. Configuring all settings on each device individually is time consuming and error prone.
Figure 37 Groups > List Page Illustration (partial view) Table 39 describes the columns in the Groups > List page. Table 39: Groups > List Columns Column Description Add New Group Launches a page that enables you to add a new group by name and to define group parameters for devices in that group. For additional information, refer to "Configuring Basic Group Settings" on page 79. Manage (wrench icon) Goes to the Groups > Basic configuration page for that group.
Column Description Usage A running average of the sum of bytes in and bytes out for the managed radio page. VPN Sessions Number of active (connected) VPN sessions under this group. Duplicate Creates a new group with the name Copy of with identical configuration settings. (Dell configuration settings will have to be manually added back.) When you first configure AirWave, there is only one default group labeled Access Points.
Figure 39 Groups > Basic Page Illustration 1. Define the settings in the Basic and Global Group sections. Table 40 describes several typical settings and default values of this Basic section. 80 | Configuring and Using Device Groups Dell Networking W-AirWave 7.
Table 40: Basic and Global Groups Fields and Default Values Setting Default Description Name Defined when first adding the group Displays or changes the group name. As desired, use this field to set the name to uniquely identify the group by location, vendor, department, or any other identifier (such as Accounting APs, Cisco devices, 802.1x APs, and so forth). Missed SNMP Poll Threshold (1100) 1 Sets the number of Up/Down SNMP polls that must be missed before AirWave considers a device to be down.
Setting Default Description Period minutes Thin AP Discovery Polling Period 15 minutes Sets time between SNMP polls for Thin AP Device Discovery. Controllers are the only devices affected by this polling interval. Device-to-Device link Polling Period 5 minutes Sets time between SNMP polls for Device-to-Device link polling. Mesh APs are the only devices affected by this polling interval. 802.11 Counters Polling Period 15 minutes Sets time between SNMP polls for 802.11 Counter information.
Setting Default Description Poll 802.3 error counters No Sets whether 802.3 error counters should be polled. Poll Cisco interface error counters No Sets whether the interface error counters for Cisco devices should be polled. 4. Record additional information and comments about the group in the Notes section. 5. To configure which options and tabs are visible for the group, complete the settings in the Group Display Options section. Table 43 describes the settings and default values.
7. To configure Spanning Tree Protocol on WLC devices and Proxim APs, locate the Spanning Tree Protocol section on the Groups > Basic configuration page. Adjust these settings as required. Table 45 describes the settings and default values. Table 45: Spanning Tree Protocol Fields and Default Values Setting Default Description Spanning Tree Protocol No Specify wehther to enable or disables Spanning Tree Protocol on Proxim APs.
Setting Default Description Selecting SCP uses the secure copy protocol for file transfers and displays an SCP Version option. Selecting TFTP will use the insecure trivial file transfer protocol. The SCP login and password should be entered in the Telnet username and password fields. File Communication 10. To configure settings specific to Cisco WLC, locate the Cisco WLC section and adjust these settings as required. Table 48 describes the settings and default values.
13. To configure settings for universal devices on the network, including routers and switches that support both wired and wireless networks, locate the Universal Devices, Routers and Switches section of the Groups > Basic page and define the version of SNMP to be supported. 14. To control the conditions by which devices are automatically authorized into this group, locate the Automatic Authorization settings section and adjust these settings as required. Table 50 describes the settings and default values.
Once defined on this page, RADIUS servers are selectable in the drop-down menus on the Groups > Security and Groups > SSIDs configuration pages. Perform these steps to create RADIUS servers. TACACS+ servers are configurable only for Cisco WLC devices. Refer to "Configuring Cisco WLC Security Parameters and Functions" on page 105. 1. Go to the Groups > List page and select the group for which to define AAA servers by selecting the group name. The Monitor page appears. 2. Select the AAA Servers page.
Setting Default (0-20) Description before failing. NOTE: If a RADIUS server is not responding or appears to be responding slowly, consider increasing the number of retries. 4. Select Add to complete the creation of the RADIUS server, or select Save if editing an existing RADIUS server. The Groups > AAA Servers page displays this new or edited server. You can now reference this server on the Groups > Security page. AirWave supports reports for subsequent RADIUS Authentication.
Setting Default Description Multiple SSIDs network. If this setting is enabled, define additional VLANs and SSIDs on the Groups > SSIDs page. Refer to "Configuring Group SSIDs and VLANs" on page 92. If this setting is disabled, then you can specify the Encryption Mode in the Encryption section that displays. Refer to "Groups > Security Encryption Mode settings" on page 90 for information on configuring Encryption.
Setting Default Description MAC Address Authentication Section MAC Address Authentication No If enabled, only MAC addresses known to the RADIUS server are permitted to associate to APs in the Group.
Setting Default Description No Specify whether to use Multi-Module Has (MMH) mode. Permutation CKIP MMH Mode Encryption Mode WPA Unicast Cipher (Cisco only) AES Specify the Unicast Cipher. Values include AES, TKIP, and AES/TKIP. Encryption Mode WPA/PSK Unicast Cipher (Cisco only) AES/TKIP Specify the Unicast Cipher. Values include AES, TKIP, and AES/TKIP. WPA Preshared Key (Alphanumeric) None Enter an alphanumeric value for the preshared key.
Configuring Group SSIDs and VLANs The Groups > SSIDs configuration page allows you to create and edit SSIDs and VLANs that apply to a device group. Perform these steps to create or edit VLANs and to set SSIDs. WLANs that are supported from one or more Cisco WLC controllers can be configured on the Groups > Cisco WLC Config page. Figure 42 illustrates an example of the Groups > SSIDs page. Figure 42 Groups > SSIDs Page Illustration AirWave reports users by radio and by SSID.
3. Select Add to create a new SSID or VLAN, or select the pencil icon next to an existing SSID/VLAN to edit that existing SSID or VLAN. The Add SSID/VLAN configuration page appears as illustrated in Figure 43 and explained in Table 56. Figure 43 Add SSID/VLAN Page Illustration 4. Locate the SSID/VLAN section on the Groups > SSIDs configuration page and adjust these settings as required. This section encompasses the basic VLAN configuration. Table 56 describes the settings and default values.
Setting Default Description Broadcast SSID (Cisco WLC, Proxim and Symbol 4131 only) No For specific devices as cited, this setting enables the AP to broadcast the SSID for the specified VLAN/SSID. This setting works in conjunction with the Create Closed Network setting on the Groups > Security configuration page. Proxim devices support a maximum of four SSIDs. NOTE: This option should be enabled to ensure support of legacy users.
7. Locate the RADIUS Authentication Servers area on the Groups > SSIDs configuration page and define the settings. Table 59 describes the settings and default values. Table 59: RADIUS Authentication Servers Fields and Default Values Setting Default Description RADIUS Authentication Server 1-3 (Cisco WLC, Proxim only) None Drop-down menu to select RADIUS Authentication servers previously entered on the Groups > RADIUS configuration page.
Perform the following steps to define RF-related radio settings for groups. 1. Go to the Groups > List page and select the group for which to define radio settings by selecting the group name. Alternatively, select Add from the Groups > List page to create a new group, define a group name. In either case, the Monitor page appears. 2. Go to the Groups > Radio page. Figure 44 illustrates this page. Figure 44 Groups > Radio Page Illustration 3.
Setting Default Enabled RTS/CTS Threshold Value (0-2347 bytes) Description Send) before sending a packet. In most cases, leave this option disabled. 2338 If RTS/CTS is enabled, this specifies the size of the packet (in bytes) at which the AP sends the RTS before sending the packet. RTS/CTS Maximum Retries (1-255) 32 If RTS/CTS is enabled, this specifies the maximum number of times the AP issues an RTS before stopping the attempt to send the packet through the radio.
Setting Default Description Interference Robustness No If enabled, this option will fragment packets greater than 500 bytes in size to reduce the impact of radio frequency interference on wireless data throughput. Distance Between APs Large This setting adjusts the receiver sensitivity. Reducing receiver sensitivity from its maximum may help reduce the amount of crosstalk between wireless stations to better support roaming users.
Table 64: Groups > Radio > Symbol Fields and Default Values Setting Default Description Rogue Scanning Yes If enabled, Symbol access points with 3.9.2 or later firmware in the group will passively scan for rogue access points at the specified interval. This rogue scan will not break a user’s association to the network. 240 If Rogue Scanning is enabled, this setting controls the frequency with which scans are conducted (in minutes).
Figure 45 Groups > Cisco WLC Config Page Illustration, collapsed view Figure 46 Groups > Cisco WLC Config Page Illustration, expanded view Configuring WLANs for Cisco WLC Devices In Cisco WLC Config, WLANs are based on SSIDs or VLANs that are dedicated to Cisco WLC controllers. Perform the following steps to define and configure WLANs for Cisco WLC controllers. 1. Go to the Groups > Cisco WLC Config page, and select WLANs in the navigation pane at left.
n General—Defines general administrative parameters for the Cisco WLC WLAN. n Security—Defines encryption and RADIUS servers. n QoS—Defines quality of service (QoS) parameters for the Cisco WLC WLAN. n Advanced—Defines advanced settings that are available only with Cisco WLC devices, for example, AAA override, coverage, DHCP and DTIM period. Refer to Cisco documentation for additional information about Cisco WLC devices and related features.
Figure 49 Add New SSID/VLAN > Security Tab Illustration Figure 50 Add New SSID/VLAN > QoS Tab Illustration 102 | Configuring and Using Device Groups Dell Networking W-AirWave 7.
Figure 51 Add New SSID/VLAN > Advanced Tab Illustration Defining and Configuring LWAPP AP Groups for Cisco Devices The Groups > Cisco WLC Config > WLANs > Advanced > AP Groups page allows you to add/edit/delete AP Groups on the Cisco WLC. LWAPP AP Groups are used to limit the WLANs available on each AP. Cisco thin APs are assigned to LWAPP AP Groups. Viewing and Creating Cisco AP Groups 1.
Figure 52 Groups > Cisco WLC Config > WLANS > Advanced > AP Groups Page Illustration 2. To add a new LWAPP AP group, select Yes in the AP Groups section. Additional controls appear. 3. Select Add to create a new LWAPP AP group. To edit an existing LWAPP AP group, select the pencil icon next to that group. Add one or more SSIDs and the interface/VLAN ID mapping on the Add/Edit page of the LWAPP AP Group. 4.
Figure 53 Groups > Cisco WLC Config > Controller Navigation Configuring Wireless Parameters for Cisco Controllers This section illustrates the configuration of Wireless settings in support of Cisco WLC controllers. The navigation for Wireless settings is illustrated in Figure 54. Figure 54 Groups > Cisco WLC Config > Wireless Navigation Illustration Configuring Cisco WLC Security Parameters and Functions AirWave enables you to configure many security settings that are specific to Cisco WLC controllers.
Figure 55 illustrates these components and this navigation: Figure 55 Groups > Cisco WLC Config > Security Navigation Illustration Configuring Management Settings for Cisco WLC Controllers AirWave allows you to configure of SNMP and Syslog Server settings for Cisco WLC controllers. You can configure up to four trap receivers on the Cisco WLC including the AMP IP that can be used in Global Groups.
Figure 57 Groups > PTMP Page Illustration 3. Define the settings on this page. Table 65 describes the settings and default values. Table 65: Groups > PTMP Fields and Default Values Setting Default Description 802.11a Radio Channel 58 Selects the channel used for 802.11a radios by the devices in this group. 802.11g Radio Channel 10 Selects the channel used for 802.11g radios by the devices in this group. Channel Bandwidth 20 Defines the channel bandwidth used by the devices in this group.
Figure 58 Groups > Proxim Mesh Page Illustration The General section contains settings for mesh radio, number of mesh links, RSSI smoothing, roaming threshold and de-auth client. Table 66: General Fields and Default Values Setting Default Description Mesh Radio 4.9/5Ghz Drop-down selects the radio that acts as the backhaul to the network. Maximum Mesh Links (1-32) 6 Sets the maximum number of mesh links allowed on an AP.
Table 68: Mesh Cost Matrix Fields and Default Values Setting Default Description Hop Factor (110) 5 Sets the factor associated with each hop when calculating the best path to the portal AP. Higher factors will have more impact when deciding the best uplink. Maximum Hops to Portal (1-4) 4 Set the maximum number of hops for the AP to reach the Portal AP. RSSI Factor (0-10) 5 Sets the factor associated with the RSSI values used when calculating the best path to the portal AP.
2. Select Yes on the Use MAC ACL drop-down menu. Enter all authorized MAC addresses, separated by white spaces. 3. Select Save when configurations are complete to retain these settings. Select Save and Apply to make the changes permanent, or select Revert to discard all unapplied changes. Specifying Minimum Firmware Versions for APs in a Group This configuration is optional.
2. For each device type in the group, specify the minimum acceptable firmware version. If no firmware versions are listed, go to the Device Setup > Upload Firmware & Files configuration page to upload the firmware files to AirWave. 3. Select Upgrade to apply firmware preferences to devices in the group. The device types that display will vary based on the device types that were selected on the Groups > Basic page. 4. Select Save to save the firmware file as the desired version for the group. 5.
Figure 61 Comparing Two Devices Groups on the Groups > List > Compare Page (Partial View) 3. Note the following factors when using the Compare page: l The Compare page can be very long or very abbreviated, depending on how many configurations the device groups share or do not share. l When a configuration differs between two groups, the setting is flagged in red text for the group on the right. l The default setting of the Compare page is to highlight settings that differ between two groups.
3. Ensure that there are no devices in the group that you want to delete. AirWave does not permit you to delete a group that still contains managed devices. You must move all devices to other groups before deleting a group. 4. Ensure that the group is not a global group that has subscriber groups, and is not a group that was pushed from a Master Console. AirWave will not delete a group in which either of those cases is true. 5. Select the checkbox, and click the Delete button.
l Scheduling Options — Schedules the changes to be applied to this group in the future. Enter the desired change date in the Start Date/Time field. You can also specify if this is a one-time schedule or a recurring schedule. Recurring options are Daily, Weekly, Monthly, and Annually. AirWave takes the time zone into account for the group if a time zone other than AirWave System Time has been configured on the Groups > Basic configuration page.
Figure 63 Modify Multiple Devices Section Illustration 3. Select one or more devices that are to share the configurations. Select the checkbox for each device to modify. 4. In the Modify Multiple Devices section, select any button or use any drop-down menu for the supported changes. Any action you take applies to all selected devices. Each action you take will direct you to a new configuration page, or prompt you with a confirmation page to confirm your changes. 5.
Action Description Dell Networking W AP Group Moves the selected APs to a new group or folder. If the AP is in managed mode when it is moved to a new group it will be reconfigured. Dell Networking W Instant Virtual Controller Variables Opens the Variable Editor page for selected Dell Networking W Instant APs. Management Level Move the selected devices into Monitor Only or Manage Read/Write Mode. Planned Downtime Mode Puts the selected devices into Planned Maintenance.
Action Description from selected devices Reboot selected devices Reboots the selected devices. Use caution when rebooting devices because this can disrupt wireless users. Reprovision selected Dell Networking W devices Configures the controller to send provisioning parameters such as radio, antenna, and IP address settings to the selected APs. Please note that APs will be rebooted as part of reprovisioning.
Figure 65 Groups > Basic Page for a Global Group (partial view) l When a Global Group configuration is pushed to Subscriber Groups, all settings are static except for settings with the checkbox selected; for fields with checkboxes selected, the value or setting can be changed on the corresponding tab for each managed group. In the case of the Groups > SSIDs configuration page, override options are available only on the Add configuration page (go to the Groups > SSIDs configuration page and select Add).
Chapter 4 Discovering, Adding, and Managing Devices This section describes how to add, configure, and monitor wired and wireless devices, and contains the following sections corresponding to features of the Device Setup and APs/Devices tabs: l "Device Discovery Overview" on page 119 l "Discovering and Adding Devices" on page 119 l "Monitoring Devices" on page 131 l "Configuring and Managing Devices" on page 150 l "Troubleshooting a Newly Discovered Down Device" on page 165 l "Setting up Spectrum
SNMP/HTTP scanning information is provided in these sections: l "Adding Networks for SNMP/HTTP Scanning" on page 120—explains how to enable networks that have been defined for scanning. l "Adding Credentials for Scanning" on page 120—explains how to define network credentials for scanning. Credentials must be defined before using them in scan sets. l "Defining a Scan Set" on page 121—explains how to create a scan set by combining networks and credentials when scanning for devices.
2. To create a new scan credential, select the Add button to add a new scan credential. Figure 68 illustrates this page. (Note that you may have to scroll down the page again to view this section.) Figure 68 Device Setup > Discover > Add/Edit New Scan Credential Section Illustration 3. Enter a name for the credential in the Name field (for example, Default). This field supports alphanumeric characters (both upper and lower case), blank spaces, hyphens, and underscore characters. 4.
4. In the Automatic Authorization section, select whether to override the global setting in AMP Setup > General and have New Devices be automatically authorized into the New Device List, the same Group/Folder as the discovering devices, the same Group/Folder as the closest IP neighbor, and/or a specified auto-authorization group and folder. 5. Select Add to create the selected scans, which then appear in a list at the top of the Device Setup > Discover page. 6.
Column Description Total Devices Found Displays the total number of APs detected during the scan that AirWave can configure and monitor. Total includes both APs that are currently being managed by AirWave as well as newly discovered APs that are not yet being managed. New Devices Found Displays the number of discovered APs that are not yet managed, but are available. Total Rogues Found Displays the total number of APs detected during the scan that AirWave could not configure or monitor.
The Cisco Discovery Protocol (CDP) CDP uses the polling interval configured for each individual Cisco switch or router on the Groups > List page. AirWave requires read-only access to a router or switch for all subnets that contain wired or wireless devices. The polling interval is specified on the Groups > Basic page.
l "Adding Multiple Devices from a CSV File" on page 128 l "Adding Universal Devices" on page 129 Adding Devices with the Device Setup > Add Page Manually adding devices from the Device Setup > Add page to AirWave is an option for adding all device types. You only need to select device vendor information from a drop down menu for Cisco and Dell Networking W-Series devices, and AirWave automatically finds and adds specific make and model information into its database.
Figure 72 Device Setup > Add > Device Communications and Location Sections 3. Complete these Device Communications and Location settings for the new device. Table 71 further describes the contents of this page. Settings may differ from device to device based on the type of device and the features that the device supports. In several cases, the default values from any given device derive from the Device Setup > Communication page.
Setting Default Description SNMP. SSH Port 22 For devices that support SSH, specify the SSH port number. Taken from Device Setup > Communication Community string used to communicate with the AP. NOTE: The Community String should have RW (Read-Write) capability. New, out-of-the-box Cisco devices typically have SNMP disabled and a blank username and password combination for HTTP and Telnet. Cisco supports multiple community strings per AP.
5. At the bottom of the page, select either the Monitor Only or Management read/write radio button. The choice depends on whether or not you wish to overwrite the Group settings for the device being added. For more information and a detailed procedure, see "Authorizing Devices to AirWave from APs/Devices > New Page" on page 124. If you select Manage read/write, AirWave overwrites existing device settings with the Groups settings.
Figure 73 Device Setup > Add > Import Devices via CSV Page Illustration 3. Select a group and folder into which to import the list of devices. 4. Click the Browse button, and select the CSV list file on your computer. 5. Click the Upload button to add the list of devices into AirWave. Adding Universal Devices AirWave gets basic monitoring information from any device including switches, routers and APs whether or not they are supported devices. Entering SNMP credentials is optional.
it off the ignored list, it returns immediately to the location in AirWave where it had resided before it was marked Ignored. l Ignored devices are not displayed in APs/Devices > New if discovered in subsequent scans. l Deleted devices will be listed on the APs/Devices > New if discovered in subsequent scans. Perform these steps to further process or return an ignored device to a managed status. 1. Go to the APs/Devices > New page to view all newly discovered devices. See Figure 74.
2. To change the device parameters for a given device, select its checkbox and adjust group, folder, monitor, and manage settings as desired. 3. Select Add to add the device to AirWave so that it appears on the APs/Devices > New list. 4. The Unignore button will either return the device to its regular folder or group or send it to the APs/Devices > New page.
Verify that the devices you added are now appearing in the APs/Devices > Up page. Newly added devices will have a status of Down until they have been polled the first time. Their configuration status will remain Unknown until they have finished verification. The Up status is not contingent on verification. The same section also appears on the Groups > Monitor page and is hyperlinked from a controller's monitoring interface.
Figure 78 Monitoring Page Bottom Level Data Common to All Device Types (partial view) Monitoring pages vary according to whether they are wired routers/switches, controllers/WLAN switches, or thin or fat APs; whether the device is a Mesh device; and whether Spectrum is enabled. These differences are discussed in the sections that follow. Monitoring Data Specific to Wireless Devices The APs/Devices > Monitor page for controllers and APs include a graph for users and bandwidth.
Figure 79 APs/Devices > Monitor Page for Wireless Devices (partial view of an AP) Table 72 describes the fields and information displayed in the Device Info section. The displayed fields vary from device to device.
Field Description l l Configuration l l l Good means all the settings on the AP agree with the settings AirWave wants them to have. Mismatched means there is a configuration mismatch between what is on the AP and what AirWave wants to push to the AP. The Mismatched link directs you to this specific APs/Devices > Audit page where each mismatch is highlighted. Unknown means the device configuration has not yet been fetched (possible issue with credentials).
Field Description access to this controller, you will not have to enter the credentials for this controller again after selecting this link. Outer IP Public IP address for a RAP device. Remote LAN IP LAN IP address for a RAP. This address is useful for troubleshooting from the local network. Quick Links Open controller web UI: A drop-down menu that allows you to jump to the controller’s UI in a new window.
Field Description Role Whether the radio acts as a Mesh Node or Access Active SSIDs The SSID(s) of the radio. *These fields are only available for mesh APs. To see an example of mesh monitoring, see "Monitoring Data for Mesh Devices" on page 145.
Figure 80 Interactive graphs for a Dellcontroller Table 75 describes the graphs on this page. Table 75: APs/Devices > Monitor Graphical Data Graph Description Clients Formerly Users. Shows the max and average client count reported by the device radios for a configurable period of time. User count for controllers are the sum of the user count on the associated APs. Check boxes below the graph can be used to limit the data displayed. Usage Formerly Bandwidth.
Field Description administrator in AMP Setup > Device Type Setup. For more information, refer to "Setting Up Device Types" on page 61. Role The role of the connected client such as employee, perforce, or logon (captive portal). MAC Address Displays the Radio MAC address of the user associated to the AP. Also provides a link that redirects to the Users > Detail page. Radio Displays the radio to which the user is associated.
The Recent Events area lists the most recent events specific to the device. This information also appears on the System > Events Log page (refer to "Using the System > Event Log Page" on page 210). Table 77 describes the fields in this page that display in the Recent Events table. Table 77: APs/Devices > Monitor > Recent Events Fields and Default Values Field Description Time Displays the day and time the event was recorded. User Displays the user that triggered the event.
When this button is selected, a new browser window launches with the statistics in plain text. Other ARM-tracked metrics are visible in the Radio Statistics page for Dell Networking W-Series APs. Issues Summary section The Issues Summary section only displays when noise, client count, non-802.
Radio Statistics Interactive Graphs Time-series graphs for the radio show changes recorded at every polling interval over time when polling with either SNMP or AMON. Clients and Usage data are polled based on the AP's group's User Data Polling Period. Channel, Noise, and Power are based on AP Interface Polling Period. 802.11 Counters data are based on the APs group’s 802.11 Counters Polling Period.
Figure 85 Radio Statistics Interactive Graphs Illustration – Radio Power and Channel Utilization displayed Recent ARM Events Log If this radio references an active and enabled ARM profile, and if your AirWave is enabled as a trap host (see the Dell Networking W-AirWave Best Practices Guideat dell.
Column Description Previous Channel Old primary channel value before the Channel Change event took place. Current Channel New primary channel value after the change. Previous Secondary Channel Old secondary channel value (for 40Mhz channels on 802.11n devices) before the Channel Change event took place. Current Secondary Channel New secondary channel value after the change. Change Reason If the noise and interference cause for the change can be determined, they will be displayed here.
Active BSSIDs Table The Active BSSIDs table maps the BSSIDs on a radio with the SSID it broadcasts to the network, as illustrated in Figure 88. This table appears only for Dell Networking W-Series AP radios. Figure 88 Active BSSIDs Table Illustration Monitoring Data for Mesh Devices The monitoring page for mesh devices includes basic device information at the top, two tables for Radios and Wired Interfaces, and Clients, Usage, CPU Utilization, and Memory Utilization graphs.
Figure 90 APs/Devices > Monitor Page for a Mobility Access Switch All managed wired devices also include an Interfaces subtab, as shown in Figure 91. Figure 91 APs/Devices > Interfaces Page for Wired Devices (partial view) . 146 | Discovering, Adding, and Managing Devices Dell Networking W-AirWave 7.
The Interfaces page includes a summary of all the interfaces at the top. In case of the stacked switches, the master includes the interfaces of all the members including its own. The physical and the virtual interfaces are displayed in separate tables, labeled Physical Interfaces and Virtual Interfaces. VLANs are listed below the interface. The Interfaces page for AirMesh APs includes VLANs as part of the Virtual Interfaces.
Figure 93 Individual Interface Information Section Bandwidth, and various standard and enterprise specific error counting information is displayed in the lower section in a tabbed graph, which are shown in "Interface Monitoring Page for a Wired Device" on page 147 above. Connected Clients, if any, are listed in a table below the interactive graphs. What Next? All device lists in AirWave act as portals to management pages if you have the proper read/write privileges.
Figure 94 APs/Devices > Audit Page Illustration 6. Review the list of changes to be applied to the device to determine whether the changes are appropriate. If not, you need to change the Group settings or reassign the device to another Group. Using Device Folders (Optional) The devices on the APs/Devices > List page include List, Up, Down, and Mismatched fields. These devices are arranged in groups called folders.
3. Select the Parent folder. 4. Select Add. Once a new folder has been created, devices can be moved into it using the Modify Devices link or when New Devices are added into AirWave.
Figure 96 APs/Devices > Manage > General Section Illustration 3. Select Manage Read/Write on the Management Mode field. 4. Select Save and Apply, then Confirm Edit on the confirmation page to retain these settings and to push configuration to the device. 5. For device configuration changes that require the device to reboot, use the Schedule function to push the changes at a time when WLAN users will not be affected. 6.
Figure 97 APs/Devices > Manage Page Illustration (partial view) If any changes are scheduled for this AP, they appear in a Scheduled Changes section at the top of the page above the other fields. The linked name of the job takes you to its System > Configuration Change Job Detail page. 2. Locate the General section for information about the AP’s current status. Table 81 describes the fields, information, and settings.
Field Description Group Links to the Group > Monitoring page for the AP. Template Displays the name of the group template currently configuring the AP. This also displays a link to the Groups > Template page. NOTE: This field is only visible for APs that are managed by templates. Folder Displays the name of the folder containing the AP. Also displays a link to the APs/Devices > List page for the folder. Management Mode Displays the current management mode of the AP.
Setting Default Device Type Description RF Band Selection All Instant Drop-down menu for specifying the RF Band on the controller. Location Read from the device All The SNMP location set on the device. Latitude None All Text field for entering the latitude of the device. The latitude is used with the Google Earth integration. Longitude None All Text field for entering the longitude of the device. The longitude is used with the Google Earth integration.
Table 83: Additional Settings Setting Mesh Mode Mesh Mobility Device Type Description Mesh AP Mesh Devices Drop-down menu specifies the mesh role for the AP as shown: l Mesh AP —The AP will act like a mesh client. It will use other APs as its uplink to the network. l Portal AP —The AP will become a portal AP. It will use a wired connection as its uplink to the network and serve it over the radio to other APs. l Remote Portal AP —The AP will become a remote portal AP.
Setting Default Device Type Description minimize ‘crosstalk,’ which occurs when the signals from APs overlap and interfere with each other. This RF interference negatively influences WLAN performance. 802.11b’s 2.4-GHz range has a total bandwidth of 80-MHz, separated into 11 center channels. Of these channels, only 3 are non-overlapping (1, 6, and 11). In the United States, most organizations use only these non-overlapping channels.
Table 84 describes field settings, default values, and additional information for this page. Table 84: APs/Devices > Manage > Template Options Fields and Default Values Default Device Type Description WDS Role Client Cisco IOS Wireless LAN Controllers only Set the WDS role for this AP. Select Master for the WDS master APs and Client for the WDS Client. Once this is done you can use the %if wds_role= % to push the client, master, or backup lines to appropriate WDS APs.
Setting a Maintenance Window for a Device AirWave can automate the manual action of putting multiple devices into Manage mode at once so that changes can be applied, and after the maintenance period is over, the devices automatically revert to Monitor-Only mode. Maintenance windows can be set as a one-time or recurring event on the APs/Devices > Manage and Groups > Basic pages. You can also use the Modify Devices link to add or delete maintenance windows to or from multiple selected devices at once.
Figure 99 Add Virtual Interfaces Page for Wired Devices . New physical and virtual interfaces are discovered using SNMP polling as described in "SNMP/HTTP Scanning" on page 119. To refresh and reload all current interface information from a device, select Import Interfaces on the bottom of the page as shown in Figure 100. Dell Networking W-AirWave 7.
Figure 100 Import Interfaces for Refresh and Reload (lower portion of page) You can view details for each interface on a wired device from its individual interface page as well. For details, see "Understanding the APs/Devices > Interfaces Page" on page 147. You can configure interface settings individually or in groups. For individual settings, select the pencil icon next the interface name in AP/Devices > Interfaces.
Figure 101 Physical Interfaces Monitoring and Configuration Sections Figure 102 Virtual Individual Interfaces Configuration Section To configure interfaces as a group, select Edit Interfaces above the Physical or Virtual Interfaces table as shown in Figure 103. Dell Networking W-AirWave 7.
Figure 103 Edit Multiple Interfaces You will remain on the same page, but will have the option to make changes to the most commonly edited settings in batch mode, as shown in Figure 104. Figure 104 Multiple Interface Editing Page Illustration AirWave assembles the entire running configuration using templates and your modifications to these pages. For a more detailed discussion on templates, see "Creating and Using Templates" on page 171.
Figure 105 APs/Devices > Manage > Device Communication The Device Communication area may appear slightly different depending on the particular vendor and model of the APs being used. 3. Enter and confirm the appropriate Auth Password and Privacy Password. 4. You can disable the View Device Credentials link in AirWave if you are the root user. Contact Dell support at dell.com/support for detailed instructions to disable the link. 5. (Optional.
monitor-only mode in AMP Setup > General or 2) if you are looking at an APs/Devices > Manage page for a controller or autonomous AP that supports firmware upgrades in AirWave. See the Supported Infrastructure Devices document on the Home > Documentation page for a list of the AirWave-supported devices that can perform firmware upgrades. In most cases, you cannot upgrade firmware directly on thin APs.
Figure 106 APs/Devices > Manage Firmware Upgrades Initiating a firmware upgrade will change the Firmware Status column for the device to Pending in APs/Devices > List. You can review the status of all recent firmware upgrade jobs in System > Firmware Upgrade Jobs.
Table 87: Common System Messages for Down Status Message Meaning AP is no longer associated with controller This means the AP no longer shows up in any controller's AP list (on the AirWave server). Either the AP was removed from the controller, or it has roamed to another controller that AirWave does not have visibility to, or it is offline.
Figure 107 View Device Credentials Window The View Device Credentials message may appear slightly different depending on the vendor and model. 5. If the credentials are incorrect, return to the Device Communications area on the APs/Devices > Manage page. Enter the appropriate credentials, and select Apply. 6. Return to the APs/Devices > List page to see if the device appears with a Status of Up.
l The AP’s associated controller must have an RFprotect license and must be running ArubaOS 6.0 or later. l Dell Networking W GUI Config must be enabled for that AP’s group in the Groups > Basic page.
The above steps will use the defaults in the referenced Spectrum Profile. In most cases, you should not change the settings in the default profile. If you must change the defaults, however, navigate to Groups > Controller Config > Profiles > RF > 802.11a/g Radio > Spectrum page, and create a new Spectrum profile with non-default settings.
To disable Spectrum mode on this individual AP after it has collected data, return to the APs/Devices > Manage page for this AP and set the Spectrum Override field back to No. Configuring a Controller to use the Spectrum Profile You can use AirWave to customize individual fields in the profile instance used by a particular controller without having to create new Dell Networking W AP groups and new radio profiles.
Chapter 5 Creating and Using Templates This section provides an overview and several tasks supporting the use of device configuration templates in AirWave, and contains the following topics: l "Group Templates" on page 171 l "Viewing and Adding Templates" on page 172 l "Configuring General Template Files and Variables" on page 175 l "Configuring Templates for Dell Networking W-Instant" on page 180 l "Configuring Templates for AirMesh" on page 181 l "Configuring Cisco IOS Templates" on page 182
Template Variables Variables in templates configure device-specific properties, such as name, IP address and channel. Variables can also be used to configure group-level properties, such as SSID and RADIUS server, which may differ from one group to the next.
Setting Description Name Displays the template name. Device Type Displays the template that applies to APs or devices of the specified type. If vendor (Any Model) is selected, the template applies to all models from that vendor that do not have a version specific template defined. If there are two templates that might apply to a device, the template with the most restrictions takes precedence. Status Displays the status of the template.
Table 89: Groups > Templates > Add Template Fields and Default Values Setting Default Description Use Global Template No Uses a global template that has been previously configured on the Groups > Templates configuration page. Available templates will appear in the drop-down menu. If Yes is selected you can also configure global template variables. For Symbol devices you can select the groups of thin APs to which the template should be applied.
Setting Default Description Username the new username AirWave should use here. AirWave updates the credentials it is using to communicate to the device after the device has been managed. Telnet/SSH Password None If the template is updating the Telnet/SSH password on the AP, enter the new Telnet/SSH password AirWave should use here. AirWave updates the credentials it is using to communicate to the device after the device has been managed.
2. Select an AP from the Group to serve as a model AP for the others in the Group. You should select a device that is configured currently with all the desired settings. If any APs in the group have two radios, make sure to select a model AP that has two radios and that both are configured in proper and operational fashion. 3. Go to the Groups > Templates configuration page. Select Add to add a new template. 4. Select the type of device that will be configured by this template. 5.
actual logging facility local6 actual logging queue-limit 100 actual logging trap debugging no service pad actual ntp clock-period 2861929 actual ntp server 209.172.117.194 radius-server attribute 32 include-in-access-req format %h … 10. Once the template is correct and all mismatches are verified on the APs/Devices > Audit configuration page, use the Modify Devices link on the Groups > Monitor configuration page to place the desired devices into Management mode.
config file as "configuration mismatches.” Lines enclosed in are included in the AP startup-config file but AirWave ignores them when verifying configurations. Lines enclosed in cause AirWave to ignore those lines during configuration verification. Ignore_and_do_not_push Command The ignore and do not push directive should typically be used when a value cannot be configured on the device, but always appears in the running-config file.
Table 90: Conditional Variable Syntax Components Variable Values Meaning Dot11Radio0 2.4GHz radio module is installed Dot11Radio1 5GHz external radio module is installed a Installed 5GHz radio module is 802.11a b Installed 2.4GHz radio module is 802.11b only g Installed 2.4GHz radio module is 802.11g capable interface radio_type backup wds_role The WDS role of the AP is the value selected in the dropdown menu on the APs/Devices > Manage configuration page for the device.
Variable Meaning Command Suppressed Default antenna_ receive Receive antenna antenna receive %antenna_ receive% diversity antenna_transmit Transmit antenna antenna transmit %antenna_ transmit% diversity cck_power 802.11g radio module CCK power level power local cck %cck_ power% maximum ofdm_power 802.11g radio module OFDM power level power local ofdm %ofdm_ power% maximum power 802.11a and 802.
%endif% syslog-server 216.31.249.235 syslog-level debug terminal-access clock timezone Pacific-Time -08 00 rf-band 5.
%avt_ingress_interface% %avt_ingress_ip% buffer_time 200 mode %avt_mode% AirWave displays a warning if AirMesh APs attempting to either upgrade or push configurations lack the necessary write permissions. Configuring Cisco IOS Templates Cisco IOS access points have hundreds of configurable settings. AirWave enables you to control them via the Groups > Templates configuration page. This page defines the startup-config file of the devices rather than using the AirWave normal Group configuration pages.
10.2.25.162 auth-port 1645 acct-port 1646 wlccp authentication-server infrastructure method_wds wlccp wds priority 200 interface BVI1 wlccp ap username wlse password 7 095B421A1C %endif% The following example sets an AP as a WDS Master Backup with the following lines: %if wds_role=backup% aaa authentication login method_wds group wds aaa group server radius wds server 10.2.25.
interface Dot11Radio1 bridge-group 1 bridge-group 1 block-unknown-source bridge-group 1 spanning-disabled bridge-group 1 subscriber-loop-control no bridge-group 1 source-learning no bridge-group 1 unicast-flooding no ip address no ip route-cache rts threshold 2312 speed basic-6.0 basic-9.0 basic-12.0 basic-18.0 basic-24.0 36.0 48.0 54.
username admin password 1 5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8 username admin privilege superuser username operator password 1 fe96dd39756ac41b74283a9292652d366d73931f ! ! access-list 100 permit ip 192.168.0.
radio %radio_index% max-mobile-units 25 radio %radio_index% admission-control voice max-perc 76 radio %radio_index% admission-control voice res-roam-perc 11 radio %radio_index% admission-control voice max-mus 101 radio %radio_index% admission-control voice max-roamed-mus 11 %endif% %if radio_type=11an% radio %radio_index% speed basic11a 9 18 36 48 54 mcs 0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15 %endif% %if radio_type=11b% radio %radio_index% speed basic1 basic2 basic5p5 basic11 %endif% %if radio_type=11bg% rad
Figure 113 Group > Templates > Add Page Illustration 4. Use the drop-down menu to select a device from which to build the global template and click the Fetch button. The menus are populated with all devices that are contained in any group that subscribes to the global group. The fetched configuration populates the template field. Global template variables can be configured with the Add button in the Template Variables box, illustrated in Figure 114.
n Group Name—the name of the subscriber group that you wish to update. n Variable Name—the name of the group template variable you wish to update. n Variable Value—the value to set. For example, for a global template with a variable called "ssid_1", the CSV file might resemble what follows: Group Name, ssid_1 Subscriber 1, Value 0 8. Once you have defined and saved a global template, it is available for use by any local group that subscribes to the global group.
Chapter 6 Using RAPIDS and Rogue Classification This chapter provides an overview to rogue device and IDS event detection, alerting, and analysis using RAPIDS, and contains the following sections: l "Introduction to RAPIDS" on page 189 l "Viewing Rogues on the RAPIDS > List Page" on page 199 l "Setting Up RAPIDS" on page 191 l "Defining RAPIDS Rules" on page 194 l "Score Override " on page 203 l "Using the Audit Log" on page 204 l "Additional Resources " on page 205 Introduction to RAPIDS Rog
Figure 115 RAPIDS > Overview Page Illustration (partial view) Table 92: RAPIDS > Overview Fields and Descriptions Summary Description IDS Events Displays a list of attack types for the designated folder and subfolders. Field displays events from the past two hours, the past 24 hours, and total IDS events. Names of attacks link to summary pages with more details. NOTE: AirWave should be configured as the SNMP trap receiver on the controllers to receive IDS traps. See the Dell Networking W-AirWave 7.
Summary Description RAPIDS Changes Tracks every change made to RAPIDS including changes to rules, manual classification, and components on the RAPIDS > Setup page. A link at the top of the list directs you to the RAPIDS > Audit Log page. Setting Up RAPIDS The RAPIDS > Setup page allows you to configure your AirWave server for RAPIDS. Complete the settings on this page as desired, and select Save. Most of the settings are internal to the way that AirWave will process rogues.
Field Default Description period is long (several hours). RAPIDS Export Threshold Suspected Rogue Exported rogues will be sent to VisualRF for location calculation. 4 Discovered BSSIDs and LAN MAC addresses which are within this bitmask will be combined into one device. 4 requires all but the last digit match (aa:bb:cc:dd:ee:fX). 8 requires all but the last two digits match (aa:bb:cc:dd:ee:XX).
Table 95: RAPIDS > Setup > Containment Options Fields and Default Values Field Default Description Manage rogue AP containment No Specifies whether RAPIDS will manage the classification of rogue APs on Cisco WLC and Dell controllers to match the classification of those rogues in RAPIDS. This includes the "Contained" classification. If this setting is enabled, then the Maximum number of APs to contain a rogue setting can be configured.
l Use the AMP Setup > General > Performance Tuning page to define the processing priority of RAPIDS in relation to AirWave as a whole. (See Table 13 in "AMP Setup > General" on page 29.) Defining RAPIDS Rules The RAPIDS > Rules page is one of the core components of RAPIDS. This feature allows you to define rules by which any detected device on the network is classified.
Device OUI Score The Organizationally Unique Identifier (OUI) score is based on the LAN MAC address of a device. RAPIDS can be configured to poll your routers and switches for the bridge forwarding tables. RAPIDS then takes the MAC addresses from those tables and runs them through a proprietary database to derive the OUI score. The OUI score of each device is viewable from each rogue’s detail page. Table 98 provides list the OUI scores definitions.
Figure 117 RAPIDS > Rules Page Illustration Table 99 defines the fields in the RAPIDS > Rules page. Table 99: RAPIDS > Rules Page Field Description Default Classification This drop down specifies the classification that a rogue device receives when it does not match any rules. Add New RAPIDS Classification Rule Select this button to create a RAPIDS classification rule. Rule Name Displays the name of any rule that has been configured.
Figure 118 Classification Rule Page Fill in the settings described in Table 99 then select an option from the drop down menu. Table 100 defines the drop down menu options that are at the bottom left of the RAPIDS Classification Rule dialog box (see Figure 118). After all rule settings are defined, select Add. The new rule automatically appears in the RAPIDS > Rules page.
Option Description Detected on LAN Rogue is detected on the wired network. Select Yes or No. Fingerprint Scan Rogue matches fingerprint parameters. IP Address Rogue matches a specified IP address or subnet. Enter IP address or subnet information as explained by the fields. OUI Score Rogue matches manufacturer OUI criteria. You can specify minimum and maximum OUI score settings from two drop-down lists. Select remove to remove one or both criteria, as desired.
This means that user’s laptops on your network may appear as Ad-Hoc devices that are broadcasting your SSID. If this happens too frequently, you can restrict the rule to apply to non-ad-hoc devices. l If More Than Four APs Have Discovered a Device, then Classify as Rogue By default, AirWave tries to use Signal Strength to determine if a device is on your premises. Hearing device count is another metric that can be used.
Table 101: RAPIDS > List Column Definitions Column Description Ack Displays whether or not the rogue device has been acknowledged. Devices can be acknowledged manually or you can configure RAPIDS so that manually classifying rogues will automatically acknowledges them. Additionally, devices can be acknowledged by using Modify Devices link at the top of the RAPIDS > List page.
Column Description Network Type Displays the type of network in which the rogue is present, for example: l Ad-hoc—This type of network usually indicates that the rogue is a laptop that attempts to create a network with neighboring laptops, and is less likely to be a threat. l AP—This type of network usually indicates an infrastructure network, for example. This may be more of a threat. l Unknown—The network type is not known. Encryption Type Displays the encryption that is used by the device.
Figure 120 RAPIDS > Detail Page Illustration Important things to remember regarding the information in the device detail page are: l Users with the role of Admin can see all rogue AP devices. l Active rogue clients associated with this AP are listed in the Current Rogue Client Associations table. Selecting a linked MAC address will take you to the Clients > Client Detail page, where you can view fingerprinting and device details.
1. Select the Identify OS for Suspected Rogues option if an IP address is available to obtain operating system information using an nmap scan. Note that if you are running wireline security software on your network, it may identify your AirWave as a threat, which you can ignore. 2. Select the Ignore button if the rogue device is to be ignored. Ignored devices will not trigger alerts if they are rediscovered or reclassified. 3.
Figure 121 RAPIDS > Score Override Page 2. Click Add to create a new override or select the pencil icon next to an existing override to edit that override. The Score Override add or edit page appears (Figure 122). Figure 122 Add/Edit Score Override Page Table 102: RAPIDS > Add/Edit Score Override Page Fields Field Description MAC Address Prefix Use this field to define the OUI prefix to be re-scored.
found at RAPIDS > Audit Log. For more information, see Figure 123. Figure 123 Audit Log Page Illustration Additional Resources The following AirWave tools support RAPIDS: l System Triggers and Alerts—Triggers and Alerts that are associated with rogue devices follow the classificationbased system described in this chapter. For additional information about triggers that support rogue device detection, see to "Viewing, Delivering, and Responding to Triggers and Alerts" on page 219.
| Using RAPIDS and Rogue Classification Dell Networking W-AirWave 7.
Chapter 7 Performing Daily Administration in AirWave Daily WLAN administration often entails network monitoring, supporting WLAN and AirWave users, and monitoring AirWave system operations.
System Page Description Refer to Performance Displays basic AirWave hardware information as well as resource usage over time. "Using the System > Performance Page" on page 223 Using the System > Status Page The System > Status page displays the status of all of AirWave services. Services will either be OK, Disabled, or Down. If any service is Down (displayed in red) please contact Dell support at dell.com/support.
A summary table lists logs that appear on the System > Status page. These are used to diagnose AirWave problems. Additional logs are available via SSH access in the /var/log and /tmp directories; Dell support engineers may request these logs for help in troubleshooting problems and will provide detailed instructions on how to retrieve them. Table 103 describes some of the most important logs: Table 103: A Sample of Important Status Logs Log Description pgsql Logs database activity.
Table 104: System > Syslog & Traps Columns and Descriptions Column Description Time The timestamp of the device event. Type Either Syslog or SNMP Trap. Source Device The name of the device that sent the message. Will be a link if you have visibility to the device. Can be empty if AirWave could not correlate the source IP.
Table 105: Event Log Fields Column Description Time Date and time of the event. User The AirWave user that triggered the event. When AirWave itself is responsible, System is displayed. Type Displays the Type of event recorded, which is one of four types, as follows: l Device—An event localized to one specific device. l Group—A group-wide event. l System—A system-wide event. l NMS—An event triggered by an NMS server.
Figure 127 Add New Trigger Page Illustration 2. In the Trigger section, choose the desired trigger Type and Severity. Figure 128 illustrates some of the supported trigger types. The alert summary information at the top of the AirWave screen can be configured to separately display severe alerts. Refer to "Configuring Your Own User Information with the Home > User Info Page" on page 255 for more details. 212 | Performing Daily Administration in AirWave Dell Networking W-AirWave 7.
Figure 128 System > Triggers > Add Trigger Type Drop Down Menu The Add Trigger page changes depending on the trigger type that you select. In many cases, you must configure at least one Condition setting. Conditions, settings and default values vary according to trigger type. Triggers with conditions can be configured to fire if any criteria match as well as if all criteria match.
b. The Alert Notifications settings section allows you to enter a note that will be included with the alert. This note will appear with the alert on the System > Alerts page. The Alert Notification section also allows you to specify whether the alert will be distributed via email, to a network management system (NMS), or to both. n If you select Email, you are prompted to set the sender and recipient email addresses.
Trigger Option Description Configuration Mismatch This trigger type activates when the actual configuration on the AP does not match the defined Group configuration policy. To set the conditions for this trigger type, select Add in the Conditions section. AP Usage Activates when the total bandwidth through the device has exceeded a predefined threshold for more than a specified period (such as more than 1500 Kbps for more than 120 seconds). You can also select bandwidth direction and page/radio.
Radio Trigger Options Description 802.11 Frame Counters Enables monitoring of traffic levels. There are multiple rate-related parameters for which you define conditions including ACK Failures, Retry Rate, and Rx Fragment Rate. See the Option drop-down menu in the Conditions section of the trigger page for a complete list of parameters. Select Add New Trigger Condition to access these settings. Define at least one condition for this trigger type. 802.
Table 110: Client Trigger Types and Condition Settings Client Trigger Option Description New Client This trigger type indicates a new user has associated to a device within a defined set of groups or folders. A Filter on connection mode field appears to allow you to filter by Wired or Wireless clients. Note that the New Client trigger type does not require the configuration of any condition settings, so the Condition section disappears.
Setting Triggers for RADIUS Authentication Issues Perform the following steps to configure RADIUS-related triggers. 1. Choose a trigger type from the RADIUS Authentication Issues list in the drop-down Type menu. Table 111 itemizes and describes the condition settings for each RADIUS Authentication trigger type.
Setting Triggers for AirWave Health After completing steps 1-3 in "Creating New Triggers" on page 211, perform the following steps to configure IDS-related triggers. 1. Choose the Disk Usage trigger type from the drop-down Type menu. See Figure 128 in "Creating New Triggers" on page 211 for trigger types. Table 113 describes the condition settings for this trigger type.
l IDS Events—Displays details of all Intrusion Detection System (IDS) events and attacks under the RAPIDS tab. You must be enabled as a RAPIDS user to see this page. l RADIUS Authentication Issues—Displays RADIUS-related alerts for devices in the top viewable folder available to the AirWave user. The detailed list displays the MAC address, username, AP, radio, controller, RADIUS server, and time of each event. Alerts can be sorted by any column. 2.
Figure 132 System > Triggers Page Illustration (partial view) Refer to "Creating New Triggers" on page 211 for additional information. Delivering Triggered Alerts AirWave uses Postfix to deliver alerts and reports via email because it provides a high level of security and queues email locally until delivery. If AirWave is located behind a firewall, preventing it from sending email directly to a specified recipient, use the following procedures to forward email to a smarthost. 1.
l Leave it in active status if it is unresolved. The alert remains on the New Alerts list until you acknowledge or delete it. If an alert already exists, the trigger for that AP or user does not create another alert until the existing alert has been acknowledged or deleted. l Move the alert to the Alert Log by selecting it and selecting Acknowledge. You can see all logged alerts by selecting the View logged alerts link at the top of the System > Alerts page.
Figure 134 System > Firmware Upgrade Jobs Page Illustration You can perform the following operations on this page: l To restart failed firmware upgrade jobs, select the check boxes next to the rows you want to restart and select the Restart Failed Jobs button. l To stop a pending upgrade job and remove it from the list, select the Cancel and Delete Jobs button.
Figure 136 System > Performance Page Illustration (Partial Screen) Table 115: System > Performance Page Fields and Graphs Field Description System Information Current Time Displays AirWave's current time. CPU(s) Basic CPU information as reported by the operating system. Memory The amount of physical RAM and Swap space seen by the operating system. Refer to the Dell Networking W-AirWave Server Sizing Guide at dell.com/support/manuals for hardware requirements.
Field Description System Memory Usage The amount of RAM that is currently used broken down by usage. It is normal for AirWave to have very little free RAM. Linux automatically allocates all free RAM as cache and buffer. If the kernel needs additional RAM for process it will dynamically take it from the cache and buffer. System Disk Throughput The rate of reading and writing from and to the disk in bytes per second. System Swap Usage The amount of Swap memory used by AirWave.
Field Description High Performance SNMP Fetcher Responses The number of SNMP OIDs received per second performed by the high performance SNMP (v2c) fetcher. Database Statistics Top 5 Tables (by row count) The five largest tables in AirWave. Degraded performance has been noticed for in some cases for tables over 200,000 rows. Decreasing the length of time client data is stored on the AirWave page is recommended if a user/client table exceeds 250,000 rows.
If you need to create an AirWave user account for frontline personnel who are to support Guest WLAN users, refer to "Supporting Guest WLAN Users With the Clients > Guest Users Page" on page 234. Overview of the Clients Pages The Clients pages display multiple types of user data for existing WLAN clients and VPN users. The data comes from a number of locations, including data tables on the access points, information from RADIUS accounting servers, and AirWave-generated data.
Monitoring Your Network with the Clients > Overview Page The Clients > Overview page provides a graphical summary of all devices on your network, including client and network usage trends; a distribution breakdown by OS, vendor, device type, and SSID; and potential performance issues. If any clients are configured to be Watched Clients, then a Watched Clients table will also appear on this page. This page is divided into three panes. The left pane is the "Trends" pane.
Figure 138 Center pane The right pane provides information about the total number of APs, Controllers, Remote Nodes, and Switches on your network and the number of those that are currently down. This information can be useful in identifying potential performance issues. Figure 139 Right pane Monitoring WLAN Users in the Clients > Connected and Clients > All Pages The Clients > All page shows all users that AirWave is aware of, including down clients.
l The Folder field shows the current folder of Connected Clients you are viewing. You can view users under a particular folder from the Go to folder dropdown menu. l Links under the Folder fields showing the Total Devices, Mismatched, Clients, and Usage (a static, unlinked statistic) summarize the device information for this folder.
Table 117: Clients > Connected Table Columns and Links(Alphabetical) Field Description AOS Device Type The type of client device determined by the Dell controller-- a fallback in case the rules set in AMP Setup > Device Type Setup were unable to determine the device type. AP/Device Displays the name of the AP to which the MAC address is associated as a link to this AP's APs/Devices > Monitor page. Association Time The first time AirWave recorded the user for this association. Auth.
Field Description Location If a value appears here, the location of this user’s client has been mapped on VisualRF. Select the location to open a new VisualRF Floor Plan Location window. MAC Address The radio MAC address of the user associated to APs as a link to the Users > Detail page for this user. Manufacturer The manufacturer of the user’s device. Model The model of the user’s device. Name The product of the user’s device.
Monitoring Rogue Clients With the Clients > Rogue Clients Page You can view connected rogue clients in AirWave by selecting the Clients > Rogue Clients page. In this page, you can click on the MAC address of a rogue to view the Client Details page or on a Rogue AP link to view the RAPIDS > Details page for the AP. Figure 141 illustrates the Clients > Rogue Clients page. Figure 141 Clients > Rogue Clients Page Illustration Table 118 describes the fields on this page.
Supporting Guest WLAN Users With the Clients > Guest Users Page AirWave supports guest user provisioning for Aruba Networks, Dell Networking W-Series, Alcatel-Lucent, and Cisco WLC devices. This allows frontline staff such as receptionists or help desk technicians to grant wireless access to WLAN visitors or other temporary personnel.
Figure 143 Clients > Guest Users Page Illustration Table 119: Clients > Guest Users Fields Field Description Repair Guest User Errors Sets AirWave to attempt to push the guest user again in an attempt to repair any errors in the Status column. Add New Guest User Adds a new guest user to a controller via AirWave Username Randomly generates a user name for privacy protection. This name appears on the Guest User detail page. Name Displays the specified guest user name.
5. To add a new guest user, select Add, and complete the fields illustrated in Figure 144. Table 119 above describes most fields. The first three fields are required, and the remaining fields are optional. Figure 144 Clients > Guest Users > Add New Guest User Page Illustration To make the Username or Password anonymous and to increase security, complete these fields then select Generate. The anonymous and secure Username and Password appear in the respective fields. 6.
Figure 145 Clients > VPN Sessions Page Illustration When a VPN username is selected, a Clients > VPN User Detail page displays with current VPN sessions, a user and bandwidth interactive graph, and a historical VPN sessions list table. Supporting RFID Tags With the Clients > Tags Page Radio Frequency Identification (RFID) supports identifying and tracking wireless devices with radio waves. RFID uses radio wave tags for these and additional functions.
Table 120: Clients > Tags Fields Field Description Name Displays the user-editable name associated with the tag. MAC Address Displays the MAC address of the AP that reported the tag. Vendor Displays the vendor of the tag (Aeroscout, PanGo and Newbury)—display all or filter by type. Battery Level Displays battery information—filterable in drop-down menu at the top of the column; is not displayed for Aeroscout tags.
Figure 147 illustrates the contents of Clients > Client Details page. Figure 147 Clients > Client Detail page illustration (partial view) Mobile Device Access Control in Clients > Client Detail and Clients > Connected Mobile Device Access Control (MDAC) secures, provisions, and manages network access for Apple® iOS and other employee-owned mobile devices by enabling device fingerprinting, device registration, and increased device visibility.
Figure 148 Device Info section in Clients > Client Detail after Show additional properties is selected Classifying Dell Devices in Client Detail If you have deployed Dell Networking W-Series controllers and have WMS Offload enabled on the network, the Clients > Client Detail page allows you to classify the device in the Device Information section, and to push this configuration to the controllers that govern the devices.
Controllers show several more pages in this menu (Security Dashboard, for instance) if the controller is running ArubaOS version 6.1 or greater. l Run a command: A drop-down menu with a list of CLI commands you can run directly from the APs/Devices > Monitor page. Figure 149 Open controller web UI and Run a command Menus Using the Deauthenticate Client Feature Some displays of the Clients > Client Detail page include the Deauthenticate Client feature in the Current Association section.
Viewing the Rogue Association History for a Client Past association details of a rogue client are tracked in the Rogue Association History table, which is located under the Association History table in Clients > Client Detail. Figure 152 Rogue Association History table in Clients > Client Detail Evaluating Client Status with the Clients > Diagnostics Page The Clients > Diagnostics page is accessible from the Clients > Client Detail page.
Managing Mobile Devices with SOTI MobiControl and AirWave Overview of SOTI MobiControl SOTI MobiControl, the mobile device management platform for Windows Mobile, Apple, and Android devices, has been integrated into AirWave to provide direct access to the MobiControl Web Console. MobiControl runs on your Mobile Device Manager (MDM) server. This server provisions mobile devices to configure connectivity settings, enforce security policies, restore lost data, and other administrative services.
2. When finished, select Add. The list page for the MDM server also displays: l Last Contacted – The last time AirWave was able to contact the MDM server. l Errors – Issues, if any, encountered during the last contact. During each polling period, AirWave will obtain a list of all device IDs and their WLAN MAC addresses.
Home Page Description Refer to Usage information and draw attention to unusual network usage patterns Deviations Page" on page 250 Search This page provides a simple way to find users. managed devices, groups, and rogues. "The Home > Search Page " on page 252 Documentation This page contains all relevant AirWave documentation.
Table 122: Home > Overview Sections and Charts Section Description Clients This chart is a graphical summary of the number of users on the network during a period of time. The time can be adjusted. Select Show All to display a list of data series that this graph can display, such as the user count by SSID. Clear the Max Clients or Avg Clients check box to change the display of the graph. The graph displays the maximum number of users by default.
The Customize link on the upper-right side of the page allows you to customize the widgets on the Home > Overview page. See "Customizing the Dashboard" on page 22 for more information. Using the Home > Firewall Page The Home > Firewall page allows network admins to view mobile app usage and performance on the network. This page is disabled by default. The option to enable this page is on the AMP Setup > General page under the Additional AirWave Services section.
Figure 156 Home > RF Performance You can click on a value in any of the graphs to view the associated list of clients. Figure 157 Drill down to view all clients When the client information is displayed, an additional drill down is available to view information for a specific client, device, or location. When you click on a Username in the Client page, the drill down takes you to the Clients > Diagnostics page.
This page is only available to Admin users. Figure 158 The Home > RF Capacity page You can click on a bar in the upper graphs to view a popup showing a detailed list of the devices that connected in the 24 hours before the RF Capacity page was run. This popup includes additional drill downs to the device, the controller, and the folder. You can also search in this popup Figure 159 Example of 2.
Figure 160 Example popup showing channel utilization Viewing the Home > Network Deviations Page The Home > Network Deviations page provides graphs that track your network's Client and Usage information and draw attention to unusual network usage patterns. These graphs can show you, for example, if heavy network traffic is occurring during off hours, or they can be used to detect the time(s) of day when your network traffic peaks.
Figure 161 Home > Network Deviations page The first time this page is launched, the graphs will display information for all devices in the Top folder. To specify a different folder, simply select one from the folder drop down in the upper-right corner, and then refresh the page. AirWave will remember the new setting the next time that the page is launched. By default, the graphs display average and standard deviation information for the current time over the last 40 weeks.
2 +- 5 Normal Range: 3 - 7 SD(2): ------2*SD +- Mean 2*2 +- 5 4 +- 5 Normal Range: 1 - 9 SD(3): ------3*SD +- Mean 3*2 +- 5 6 +- 5 Normal Range: 0 - 11 (-1 is not considered, so 0 is taken) Given the information above, if the Average Client Count over the last 40 weeks is 5, then this is not an anomaly (deviation) for any SD value. On the other hand, if at one point the client count was 8, then this would be an anomaly for SD1, whose normal client range is from 3-7.
Figure 163 Home > Search Page Illustration with Sample Hits on 00: (partial view) Accessing AirWave Documentation The Home > Documentation page provides easy access to all relevant AirWave documentation. All of the documents on this page are hosted locally by your AirWave server. The PDF files can be viewed by any PDF viewer, and the HTML files can be viewed in any supported browser. If you have any questions that are not answered by the documentation, please contact Dell support at dell.com/support.
Figure 164 Home > License Page Illustration Table 123: Home > License Static Fields and Descriptions Field Description System Name Displays a user-definable name for AirWave. The System Name can be configured from the AMP Setup > General page. Organization Displays the organization listed on your license key. Hostname Displays the DNS name assigned to AirWave. IP Address Displays the static IP address assigned to AirWave. The IP Address can be configured from the AMP Setup > Network page.
Configuring Your Own User Information with the Home > User Info Page The Home > User Info page displays information about the user that is logged into AirWave. This page includes the authentication type (local user, RADIUS, or TACACS+) and access level. This page enables customization some of the information displayed in AirWave, and is the place to change your password. The logged-in users can customize the information displayed in the AirWave header.
Field Description Customize Header Columns Enables/disables the ability to control which statistics hyperlinks (also known as Top Header Stats) are displayed at the top of every AirWave screen. Stats Select the specific data you would like to see in the Top Header Stats. Refer to the "Status Section" topic in the Dell Networking W-AirWave 7.7 Installation Guide. Note: This field only appears if you selected Yes in the previous field.
Field Description for other users, navigate to that list and select Choose Columns for roles above the list. Make the desired column changes; select the roles to update and Save. Console Refresh Rate The frequency in which lists and charts automatically refresh on a page. Idle Timeout (5 mins to 240 mins) Number of minutes of idle time until AirWave automatically ends the user session. This setting only the logged-in user of this AirWave. The default is 60 minutes.
Figure 166 Master Console Home > Overview Page Illustration l Reports can be run from the Master Console to display information from multiple AirWave stations; because such reports can be extremely large, reports can also be run as summary only so that they generate more quickly and finish as a manageable file size. l The Master Console can also be used to populate group-level configuration on managed AirWave installations using the Global Groups feature.
be https://your.AMP.name/public. When you upgrade to the latest version of AirWave, the public portal is disabled by default, regardless of the type of license. Figure 167 Public Portal Page Illustration The Public Portal supports configuration of the iPhone interface. This can be configured using the Master Console AirWave page. See "Defining General AirWave Server Settings" on page 28. Adding a Managed AMP with the Master Console Perform the following steps to add a managed AMP console. 1.
3. When finished, select Add to return to the Managed AMPs list page. Using Global Groups with Master Console To push configurations to managed groups using the AirWave Global Groups feature, follow these steps: 1. Navigate to the Master Console's Groups > List page. 2. Select Add to add a new group, or select the name of the group to edit settings for an existing group. 3. Select the Duplicate icon to create a new group with identical configuration to an existing group.
Figure 168 System > Backups Page Illustration To download a backup file, select the filename URL and the File Download popup page appears. Regularly save the data backup file to another machine or media. This process can be automated easily with a nightly script. Nightly maintenance and amp_backup scripts back up the full AirWave data and save the file as nightly_data00[1-4].tar.gz. In previous AirWave versions, the scripts created both config backup and data backup files.
Navigation Section of AirWave Failover The Navigation section displays tabs to all main GUI pages within AirWave Failover. The top bar is a static navigation bar containing tabs for the main components of AirWave, while the lower bar is context-sensitive and displays the subtabs for the highlighted tab. Table 126 describes the contents of this page.
Table 127: Home > Watched AMPs page fields and default values Setting Default Description IP/Hostname None The IP address or Hostname of the watched AMP. The Failover AMP needs HTTPS access to the watched AMPs. Username None A username with management rights on the watched AMP Password None The password for the username with management rights specified above. HTTP Timeout (5-1000 Sec) 60 The amount of time before AirWave considers a polling attempt failed.
| Performing Daily Administration in AirWave Dell Networking W-AirWave 7.
Chapter 8 Creating, Running, and Emailing Reports This section describes AirWave reports, including access, creation, scheduling, and distribution. It includes the following sections: l "Overview of AirWave Reports" on page 265 l "Using Daily Reports" on page 274 l "Defining Reports" on page 268 l "Emailing and Exporting Reports" on page 304 AirWave ships with several reports enabled by default. Default reports may run nightly or weekly, depending on the AirWave release.
Each pane includes a Latest Report column with the most recently run reports for each definition and role created. Run and Delete buttons allow you to select a report from the definitions table to run or delete. Once you define a report from the Definition page, it appears on the Generated page. The Reports > Definition page is shown in Figure 169, and Table 128 describes the fields available when you select a specific report definition.
Figure 170 Report Type Drop down Menu in Reports > Definitions Illustration Only admin users have complete access to all report information. The AirWave reports and online displays of information can vary with configuration, User Roles, and Folders. Reports > Generated Page Overview The Reports > Generated page displays reports that have been run, as well as the most recent daily version of any report. An Admin user can see and edit all report definitions in AirWave.
Figure 171 Reports > Generated Page Example Figure 172 Reports > Generated Page with Single-click Report Viewing Options Defining Reports You can create reports in AirWave for any time period you want, to be run when you want, and distributed to recipients that you define. Reports that you create will display on the Reports > Definition page and on the Reports > Generated page. 1.
Figure 173 Defining a Report 2. Complete the fields described in Table 129 and any additional Report Restrictions. The Report Restrictions section changes according to the report type you choose. Additional information about each report type is described in "Using Daily Reports" on page 274. Table 129: Reports > Definitions > Add page fields and default values Field Default Description Report Definition Title Empty Enter a Report Title.
Field Default Description Report Restrictions - (These vary based on report type) Group All Groups Folder All Folders Specify the groups and folders to be covered in the report by choosing All Groups (or All Folders) or specifying Use selected groups (or Use selected folders) in the dropdown menu. If Use selected groups is chosen, a menu with check boxes appears, allowing you to choose the groups to include in the report.
Field Default Description l Desired Start Date/Time—Sets the time the report runs, which may often be separate from the time period covered by the report. This allows you to run a report during less busy hours. Report Visibility Generate d Report Visibility By Role This field allows you to display the report either by user role (with the report appearing in User Role lists on the Reports > Generated page) or by Subject (displaying reports by Subject on the Reports > Generated page).
Figure 174 Report Restrictions Illustration By default all data will be included. Deselect the check box to hide specific information. The list can also be reordered by dragging and dropping the separate lines. The order displayed here will match the column order in the report. 3. Do one of the following: l Select Add and Run to generate the report immediately, in addition to saving report settings.
Table 130: Report Types and Scheduling Options Supported for Custom Reports Report Type Can by Run by Time Period Can be Run by Group/Folder Description "Using Custom Reports" on page 275 Yes Yes Summarizes devices based on which have exceeded a defined percentage of their maximum bandwidth capacity. Pulls data for AP radios or interfaces of universal devices (ifSpeed value).
Report Type Can by Run by Time Period Can be Run by Group/Folder Description "Using the Network Usage Report" on page 291 Yes Yes Summarizes bandwidth data and number of users. "Using the New Clients Report" on page 293 Yes No Provides a summary list of new clients, including username, role, MAC address, vendor, discovering AP, association time, duration, folder, and group.
Viewing Generated Reports The Reports > Generated page supports the following general viewing options: l By default, the reports on the Reports > Generated page are sorted by Generation Time. You can sort reports by any other column header in sequential or reverse sequential order. You can also choose columns, export the Generated Reports list in CSV, and modify the pagination of this list. l The Reports > Detail page launches when you select any report title from this page.
Figure 175 Custom Options Page Illustration The left pane of the Custom Options section lists all available data that can be included in the report. Drag the desired data from the Available Options list on the left to the Selected Options pane on the right. The order of the data in the Selected Options section is the order that it will appear in the report. The data can be reordered by dragging an item up or down the list. 5. Below the Custom Options panes is a Report Restrictions section.
Figure 176 Dell Networking W Detail Page Using the Capacity Planning Report The Capacity Planning Report tracks device bandwidth capacity and throughput in device groups, folders, and SSIDs. This report is based on interface-level activity and can be used to assist in analyzing device capacity and performance on the network. This analysis can help to achieve network efficiency and an improved user experience.
Figure 177 Capacity Planning Report Detail Page (partial view) Table 132: Capacity Planning Report output details Field Description Device Displays the device type or name. Interface Displays the type of 802.11 wireless service supported by the device. Group Displays the device group with which the device is associated. Folder Displays the folder with which the device is associated. Controller Displays the controller with which a device operates.
Using the Client Inventory Report The Client Inventory Report can be used for viewing information about clients that have connected to you network. Similar to the Inventory Report, you can filter this report to search for specific devices (such as, "Aruba"). You can also filter this report based on the connection mode (wired or wireless). This report also gives you the option to filter instead on specific devices and/or users.
l Last Connection Mode Summary l Last SSID Summary 5. Specify "Matching" in the Model section, and select the following options: l iPad l iPhone l iPod 6. Click the Save and Run button. Output Figure 178 illustrates the output of this Client Inventory Report. The fields on this page are described in Table 133. Figure 178 Reports > Generated > Client Inventory (split view) Table 133: Client Inventory Report output details Field Description AOS Device Type Displays the device type or name.
Field Description Count Shows the total number of each device current included in the client inventory. % of Total Shows the percentage of each of those devices that are included in the client inventory. Last SSID Summary The SSID that each device most recently connected to. This includes the total number of clients and the percentage of each of those devices that connected to the SSID. Last Connection Mode The connection mode that each device most recently connected using.
Figure 179 Client Session Detail Partial View Using the Configuration Audit Report The Configuration Audit Report provides an inventory of device configurations on the network, enabling you to display information one device at a time, one folder at a time, or one device group at a time. This report links to additional configuration pages. Perform these steps to view the most recent version of the report, then to configure a given device using this report. 1. Navigate to the Reports > Generated page. 2.
Figure 180 Daily Configuration Audit Report Page, partial view Table 134: Daily Configuration Audit Report Field Description Name Displays the device name for every device on the network. Selecting a given device name in this column allows you to display device-specific configuration. Folder Displays the folder in which the device is configured in AirWave. Selecting the folder name in this report displays the APs/Devices > List page for additional device, folder and configuration options.
l Least Utilized by Bandwidth—By default, this list displays the 10 devices that are the least used, according to the bandwidth throughput. l Devices—This list displays all devices in AirWave. By default it is sorted alphabetically by device name. You can specify the number of devices that appear in each of the first four categories in the Reports > Definitions > Add page. Any section of this report can be sorted by any of the columns.
Field Description Average Usage ) Displays the average rate of data in byte per second that traveled through device during the period of time covered by the report. Location Displays the location information if available. Controller The controller that the device is associated to. Folder/Group Displays the folder and group information for the device.
Figure 182 Device Uptime Report Illustration Table 136: Device Uptime Report Unique Fields and Descriptions Field Description SNMP Uptime Displays the percentage of time the device was reachable via ICMP. AirWave polls the device via SNMP at the rate specified on the Groups > Basic page. ICMP Uptime Displays the percentage of time the device was reachable via ICMP. If the device is reachable via SNMP it is assumed to be reachable via ICMP.
The Home > Overview page also cites IDS events. Triggers can be configured for IDS events. Refer to "Creating New Triggers" on page 211 for additional information. Figure 183 and Table 137 illustrate and describe the IDS Events Detail report. Selecting the AP device or controller name takes you to the APs/Devices > List page.
Field Description SNR Displays the signal-to-noise (SNR) radio associated with the IDS event. Precedence Displays precedence information associated with the IDS event, when known. Time Displays the time of the IDS event. Using the Inventory Report The Inventory Report itemizes all devices on the network. The output breaks down this information by vendor, model (including firmware and bootloader), and device type. Example The following example creates a sample Inventory report.
Figure 184 Inventory Report Illustration (partial view) Table 138: Inventory Report output details Field Description Vendor Displays the device type or name. In the example above, the only vendor specified in the report definition was Cisco. Count Shows the total number of each device current included in the client inventory. % of Total Shows the percentage of each of those devices that are included in the client inventory. Firmware Version The firmware version on each device.
Field Description and specific versions. This includes the total number of devices and the percentage of each of those devices compared to other devices. As indicated previously, the example above shows that 2 of the Cisco devices are on firmware Cisco_7.2.111.3. Each is a separate model, though. Using the Match Event Report Use the Match Events report to track matching events that occurred on devices. This information can be broken down based on a specific folder, AP, and/or client.
Field Description Data will only display for a Folder, AP, and Client if each has experienced at least one match event. Device Type Summary This shows the total number and percentage of match events that occurred on all device types (for example, iPhone, Kindle, etc.). The graph shows the top 5 devices. Reasons for Match Summary This graph and table break down the number and percentage of matches based on the match reason.
l Usage—maximum and average bandwidth l Clients—average bandwidth in and out This information can be broken down by Groups and Folders. It can also be summarized by Usage, Client Count, and by both for folders. When you create this report, you can specify to view information for all or specific device types and all or specific SSIDs. You can summarize the report based on Client Count, Usage, and/or Usage and Client Count by Folder. This report by default includes graphical information.
Field Description Max Usage Out Shows the maximum amount of outgoing traffic on the network during this interval. This value is shown in Mbps. Avg Clients The average number of clients that were connected during this interval. Avg Usage In Shows the average amount of incoming traffic on the network during this interval. This value is shown in Mbps. Avg Usage Out Shows the average amount of outgoing traffic on the network during this interval. This value is shown in Mbps.
Figure 188 New Clients Report Illustration (split view) Table 141: New Clients Report output details Field Description Username The client name, if available. Role The client's role, if available MAC Address The new client's MAC address Vendor The vendor for the client device. AP/Device The AP/Device that the client is currently connected to. Association Time The time when the client last associated with the device. Duration How long the client has been connected to the device.
l Detailed and text-based table of discovery events pertaining to the discovery of rogue devices with extensive parameters and hyperlink interoperability to additional AirWave pages This report is not run by default, but is available after you define it. Refer to Figure 189 for a sample illustration of this report. Figure 189 New Rogue Devices Report Illustration (partial view) The rogue device inventories that comprise this report contain many fields, described in Table 142.
Field Description First Discovery Agent Displays the network device that first discovered the rogue device. Last Discovering AP Displays the network device that most recently discovered the rogue device. Model Displays the rogue device type when known. Operating System Displays the operating system for the device type, when known. IP Address Displays the IP address of the rogue device when known. SSID Displays the SSID for the rogue device when known.
Figure 190 PCI Compliance Report Illustration Example Using the Port Usage Report You can generate a wide array of port usage statistics from the Port Usage Report including each of the following: l List of all the switches and ports in your network by folder l List of unused ports l List of access and distribution ports l Histogram displaying unused ports vs.
Figure 191 Port Usage Report Detail Page (partial view) Table 143: Switches table fields Field Description Device The name of the device Folder/Group The folder and group that this devices belongs to Type The switch type 298 | Creating, Running, and Emailing Reports Dell Networking W-AirWave 7.
Field Description Contact Displays the contact info for the switch, if available Location Displays the location information for the switch, if available Total Ports The total number of ports available on the device Access Ports The total number of Access Ports available on the device Unused Ports (%) The percentage of the ports on the device that are unused Traffic In The amount of incoming traffic on the device Traffic Out The amount of outbound traffic on the device Using the RADIUS Authen
Using the RF Health Report The RF Health Report tracks the top AP radio issues by noise, MAC/Phy errors, channel changes, transmit power changes, mode changes, and interfering devices (the last two apply only if there are ARM events). This report assists in pinpointing the most problematic devices on your network, and lists the top devices by problem type. Problematic APs are displayed in two separate lists Problem Radios lists, grouped by radio frequency.
most reports because other data (like bandwidth and users) will max out at 425 days, and AirWave validates reports so you can only run them over a 366-day duration. Using the Rogue Clients Report The Rogue Clients report tracks the number of valid users that connected to rogues in the specified time frame, and can be filtered by rogue classification. You can specify to include ad-hoc devices can be included and detailed information about the clients.
Field Description Unique MAC addresses including the username (if available) and the number of misassociations. Rogue Clients MAC Address The MAC address of the rogue client. Username The username of the rogue client, if available SSID The SSID of the rogue client First Heard The date/time when the rogue client was first detected on the network. Ch BW The channel bandwidth of the client, if avaialble Radio Mode The radio mode that the rogue client is using.
Field Description Containment State Shows the current containment state Desired Containment State Shows the desired containment state Classifying Rule Shows the rule that the controller followed when determining the status of the rogue Location The location of the rogue device, if available Using the VPN Session Report The VPN Session Report extensively itemizes VPN activity by session.
Emailing and Exporting Reports This section describes three ways that you can distribute reports in AirWave: l "Emailing Reports in General Email Applications" on page 304 l "Emailing Reports to Smarthost" on page 304 l "Exporting Reports to XML, CSV, or PDF" on page 305 Emailing Reports in General Email Applications Perform these steps to set up email distribution of reports in AirWave All reports contain a link to export the report to an XML, CSV, or PDF file.
tail -f /var/log/maillog Exporting Reports to XML, CSV, or PDF AirWave allows you to export individual reports in XML (xhtml), CSV, or PDF. You can also export all reports at once, and a zip file will be generated with all of the files in CSV format included. These files can be read by an HTML browser or opened in Excel. The CSV files can be opened in any text editor. The PDF files can be viewed using any reader. Support for graphics and links is included when exporting.
| Creating, Running, and Emailing Reports Dell Networking W-AirWave 7.
Chapter 9 Using VisualRF This chapter contains information about VisualRF and includes the following topics: l "Features" on page 308 l "Useful Terms" on page 308 l "Starting VisualRF" on page 309 l "Basic QuickView Navigation" on page 309 l "Using the Settings in the VisualRF > Setup Page" on page 314 l "Configuring QuickView Personal Preferences" on page 320 l "Increasing Location Accuracy " on page 323 l "Using QuickView to Assess RF Environments" on page 332 l "Planning and Provisionin
Features l Mesh monitoring page specially for viewing Dell AirMesh devices. VisualRF automatically renders Mesh APs based on GPS coordinates. l Floor plan upload wizard enables direct importation of JPG/JPEG, GIF, PNG, PDF (single page only) and CAD files for floor plans. NOTE: PDF floor plans must be generated from a source file. Other PDFs, such as those scanned from a printer, will not import properly. Similarly, CAD files must be generated by AutoCAD.
l VisualRF - The AirWave service that calculates location, calculates path loss, and provides floor plan editing capabilities. l VisualRF Plan - Makes the planning portions of VisualRF available in an offline software package that does not require a server. For more information about VisualRF Plan, see "About VisualRF Plan" on page 352.
Table 147: Top Level Icons and Descriptions Operation Icon Description Refresh Refresh the floor plan to see changes. Open Site Tree Display the Network Tree View Window on top of the floor plan. Preferences Configure personal viewing preferences. The Preferences menu allows you to configure user preferences (APs, Clients, overlay types, grid lines, alerts, icon sizes, etc.). See "Configuring QuickView Personal Preferences" on page 320 for more details. Help Launch the online help.
l Wired Range - Displays the distance an Ethernet cable can be pulled from an IDF. The max range is equal to 300 feet minus 5 percent minus 1.1x the floor height. Floors section The Floors section shows the overlay information for adjacent floors to determine how the bleed through from adjacent floors affects the viewed floor.
l Mesh - Toggle lines between Mesh portals and nodes. l Surveys - Toggle lines between client (x,y) to APs by client during survey. l Interferers - Toggle lines between interferers and the radios that have discovered them. For interferers, there is no radio of association. Edit Menu Figure 203 Edit Menu Options Options in the Edit menu allow you to add information to the floor plan.
Figure 204 shows additional navigation controls when viewing floor plans. In the bottom left corner of the window is the Search box. In the top right corner is the zoom control. You can also zoom by using Ctrl + your mouse wheel as well as the + and - keys. In the bottom right corner are navigation tools related to network, campus, and building. Figure 204 On-Screen Navigation Options Mesh View Navigation Mesh view provides a visual Mesh monitoring page specially for viewing Dell AirMesh devices.
You can mouse over each mesh network icon to view the number of APs, Clients, and the Usage. Clicking on an AirMesh network will display the APs with labels: Figure 206 APs in a mesh network Select an AirMesh AP icon to bring up the popup menu showing the Mesh Node Properties by default. This window shows the node’s name, MeshID, MAC, Manufacturer, and other information. Clicking the blue Monitor link inside this window opens the APs/Devices > Monitor page in a new tab.
Figure 208 The VisualRF > Setup Page (partial view) Server Settings To enable VisualRF and tune memory and performance, navigate to the Server Settings section on this page. The settings in this section are detailed in Table 149. Table 149: Server Settings Section of the VisualRF > Setup Page Setting Default Description Enable VisualRF Engine No Enables or disables the VisualRF engine. This setting must be enabled to use VisualRF. If you do not have a license for VisualRF, this page will not appear.
Setting Default Description 100 to 200 floors 3 GB 200 to 300 floors 5 GB (64-bit only) l Above 300 8 GB (64-bit only) NOTE: If you see Out of Memory errors in the SSL error log on the System > Status page, you should increase memory allocation. l l Core Threads 1x number of cores Number of threads that calculate path loss for each floor. These threads also regenerate a floor's RF properties when new APs, walls, or regions are added to a floor plan.
Location Calculation Timer Settings To tune the frequency for calculating device locations within the VisualRF UI, navigate to the Location Calculation Timer Settings section. The available settings are described in Table 151: Table 151: Location Calculation Timer Settings Section of VisualRF > Setup Setting Default Description Legacy Laptop Min/Max (sec) 90/360 This timer determines how often to calculate the location for legacy laptop devices.
Setting Default Description l l l RFID Number of Samples 4 Scale Min/Max (sec) 500/2000 Scale Number of Samples 3 After the minimum timer (default is 30 seconds), check to see if the number of data samples received from all APs that hear this client are greater than or equal to the number of samples setting for legacy laptop devices (default of 4 data samples). If so (Yes to question above), then recalculate the client device's location based on the samples received.
To edit the wall settings and select a color for wall types within the VisualRF UI, navigate to the Wall Attenuation Settings section on the VisualRF > Setup page, and select the pencil icon next to the setting that you want to edit. The VisualRF default attenuation values and dB values are described in Table 152. All of these values are global variables that cannot be overridden for individual floor plans. VisualRF uses these values to calculate path loss and client locations.
VisualRF Resource Utilization When tuning the VisualRF server, use the default settings as recommended. If you do change any of these settings, change one at a time and see how the system performs. Each time you restart VisualRF, you will notice a delay before returning to normal processing. This delay can last anywhere from a minute to upwards of 30 minutes, depending on the size of the VisualRF database.
Figure 211 QuickView Preferences Page Illustration (APs preferences selected) l n Usage - select the kbps threshold for normal (green), high (yellow), and excessive (red) n # of Clients per Radio - select the number of number of clients per radio for normal (green), high (yellow), and excessive (red) n % of Uptime for the last 24 hours for normal (green) and excessive (red) n AP Location - specify whether to display green for a good location or red for a suspect location within a floor plan n Rad
l n Usage - select the kbps threshold for normal (green), high (yellow), and excessive (red). n Signal Strength - select the dBm client threshold between excellent and poor n Icon Size - select the size of the client device icon display on the floor plan Overlays - select display type for Heatmap, Speed, Sensor, Voice, and Ch.
Figure 215 QuickView Preferences Page Illustration (Navigation preferences selected) n % of APs Up for the last 24 hours for normal (green) and excessive (red) n Icon Size for campus, building and floor - specify Tiny, Small, Medium, Large, or Huge icons These preferences are stored in the database, so they will be retained across browsers and machines. The remaining sections in this chapter apply to networks, campuses, buildings, and floor plans that have already been set up in VisualRF.
MFG/Model Client Signal Associated AP AP-to-AP Signals (Dynamic Attenuation) Unassociated Client Signal Rogue AP Signal Cisco LWAPP Yes Yes Yes Yes Cisco IOS Yes No No With WLSE Cisco VxWorks Yes No No No Trapeze Yes No No Yes Meru No No No Yes Proxim Yes Yes Yes Yes Symbol Auton.
Figure 216 Drawing a wall 3. To move or resize the wall, select the Draw Walls button in the Edit menu again. The cursor changes to a hand, and the ends of the wall is highlighted. Click and drag the end point handles to change the wall, as shown in Figure 217: Figure 217 Moving and resizing an existing wall n To change the attenuation of a wall, right-click the wall and select the appropriate building material. n To delete a wall, select the wall and press the Delete key.
Figure 218 Surveys and Training menu for a client device To remove a statically trained device, select client, and select the Surveys and Training option. Select Delete button (which will have replaced the Add button) for Static Training. The static locations are automatically saved, so the Save icon (floppy disk) will not appear.
Figure 219 Client Surveys 3. Select the Surveys and Training option. 4. Select the appropriate transmit power for the wireless client. Leave the default to 30mW if you are unsure. 5. Select the Duration or the time that you want to sample the client's signal measurements. Longer durations will increase Path Loss accuracy and location accuracy. 6. Select OK to begin the survey. To display survey locations, select the Display menu and select Surveys.
Client Type Transmit Power 11g PDA 20 mW iPhone 20 mW Desktop 100 mW Cisco Cards 100 mW Adding Regions You can specify regions for areas designated as Wiring Closets and for Location Testing, Location Probability, and Planning. Adding Location Probability Regions Location probability regions are optional regions that can be used to increase the accuracy of device location in VisualRF. VisualRF calculates device locations based on probability.
5. Optionally, you can save the location region as the exterior walls. 100% attenuation can be selected to force VisualRF to only place devices inside of the selected region. No device will ever be placed outside of the probability region when 100% attenuation is selected. 100% attenuation is only recommended for tall buildings where it is extremely unlikely that any user is located outside of the building. No heat map or attenuation grid is calculated for devices outside of the 100% attenuation region.
Figure 222 Provisioning Devices Wired devices that are added to a wired closet are included in any BOM report covering that floor. Viewing Port Status on Deployed Switches Deployed switches on a rack will display the port status as red (down) and green (up) interface icons, which corresponds with the operationally up devices on the APs/Devices > Interfaces list. Planned switches do not display these status indicators in VisualRF.
Fine-Tuning Location Service in VisualRF > Setup There are several options on the VisualRF > Setup page which increase client location accuracy. All of these items will increase the processing requirements for the location service and could negatively impact the overall performance of AirWave. l Grid Size - decreasing the grid size will enable the location to place clients in a small grid which will increase accuracy. You can right-click on a floor plan within a building view and change this setting.
Figure 226 Rectangular Floor Plan AP Deployment Using QuickView to Assess RF Environments QuickView has four distinct views or entry points: client view, access point view, floor plan view, and network, campus, and building view.
Figure 228 QuickView of the selected device You can also access this information from the Clients > Client Detail page by selecting the QuickView thumbnail, located next to the Current Association section of this page as shown in Figure 229: Figure 229 QuickView thumbnail in Clients > Client Detail This view is focused on the wireless user enabling you quick resolution of a user's issues and therefore disables most RF objects by default.
Figure 230 Show Location History A location history player, illustrated in Figure 231, appears at the bottom of the QuickView window. Figure 231 Location History Player Checking Signal Strength to Client Location 1. On a floor plan, locate the Signal Cutoff menu. 2. Select the desired signal level to display, as shown in Figure 232. The heatmap updates immediately.
Figure 233 QuickView Thumbnail in APs/Devices > Monitor page for an AP A fully interactive QuickView display opens below the graphs on the same page (not in a new window).
Field Description Floor Floor number. The decimal place can be used for mezzanine levels. Name Optional name of a floor. (If the name is not changed, it displays the name as Floor [Number] by default.) Size The height and width in feet of the floor plan, including white space. Grid Cell Size The size of the grid cells, in feet. APs The number of access points on the floor. Radios The number of radios associated with access points on the floor.
Figure 235 Network Tree View - Floor 1 highlighted 3. Use the arrows to drill down into the folders to select the Campus, Building, or Floor. Select the folder or floor plan icon to open the view you have selected. The Network Tree View window will remain on the screen until you close it. If you prefer not to use background maps for your campus or building placements, click a background and select AutoArrange to move the campuses, buildings from their placements into an alphabetically-sorted list.
1. Navigate to VisualRF > Floor Plans. 2. Select the Add Campus button located above the floor plan on the top left. The Create New Campus window, illustrated in Figure 236, appears. 3. Enter the following campus information: l Name of the campus l Client Transmit Power - used in auto placement of access points onto floors within this campus. The range is 30mW to 100mW. l Desired Speed (mbps)- used in auto placement of access points onto floors within this campus. The range is 6 to 200 mbps.
Field Description floors each floor is created, but this is the default value for every new floor added to the system. This data element can be imported or exported to external planning tools like Ekahau. It is not currently utilized by AirWave. Attenuation between floors Enter the attenuation loss in decibels between floors. This value can be overridden as each floor is created, but this is the default value for every new floor added to the system.
6. To change building types, navigate to the new building by selecting the Building icon. This opens the Building page. This page is a blank canvas without a background. 7. Right-click on the background of the Building page and select Set Building Type. 8. Select a building type of Rectangular, Circular, Rectangular Prism, or Square. You are now ready to import your floor plan. Importing a Floor Plan The following steps show how to import a floor plan background image file.
l If the floor plan does not require cropping, sizing, or layer control, then click Save and Close to begin provisioning APs or Save and New to upload a new floor plan. l If the floor plan does require cropping, sizing, or layer control, then proceed to the next procedure Floor plans can be added (imported), edited, and deleted. Currently, functionality does not exist to replace a floor plan.
Sizing a Non-CAD Floor Plan You should not have to resize a CAD drawing unless you see nonsensical dimensions. To resize a non-CAD image if you already know the dimensions, follow these steps: 1. Select the Manually Measure Floor button in the Dimensions section. The pointer changes to a cross-hair icon. 2. Locate two points within the floor plan that you know the distance. Most door jams (door openings) are 3 feet. 3.
Figure 240 Entering Floor Info for the Uploaded Floor Plan Image Assigning Optional Planner, Owner, or Installer Information for the Floor Plan Locate the Optional Information section and enter the following information in Table 159: Table 159: Optional Information for the Floor Plan Setting Default Description Owner N/A The owner of the floor (used in diagnostics and alerts). Planner N/A The person in charge of planning the RF layout for the floor.
Provisioning Existing Access Points onto the Floor Plan To provision existing AP in your network onto the floor plan you just uploaded, follow these steps: 1. Navigate to VisualRF > Floor Plans. 2. Select the floor plan you have uploaded using the floor number or name links in the list. 3. Select the Add Deployed Device icon in the Edit menu. A pop-up window list of devices in your AirWave appears, as shown on Figure 242 4. Select whether to navigate by Group or by Folder in the View By field.
1. Select Draw Region from the Edit menu. A new provisioning popup appears as shown in the following figure. Figure 243 Planning Region Drawing and Selection Illustration 2. Draw your polygon as follows: l Left-click to initiate the process. The tool will automatically shade in your provisioning area. l Complete the polygon by double-clicking. 3. Once you have finished drawing the region, enter a name for the region and select a Region Type of Planning, and then click OK. The following image displays.
Table 160: Fields in the Autoprovision APs Window Field Description Device Selection AP Type The type of AP used in this planning region. Radio Section Phy Whether they PHY is set to 11n or no radio. Xmit Transmit power of the APs. Gain Gain of the APs. EIRP EIRP of the APs. Environment A range from 1-4 that best describes whether the environment is related to an office space, cubicles, offices, or concrete. Decimal points are allowed.
Tweaking a Planning Region If the planning layout does not meet your expectations, you can edit by right-clicking within the region to see the following options: l Delete Planned APs in the Region - Deletes only provisioned APs in the region l Reprovision APs - Remove all planned APs inside this region and prompts for new information to replan the region l Delete the Region - Deletes the region and all planned APs l Edit the region - Change the name of the region l Copy the Region to floors above -
Figure 245 Bill of Materials Report Illustration Importing and Exporting in VisualRF Exporting a campus To export a campus from VisualRF so you can import it into another AirWave, follow these steps: 1. Navigate back to the Network view. 2. Right-click the Campus icon. 3. Select Export. An object selection window appears. 4. Select the objects to export and select Export. A File Download window appears. 5. Select Save and save the zipped file to your local hard drive for importation to another AirWave.
This and all subsequent steps use the converted JPG file. The greater the floor plan dimensions, the less clarity the background image provides.
Post Processing Steps 1. Decrease the Location Caching Timer to previous value. 2. Review the VisualRF > Floor Plans page to ensure server is keeping up. Sample Upload Instruction XML File PAGE 351Importing a large number of floor plans can impact performance of the AirWave server. VisualRF must create a thumbnail, provision APs, create attenuation grid, and locate all clients on each imported floor plan. This can cause the VisualRF > Floor Plans page to be unresponsive. Process on Controller 1. On the controller's UI, navigate to the Plan > Building List page. 2. Select the buildings to be exported and select Export. 3.
/var/example/snapshot/b45e7a49-23-2e6d2c.677/background.jpg /snapshot/b423b5-4db0-891a2e0d2c.677/background.jpg 1151 1557 /var/example/snapshot/b45e7a49891af90d2c.677/thumb.jpg /snapshot/b45e7a49-23b5-4db0-891a2c.
Differences between VisualRF and VisualRF Plan Table 161: VisualRF vs.
| Using VisualRF Dell Networking W-AirWave 7.
Index 8 authentication priority 48 802.
D G Dashboard Global Groups Customizing Display 22 with Master Console 260 Deauthenticate Client 241 Global Templates 186 Detected Interfering Devices 144 Google Earth 135, 154, 338 Device Events 35 groups Device OUI score 195 Device Troubleshooting Hint 32 Configuring Group Templates 171 Groups 75, 118 Device Type Setup 61 Changing Multiple Group Configurations 113 devices 119 Comparing 111 adding manually 124 Configuring Basic Group Settings 79 communication settings 55 Configuring Gr
Licenses 135 NTP 84 Location Calculation Timer Settings VisualRF Setup 317 Location Settings VisualRF Setup 316 Logging out 263 Login message, configuring 48 logs ARM Events 143 async_logger 209 audit 34 O Open controller web UI link 240 OUI 195 P pagination records setting, resetting 20 pagination widget, using 21 PCI Compliance Default Credential Compliance 72 config_pusher 209 error_log 209 syslog 33 PCI Requirements 70 Physical Interfaces table 147 planned maintenance mode 151, 153 M Poll Now bu
reports 265 scanning Capacity Planning 277 Client Inventory 279 defining credentials 120 security Client Session 281, 303 auditing PCI compliance 69 Configuration Audit 282 Configuring ACS servers 66 Creating, Running, and Emailing 265 Configuring Group Security Settings 88 Custom 275 configuring group SSIDs and VLANs 92 Defining Custom Reports 268 configuring LDAP 47 Device Summary 283 configuring RADIUS 47 Device Uptime 285 configuring TACACS+ 47 emailing and exporting 304 integrating N
integrating 47 flash graphs 23, 28 Telnet/SSH Timeout 56 Flash Graphs 23 Tempaltes Group SNMP Polling Period 81-82 Cisco IOS 182 templates 172 Groups > Basic 80-81, 83-86, 118 Groups > Cisco WLC Config 99 Adding 173, 187 Groups > Firmware 110 Configuring a Global Template 186 Groups > List 78 Configuring Cisco IOS Templates 182 Groups > MAC ACL 109 Configuring for Groups 171 Groups > Proxim Mesh 107 Global Template Variables 187 Groups > PTMP 107 Variables 187 Groups > Radio 96 Templates
user roles 42 provisioning existing APs 344 creating 42 QuickView 139, 309 VisualRF 42 Removing color 342 users roles 42 creating 40 Sensors 311 Setup page 314 V Terninology 308 Vendor-Specific Device Settings 32 Tree view 336 View Device Credentials link 166 View a floor plan RF environment 335 VisualRF 14 Viewing a wireless user 332 Adding Exterior Walls 324 VisualRF Plan 352 APIs 351 Wired Range 311 Auto-Arrange feature 337 Wiring Closet 329 Auto-Match Planned Devices 347 VisualR
