Cambium Networks XI-N300 Users Manual
August 9, 2011
Release 6.0
Wi-Fi Array
™
XR Series
All rights reserved. This document may not be reproduced or
disclosed in whole or in part by any means without the written
consent of Xirrus, Inc.
Part Number: 800-0022-001
(Revision A)
Trademarks
is a registered trademark of Xirrus, Inc. All other trademarks and brand
names are marks of their respective holders.
Please see Legal Notices, Warnings, Compliance Statements, and Warranty and
License Agreements in “Appendix F: Notices” on page 437.
Xirrus, Inc.
2101 Corporate Center Drive
Thousand Oaks, CA 91320
USA
Tel: 1.805.262.1600
1.800.947.7871 Toll Free in the US
Fax: 1.866.462.3980
www.xirrus.com
Wi-Fi Array
Table of Contents
List of Figures...................................................................................... xi
Introduction ......................................................................................... 1
The Xirrus Family of Products ............................................................................... 1
Nomenclature .................................................................................................... 3
About this User’s Guide .......................................................................................... 4
Organization ...................................................................................................... 4
Notes and Cautions .......................................................................................... 6
Screen Images .................................................................................................... 6
Your User’s Guide as a PDF Document ........................................................ 6
Hyperlinks ......................................................................................................... 6
Why Choose the Xirrus Wi-Fi Array? ................................................................... 6
Wi-Fi Array Product Overview ............................................................................. 7
Enterprise Class Security ................................................................................. 8
Deployment Flexibility .................................................................................... 9
Power over Gigabit Ethernet (PoGE) .................................................... 10
Enterprise Class Management ...................................................................... 10
Key Features and Benefits ..................................................................................... 12
High Capacity and High Performance ........................................................ 12
Extended Coverage ......................................................................................... 12
Non-Overlapping Channels .......................................................................... 13
SDMA Optimization ...................................................................................... 13
Fast Roaming ................................................................................................... 13
Easy Deployment ............................................................................................ 13
Secure Wireless Access .................................................................................. 13
Applications Enablement .............................................................................. 14
Advanced Feature Sets .......................................................................................... 14
Xirrus Advanced RF Performance Manager (RPM) .................................. 14
Xirrus Advanced RF Security Manager (RSM) .......................................... 15
Xirrus Advanced RF Analysis Manager (RAM) ......................................... 16
Installing the Wi-Fi Array ................................................................. 19
Installation Prerequisites ...................................................................................... 19
i
Wi-Fi Array
Optional Network Components ................................................................... 21
Client Requirements ....................................................................................... 21
Planning Your Installation .................................................................................... 22
General Deployment Considerations .......................................................... 22
Coverage and Capacity Planning ................................................................. 24
Placement .................................................................................................. 24
RF Patterns ................................................................................................ 25
Capacity and Cell Sizes ........................................................................... 27
Fine Tuning Cell Sizes ............................................................................. 28
Roaming Considerations ........................................................................ 29
Allocating Channels ................................................................................ 29
Deployment Examples ............................................................................ 32
IEEE 802.11n Deployment Considerations ................................................. 34
MIMO (Multiple-In Multiple-Out) ........................................................ 35
Multiple Data Streams — Spatial Multiplexing ................................... 37
Channel Bonding ..................................................................................... 38
Improved MAC Throughput ................................................................. 39
Short Guard Interval ............................................................................... 39
Obtaining Higher Data Rates ................................................................. 40
802.11n Capacity ...................................................................................... 41
Failover Planning ............................................................................................ 42
Port Failover Protection .......................................................................... 42
Switch Failover Protection ..................................................................... 43
Power Planning ............................................................................................... 44
Power over Gigabit Ethernet ................................................................. 44
Security Planning ............................................................................................ 45
Wireless Encryption ................................................................................ 45
Authentication ......................................................................................... 45
Meeting PCI DSS Standards ................................................................... 46
Meeting FIPS Standards ......................................................................... 46
Port Requirements .......................................................................................... 48
Network Management Planning .................................................................. 51
WDS Planning ................................................................................................. 52
Common Deployment Options .................................................................... 55
Installation Workflow ........................................................................................... 56
Installing Your Wi-Fi Array .................................................................................. 58
Choosing a Location ....................................................................................... 58
ii
Wi-Fi Array
Wiring Considerations ............................................................................ 59
Mounting the Array ....................................................................................... 61
Dismounting the Array .................................................................................. 61
Powering Up the Wi-Fi Array .............................................................................. 62
Array LED Operating Sequences ................................................................. 63
LED Boot Sequence ................................................................................. 63
LED Operation when Array is Running .............................................. 64
Establishing Communication with the Array .................................................... 65
Using the Serial Port ....................................................................................... 65
Using the Ethernet Ports ................................................................................ 65
Starting the WMI ............................................................................................. 66
Logging In ........................................................................................................ 66
Entering the License .............................................................................................. 66
Performing the Express Setup Procedure ........................................................... 68
Procedure for Performing an Express Setup .............................................. 69
The Web Management Interface ................................................... 75
An Overview .......................................................................................................... 76
Structure of the WMI ............................................................................................. 77
User Interface ......................................................................................................... 79
Utility Buttons .......................................................................................... 81
Logging In ............................................................................................................... 83
Applying Configuration Changes ....................................................................... 83
Character Restrictions .................................................................................... 84
Viewing Status on the Wi-Fi Array.................................................. 85
Array Status Windows .......................................................................................... 86
Array Summary .............................................................................................. 86
Content of the Array Summary Window ............................................ 87
Array Information .......................................................................................... 90
Array Configuration ....................................................................................... 91
Admin History ................................................................................................ 92
Network Status Windows ..................................................................................... 92
Network ........................................................................................................... 93
Network Map .................................................................................................. 94
Content of the Network Map Window ................................................ 94
Spanning Tree Status ...................................................................................... 97
iii
Wi-Fi Array
Routing Table .................................................................................................. 98
ARP Table ........................................................................................................ 98
DHCP Leases ................................................................................................... 99
Connection Tracking/NAT ........................................................................... 99
CDP Neighbors ............................................................................................. 100
Network Assurance ...................................................................................... 101
RF Monitor Windows .......................................................................................... 102
IAPs ................................................................................................................. 103
Spectrum Analyzer ...................................................................................... 104
Intrusion Detection ...................................................................................... 107
Channel History ............................................................................................ 109
Station Status Windows ...................................................................................... 111
Stations ........................................................................................................... 112
Location Map ................................................................................................. 113
RSSI ................................................................................................................. 118
Signal-to-Noise Ratio (SNR) ........................................................................ 120
Noise Floor ..................................................................................................... 122
Max by IAP .................................................................................................... 124
Station Assurance ......................................................................................... 125
Statistics Windows ............................................................................................... 126
IAP Statistics Summary ................................................................................ 126
Per-IAP Statistics ........................................................................................... 127
Network Statistics ......................................................................................... 129
VLAN Statistics ............................................................................................. 130
WDS Statistics ................................................................................................ 131
Filter Statistics ............................................................................................... 132
Station Statistics ............................................................................................ 132
Per-Station Statistics ..................................................................................... 133
System Log Window ........................................................................................... 134
IDS Event Log Window ...................................................................................... 135
Configuring the Wi-Fi Array .......................................................... 137
Express Setup ........................................................................................................ 139
Network ................................................................................................................. 146
Network Interfaces ...................................................................................... 147
DNS Settings .................................................................................................. 153
CDP Settings .................................................................................................. 154
iv
Wi-Fi Array
Services .................................................................................................................. 156
Time Settings (NTP) ..................................................................................... 157
NetFlow .......................................................................................................... 159
Wi-Fi Tag ....................................................................................................... 161
System Log ..................................................................................................... 162
SNMP .............................................................................................................. 165
DHCP Server ................................................................................................. 168
VLANs ................................................................................................................... 171
Understanding Virtual Tunnels .......................................................... 171
VLAN Management ..................................................................................... 173
Security .................................................................................................................. 175
Understanding Security ........................................................................ 176
Certificates and Connecting Securely to the WMI ............................ 179
Using the Array’s Default Certificate ................................................. 180
Using an External Certificate Authority ............................................. 181
Admin Management .................................................................................... 181
Admin Privileges .......................................................................................... 183
Admin RADIUS ............................................................................................ 185
About Creating Admin Accounts on the RADIUS Server ............. 185
Management Control ................................................................................... 188
Access Control List ....................................................................................... 195
Global Settings .............................................................................................. 197
External Radius ............................................................................................. 200
About Creating User Accounts on the RADIUS Server .................. 201
Internal Radius .............................................................................................. 204
Rogue Control List ........................................................................................ 206
SSIDs ...................................................................................................................... 208
Understanding SSIDs ............................................................................ 209
Understanding QoS Priority on the Wi-Fi Array .............................. 210
SSID Management ........................................................................................ 213
SSID List (top of page) .......................................................................... 214
SSID Limits ............................................................................................. 218
Web Page Redirect Configuration Settings ....................................... 219
WPA Configuration Settings .............................................................. 223
RADIUS Configuration Settings ......................................................... 224
Active IAPs .................................................................................................... 225
Per-SSID Access Control List ...................................................................... 226
v
Wi-Fi Array
Groups ................................................................................................................... 228
Understanding Groups ......................................................................... 228
Using Groups ......................................................................................... 229
Group Management ..................................................................................... 230
Group Limits .......................................................................................... 232
IAPs ........................................................................................................................ 234
Understanding Fast Roaming .............................................................. 235
IAP Settings ................................................................................................... 237
Global Settings (IAP) ................................................................................... 243
Beacon Configuration ........................................................................... 245
Station Management ............................................................................. 245
Advanced Traffic Optimization .......................................................... 246
Global Settings .11a ...................................................................................... 250
Global Settings .11bg .................................................................................... 254
Global Settings .11n ...................................................................................... 259
Advanced RF Settings .................................................................................. 262
About Standby Mode ............................................................................ 262
RF Monitor .............................................................................................. 263
RF Resilience .......................................................................................... 263
RF Power & Sensitivity ......................................................................... 264
RF Spectrum Management ................................................................... 265
Station Assurance .................................................................................. 267
Intrusion Detection ....................................................................................... 270
DoS Attacks ............................................................................................ 271
Impersonation Attacks .......................................................................... 272
About Blocking Rogue APs .................................................................. 273
RF Intrusion Detection and Auto Block Mode .................................. 273
DoS Attack Detection Settings ............................................................. 274
Impersonation Detection Settings ....................................................... 275
LED Settings .................................................................................................. 276
WDS ....................................................................................................................... 278
About Configuring WDS Links ........................................................... 278
Long Distance Links .............................................................................. 279
WDS Client Links .......................................................................................... 280
Filters ..................................................................................................................... 283
Filter Lists ...................................................................................................... 284
Filter Management ....................................................................................... 286
vi
Wi-Fi Array
Clusters .................................................................................................................. 289
Cluster Definition ........................................................................................ 290
Cluster Management ................................................................................... 291
Cluster Operation ........................................................................................ 292
Using Tools on the Wi-Fi Array..................................................... 295
System Tools ......................................................................................................... 296
About Licensing and Upgrades ........................................................... 297
System ..................................................................................................... 298
Automatic Updates from Remote Image or Configuration File .... 299
Configuration ......................................................................................... 300
Diagnostics ............................................................................................. 302
Web Page Redirect ................................................................................. 304
Network Tools ........................................................................................ 305
Progress and Status Frames ................................................................. 307
CLI ......................................................................................................................... 308
Options .................................................................................................................. 309
Logout .................................................................................................................... 312
The Command Line Interface...................................................... 313
Establishing a Secure Shell (SSH) Connection ................................................. 313
Getting Started with the CLI .............................................................................. 315
Inputting Commands ................................................................................... 315
Getting Help .................................................................................................. 315
Top Level Commands ......................................................................................... 317
Root Command Prompt ............................................................................... 317
configure Commands ................................................................................... 318
show Commands .......................................................................................... 321
statistics Commands ..................................................................................... 324
Configuration Commands .................................................................................. 326
acl .................................................................................................................... 326
admin .............................................................................................................. 327
cdp ................................................................................................................... 328
clear ................................................................................................................. 329
cluster ............................................................................................................. 330
contact-info .................................................................................................... 331
date-time ........................................................................................................ 332
vii
Wi-Fi Array
dhcp-server .................................................................................................... 333
dns ................................................................................................................... 334
file .................................................................................................................... 335
filter ................................................................................................................. 338
group .............................................................................................................. 340
hostname ........................................................................................................ 340
interface .......................................................................................................... 341
load ................................................................................................................. 342
location ........................................................................................................... 342
management .................................................................................................. 343
more ................................................................................................................ 344
netflow ............................................................................................................ 345
no ..................................................................................................................... 346
quit .................................................................................................................. 348
radius-server .................................................................................................. 348
reboot .............................................................................................................. 349
reset ................................................................................................................. 349
restore ............................................................................................................. 350
run-tests .......................................................................................................... 351
security ........................................................................................................... 353
snmp ............................................................................................................... 354
ssid .................................................................................................................. 355
syslog .............................................................................................................. 356
uptime ............................................................................................................. 357
vlan .................................................................................................................. 358
wifi-tag ........................................................................................................... 359
Sample Configuration Tasks .............................................................................. 360
Configuring a Simple Open Global SSID .................................................. 361
Configuring a Global SSID using WPA-PEAP ......................................... 362
Configuring an SSID-Specific SSID using WPA-PEAP ........................... 363
Enabling Global IAPs ................................................................................... 364
Disabling Global IAPs .................................................................................. 365
Enabling a Specific IAP ................................................................................ 366
Disabling a Specific IAP ............................................................................... 367
Setting Cell Size Auto-Configuration for All IAPs .................................. 368
Setting the Cell Size for All IAPs ................................................................ 369
Setting the Cell Size for a Specific IAP ....................................................... 370
viii
Wi-Fi Array
Configuring VLANs on an Open SSID ...................................................... 371
Configuring Radio Assurance Mode (Loopback Tests) .......................... 372
Appendices..................................................................................... 375
Appendix A: Servicing the Wi-Fi Array ............................................................. 377
Removing the Access Panel ................................................................................ 379
Reinstalling the Access Panel ............................................................................. 382
Replacing the FLASH Memory Module ........................................................... 384
Replacing the Main System Memory ................................................................ 386
Replacing the Integrated Access Point Radio Module ................................... 388
Replacing the Power Supply Module ............................................................... 391
Appendix B: Quick Reference Guide ............................................................... 393
Factory Default Settings ...................................................................................... 393
Host Name ..................................................................................................... 393
Network Interfaces ....................................................................................... 393
Serial ........................................................................................................ 393
Gigabit 1 and Gigabit 2 ......................................................................... 394
Fast Ethernet ........................................................................................... 394
Server Settings ............................................................................................... 395
NTP .......................................................................................................... 395
Syslog ...................................................................................................... 395
SNMP ...................................................................................................... 396
DHCP .............................................................................................................. 396
Default SSID .................................................................................................. 397
Security .......................................................................................................... 397
Global Settings - Encryption ............................................................... 397
External RADIUS (Global) .................................................................. 398
Internal RADIUS .................................................................................... 399
Administrator Account and Password ...................................................... 399
Management .................................................................................................. 399
Keyboard Shortcuts ............................................................................................. 399
Appendix C: Technical Support ........................................................................ 403
General Hints and Tips ....................................................................................... 403
Frequently Asked Questions .............................................................................. 404
Multiple SSIDs ............................................................................................... 404
Security ........................................................................................................... 406
ix
Wi-Fi Array
VLAN Support .............................................................................................. 410
Array Monitor and Radio Assurance Capabilities .......................................... 412
Enabling Monitoring on the Array ..................................................... 412
How Monitoring Works ............................................................................... 412
Radio Assurance ........................................................................................... 413
Radio Assurance Options ..................................................................... 414
RADIUS Vendor Specific Attributes (VSAs) for Xirrus ................................. 415
Upgrading the Array via CLI ............................................................................. 418
Sample Output for the Upgrade Procedure: ............................................. 419
Contact Information ............................................................................................ 423
Appendix D: Implementing PCI DSS ............................................................... 425
Payment Card Industry Data Security Standard Overview .......................... 425
PCI DSS and Wireless .......................................................................................... 426
The Xirrus Array PCI Compliance Configuration .......................................... 427
The pci-audit Command ..................................................................................... 428
Additional Resources .......................................................................................... 429
Appendix E: Implementing FIPS Security ....................................................... 431
Securing the Array Physically ............................................................................ 431
Operator Required Actions .................................................................. 431
To implement FIPS 140-2, Level 2 using WMI ................................................. 434
To implement FIPS 140-2, Level 2 using CLI: .................................................. 436
To check if an Array is in FIPS mode: ............................................................... 436
Appendix F: Notices ........................................................................................... 437
Notices ................................................................................................................... 437
EU Directive 1999/5/EC Compliance Information ........................................ 440
Compliance Information (Non-EU) ................................................................... 447
Safety Warnings ................................................................................................... 448
Translated Safety Warnings ............................................................................... 449
Software License and Product Warranty Agreement ..................................... 450
Hardware Warranty Agreement ....................................................................... 456
Glossary of Terms.......................................................................... 459
Index................................................................................................ 471
x
Wi-Fi Array
List of Figures
Figure 1. Xirrus Arrays: XR Series (on left) and XN Series................................... 1
Figure 2. The Xirrus Management System .............................................................. 2
Figure 3. Wi-Fi Array (XR Series) ............................................................................. 8
Figure 4. Wireless Coverage Patterns ...................................................................... 9
Figure 5. WMI: Array Status.................................................................................... 11
Figure 6. Layout of IAPs (XR4830) ......................................................................... 12
Figure 7. Wall Thickness Considerations .............................................................. 23
Figure 8. Unit Placement.......................................................................................... 24
Figure 9. Full (Normal) Coverage........................................................................... 25
Figure 10. Adjusting RF Patterns.............................................................................. 26
Figure 11. Custom Coverage ..................................................................................... 26
Figure 12. Connection Rate vs. Distance.................................................................. 27
Figure 13. Transmit Power......................................................................................... 28
Figure 14. Overlapping Cells..................................................................................... 29
Figure 15. Allocating Channels Manually............................................................... 31
Figure 16. Deployment Scenario (54 Mbps) — Per Sector...................................... 32
Figure 17. Deployment Scenario (36 Mbps) — Per Sector...................................... 32
Figure 18. Deployment Scenario (18 Mbps) — Per Sector...................................... 33
Figure 19. Classic 802.11 Signal Transmission........................................................ 35
Figure 20. MIMO Signal Processing......................................................................... 36
Figure 21. Spatial Multiplexing................................................................................. 37
Figure 22. Channel Bonding...................................................................................... 38
Figure 23. MAC Throughput Improvements.......................................................... 39
Figure 24. Computing 802.11n Data Rates .............................................................. 40
Figure 25. 802.11n Increases Capacity...................................................................... 41
Figure 26. Port Failover Protection........................................................................... 42
Figure 27. Switch Failover Protection ...................................................................... 43
Figure 28. Port Requirements for XMS .................................................................... 48
Figure 29. WDS Link................................................................................................... 52
Figure 30. A Multiple Hop WDS Connection ......................................................... 53
Figure 31. WDS Failover Protection ......................................................................... 53
Figure 32. Installation Workflow.............................................................................. 56
Figure 33. Array Placement ....................................................................................... 58
Figure 34. LED Locations........................................................................................... 62
List of Figures xi
Wi-Fi Array
Figure 35. Network Interface Ports........................................................................... 65
Figure 36. Express Setup............................................................................................ 68
Figure 37. Web Management Interface.................................................................... 76
Figure 38. WMI: Frames............................................................................................. 79
Figure 39. Major Menu Sections Collapsed (on left).............................................. 80
Figure 40. WMI: Utility Buttons................................................................................ 81
Figure 41. Feedback Form.......................................................................................... 82
Figure 42. Logging In to the Wi-Fi Array ................................................................ 83
Figure 43. Array Summary ........................................................................................ 86
Figure 44. Disabled IAP (Partial View).................................................................... 88
Figure 45. IAP Cells .................................................................................................... 89
Figure 46. Array Information .................................................................................... 90
Figure 47. Show Configuration................................................................................. 91
Figure 48. Admin Login History............................................................................... 92
Figure 49. Network Settings ...................................................................................... 93
Figure 50. Network Map............................................................................................ 94
Figure 51. Spanning Tree Status................................................................................ 97
Figure 52. Routing Table............................................................................................ 98
Figure 53. ARP Table .................................................................................................. 98
Figure 54. DHCP Leases............................................................................................. 99
Figure 55. Connection Tracking................................................................................ 99
Figure 56. CDP Neighbors....................................................................................... 100
Figure 57. Network Assurance................................................................................ 101
Figure 58. RF Monitor — IAPs ................................................................................. 103
Figure 59. RF Monitor — IAPs ................................................................................. 103
Figure 60. RF Spectrum Analyzer........................................................................... 105
Figure 61. Intrusion Detection/Rogue AP List..................................................... 107
Figure 62. RF Monitor — Channel History............................................................. 109
Figure 63. RF Monitor — Channel History (Rotated) ........................................... 110
Figure 64. RF Monitor — Channel History (Text) ................................................. 110
Figure 65. Stations..................................................................................................... 112
Figure 66. Location Map........................................................................................... 113
Figure 67. Controls for Location Map.................................................................... 115
Figure 68. Minimizing stations................................................................................ 116
Figure 69. Station RSSI Values ............................................................................... 118
Figure 70. Station RSSI Values — Colorized Graphical View ............................ 119
Figure 71. Station Signal-to-Noise Ratio Values .................................................. 120
xii List of Figures
Wi-Fi Array
Figure 72. Station SNR Values — Colorized Graphical View ............................. 121
Figure 73. Station Noise Floor Values ................................................................... 122
Figure 74. Station Noise Floor Values — Colorized Graphical View ................ 123
Figure 75. Max by IAP ............................................................................................. 124
Figure 76. Station Assurance ................................................................................... 125
Figure 77. IAP Statistics Summary Page................................................................ 127
Figure 78. Individual IAP Statistics Page ............................................................. 128
Figure 79. Network Statistics................................................................................... 129
Figure 80. VLAN Statistics....................................................................................... 130
Figure 81. WDS Statistics ......................................................................................... 131
Figure 82. Filter Statistics ......................................................................................... 132
Figure 83. Station Statistics ...................................................................................... 132
Figure 84. Individual Station Statistics Page......................................................... 133
Figure 85. System Log (Alert Level Highlighted) ................................................ 134
Figure 86. IDS Event Log ........................................................................................ 135
Figure 87. WMI: Express Setup............................................................................... 139
Figure 88. Network Interfaces................................................................................. 146
Figure 89. Network Settings .................................................................................... 147
Figure 90. Port Modes (a-b) ..................................................................................... 149
Figure 91. Port Modes (c-d) ..................................................................................... 150
Figure 92. Port Modes (e-f) ...................................................................................... 151
Figure 93. DNS Settings............................................................................................ 153
Figure 94. CDP Settings............................................................................................ 154
Figure 95. Services..................................................................................................... 156
Figure 96. Time Settings (Manual Time)................................................................ 157
Figure 97. Time Settings (NTP Time Enabled)...................................................... 158
Figure 98. NetFlow.................................................................................................... 160
Figure 99. Wi-Fi Tag.................................................................................................. 161
Figure 100. System Log .............................................................................................. 162
Figure 101. SNMP ....................................................................................................... 165
Figure 102. DHCP Management............................................................................... 168
Figure 103. VLANs...................................................................................................... 171
Figure 104. VLAN Management............................................................................... 173
Figure 105. Security..................................................................................................... 175
Figure 106. Import Xirrus Certificate Authority..................................................... 180
Figure 107. Admin Management .............................................................................. 181
Figure 108. Admin Privileges.................................................................................... 183
List of Figures xiii
Wi-Fi Array
Figure 109. Admin RADIUS...................................................................................... 186
Figure 110. Management Control ............................................................................. 188
Figure 111. Pre-login Banner ..................................................................................... 189
Figure 112. Access Control List................................................................................. 195
Figure 113. Global Settings (Security) ...................................................................... 197
Figure 114. External RADIUS Server ....................................................................... 200
Figure 115. Internal RADIUS Server ........................................................................ 204
Figure 116. Rogue Control List ................................................................................. 206
Figure 117. SSIDs......................................................................................................... 208
Figure 118. Four Traffic Classes................................................................................ 210
Figure 119. SSID Management.................................................................................. 213
Figure 120. SSID Management.................................................................................. 217
Figure 121. WPR Internal Splash Page Fields (SSID Management)..................... 220
Figure 122. Customizing an Internal Login or Splash Page.................................. 223
Figure 123. Setting Active IAPs per SSID ................................................................ 225
Figure 124. Per-SSID Access Control List................................................................ 226
Figure 125. Groups...................................................................................................... 228
Figure 126. Group Management ............................................................................... 230
Figure 127. IAPs........................................................................................................... 234
Figure 128. Source of Channel Setting ..................................................................... 235
Figure 129. IAP Settings ............................................................................................. 237
Figure 130. Global Settings (IAPs)............................................................................ 243
Figure 131. Global Settings .11a ................................................................................ 250
Figure 132. Global Settings .11bg.............................................................................. 254
Figure 133. Global Settings .11n................................................................................ 259
Figure 134. Advanced RF Settings............................................................................ 262
Figure 135. Station Assurance (Advanced RF Settings) ........................................ 268
Figure 136. Intrusion Detection Settings.................................................................. 270
Figure 137. LED Settings............................................................................................ 276
Figure 138. WDS.......................................................................................................... 278
Figure 139. .Configuring a WDS Link...................................................................... 279
Figure 140. WDS Client Links ................................................................................... 280
Figure 141. Filters........................................................................................................ 283
Figure 142. Filter Lists ................................................................................................ 284
Figure 143. Filter Management ................................................................................ 286
Figure 144. Clusters .................................................................................................... 289
Figure 145. Cluster Definition ................................................................................... 290
xiv List of Figures
Wi-Fi Array
Figure 146. Cluster Management.............................................................................. 291
Figure 147. Cluster Mode Operation........................................................................ 292
Figure 148. Cluster Mode Activation ....................................................................... 292
Figure 149. Viewing Statistics in Cluster Mode...................................................... 293
Figure 150. System Tools............................................................................................ 296
Figure 151. Saving the Diagnostic Log..................................................................... 303
Figure 152. Managing WPR Splash/Login page files............................................ 304
Figure 153. System Command (Ping)....................................................................... 305
Figure 154. Radius Ping Command.......................................................................... 305
Figure 155. Radius Ping Output................................................................................ 306
Figure 156. CLI Window............................................................................................ 308
Figure 157. WMI Display Options............................................................................ 309
Figure 158. iPhone Style Option................................................................................ 310
Figure 159. Login Window ........................................................................................ 312
Figure 160. Logging In................................................................................................ 314
Figure 161. Help Window.......................................................................................... 315
Figure 162. Full Help .................................................................................................. 316
Figure 163. Partial Help.............................................................................................. 316
Figure 164. Configuring a Simple Open Global SSID............................................ 361
Figure 165. Configuring a Global SSID using WPA-PEAP................................... 362
Figure 166. Configuring an SSID-Specific SSID using WPA-PEAP..................... 363
Figure 167. Enabling Global IAPs............................................................................. 364
Figure 168. Disabling Global IAPs............................................................................ 365
Figure 169. Enabling a Specific IAP.......................................................................... 366
Figure 170. Disabling a Specific IAP......................................................................... 367
Figure 171. Setting the Cell Size for All IAPs.......................................................... 368
Figure 172. Setting the Cell Size for All IAPs.......................................................... 369
Figure 173. Setting the Cell Size for a Specific IAP ................................................ 370
Figure 174. Configuring VLANs on an Open SSID................................................ 371
Figure 175. Configuring Radio Assurance Mode (Loopback Testing)................ 373
Figure 176. Disconnecting Power from the Array.................................................. 377
Figure 177. Removing the Access Panel Screws..................................................... 379
Figure 178. Removing the Access Panel .................................................................. 380
Figure 179. Disconnecting the Power Supply and Fan.......................................... 380
Figure 180. Reconnecting the Fan and Power Supply ........................................... 382
Figure 181. Reinstalling the Access Panel................................................................ 382
Figure 182. Removing the FLASH Memory Module............................................. 384
List of Figures xv
Wi-Fi Array
Figure 183. Removing the DIMM Memory Module .............................................. 386
Figure 184. Removing the Chassis Cover Screws................................................... 388
Figure 185. Removing the Chassis Cover................................................................ 388
Figure 186. Lifting the Integrated Access Point Module....................................... 389
Figure 187. Disconnect the Integrated Access Point Module ............................... 389
Figure 188. Installing a New Access Panel (with Power Supply)........................ 391
Figure 189. Sample output of pci-audit command................................................. 429
Figure 190. Tamper-evident seal appearance ......................................................... 432
Figure 191. Tamper-evident seal locations for XN4 indicated by arrows........... 432
Figure 192. Two tamper-evident seals on seam of XN8/12/16 ........................... 433
Figure 193. Six tamper-evident seals on mounting plate - XN8/12/16.............. 433
Figure 194. Apply the security strap through locking tab as shown................... 434
Figure 195. Security - Management Control Window.......................................... 435
xvi List of Figures
Wi-Fi Array
Introduction
These topics introduce the Xirrus Wi-Fi Array, including an overview of its key
features and benefits, and a detailed listing of the product’s physical,
environmental, technology and regulatory specifications.
“The Xirrus Family of Products” on page 1.
“About this User’s Guide” on page 4.
“Why Choose the Xirrus Wi-Fi Array?” on page 6.
“Wi-Fi Array Product Overview” on page 7.
“Key Features and Benefits” on page 12.
“Advanced Feature Sets” on page 14.
The Xirrus Family of Products
Figure 1. Xirrus Arrays: XR Series (on left) and XN Series
The Xirrus family of products includes the following:
The XR Series of Xirrus Wi-Fi Arrays
The newest Xirrus Wi-Fi Arrays have been completely redesigned with
state of the art components to provide increased bandwidth per radio,
additional radios, and integrated switching capacity of up to 10 Gbps.
The radios support IEEE802.11 a, b, g, and n clients, and feature the
capacity and performance needed to replace switched Ethernet to the
desktop.
Introduction 1
Wi-Fi Array
The XN Series of Xirrus Wi-Fi Arrays (XN16 / XN12 / XN8 / XN4)
The Xirrus Wi-Fi Arrays have the speed and reach of IEEE 802.11n
technology. The XN Series of Arrays feature the capacity and
performance needed to replace switched Ethernet to the desktop.
The XN16 has 16 IAPs, the XN12 has 12 IAPs, the XN8 has 8 IAPs, and the
XN4 has 4 IAPs. For detailed information on the features and usage of the
XN Series, please see the Xirrus Wi-Fi Array User’s Guide, Part Number:
800-0006-001.
Xirrus Management System (XMS)
XMS is used for managing large Array deployments from a centralized
Web-based interface. The XMS server is available pre-installed on the
Xirrus XM-33xx-CC Management Appliance series, or as a software
package (XA-3300-CC) to be installed on your own server hardware.
Figure 2 illustrates the elements of the Xirrus Management System. Users
start the XMS client simply by entering the URL of the XMS server on a
web browser. The XMS server manages a number of Wi-Fi Arrays via
SNMP.
Figure 2. The Xirrus Management System
2 Introduction
Wi-Fi Array
If you need detailed information about this product, refer to the XMS
User’s Guide, part number 800-0007-001.
Xirrus Power over Gigabit Ethernet (PoGE)
The PoGE modules eliminate the need for running separate power
cabling. Additionally, an available eight port module provides
distributed power to multiple Arrays, facilitating backup power when
connected via a UPS.
Nomenclature
Throughout this User’s Guide, the Xirrus Wi-Fi Array is also referred to as simply
the Array. In some instances, the terms product and unit are also used. When
discussing specific products from the Xirrus family, the product name is used (for
example, XR4830). The Wi-Fi Array’s operating system is referred to as the
ArrayOS. The Web Management Interface for browser-based management of the
Array is referred to as WMI.
The XR Series Arrays have very flexible radio capabilities — each of the radios
may be independently configured to support IEEE802.11a, 11b, 11g, or 11n clients
or a combination of client types. One radio is typically assigned as the RF monitor
radio, supporting intrusion detection and prevention, self-monitoring, and other
services. Radios support both 2.4GHz and 5 GHz, and are named iap1, iap2, ...
iapn.
The Xirrus Management System is referred to as XMS. The Power over Gigabit
Ethernet system may be referred to as PoGE.
Introduction 3
Wi-Fi Array
About this User’s Guide
This User’s Guide provides detailed information and procedures that will enable
wireless network administrators to install, configure and manage the Wi-Fi Array
so that end users can take full advantage of the product’s features and
functionality without technical assistance.
Organization
Topics and procedures are organized by function under the following chapter
headings:
Introduction
Provides a brief introduction to wireless technology, an overview of the
product, including its key features and benefits, and presents the product
specifications.
Installing the Wi-Fi Array
Defines prerequisites for deploying and installing the Array and provides
instructions to help you plan and complete a successful installation.
The Web Management Interface
Offers an overview of the product’s embedded Web Management
Interface, including its content and structure. It emphasizes what you
need to do to ensure that any configuration changes you make are
applied, and provides a list of restricted characters. It also includes
instructions for logging in to the Array with your Web browser.
Viewing Status on the Wi-Fi Array
Describes the status and statistics displays available on the Array using
its embedded Web Management Interface.
Configuring the Wi-Fi Array
Contains procedures for configuring the Array using its embedded Web
Management Interface.
Using Tools on the Wi-Fi Array
Contains procedures for using utility tools provided in the Web
Management Interface. It includes procedures for upgrading the system
4 Introduction
Wi-Fi Array
firmware, uploading and downloading configurations and other files,
using diagnostic tools, and resetting the Array to its factory defaults.
The Command Line Interface
Includes the commands and the command structure used by the Wi-Fi
Array’s Command Line Interface (CLI), and provides a procedure for
establishing a Telnet connection to the Array. This chapter also includes
some sample key configuration tasks using the CLI.
Appendix A: Servicing the Wi-Fi Array
Contains procedures for servicing the Array, including the removal and
reinstallation of major hardware components.
Appendix B: Quick Reference Guide
Contains the product’s factory default settings.
Appendix C: Technical Support
Offers guidance to resolve technical issues, including general hints and
tips to enhance your product experience, and a procedure for isolating
problems within an Array-enabled wireless network. Also includes
Frequently Asked Questions (FAQs) and Xirrus contact information.
Appendix D: Implementing PCI DSS
Discusses meeting PCI DSS security standards with the Array.
Appendix E: Implementing FIPS Security
Discusses meeting FIPS security standards with the Array.
Appendix F: Notices
Contains the legal notices, licensing, and compliance statements for the
Array. Please read this section carefully.
Glossary of Terms
Provides an explanation of terms directly related to Xirrus product
technology, organized alphabetically.
Index
The index is a valuable information search tool. Use the index to locate
specific topics discussed in this User’s Guide. Simply click on any page
number in the index to jump to the referenced topic.
Introduction 5
Notes and Cautions
The following symbols are used throughout this User’s Guide:
Wi-Fi Array
!
Screen Images
Some screen images of the Web Management Interface have been modified for
clarity. For example, an image may have been cropped to highlight a specific area
of the screen, and/or sample data may be included in some fields.
Your User’s Guide as a PDF Document
This User’s Guide is also made available as a secure PDF (Portable Document
Format) file and can be viewed using the Adobe® Acrobat Reader® product. It
cannot be edited or modified. If you don’t have Acrobat Reader, you can
download it free-of-charge from: http://www.adobe.com.
Hyperlinks
If you click on body text that appears in the color TEAL (with the exception of
headings or notes) the embedded hyperlink within the text will immediately take
you to the referenced destination. All internal and external cross-references,
including page numbers within the List of Figures and the Index, have associated
hyperlinks. After “jumping” to a referenced topic, if you want to return to the
previous page (reference source), simply click on Acrobat’s previous page button.
This symbol is used for general notes that provide useful supplemental
information.
This symbol is used for cautions. Cautions provide critical information that
may adversely affect the performance of the product.
Why Choose the Xirrus Wi-Fi Array?
The deployment of Wi-Fi is becoming increasingly common as businesses strive
for greater flexibility in the workplace and the need for employee mobility rises.
The only requirements for an effective wireless deployment are a power source, a
couple of screws, and a little imagination.
6 Introduction
Wi-Fi Array
Wi-Fi is also fully compatible with standard Ethernet protocols, so connectivity
with existing wired infrastructure is transparent to users — they can still access
and use the same applications and network services that they use when plugged
into the company’s wired LAN (it’s only the plug that no longer exists).
Wi-Fi has come a long way in the past few years and now offers the performance,
reliability and security that Enterprise customers have come to expect from their
networks. The technology is being driven by four major IEEE standards:
802.11a
Operates in the 5 GHz range with a maximum speed of 54 Mbps.
802.11b
Operates in the 2.4 GHz range with a maximum speed of 11 Mbps.
802.11g
Supports a higher transmission speed of 54 Mbps in the 2.4 GHz range
and is backwards compatible with 802.11b.
802.11n
Uses multiple antennas per radio to boost transmission speed as high as
450Mbps, increasing throughput, range, and maximum number of users.
802.11n is backwards compatible with 802.11a/b/g.
Whether you have just a handful of users or thousands of users, wireless has the
scalability and flexibility to serve your needs.
Wi-Fi Array Product Overview
Part of the family of Xirrus products, the Wi-Fi Array is a high capacity, multimode device designed for the Enterprise market, with twice the range and much
higher capacity than competitive wireless products.
Introduction 7
Wi-Fi Array
Figure 3. Wi-Fi Array (XR Series)
The Wi-Fi Array (regardless of the product model) is Wi-Fi® compliant and
simultaneously supports 802.11a, 802.11b, 802.11g, and 802.11n clients. Integrated
switching and active enterprise class features such as VLAN support and
multiple SSID capability enable robust network compatibility and a high level of
scalability and system control. The optional Xirrus Management System (XMS)
allows global management of hundreds of Arrays from a central location.
Multiple versions of the Array with different numbers of Integrated Access Points
(IAPs) support a variety of deployment applications.
Enterprise Class Security
The latest and most effective wireless encryption security standards, including
WPA (Wi-Fi Protected Access) and WPA2 with 802.11i AES (Advanced
Encryption Standard) are available on the Wi-Fi Array. In addition, the use of an
embedded RADIUS server (or 802.1x with an external RADIUS server) ensures
user authentication — multiple Arrays can authenticate to the optional XMS,
ensuring only authorized Arrays become part of the wireless network. With the
Xirrus Advanced Feature Sets, intrusion detection and prevention, site
monitoring, and RF spectrum analysis are performed in the background by the
Array automatically.
8 Introduction
Wi-Fi Array
Deployment Flexibility
Xirrus’ unique multi-radio architecture generates 360 degrees of sectored highgain 802.11a/b/g/n coverage that provides extended range and the highest
possible data rates for a large volume of clients. Each sector can be adjusted
automatically or manually, creating a pattern of wireless coverage perfectly
tailored to individual customer needs. For example:
outside wall
Figure 4. Wireless Coverage Patterns
Figure 4 depicts the following two scenarios:
Full pattern coverage
All radios are activated with coverage spanning 360 degrees. If within
range, clients will always receive coverage regardless of their geographic
position relative to the Array.
Partial pattern coverage
If desired, the Wi-Fi Array can be deployed close to an exterior wall. In
this case, half of all available radios have been deactivated to prevent
redundant signals from “bleeding” beyond the site’s perimeter wall. This
configuration may also be used in those cases where you want to restrict
wireless coverage to selected areas of the building’s interior.
Introduction 9
Wi-Fi Array
Power over Gigabit Ethernet (PoGE)
The Xirrus Power over Gigabit Ethernet modules provide power to your Arrays
over the same Cat 5e or Cat 6 cable used for data, eliminating the need to run
power cables and provide an AC power outlet in proximity to each unit. Managed
modules provide the ability to control power using XMS.
Enterprise Class Management
The Wi-Fi Array can be configured with its default RF settings, or the RF settings
can be customized using the Array’s embedded Web Management Interface
(WMI). The WMI enables easy configuration and control from a graphical
console, along with a full compliment of troubleshooting tools and statistics.
10 Introduction
Loading...