Cambium Networks XR620 User Manual

USER’S GUIDE
Wireless Arrays and Access Points
XR Series
Release 6.7
High Performance Wireless Networks
Wireless Arrays
and Access Points
XR Series
All rights reserved. This document may not be reproduced or
disclosed in whole or in part by any means without the written
consent of Xirrus, Inc.
Part Number: 800-0022-001
(Revision J)
Trademarks
is a registered trademark of Xirrus, Inc. All other trademarks and brand
names are marks of their respective holders.
Please see Legal Notices, Warnings, Compliance Statements, and Warranty and License Agreements in “Appendix C: Notices (Arrays except XR-500/600 and
Models Ending in H)” on page 501.
Xirrus, Inc. 2101 Corporate Center Drive Thousand Oaks, CA 91320 USA
Tel: 1.805.262.1600
1.800.947.7871 Toll Free in the US
Fax: 1.866.462.3980
www.xirrus.com
Wireless Array
Table of Contents
List of Figures.................................................................................... xiii
Introduction ......................................................................................... 1
The Xirrus Family of Products ............................................................................... 1
Nomenclature .................................................................................................... 2
Why Choose the Xirrus Wireless Array? .............................................................. 3
Wireless Array Product Overview ........................................................................ 4
XR Wireless Array Product Family ................................................................ 6
XR-500 Series Access Points ..................................................................... 6
XR-600 Series Access Points ..................................................................... 7
XR-1000 ....................................................................................................... 8
XR-2000 Series Arrays ............................................................................... 9
XR-4000 Series Arrays ............................................................................. 10
XR-6000 Series Arrays ............................................................................. 11
Enterprise Class Security ............................................................................... 12
Deployment Flexibility .................................................................................. 12
Power over Gigabit Ethernet (PoGE) .................................................... 13
Enterprise Class Management ...................................................................... 14
Key Features and Benefits ..................................................................................... 15
High Capacity and High Performance ........................................................ 15
Extended Coverage ......................................................................................... 16
Non-Overlapping Channels .......................................................................... 16
SDMA Optimization ...................................................................................... 16
Fast Roaming ................................................................................................... 16
Ease of Deployment ........................................................................................ 16
Powerful Management ................................................................................... 17
Secure Wireless Access .................................................................................. 17
Applications Enablement .............................................................................. 17
Advanced Feature Sets .......................................................................................... 17
Xirrus Advanced RF Performance Manager (RPM)
Xirrus Advanced RF Security Manager (RSM) .......................................... 18
Xirrus Advanced RF Analysis Manager (RAM) ......................................... 19
Xirrus Application Control .....
.................................................................... 20
...
............................... 17
...
i
Wireless Array
About this User’s Guide ........................................................................................ 21
Organization .................................................................................................... 21
Notes and Cautions ........................................................................................ 23
Screen Images .................................................................................................. 23
Product Specifications ........................................................................................... 24
Installing the Wireless Array........................................................... 25
Installation Prerequisites ...................................................................................... 25
Optional Network Components ................................................................... 27
Client Requirements ....................................................................................... 27
Planning Your Installation .................................................................................... 28
General Deployment Considerations .......................................................... 28
Coverage and Capacity Planning ................................................................. 30
Placement .................................................................................................. 30
RF Patterns ................................................................................................ 31
Capacity and Cell Sizes ........................................................................... 32
Fine Tuning Cell Sizes ............................................................................. 33
Roaming Considerations ........................................................................ 34
Allocating Channels ................................................................................ 34
IEEE 802.11n Deployment Considerations ................................................. 37
MIMO (Multiple-In Multiple-Out) ........
Multiple Data Streams — Spatial Multiplexing .........
Channel Bonding ..................................................................................... 40
Improved MAC Throughput ................................................................. 41
Short Guard Interval ............................................................................... 41
Obtaining Higher Data Rates ................................................................. 42
802.11n Capacity ...................................................................................... 43
Failover Planning ............................................................................................ 43
Switch Failover Protection ..................................................................... 45
Power Planning ............................................................................................... 46
Power over Gigabit Ethernet ................................................................. 46
Security Planning ............................................................................................ 47
Wireless Encryption ................................................................................ 47
Authentication ......................................................................................... 47
Port Requirements .......................................................................................... 49
Network Management Planning .................................................................. 53
WDS Planning ................................................................................................. 54
.............................................. 38
..
.......................... 39
ii
Wireless Array
Common Deployment Options .................................................................... 57
Installation Workflow ........................................................................................... 58
Installing Your Wireless Array ............................................................................ 60
Choosing a Location ....................................................................................... 60
Wiring Considerations ............................................................................ 61
Mounting and Connecting the Array ......................................................... 63
Dismounting the Array .................................................................................. 63
Powering Up the Wireless Array ......................................................................... 64
Array LED Operating Sequences ................................................................. 65
LED Boot Sequence ................................................................................. 65
LED Operation when Array is Running .............................................. 66
Establishing Communication .............................................................................. 67
Zero-Touch Setup Using Mobilize ............................................................... 67
User Interfaces (CLI, WMI) ........................................................................... 68
Using the Serial Port ....................................................................................... 70
Using the Ethernet Ports ................................................................................ 70
Starting the WMI ............................................................................................. 71
Logging In ........................................................................................................ 71
Licensing ................................................................................................................. 71
Performing the Express Setup Procedure ........................................................... 72
Securing Low Level Access to the Array ..................................................... 73
The Web Management Interface ................................................... 77
XMS-Managed Arrays Restrict Local Management ......................................... 78
An Overview .......................................................................................................... 80
Structure of the WMI ............................................................................................. 82
User Interface ......................................................................................................... 84
Utility Buttons .......................................................................................... 87
Logging In ............................................................................................................... 88
Applying Configuration Changes ....................................................................... 88
Character Restrictions .................................................................................... 89
Viewing Status on the Wireless Array ........................................... 91
Array Status Windows .......................................................................................... 92
Array Summary .............................................................................................. 92
Content of the Array Summary Window ....
Array Information .......................................................................................... 98
........................................ 93
iii
Wireless Array
Array Configuration ....................................................................................... 99
Admin History .............................................................................................. 100
Network Status Windows ................................................................................... 100
Network ......................................................................................................... 101
Network Map ................................................................................................ 102
Content of the Network Map Window .............................................. 103
Spanning Tree Status .................................................................................... 105
Routing Table ................................................................................................ 106
ARP Table ...................................................................................................... 106
DHCP Leases ................................................................................................. 107
Connection Tracking/NAT ......................................................................... 107
CDP Neighbors ............................................................................................. 108
Network Assurance ...................................................................................... 109
Undefined VLANs ........................................................................................ 110
RF Monitor Windows .......................................................................................... 111
IAPs ................................................................................................................. 112
Spectrum Analyzer ...................................................................................... 113
Intrusion Detection ...................................................................................... 116
Channel History ............................................................................................ 118
Radio Assurance ........................................................................................... 120
Station Status Windows ...................................................................................... 122
Stations ........................................................................................................... 123
Location Map ................................................................................................. 125
RSSI ................................................................................................................. 129
Signal-to-Noise Ratio (SNR) ........................................................................ 130
Noise Floor ..................................................................................................... 132
Max by IAP .................................................................................................... 134
Station Assurance ......................................................................................... 135
Statistics Windows ............................................................................................... 137
IAP Statistics Summary ................................................................................ 137
Per-IAP Statistics ........................................................................................... 138
Network Statistics ......................................................................................... 140
VLAN Statistics ............................................................................................. 141
WDS Statistics ................................................................................................ 142
IDS Statistics .................................................................................................. 143
Filter Statistics ............................................................................................... 144
Station Statistics ............................................................................................ 145
iv
Wireless Array
Per-Station Statistics ..................................................................................... 146
Application Control Windows ........................................................................... 147
About Application Control ......................................................................... 147
Application Control ...................................................................................... 149
Stations (Application Control) .................................................................... 153
System Log Window ........................................................................................... 154
IDS Event Log Window ...................................................................................... 155
Configuring the Wireless Array.................................................... 157
Express Setup ........................................................................................................ 159
Network ................................................................................................................. 165
Network Interfaces ...................................................................................... 167
Network Interface Ports ........................................................................ 168
Network Bonds ............................................................................................. 171
DNS Settings .................................................................................................. 177
CDP Settings .................................................................................................. 178
Services .................................................................................................................. 180
Time Settings (NTP) ..................................................................................... 181
NetFlow .......................................................................................................... 184
Wi-Fi Tag ....................................................................................................... 185
Location .......................................................................................................... 186
System Log ..................................................................................................... 188
About Using the Splunk Application for Xirrus Arrays .................. 191
SNMP .............................................................................................................. 193
DHCP Server ................................................................................................. 196
VLANs ................................................................................................................... 199
Understanding Virtual Tunnels .......................................................... 199
VLAN Management ..................................................................................... 201
Tunnels .................................................................................................................. 204
About Xirrus Tunnels ........................................................................... 204
Tunnel Management .................................................................................... 205
SSID Assignments ......................................................................................... 207
Security .................................................................................................................. 208
Understanding Security ........................................................................ 209
Certificates and Connecting Securely to the WMI ............................ 212
Using the Array’s Default Certificate ................................................. 212
Using an External Certificate Authority ............................................. 213
v
Wireless Array
Admin Management .................................................................................... 214
Admin Privileges .......................................................................................... 216
Admin RADIUS ............................................................................................ 218
About Creating Admin Accounts on the RADIUS Server ............. 218
Management Control ................................................................................... 221
Access Control List ....................................................................................... 228
Global Settings .............................................................................................. 230
External Radius ............................................................................................. 234
About Creating User Accounts on the RADIUS Server .................. 235
Internal Radius .............................................................................................. 238
Rogue Control List ........................................................................................ 241
OAuth 2.0 Management ............................................................................... 243
SSIDs ...................................................................................................................... 245
Understanding SSIDs ............................................................................ 246
Understanding QoS Priority on the Wireless Array ........................ 247
High Density 2.4G Enhancement—Honeypot SSID ......................... 252
SSID Management ........................................................................................ 253
SSID List (top of page) .......................................................................... 254
SSID Limits ............................................................................................. 258
Web Page Redirect Configuration Settings
Whitelist Configuration for Web Page Redirect .
WPA Configuration Settings .............................................................. 265
RADIUS Configuration Settings ......................................................... 265
Active IAPs .................................................................................................... 266
Per-SSID Access Control List ...................................................................... 267
Groups ................................................................................................................... 269
Understanding Groups ......................................................................... 269
Using Groups ......................................................................................... 270
Group Management ..................................................................................... 271
Group Limits .......................................................................................... 274
IAPs ........................................................................................................................ 276
Understanding Fast Roaming .............................................................. 278
IAP Settings ................................................................................................... 279
Global Settings (IAP) ................................................................................... 285
Beacon Configuration ........................................................................... 287
Station Management ............................................................................. 288
Advanced Traffic Optimization .......................................................... 289
...................................... 260
.
............................. 264
vi
Wireless Array
Global Settings .11an .................................................................................... 298
Global Settings .11bgn .................................................................................. 303
Global Settings .11n ...................................................................................... 309
Global Settings .11ac ..................................................................................... 312
Global Settings .11u ...................................................................................... 314
Understanding 802.11u ......................................................................... 314
Advanced RF Settings .................................................................................. 320
About Standby Mode ............................................................................ 321
RF Monitor .............................................................................................. 321
RF Resilience .......................................................................................... 322
RF Power & Sensitivity ......................................................................... 323
RF Spectrum Management ................................................................... 324
Station Assurance .................................................................................. 327
Hotspot 2.0 ..................................................................................................... 329
Understanding Hotspot 2.0 .................................................................. 329
NAI Realms .................................................................................................... 331
Understanding NAI Realm Authentication ....................................... 331
NAI EAP ......................................................................................................... 332
Intrusion Detection ....................................................................................... 334
DoS Attacks ............................................................................................ 335
Impersonation Attacks .......................................................................... 336
About Blocking Rogue APs .................................................................. 337
RF Intrusion Detection and Auto Block Mode .................................. 338
DoS Attack Detection Settings ............................................................. 339
Impersonation Detection Settings ....................................................... 340
LED Settings .................................................................................................. 340
DSCP Mappings ............................................................................................ 341
Roaming Assist .............................................................................................. 342
WDS ....................................................................................................................... 345
About Configuring WDS Links ........................................................... 345
Long Distance Links .............................................................................. 347
WDS Client Links .......................................................................................... 347
Filters ..................................................................................................................... 351
Filter Lists ...................................................................................................... 352
Filter Management ....................................................................................... 354
Clusters .................................................................................................................. 360
Cluster Definition ........................................................................................ 361
vii
Wireless Array
Cluster Management ................................................................................... 362
Cluster Operation ........................................................................................ 363
Mobile .................................................................................................................... 366
AirWatch ........................................................................................................ 366
User Procedure for Wireless Access ................................................... 368
Using Tools on the Wireless Array............................................... 371
System Tools ......................................................................................................... 372
About Licensing and Upgrades ........................................................... 373
System ..................................................................................................... 374
Automatic Updates from Remote Image or
Configuration ......................................................................................... 377
Diagnostics ............................................................................................. 380
Application Control Signature File Management ..
Web Page Redirect ................................................................................. 382
Network Tools ........................................................................................ 383
Progress and Status Frames ................................................................. 385
CLI ......................................................................................................................... 385
API Documentation ............................................................................................. 387
Status/Settings ....................................................................................... 388
GET Requests ......................................................................................... 389
Trying a GET Request ........................................................................... 389
API Documentation Toolbar ................................................................ 391
Options .................................................................................................................. 392
Logout .................................................................................................................... 395
iguration File .... 376
Conf
........................ 381
...
The Command Line Interface...................................................... 397
Establishing a Secure Shell (SSH) Connection ................................................. 398
Getting Started with the CLI .............................................................................. 399
Inputting Commands ................................................................................... 399
Getting Help .................................................................................................. 399
Top Level Commands ......................................................................................... 401
Root Command Prompt ............................................................................... 401
configure Commands ................................................................................... 402
show Commands .......................................................................................... 405
statistics Commands ..................................................................................... 408
Configuration Commands .................................................................................. 410
viii
Wireless Array
acl .................................................................................................................... 410
admin .............................................................................................................. 411
auth ................................................................................................................. 412
cdp ................................................................................................................... 412
clear ................................................................................................................. 414
cluster ............................................................................................................. 416
contact-info .................................................................................................... 417
date-time ........................................................................................................ 418
dhcp-server .................................................................................................... 419
dns ................................................................................................................... 420
file .................................................................................................................... 421
filter ................................................................................................................. 425
Air Cleaner ............................................................................................. 426
group .............................................................................................................. 429
hostname ........................................................................................................ 429
interface .......................................................................................................... 430
load ................................................................................................................. 430
location ........................................................................................................... 431
location-reporting ......................................................................................... 432
management .................................................................................................. 433
mdm ................................................................................................................ 434
more ................................................................................................................ 435
netflow ............................................................................................................ 436
no ..................................................................................................................... 437
quick-config ................................................................................................... 439
quit .................................................................................................................. 440
radius-server .................................................................................................. 440
reboot .............................................................................................................. 441
reset ................................................................................................................. 441
restore ............................................................................................................. 442
roaming-assist ............................................................................................... 443
run-tests .......................................................................................................... 444
security ........................................................................................................... 446
snmp ............................................................................................................... 447
ssid .................................................................................................................. 448
syslog .............................................................................................................. 449
tunnel .............................................................................................................. 450
ix
Wireless Array
uptime ............................................................................................................. 451
vlan .................................................................................................................. 451
wifi-tag ........................................................................................................... 452
Sample Configuration Tasks .............................................................................. 454
Configuring a Simple Open Global SSID . Configuring a Global SSID using WPA-PEAP ... Configuring an SSID-Specific SSID using WPA-PEAP ...
Enabling Global IAPs ................................................................................... 458
Disabling Global IAPs .................................................................................. 459
Enabling a Specific IAP ................................................................................ 460
Disabling a Specific IAP ............................................................................... 461
Setting Cell Size Auto-Configuration for All IAPs .................................. 462
Setting the Cell Size for All IAPs ................................................................ 463
Setting the Cell Size for a Specific IAP ....................................................... 464
Configuring VLANs on an Open SSID ...................................................... 465
Configuring Radio Assurance Mode (Loopback Tests)
.............................................. 455
...
...................................... 456
........................ 457
........................ 466
..
Appendices..................................................................................... 469
Appendix A: Quick Reference Guide ............................................................... 471
Factory Default Settings ...................................................................................... 471
Host Name ..................................................................................................... 471
Network Interfaces ....................................................................................... 471
Serial ........................................................................................................ 471
Gigabit 1 and Gigabit 2 ......................................................................... 472
Server Settings ............................................................................................... 472
NTP .......................................................................................................... 472
Syslog ...................................................................................................... 472
SNMP ...................................................................................................... 473
DHCP .............................................................................................................. 473
Default SSID .................................................................................................. 474
Security .......................................................................................................... 474
Global Settings - Encryption ............................................................... 474
External RADIUS (Global) .................................................................. 475
Internal RADIUS .................................................................................... 476
Administrator Account and Password ...................................................... 476
Management .................................................................................................. 476
Keyboard Shortcuts ............................................................................................. 477
x
Wireless Array
Appendix B: FAQ and Special Topics ............................................................... 479
General Hints and Tips ....................................................................................... 479
Frequently Asked Questions .............................................................................. 480
Multiple SSIDs ............................................................................................... 480
Security ........................................................................................................... 482
VLAN Support .............................................................................................. 485
Array Monitor and Radio Assurance Capabilities .
Enabling Monitoring on the Array ..................................................... 488
How Monitoring Works ............................................................................... 488
Radio Assurance ........................................................................................... 489
Radio Assurance Options ..................................................................... 490
RADIUS Vendor Specific Attribute (VSA) for Xirrus ..................................... 491
Location Service Data Formats .......................................................................... 492
Euclid Location Server ................................................................................. 492
Non-Euclid Location Server ........................................................................ 492
Upgrading the Array via CLI ............................................................................. 494
Sample Output for the Upgrade Procedure: ............................................. 495
Contact Information ............................................................................................ 499
...
...................................... 488
Appendix C: Notices (Arrays except XR-500/600 and Models
Notices ................................................................................................................... 501
EU Directive 1999/5/EC Compliance Information .....
Compliance Information (Non-EU) ................................................................... 512
Safety Warnings ................................................................................................... 513
Translated Safety Warnings ............................................................................... 514
Software License and Product Warranty Agreement ..................................... 515
Hardware Warranty Agreement ....................................................................... 521
E
nding in H) ............501
................................... 505
Appendix D: Notices (XR500/600 Series Only) ............................................. 523
Notices ................................................................................................................... 523
EU Directive 1999/5/EC Compliance Information .....
Compliance Information (Non-EU) ................................................................... 534
Safety Warnings ................................................................................................... 535
Translated Safety Warnings ............................................................................... 536
Software License and Product Warranty Agreement ..................................... 537
Hardware Warranty Agreement ....................................................................... 543
................................... 527
xi
Wireless Array
Appendix E: Medical Usage Notices ................................................................ 545
Glossary of Terms.......................................................................... 551
Index................................................................................................ 563
xii
Wireless Array
List of Figures
Figure 1. Xirrus Arrays: XR Series............................................................................ 1
Figure 2. Wireless Array (XR Series)........................................................................ 4
Figure 3. Wireless Coverage Patterns .................................................................... 12
Figure 4. XP8 - Power over Ethernet Usage .......................................................... 13
Figure 5. WMI: Array Status.................................................................................... 14
Figure 6. Layout of IAPs (XR-7630)........................................................................ 15
Figure 7. Wall Thickness Considerations .............................................................. 29
Figure 8. Unit Placement.......................................................................................... 30
Figure 9. Full (Normal) Coverage........................................................................... 31
Figure 10. Adjusting RF Patterns.............................................................................. 31
Figure 11. Custom Coverage ..................................................................................... 32
Figure 12. Connection Rate vs. Distance ................................................................. 32
Figure 13. Transmit Power......................................................................................... 33
Figure 14. Overlapping Cells..................................................................................... 34
Figure 15. Allocating Channels Manually............................................................... 36
Figure 16. Classic 802.11 Signal Transmission........................................................ 38
Figure 17. MIMO Signal Processing......................................................................... 38
Figure 18. Spatial Multiplexing................................................................................. 39
Figure 19. Channel Bonding...................................................................................... 40
Figure 20. MAC Throughput Improvements.......................................................... 41
Figure 21. Computing 802.11n Data Rates .............................................................. 42
Figure 22. Port Failover Protection........................................................................... 43
Figure 23. Switch Failover Protection ..................................................................... 45
Figure 24. Port Requirements for XMS .................................................................... 49
Figure 25. WDS Link................................................................................................... 54
Figure 26. A Multiple Hop WDS Connection ......................................................... 55
Figure 27. WDS Failover Protection ......................................................................... 55
Figure 28. Installation Workflow.............................................................................. 58
Figure 29. Array Placement ....................................................................................... 60
Figure 30. LED Locations........................................................................................... 64
Figure 31. Network Interface Ports—XR-520 (left); XR-1000 Series (right) ....... 68
Figure 32. Network Interfaces—XR-2000 Series (left); XR-2005 Series (right) ... 69
Figure 33. Network Interface Ports—XR-4000 Series ............................................ 69
Figure 34. Network Interface Ports—XR-6000 Series ............................................ 69
List of Figures xiii
Wi-Fi Array
Figure 35. Notice for XMS-Managed Array ............................................................ 78
Figure 36. Web Management Interface—Option = New Style............................. 80
Figure 37. Web Management Interface—New Style (Default)............................. 80
Figure 38. Web Management Interface—Option = Classic Style......................... 81
Figure 39. Web Management Interface—Classic Style.......................................... 81
Figure 40. WMI: Frames............................................................................................. 84
Figure 41. Major Menu Sections Collapsed (on left).............................................. 85
Figure 42. WMI: Utility Buttons................................................................................ 87
Figure 43. Logging In to the Wireless Array........................................................... 88
Figure 44. Array Summary ........................................................................................ 92
Figure 45. Disabled IAP (Partial View).................................................................... 95
Figure 46. IAP Cells .................................................................................................... 95
Figure 47. Network Assurance and Operating Status........................................... 96
Figure 48. Array Information .................................................................................... 98
Figure 49. Show Configuration................................................................................. 99
Figure 50. Admin Login History............................................................................. 100
Figure 51. Network Settings .................................................................................... 101
Figure 52. Network Map.......................................................................................... 102
Figure 53. Spanning Tree Status.............................................................................. 105
Figure 54. Routing Table.......................................................................................... 106
Figure 55. ARP Table ................................................................................................ 106
Figure 56. DHCP Leases........................................................................................... 107
Figure 57. Connection Tracking.............................................................................. 107
Figure 58. CDP Neighbors....................................................................................... 108
Figure 59. Network Assurance................................................................................ 109
Figure 60. Undefined VLANs.................................................................................. 110
Figure 61. RF Monitor — IAPs ................................................................................. 112
Figure 62. RF Monitor — IAPs ................................................................................. 112
Figure 63. RF Spectrum Analyzer........................................................................... 114
Figure 64. Intrusion Detection/Rogue AP List..................................................... 116
Figure 65. RF Monitor — Channel History............................................................. 118
Figure 66. RF Monitor — Channel History (Rotated)........................................... 119
Figure 67. RF Monitor — Channel History (Text) ................................................. 119
Figure 68. Radio Assurance..................................................................................... 120
Figure 69. Stations..................................................................................................... 123
Figure 70. Location Map........................................................................................... 125
Figure 71. Controls for Location Map.................................................................... 126
xiv List of Figures
Wireless Array
Figure 72. Station RSSI Values ............................................................................... 129
Figure 73. Station RSSI Values — Colorized Graphical View ............................ 129
Figure 74. Station Signal-to-Noise Ratio Values .................................................. 130
Figure 75. Station SNR Values — Colorized Graphical View.............................. 131
Figure 76. Station Noise Floor Values ................................................................... 132
Figure 77. Station Noise Floor Values — Colorized Graphical View ................ 133
Figure 78. Max by IAP.............................................................................................. 134
Figure 79. Station Assurance ................................................................................... 135
Figure 80. IAP Statistics Summary Page................................................................ 137
Figure 81. Individual IAP Statistics Page ............................................................. 139
Figure 82. Network Statistics................................................................................... 140
Figure 83. VLAN Statistics....................................................................................... 141
Figure 84. WDS Statistics ......................................................................................... 142
Figure 85. IDS Statistics Page ................................................................................. 143
Figure 86. Filter Statistics ......................................................................................... 144
Figure 87. Station Statistics ...................................................................................... 145
Figure 88. Individual Station Statistics Page......................................................... 146
Figure 89. Application Control ............................................................................... 149
Figure 90. Application Control (Pie Charts).......................................................... 151
Figure 91. Application Control (Station Traffic)................................................... 151
Figure 92. Stations (Application Control).............................................................. 153
Figure 93. System Log (Alert Level Highlighted) ................................................ 154
Figure 94. IDS Event Log ........................................................................................ 155
Figure 95. WMI: Express Setup............................................................................... 159
Figure 96. LEDs are Switched On........................................................................... 164
Figure 97. Network Interfaces................................................................................. 165
Figure 98. Network Settings .................................................................................... 168
Figure 99. Network Interface Ports......................................................................... 168
Figure 100. Network Bonds ....................................................................................... 171
Figure 101. Port Modes (a, b)..................................................................................... 173
Figure 102. Port Modes (c) ......................................................................................... 174
Figure 103. Port Modes (d) ........................................................................................ 174
Figure 104. Mirroring Traffic..................................................................................... 176
Figure 105. DNS Settings............................................................................................ 177
Figure 106. CDP Settings............................................................................................ 178
Figure 107. Services..................................................................................................... 180
Figure 108. Time Settings (Manual Time)................................................................ 181
List of Figures xv
Wi-Fi Array
Figure 109. Time Settings (NTP Time Enabled)...................................................... 182
Figure 110. NetFlow.................................................................................................... 184
Figure 111. Wi-Fi Tag.................................................................................................. 185
Figure 112. Location.................................................................................................... 186
Figure 113. System Log .............................................................................................. 188
Figure 114. SNMP ....................................................................................................... 193
Figure 115. DHCP Management............................................................................... 196
Figure 116. VLANs...................................................................................................... 199
Figure 117. VLAN Management............................................................................... 201
Figure 118. Tunnel Summary.................................................................................... 204
Figure 119. Tunnel Management .............................................................................. 205
Figure 120. Tunnel SSID Assignments..................................................................... 207
Figure 121. Security..................................................................................................... 208
Figure 122. Import Xirrus Certificate Authority..................................................... 212
Figure 123. Admin Management .............................................................................. 214
Figure 124. Admin Privileges.................................................................................... 216
Figure 125. Admin RADIUS...................................................................................... 219
Figure 126. Management Control ............................................................................. 221
Figure 127. Pre-login Banner ..................................................................................... 222
Figure 128. Access Control List................................................................................. 229
Figure 129. Global Settings (Security) ...................................................................... 230
Figure 130. External RADIUS Server ....................................................................... 234
Figure 131. Internal RADIUS Server ........................................................................ 238
Figure 132. Rogue Control List ................................................................................. 241
Figure 133. OAuth 2.0 Management - Token List .................................................. 243
Figure 134. SSIDs......................................................................................................... 245
Figure 135. Four Traffic Classes................................................................................ 248
Figure 136. Priority Level—IEEE 802.1p (Layer 2)................................................. 248
Figure 137. Priority Level—DSCP (DiffServ - Layer 3) ......................................... 249
Figure 138. SSID Management.................................................................................. 253
Figure 139. SSID Management—Encryption, Authentication, Accounting....... 256
Figure 140. WPR Internal Splash Page Fields (SSID Management)..................... 260
Figure 141. Customizing an Internal Login or Splash Page.................................. 263
Figure 142. Whitelist Configuration for WPR......................................................... 264
Figure 143. Setting Active IAPs per SSID ................................................................ 266
Figure 144. Per-SSID Access Control List................................................................ 267
Figure 145. Groups...................................................................................................... 269
xvi List of Figures
Wireless Array
Figure 146. Group Management ............................................................................... 271
Figure 147. IAPs........................................................................................................... 276
Figure 148. Source of Channel Setting ..................................................................... 277
Figure 149. IAP Settings ............................................................................................. 279
Figure 150. Global Settings (IAPs)............................................................................ 285
Figure 151. Global Settings .11an.............................................................................. 298
Figure 152. Global Settings .11bgn ........................................................................... 303
Figure 153. Global Settings .11n................................................................................ 309
Figure 154. Global Settings .11ac .............................................................................. 312
Figure 155. 802.11u Global Settings.......................................................................... 315
Figure 156. Advanced RF Settings............................................................................ 320
Figure 157. Station Assurance (Advanced RF Settings) ........................................ 327
Figure 158. Hotspot 2.0 Settings................................................................................ 330
Figure 159. NAI Realms ............................................................................................. 331
Figure 160. NAI EAP .................................................................................................. 332
Figure 161. Intrusion Detection Settings.................................................................. 334
Figure 162. LED Settings............................................................................................ 340
Figure 163. DSCP Mappings...................................................................................... 342
Figure 164. Roaming Assist ....................................................................................... 344
Figure 165. WDS.......................................................................................................... 345
Figure 166. Configuring a WDS Link....................................................................... 346
Figure 167. WDS Client Links ................................................................................... 347
Figure 168. Filters........................................................................................................ 351
Figure 169. Filter Lists ................................................................................................ 352
Figure 170. Filter Management ................................................................................. 354
Figure 171. Filter Category or Application.............................................................. 358
Figure 172. Clusters .................................................................................................... 360
Figure 173. Cluster Definition ................................................................................... 361
Figure 174. Cluster Management.............................................................................. 362
Figure 175. Cluster Mode Operation........................................................................ 363
Figure 176. Cluster Mode Activation ....................................................................... 363
Figure 177. Viewing Statistics in Cluster Mode...................................................... 364
Figure 178. AirWatch Settings................................................................................... 366
Figure 179. System Tools............................................................................................ 372
Figure 180. Saving the Diagnostic Log..................................................................... 380
Figure 181. Managing Application Control Signature files .................................. 381
Figure 182. Managing WPR Splash/Login page files............................................ 382
List of Figures xvii
Wi-Fi Array
Figure 183. System Command (Ping)....................................................................... 383
Figure 184. Radius Ping Output................................................................................ 384
Figure 185. CLI Window............................................................................................ 385
Figure 186. API Documentation................................................................................ 387
Figure 187. API — Settings Requests List................................................................ 388
Figure 188. API — GET Request Details ................................................................. 389
Figure 189. API — GET Request Response ............................................................. 390
Figure 190. API Documentation Toolbar................................................................. 391
Figure 191. WMI Display Options............................................................................ 392
Figure 192. iPhone Style Option................................................................................ 393
Figure 193. Login Window ........................................................................................ 395
Figure 194. Logging In................................................................................................ 398
Figure 195. Help Window.......................................................................................... 399
Figure 196. Full Help .................................................................................................. 400
Figure 197. Partial Help.............................................................................................. 400
Figure 198. Air Cleaner Filter Rules ......................................................................... 427
Figure 199. Configuring a Simple Open Global SSID............................................ 455
Figure 200. Configuring a Global SSID using WPA-PEAP................................... 456
Figure 201. Configuring an SSID-Specific SSID using WPA-PEAP..................... 457
Figure 202. Enabling Global IAPs............................................................................. 458
Figure 203. Disabling Global IAPs............................................................................ 459
Figure 204. Enabling a Specific IAP.......................................................................... 460
Figure 205. Disabling a Specific IAP......................................................................... 461
Figure 206. Setting the Cell Size for All IAPs.......................................................... 462
Figure 207. Setting the Cell Size for All IAPs.......................................................... 463
Figure 208. Setting the Cell Size for a Specific IAP ................................................ 464
Figure 209. Configuring VLANs on an Open SSID................................................ 465
Figure 210. Configuring Radio Assurance Mode (Loopback Testing)................ 467
xviii List of Figures
Wireless Array
Introduction
These topics introduce the Xirrus Wireless Array, including an overview of its key features and benefits.
“The Xirrus Family of Products” on page 1. “Why Choose the Xirrus Wireless Array?” on page 3. “Wireless Array Product Overview” on page 4. “Key Features and Benefits” on page 15.
“Advanced Feature Sets” on page 17.
“About this User’s Guide” on page 21.
The Xirrus Family of Products
Figure 1. Xirrus Arrays: XR Series
The Xirrus family of products includes the following:
The XR Series of Xirrus Wireless Arrays
The newest Xirrus Wireless Arrays have been completely redesigned to provide distributed intelligence, integrated switching capacity of up to 10 Gbps, application-level intelligence, increased bandwidth, and smaller size. The radios support IEEE802.11 ac, a, b, g, and n clients, and feature the capacity and performance needed to replace switched Ethernet to the desktop. Modular radios allow you to increase the number of radios, upgrade to more powerful radios, or even upgrade later to future technologies like 802.11ac and 802.11.ad as they are introduced.
Introduction 1
Wireless Array
Xirrus Management System (XMS)
XMS is used for managing large Array deployments from a centralized Web-based interface. Xirrus offers XMS Cloud—a software as a service option for XMS, capable of managing all aspects of your Xirrus network, including automatic software and firmware upgrades for the network. For XMS Cloud customers, all Array management is performed via the cloud. Access to Arrays via CLI and Web Management Interface is disabled. For other XMS customers, write access to Arrays via CLI and Web Management Interface is typically disabled.
Users start the XMS client simply by entering the URL of the XMS server on a web browser. If you need detailed information about this product, refer to the XMS User’s Guide.
Xirrus-supplied Power over Gigabit Ethernet (PoGE) Injectors and
POE+ Switches
Xirrus offers 24- and 48-port enterprise-class L2+ gigabit managed access switches with IEEE802.3at PoE+, four 1G/10G SFP+ ports, and stacking. One-, two-, and eight-port PoGE injectors are also available for a range of Array power requirements.
Nomenclature
Throughout this User’s Guide, Xirrus Wireless Arrays and Access Points are referred to as simply Arrays. In some instances, the terms product and unit are also used. When discussing specific products from the Xirrus family, the product name is used (for example, XR-4830). The Wireless Array’s operating system is referred to as the ArrayOS. The Web Management Interface for browser-based management of the Array is referred to as WMI.
The XR Series Arrays have very flexible radio capabilities — each of the radios may be independently configured to support IEEE802.11a, 11b, 11g, or 11n clients or a combination of client types. One radio is typically assigned as the RF monitor radio, supporting intrusion detection and prevention, self-monitoring, and other services. Radios support both 2.4GHz and 5 GHz, and are named iap1, iap2, ... iapn.
2 Introduction
Wireless Array
The Xirrus Management System is referred to as XMS. The Power over Gigabit Ethernet system may be referred to as PoGE.
Why Choose the Xirrus Wireless Array?
The deployment of wireless is a necessity as businesses strive for greater flexibility in the workplace and the need for employee mobility rises. The user community is placing spiraling and often unanticipated demands on the wireless network, with the rapid proliferation of devices such as iPads and wireless enabled phones. Xirrus Wireless Arrays have the capability to support the large number of user devices present in today’s environments, with superior range and coverage.
Wireless has come a long way in the past few years and now offers the performance, reliability and security that Enterprise customers have come to expect from their networks. The technology is being driven by these major IEEE standards:
802.11ac
Operates in the 5 GHz range, using a number of advanced techniques to achieve a maximum speed of 1.3 Gbps. These techniques include improvements on the methods used for 802.11n, below.
802.11n
Uses multiple antennas per radio to boost transmission speed as high as 450Mbps, increasing throughput, range, and maximum number of users.
802.11n is backwards compatible with 802.11a/b/g.
802.11a
Operates in the 5 GHz range with a maximum speed of 54 Mbps.
802.11b
Operates in the 2.4 GHz range with a maximum speed of 11 Mbps.
802.11g
Supports a higher transmission speed of 54 Mbps in the 2.4 GHz range and is backwards compatible with 802.11b.
Introduction 3
Wireless Array
Whether you have just a handful of users or thousands of users, the Xirrus Array has the scalability and flexibility to serve your needs.
See Also
Key Features and Benefits Wireless Array Product Overview The Xirrus Family of Products
Wireless Array Product Overview
Part of the family of Xirrus products, the Wireless Array is a high capacity, multi­mode device designed with up to four times the coverage and eight times the bandwidth and user density compared with legacy thin access point wireless products. Its distributed intelligence eliminates the use of separate controllers and their accompanying bottlenecks. Each radio, with its directional high-gain antennas, can achieve up to 1.3 Gbps throughput .
Figure 2. Wireless Array (XR Series)
The Wireless Array (regardless of the product model) is Wi-Fi® compliant and simultaneously supports 802.11ac, 802.11a, 802.11b, 802.11g, and 802.11n clients. The multi-state design allows you to assign radios to 2.4 GHz and 5 GHz bands (or both) in any desired arrangement. Integrated switching and active enterprise class features such as VLAN support and multiple SSID capability enable robust network compatibility and a high level of scalability and system control. The optional Xirrus Management System (XMS) allows global management of hundreds of Arrays from a central location.
4 Introduction
Wireless Array
Multiple versions of the Array with different numbers of Integrated Access Points (IAPs) support a variety of deployment applications.
Introduction 5
Wireless Array
XR Wireless Array Product Family
XR-500 Series Access Points
These Access Points have one Gigabit Ethernet port and two radios—one multi­state radio (2.4GHz or 5GHz) and one 5GHz radio. They support 300Mbps, connecting up to 240 users at one time.
The XR-500 provides flexibility for delivering wireless service in low-to-medium user density scenarios, in challenging deployments in areas with high RF attenuation, and in isolated or physically separated locations.
Like XR Arrays, these models have an integrated controller, firewall, threat sensor and spectrum analyzer. Unlike other XR Arrays, these models have omni­directional antennas rather than directional antennas.
Feature
No. radios: 802.11 a/b/g/n/monitor
Radio type 2x2 Integrated omni-directional
antennas Integrated wireless switch ports 2 Integrated RF spectrum analyzer,
threat sensors Gigabit Uplink Port 1 Wireless bandwidth 300 Mbps Users supported 240
XR-520
2
4
Yes
6 Introduction
Wireless Array
XR-600 Series Access Points
The XR-600 Series provides robust wireless service in low-to-medium user density scenarios. These Access Points have two Gigabit Ethernet ports and two multi-state radios (2.4GHz or 5GHz). Each of the XR-630’s 3x3 802.11ac radios supports 1.3Gbps, connecting up to 240 users at one time with 2.6Gbps total Wi-Fi bandwidth.
Like XR Arrays, these models have an integrated controller, firewall, threat sensor spectrum analyzer, and application-level intelligence. Unlike larger XR Arrays, these models have omni-directional antennas rather than directional antennas.
The XR-630 supports ACExpress™ which optimizes wireless performance by automatically segmenting faster 802.11ac clients from slower Wi-Fi clients. Since Wi-Fi is a shared medium, this separation ensures slower 802.11a/b/g/n clients do not slow down 802.11ac clients from achieving high performance.
Feature
No. radios: 802.11 ac/a/b/g/n/monitor
Radio type 2x2 3x3 Integrated omni-directional
antennas Integrated wireless switch ports 2 2 Integrated RF spectrum analyzer,
threat sensors Gigabit Uplink Ports 2 2 Wireless bandwidth 1.7 Gbps 2.6 Gbps Users supported 240 240
XR-620 XR-630
22
46
Yes Yes
Introduction 7
Wireless Array
XR-1000
These Arrays include models with one Gigabit Ethernet port and two multi-state radios (2.4GHz or 5GHz) that can support 300Mbps or 450Mbps, connecting up to 480 users at one time.
The Xirrus XR-1000 Series Wireless Array is a two slot chassis available in a two multi-state (2.4GHz or 5GHz) radio configuration with up to 900Mbps of bandwidth (up to 450 Mbps per radio). The XR-1000 provides flexibility for delivering wireless service in low user density scenarios, challenging deployments in areas with high RF attenuation, and in isolated or physically separated locations. The elliptical-shaped coverage pattern produced by its directional antennas is ideal for covering facilities with central hallways and adjacent rooms commonly found in office buildings, hotels, and dormitories.
Like larger XR Arrays, these models integrate multi-state radios with high gain directional antennas, an onboard multi-gigabit switch, controller, firewall, threat sensor and spectrum analyzer all built on a modular chassis designed for future extensibility.
Feature
No. radios: 802.11 a/b/g/n/monitor
Radio type 2x2 3x3 Integrated antennas 4 6 Integrated wireless
switch ports Integrated RF spectrum
analyzer, threat sensors Gigabit Uplink Port 1 1 Wireless bandwidth 600 Mbps 900 Mbps Users supported 480 480
8 Introduction
XR-1220 XR-1230
22
22
Yes Yes
Loading...
+ 220 hidden pages