All rights reserved. Specifications in this manual are subject to change without notice.
Originated in the USA. All other trademarks are the property of their respective owners.
Open Source Code
This product includes code licensed under the GNU General Public License, the GNU Lesser General Public
License, and/or certain other open source licenses. You may request a copy of this source code free of charge at
dl-gplquery@arubanetworks.com. Please specify the product and version for which you arerequesting source
code.
August 2015 | 0511176-04Dell Networking W-Instant in W-Air Wave 8.0 | Deployment Guide
Page 3
Contents
About this Document5
Overview of Dell Networking W-Instant5
Instant Management with AirWave5
This document describes the Dell Networking W-Instant access point and Virtual Controller system as well as the
procedure to integrate this system with W-AirWave. This section contains the following points:
l "Overview of Dell Networking W-Instant" on page 5
l "Instant Management with AirWave" on page 5
l "Using Instant with AirWave" on page 6
l "AirWave Pages with Instant-Specific Features" on page 7
l "Supported Firmware" on page8
Overview of Dell Networking W-Instant
Dell Networking W-Instant (Instant) is a system of access points in a Layer 2 subnet. The IAPs are controlled by a
single IAP that serves a dual role as an IAP and primary Virtual Controller (VC), eliminating the need for dedicated
controller hardware. This system can be deployed through a simplified setup process appropriate for smaller
organizations, or for multiple geographically dispersed locations without an on-site administrator.
Only the first IAP/Virtual Controller you add to the network must be configured; the subsequent IAPs will all
inherit the necessary configuration information from the Virtual Controller. Dell Networking W-Instant
continually monitors the network to determine the IAP that should function as the Virtual Controller at any time,
and the Virtual Controller will move from IAP to IAP as necessary without impacting network performance.
The Virtual Controller technology in Dell Networking W-Instant is capable of IAP auto discovery, 802.1X
authentication, role-based and device-based policy enforcement, rogue detection, and Adaptive Radio
Management (ARM).
Instant Management with AirWave
Unlike other WLAN management products, AirWave eliminates the need to configure and troubleshoot
individual APs or dispatch IT personnel on-site. With AirWave, IT can centrally configure, monitor, and
troubleshoot Dell Networking W-Instant WLANs, upload new software images, track devices, generate reports,
and perform other vital management tasks, all from a remote location.
AirWave Security Options
A Virtual Controller or Instant AP can authenticate to the AirWave server using a pre-shared key, or using twoway certificate-based authentication using an SSL certificate sent from AirWave to the Instant device.
The Certificate-based authentication feature requires you upload the a certificate from a supported certificate
authority to the AirWave server, as the default AirWave certificate will not be recognized by the Instant AP, and
will cause the SSL handshake to fail. Certificate authentication also requires that the AirWave IPaddress
information configured on the Instant AP is a domain name, and not an IP address.
AirWave supports the following trusted certificate authorities:
CA Root Intermediate CA: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO
High-Assurance Secure Server CA
l Chain 2: Trusted Root CA: C=US, O=GeoTrust Inc., CN=GeoTrust Global CA Intermediate CA: Subject: C=US,
O=Google Inc, CN=Google Internet Authority G2
Dell Network ing W-Ins tant in W-AirWave 8.0 | Deployment GuideAbout this Document | 5
Page 6
l Chain 3: Trusted Root CA: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. -
For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5 Intermediate CA:
C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10,
CN=VeriSign Class 3 Secure Server CA - G3
By default, AirWave supports only pre-shared key authentication. To enable support for certificate
authentication with a failthrough to pre-shared key authentication or certificate authentication only, navigate to
AMP Setup>General>Dell Networking W Instant Options (may be available as Dell PowerConnect W
Instant Options), and select the option PSK and Certificate or Certificate only. If you enable certificateauthentication, you can view the current AirWave certificate using the View Certificate link on that page, or click
Change to upload a new certificate file to the AirWave server.
Virtual Controllers push data to AirWave via HTTPS. If your enterprise has a security policy that restricts the use
of port 443 for inbound communication, you can change the port AirWave uses to communicate with Instant
devices on the AMP Setup>General>Dell Networking W Instant Options.
Intrusion Detection System
AirWave automatically detects rogue IAPs irrespective of their location in the network. It prevents authorized
IAPs from being detected as rogue IAPs, and tracks and correlates the IDS events to provide a comprehensive
picture of your network’s security.
Firmware Image Management
AirWave pushes firmware to the Dell Networking W-Instant Virtual Controller, and the Virtual Controller pushes
the firmware to the rest of its IAPs. When using AirWave to manage IAPs, you can upgrade the firmware by
loading the firmware onto AirWave, and then scheduling an upgrade from AirWave.
If you have a mixed deployment with multiple Instant products, AirWave allows you to upload firmware for each
of the device types.
Using Instant with AirWave
AirWave can be used to provision and manage a multi-site deployment of Dell Networking W-Instant networks.
For example, if you have 100 retail offices that require Instant to provide WLAN connectivity at each office,
AirWave can be used to provision all the 100 offices from a central site. AirWave also provides the administrator
with the ability to monitor these geographically dispersed Instant networks using an AirWave server (depending
on the scalability recommendations for AirWave).
With a distributed deployment where multiple locations have aVirtual Controller and IAPs, AirWave serves as a
centralized management console. AirWave provides all functionality for normal WLAN deployments, including
long-term trend reporting, PCI compliance, configuration auditing, role-based administration, location services,
RF visualization, and many other features.
Integrating Instant systems into AirWave is unique from the setup of any other device class due to the following
considerations:
l Discovery: AirWave does not discover Instant devices via scanning (SNMP or HTTP) the network. Each
Instant deployment will automatically check-in to the AirWave configured within the IAP’s user interface. The
first Virtual Controller for an organization will automatically appear as a new device in AirWave. Subsequent
IAPs are discovered via the Virtual Controller, just like standard controller/thin AP deployments.
l Auto-provisioning: The first authorized Virtual Controller requires manual authorization into AirWave via
shared secret to ensure security. Along with the shared secret, the Virtual Controller sends an Organization
String which automatically initializes and organizes the IAPs in AirWave. Unlike the traditional infrastructure of
6 | About thisDocumentDell Networki ng W-Instant i n W-Ai rWav e 8.0 | Deployment Guide
Page 7
a physical controller and thin APs, Instant automates many tedious steps of developing a complex
hierarchical structure of folders, config groups, templates, admin users, and admin roles for Instant.
l Communication via HTTPS: Because Instant devices may be deployed behind NAT-enabled firewalls, Virtual
Controllers push data to AirWave via HTTPS. AirWave initiates no connections to Instant devices via SNMP,
TFTP, SSH, and the like. This enables quick remote setup without having to modify firewall rules.
l Virtual controller listed as separate device: The Virtual Controller is listed as an additional device, even
though it is part of the existing set of IAPs. If you have 10 physical IAPs, AirWave will list 10 Instant IAPs and
one Instant Virtual Controller. An asterisk icon (*) beside the device name indicates that a device is acting as a
Virtual Controller. You can also identify the IAP acting as the Virtual Controller by the identical LAN MAC
addresses on the APs/Devices > List page, Device Inventory reports, and any other AirWave pages that list
your network devices.
A device that is added as a Virtual Controller does not count as a license for AirWave.
Refer to the IAP product data sheet for full operational and regulatory specifications, hardware capabilities,
antenna plots, and radio details.
Secure Access to AirWave
By default, virtual controllers use a pre-shared key to authenticate to AirWave. To enable support for a different
security method, navigate to AMP Setup>General>Dell Networking W Instant Options, and select PSK,
PSK and Certificate or Certificate only. If you select a security method that supports certificate
authentication, you can view the currently valid certificate using the View Certificate link in AMPSetup>General>Dell Networking W Instant Options, or click Change to upload a new certificate file.
AirWave Pages with Instant-Specific Features
The following is a summary of AirWave pages affected by Dell Networking W-Instant support:
l APs/Devices > New: When aDell Networking W-Instant device appears in the APs/Devices > New page,
an admin user can mouseover the value on the Type column to display the device's Shared Secret with
AirWave.
l APs/Devices > List: The Virtual Controller is listed as an additional device, even though it is part of the
existing set of IAPs. An asterisk icon ( ) beside a device name indicates that the device is acting as a Virtual
Controller. You can also identify the IAP acting as the Virtual Controller by the identical LAN MAC addresses
on the APs/Devices > List page, Device Inventory reports, and any other AirWave pages that list your
network devices.
l Clients > Client Detail: Once IAPs are serving clients, the IAPs can use user-agent strings to extract
operating systems and device descriptions of its clients, and then populate the Device Description and Device
OS fields in Clients > Client Detail.
l APs/Devices > Audit: Dell Networking W-Instant configuration fetching can be performed in APs/Devices
> Audit. When template configuration is used to manage devices, the running configuration is stored on the
IAP and verified by the template.
l APs/Devices > Monitor > Radio Statistics: The Radio Statistics page for Dell Networking W-Instant
devices displays Clients, Usage, Radio Channel, Radio Noise, Radio Power, Radio Errors, and Channel
Utilization.
l Groups > Instant Config: This feature is available if Enable Instant GUIConfig is enabled on the Groups
> Basic page. This feature allows you to use AirWave as a management console with the same UI as the IAP
device.
Dell Network ing W-Ins tant in W-AirWave 8.0 | Deployment GuideAbout this Document | 7
Page 8
l RAPIDS: Because Instant does not support mitigation or high-level rogue reporting, it does not synchronize
classification. All rogue devices are reported and stored in AirWave for evaluation based on high-level rule
sets. Instant currently does not match wireless BSSIDs to local MAC addresses within an IAP's ARP table, and
does not currently support IDS event notification.
l Reports: Instant Virtual Controllers appear as a separate device in the Device Inventory Report and most
other reports that list devices.
AirWave does not provide a Device Uptime report for Dell Networking W-Instant devices.
Supported Firmware
Dell IAPs running software versions 6.4.3.x-4.2.0.0 and prior are also supported, including the management of
configuration settings and software upgrades. The following table shows when each new version of Instant was
initially supported in AirWave.
Table 1: Instant support in AirWave
InstantVersionSupport Introduced In
6.4.3.x-4.2.0.0AirWave 8.0.9
6.4.2.3-4.1.2.0AirWave 8.0.9Yes
6.4.2.0-4.1.1.0AirWave 8.0.4Yes
6.4.0.0-4.1.0.0AirWave 8.0
6.3.1.0-4.0.0.0AirWave 8.0 and 7.7.10
6.2.1.0-3.4.0.0AirWave 7.7.2Yes
6.2.0.0-3.3.0.0AirWave 7.6.4Yes
6.2.0.0-3.2.0.0AirWave 7.6.1Yes
6.1.3.4-3.1.0.0AirWave 7.5.6No
6.1.3.1-3.0.0.0AirWave 7.5.0No
*Instant Config is fully supported in Instant 3.2. New features in troduced in Instant 3.3 and 3.4 are not currently supported.
Support for Instant
Config
Yes
Support for Instant Config
introduced in AirWave 8.0.4
Yes
8 | About thisDocumentDell Networki ng W-Instant i n W-Ai rWav e 8.0 | Deployment Guide
Page 9
Chapter 2
Setting up Dell Networking W-Instant
Overview
You can set up Dell Networking W-Instant in one of the following ways:
l Manually. See "Setting up Instant Manually" on page 9.
l Automatically (through DHCP). See "Setting up Instant Automatically" on page 12.
The automatic setup is most suited for a multi-site Instant deployment. Both options are summarized here, but
refer to the Dell Networking W-Instant documentation for more information on setting up the hardware and
configuring the network.
For each remote location, an on-site installer is required to physically mount the IAPs, connect to the Dell
Networking W-Instant SSID, configure the WLAN, configure the names of the IAPs, and enter the information in
the first IAP’s user interface that will enable communication with AirWave. The first Instant network that is added
to AirWave includes the ‘golden’ configuration that is used as a template to provision other Instant networks at
other locations as the locations are brought online. It is recommended that the ‘golden’ configuration is validated
and pre-tested in a non-production environment prior to applying it to a production network.
Users have the option to add additional devices into managed mode automatically by setting the AutomaticallyAuthorized Virtual Controller Mode option to Manage Read/Write on the AMP Setup > General page. Refer to the
Dell Networking W-AirWave 8.0 User Guide for more information. It is also important to note that any changes that are
made to the template variables will have to be manually applied to each deployed device.
Setting up Instant Manually
When setting up Dell Networking W-Instant manually, you will be requested to provide an Organization string,
the AirWave IP address, and a Shared Key. The steps to create this information are described in the following
sections:
l "Creating your Organization String" on page 9
l "Authenticating to the AirWave Server" on page 10
l "Entering the Organization String and AirWave Information into the IAP" on page 11
Creating your Organization String
The Organization String is a set of colon-separated strings created by the AirWave administrator to accurately
represent the deployment of each Dell Networking W-Instant system. This string is entered into the Dell
Networking W-Instant UI by the on-site installer.
The format of the Organization String is Org:subfolder1:subfolder2... and so on, up to 31 characters long. Org,
the top-level string, is generally the name of your organization and is used to automatically generate the
following (if not already present) in AirWave:
l AirWave Role: Org Admin (initially disabled)
l AirWave User: Org Admin (assigned to the role Org Admin)
l Folder: Org (under the Top folder in AirWave)
l Configuration Group: Org
Additional strings in the Organization String are used to create a hierarchy of subfolders under the folder named
Org:
Dell Network ing W-Ins tant in W-AirWave 8.0 | Deployment GuideSetting up Dell Networking W-Instant | 9
Page 10
l subfolder1 would be a folder under the Org folder
l subfolder2 would be a folder under subfolder1
To create your Organization String, consider the plan of how your Dell Networking W-Instant IAPs are to be
physically distributed. As a best practice, the Organization String should mirror your company's geographical or
internal reporting structure. For example, if you plan to deploy Dell Networking W-Instant in four stores in two
different cities for Acme Corporation, your Organization Strings might look like these:
l Acme:New York:Times Square Store
l Acme:New York:Queens Store
l Acme:San Francisco:Sunset Store
l Acme:San Francisco:SOMA Store
Authenticating to the AirWave Server
When the AirWave administrator manually authorizes the first Virtual Controller for an organization, Dell
Networking W-AirWave uses the Virtual Controller's shared key or authentication certificate to authenticate
other Instant devices on the network. Once individual Instant access points successfully completed
authentication, they can also be validated against a predefined whitelist before they appear in the APs/Devices> New list.
Users have the option to add additional devices into managed mode automatically by setting the AutomaticallyAuthorized Virtual Controller Mode option to Manage Read/Write on the AMP Setup > General page. Refer to the
Dell Networking W-AirWave 8.0 User Guide for more information. It is also important to note that any changes that are
made to the template variables will have to be manually applied to each deployed device.
Shared Key Authentication
The AirWave administrator can use a shared key to manually authorize the first Virtual Controller for an
organization. Any string is acceptable, but this string must be the same for all devices in your organization.
The AirWave administrator sends the shared secret key, Organization String and the AirWave IP address to the
on-site installer setting up the Virtual Controller and other Instant devices on the network. The AirWave
administrator then manually authorizes the Virtual Controller shared secret key when it appears in the
APs/Devices > New list. After the VC has been validated, other Instant devices using that shared key will
automatically authenticate with the AirWave server, and appear in the APs/Devices > New list.
Always ensure the protection of your organization’s shared secret. Knowledge of this shared secret, the organization
string, and communication protocol could allow a rogue device to masquerade as aDell Networking W-Instant device.
Whitelist Authentication
The Instant whitelist database is a list of the Instant APs that are allowed to access the AirWave server after
completing pre-shared key or certificate authentication. Whitelist authentication is disabled by default, but can
be enabled in the Authorize Dell InstantAPs connecting to AirWave section of the AMP Setup > General
page. Best practices is to create your whitelist before enabling the whitelist authentication feature.
The Instant AP whitelist can be manually configured using the AirWave UI, or imported into AirWave in commaseparated values (CSV) format.
Whitelist files can include the following data columns. The Name field is mandatory, and each entry must also
contain either a serial number or a LAN MAC address.
l name
l LAN MAC Address
10 | Setting up Dell Networking W-InstantDell Network ing W-Ins tant in W-AirWave 8.0 | Deployment Guide
Page 11
l serial number
l Virtual Controller name
l group name
l folder name
l custom_variable_1...custom_variable_10
An example of a whitelist entry using this format is as follows:
Name,LAN MAC Address,Serial Number,Virtual Controller Name,Group Name,Folder Name IAP_Canada_
1,ff:c7:c8:c4:21:ff,BD0086086,Canada-Office,Canada,Vancouver:Downtown IAP_US_
1,F0:0B:86:CF:93:FF,BE0542245,US-Office,US,San Fancisco:CenterTown:HillTop
When this feature is enabled and a Instant AP attempts to connect to AirWave, AirWave checks the MAC address
or serial number of the Instant AP against this whitelist, and authorizes the device if it's MAC address or serial
number matches a whitelist entry. Once authorized, that device appears in the APs/Devices > New page, where
it can be assigned to an Dell Networking W-AirWave group and folder.
Manually Create a Whitelist
To enable whitelist authentication and add Instant APs to a whitelist:
1. Navigate to AMP Setup > General
2. In the Authorize Dell InstantAPs connecting to AirWave section, click the Whitelist option.
3. Next, navigate to APs/Devices > New.
4. Click the Instant AP Whitelist drop-down list at the top of the page, and select Add an Instant AP to theWhitelist.
5. Enter whitelist information for the Instant AP. Each whitelist entry must have an Instant AP name and either a
serial number or a MAC address.
6. Click Add. You are prompted to confirm changes. Click Apply Changes Now, or specify a time that the
device should be added to the whitelist.
Import a Whitelist CSV file
To import a whitelist CSV file to the AirWave server:
1. Navigate to AMP Setup > General > Automatic Authorization
2. In the Authorize Dell InstantAPs connecting to AirWave section, click the Whitelist option.
3. Next, navigate to APs/Devices > New.
4. Click the Instant AP Whitelist drop-down list at the top of the page, and select Import Instant APWhitelist from CSV. The Upload Options page opens. This page describes the required fields and format
for the whitelist file.
5. Select one of the following upload modes.
l Update: Add new information to the existing whitelist database
l Replace: Delete the existing whitelist database, and replace it with the new file.
6. ClickBrowse to select the CSV file, then click Upload.
Entering the Organization String and AirWave Information into the IAP
For the initial IAP/Virtual Controller set up in each location, the on-site installer logs in to the first IAP's web
interface via the Dell Networking W-Instant configuration SSID, and navigates to Settings > AirWave. The
installer then enters the correct Organization String, the AirWave IP address, and the Shared Secret key, as shown
in Figure 1. Perform the following steps to set up AirWave in Instant.
1. Log into your IAP.
Dell Network ing W-Ins tant in W-AirWave 8.0 | Deployment GuideSetting up Dell Networking W-Instant | 11
Page 12
2. Click on either the Set up Now at the bottom of the UI or on the Settings tab in the top right corner. This
opens the Settings menu.
3. Locate the Dell Networking W-AirWave section on the Admin tab.
4. Enter the Organization string, the AirWave IP address, and the Shared key.
5. Click OK when you are finished.
Setting up Instant Automatically
Instant can be configured automatically using DHCP options 60 and 43.
The Dell Networking W-Instant Virtual Controller initiates a DHCP request with the DHCP option 60 string 'Dell
Networking W-Instant.’ If the DHCP server is configured to recognize this option 60 string, it will return an option
43 string containing the organization, AirWave IP, and pre-shared key (Organization is optional). The three pieces
of information should be specified using comma separators without any spaces. For example,
option 43 text "TME-Instant,10.169.240.8,dell123"
The AirWave information in the option 43 will be used to connect to AirWave, if AirWave is not otherwise
configured manually on the Virtual Controller.
The organization string can be hierarchical and define sub-folders for different stores. This supports an
architecture that is required to manage multiple branches or stores where individual stores can be managed by
local administrators.
DHCP server options:
ip dhcp pool IAP-Pool
default-router 10.169.241.1
option 60 text "DellInstantAP"
option 43 text "Acme:Store1,10.169.240.8,dell123"
network 10.169.241.0 255.255.255.0
authoritative
12 | Setting up Dell Networking W-InstantDell Network ing W-Ins tant in W-AirWave 8.0 | Deployment Guide
Page 13
!
ip dhcp pool IAP-Pool2
default-router 10.169.242.1
option 60 text "DellInstantAP"
option 43 text "Acme:Store2,10.169.240.8,dell123"
network 10.169.242.0 255.255.255.0
authoritative
In the example configuration shown above, the following group and folder structure is created on AirWave:
l A group called Acme is created.
l A top-level folder called Acme is created.
l Two sub-folders called Store1 and Store2 are created which will contain the IAPs.
Verifying the Shared Secret
After the role is enabled, the Dell Networking W-Instant device will appear in the APs/Devices > New page, the
admin user should mouse over the value under the Type column to verify the device’s Shared Secret with
AirWave, as shown in Figure 2.
Figure 2: Mouse over the Type column to view the Shared Secret
If the incoming Shared Secret matches the one you created, select Add, then Save and Apply in the
confirmation page.
With an Organization specified, you do not have to select any Group or Folder from the drop-down menus on the
APs/Devices > New page. In fact, if you do change the Group/Folder drop-down menus, all Organization-specified
Virtual Controllers will ignore these values and will use the folder/group values from the Organization String instead. If
you select Add for some non-Dell Networking W-Instant devices as well as some Organization-specified Virtual
Controllers, the drop-down menus will apply to the non-IAPs but not the Virtual Controllers. If you have any Virtual
Controllers with no Organization specified the first time they communicate with AirWave then they will be placed in the
Folder/Group drop-box values you have selected.
Completing the Setup
After the setup is completed, determine whether the devices in your groups will be managed using templatebased configuration or using Instant Config, and then refer to the following sections.
l Using Template Configuration on page 15
l Using Instant Config on page 23
Devices will revert to Monitor Only mode when you change group configuration from Instant Config to Template based.
Dell Network ing W-Ins tant in W-AirWave 8.0 | Deployment GuideSetting up Dell Networking W-Instant | 13
Page 14
14 | Setting up Dell Networking W-InstantDell Network ing W-Ins tant in W-AirWave 8.0 | Deployment Guide
Page 15
Chapter 3
Using Template Configuration
Template configuration allows you manage IAP devices with minimal administrative intervention by applying a
group-based template configuration to all devices that are added to the group.
Be sure that the default configuration is validated and has been pre-tested in a non-production environment prior to
applying it to a production network.
Additional information about creating templates for Dell Networking W-Instant is available in the Dell NetworkingW-AirWave 8.0 User Guide.
Adding the First Instant Device to AirWave
After the first Instant device receives the AirWave server information from the DHCP server, or after AirWave
server information is manually configured, the Instant device appears as a new device in AirWave. As shown, this
Virtual Controller is added in Monitor Only mode.
Figure 3:A new Instant device in AirWave
1. Click Add to add the device. A Group and Folder do not have to be selected. The Instant device will
automatically get added to the new group that was created.
2. Select Apply Changes Now to add the Instant device to the group.
Updating the Instant Template
As stated previously, the first Instant network that is added to AirWave automatically includes the default
configuration that is used as the template to provision other Instant networks. You can view and, if necessary,
edit this template directly on the Groups > Templates configuration page.
The Groups >Templates page is not available if Instant Config is enabled.
Dell Network ing W-Ins tant in W-AirWave 8.0 | Deployment GuideUsing Template Configuration | 15
Page 16
Be sure that the default configuration is validated and has been pre-tested in a non-production environment prior to
applying it to a production network. Any changes that are made to this configuration will follow the same process each
time and will be applied to other Instant networks.
Figure 4:The Instant template editor
If you want to add additional variables to the template, the Allowed Variables section just to the right of the
Instant template editor shows you the set of variables that can be added.
Figure 5:Sample Allowed Variables
Refer to the Dell Networking W-AirWave 8.0 User Guide or detailed information about templates and variables.
Adding Additional Instant APs to AirWave
After the first Instant device has been provisioned and set up in AirWave, additional Instant networks in other
locations can be added and provisioned automatically. To do this, set the Automatically Authorized Virtual
16 | Using Template ConfigurationDell Network ing W-Ins tant in W-AirWave 8.0 | Deployment Guide
Page 17
Controller Mode option to Manage Read/Write on the AMP Setup > General page.
Figure 6:Setting devices to Manage Read/Write mode
When the second Instant contacts AirWave using the DHCP server options as described previously, and that
second Instant device has the same Shared key, it shows up on AirWave. Because the devices are in ManageRead/Write mode, there is no need for manual intervention to provision these new Instant networks. The new
networks will automatically be placed into the same group (if this is the desired configuration), but a new folder
will be created to contain these devices.
Keep Dell Networking W-Instant devices in Monitor Only mode to audit the device and to ensure that configurations are
not automatically pushed. This practice is consistent with the rest of AirWave.
The golden template configuration from the first Instant network is used to provision the second Instant
network in the new folder. When provisioning is complete, the status of the device will change from Verifying to
Good.
Adding Multiple Devices from a File
You can add devices in bulk from a file to AirWave. Here you also have the option of specifying vendor name
only, and AirWave will automatically determine the correct type while bringing up the device. If the .csv file
includes make and model information, AirWave will add the information provided in the file. It will not override
what you have specified in this file in any way.
The CSV list must contain the following columns:
l IP Address
l SNMP Community String
l Name
l Type
l Auth Password
l SNMPv3 Auth Protocol
l Privacy Password
l SNMPv3 Privacy Protocol
l SNMPv3 Username
l Telnet Username
l Telnet Password
l Enable Password
l SNMP Port
You can download and customize a file.
1. To import a CSV file, go to the Device Setup > Add page.
Dell Network ing W-Ins tant in W-AirWave 8.0 | Deployment GuideUsing Template Configuration | 17
Page 18
2. Click the Import Devices via CSV link. The Upload a list of devices page displays. See Figure 7.
3. Select a group and folder into which to import the list of devices.
4. Click Choose File and select the CSV list file on your computer.
5. Click Upload to add the list of devices to AirWave.
Changing the Mode to Monitor Only for New Instant Devices
A best practice for using Instant in AirWave is to change the mode for new devices to Monitor Only. This ensures
that the configuration for the new devices does not get unintentionally overwritten and is a consistent behavior
and practice throughout AirWave.
1. Navigate to AP/Devices > List page.
2. Filter the devices by the folder name using the Folder drop down menu on the top portion of the page.
3. Select the Modify Devices (wrench) icon, and select all devices.
4. Select the Monitor Only radio button.
5. Click the Management Mode button. This opens the Confirm Changes page. You can apply the changes
now or schedule the change to be applied later.
18 | Using Template ConfigurationDell Network ing W-Ins tant in W-AirWave 8.0 | Deployment Guide
Page 19
Figure 8:Changing the mode to Monitor Only
Editing Variables
Dell Networking W-AirWave includes support for editing variables on virtual controllers that have different
values. Some common variables include Name, LAN IP Address, Syslog Server, Timezone, Radius Servers, and RF
Band Selection. Dell Networking W-AirWave also supports additional generic variables that you can customize
(such as adding a new WLAN). The defaults for all VC variables can be changed from the Template page.
Perform the following steps to begin editing variables on virtual controllers.
1. On the APs/Devices > List page, select Modify Devices (wrench icon), and then select the check box beside
the virtual controllers that you want to edit.
Figure 9:Select the VCs to update
2. Click the Update button next to the Dell Networking W-Instant Virtual Controller Variables field. The opens
the Variable Edit page.
Refer to the following sections for information on using the Variable Edit page:
l "Editing Individual Virtual Controller Values" on page 20
l "Bulk Editing of Multiple Virtual Controllers" on page 20
Dell Network ing W-Ins tant in W-AirWave 8.0 | Deployment GuideUsing Template Configuration | 19
Page 20
l "Using Custom Variables" on page 21
l "Applying Changes" on page 22
Editing Individual Virtual Controller Values
After you click Update in the Modify Devices form, the Variable Edit screen displays. This screen includes two
sections. The lower section includes editable fields. Enter values or select options directly in these fields to make
changes on individual controllers. In the example below, the VC names are changed from Instant-C0:87:54 and
Instant-CF:93:D2 to Store-00001 and Store-00002 respectively.
Figure 10:Change the Individual VC Names
Bulk Editing of Multiple Virtual Controllers
The upper section of the Variable Edit page includes a drop down menu of variables that can be used to apply
bulk changes to all VCs that you select in the lower section.
Perform the following steps to apply bulk edits.
1. In the edit screen, select the check box beside the virtual controller(s) that will be edited. (See Figure 11.)
2. Select the variable that you want to change from the drop down list in the upper section.
3. Enter or select the new value. In the example below, clock_timezone is changed to Pacific time for both VCs.
4. Click Apply when you are finished making each change. The selected virtual controllers will display the
updated information. Follow these same steps for each variable that you want to edit.
The Apply button remains disabled until a virtual controller is selected (via its check box).
20 | Using Template ConfigurationDell Network ing W-Ins tant in W-AirWave 8.0 | Deployment Guide
Page 21
Figure 11:Change the Timezone variable
Using Custom Variables
The Variable Edit page includes additional generic fields, labeled as custom_variable_1 through custom_
variable_10. The custom_variable_1 field can be used to add multiple lines of text rather than a single entry (as
indicated by the larger note field on the UI.) This is useful, for example, if you want to add a new
WLANconfiguration to a VC. Other variables can be used to enter additional, single support commands.
The process for creating custom variables is the same as that used in editing available variables. To create a
custom variable on a single VC, use the horizontal scroll bar (if necessary) to locate the variable you want to edit,
and type directly into that field. To add the same custom variable to all virtual controllers, select the check box
beside the VCs you want to edit, select the variable from the drop-down menu at the top of the edit page, enter
the variable information, and then click Apply.
Your template must support or contain the commands and/or configuration that you add using the custom variables in
order for any changes to be pushed to your devices.
In the image below, a new WLANconfig is added to Store-00001 with the following configuration:
wlan access-rule 0ttt
rule any any match any any any permit
wlan ssid-profile 0ttt
type employee
essid 0ttt
wpa-passphrase 8d072cdea5bcec1eaae3cb597975951fbd7d7124120e3217
opmode wpa2-psk-aes
max-authentication-failures 0
rf-band all
captive-portal disable
dtim-period 1
inactivity-timeout 1000
broadcast-filter none
dmo-channel-utilization-threshold 90
Dell Network ing W-Ins tant in W-AirWave 8.0 | Deployment GuideUsing Template Configuration | 21
Page 22
Figure 12:Entering a custom variable (cropped)
Applying Changes
Select Save when you are done updating variables.
All changes will be lost if you do not click Save.
The Confirm Changes page opens, displaying your recent edits. At this point, you can apply changes
immediately, you can schedule to apply the changes at a later time, or you can cancel.
Figure 13:Confirm Changes page
Selecting Cancel returns you to the Variable Edit page, where your latest edits will still be visible. Click Cancel
again to return to the APs/Devices > List page with no changes saved or applied.
22 | Using Template ConfigurationDell Network ing W-Ins tant in W-AirWave 8.0 | Deployment Guide
Page 23
Chapter 4
Using Instant Config
Instant Config provides an alternate method for configuring and managing devices running Instant 3.2 to
Instant 4.0. After Instant devices are added to a group, this feature is available when you select Enable Instant
GUIConfig option on the Groups > Basic page. When this feature is enabled, the Groups >Templates ,
APs/Devices > Manage, and APs/Devices > Audit pages are unavailable. Instead, all IAP management is
performed from the Instant Config pages in AirWave.
Instant Config is fully compatible with devices running Instant version 3.2 to 4.0. Instant devices running different
firmware versions cannot reside in the same group. Each group can only include devices with the same firmware
version.
Refer to the following sections for more information:
l "Enabling Instant Config" on page 23
l "Buttons and Icons in Instant Config" on page 24
l "Importing Devices for Instant Config" on page 25
l "The Instant Config UI" on page 26
l "Where to Get Additional Information" on page 30
Enabling Instant Config
The Groups > Instant Config pages are not available by default. Perform the following steps to enable this
feature.
1. On the Groups > List page, click Add.
2. Name the group, and click Add.
3. On the Groups >Basic page, scroll down to the Group Display Options section. Ensure that the ShowDevice Settings for option includes Instant devices. Instant Config is only available for groups that include
Instant devices. The following image specifies to include only selected Instant devices.
Figure 14:Include Instant devices
4. Save and apply changes. Upon completion, you are directed to the Groups > Monitor page. Navigate back
to the Groups >Basic page.
5. In the Aruba/Dell Networking W Instant section, specify Yes for the Enable Instant GUI Config option.
Dell Network ing W-Ins tant in W-AirWave 8.0 | Deployment GuideUsing Instant Config | 23
Page 24
6. Click Save and Apply.
Figure 15:Enable Instant Config
Buttons and Icons in Instant Config
Table 2 describes the buttons and icons that are available on the Instant Config pages.
Table 2: Instant Config Buttons and Icons
FunctionImageDescription
Audit
Auditing or
applying
configuration
CancelCancels the current edit or task.
DeleteDeletes a network.
DownIndicates a device is down.
Employee
Usage
Filter (Funnel
icon)
Guest Usage
On the AirWave >Config Archive page for a device,
select this to audit a device's configuration.
Indicates that the device is undergoing an audit or that a
new configuration is being applied.
Indicates the network is used for Employee data.
Filters a list by values of the selected column. To reset all
filters in all columns, click the Reset filters link at the
bottom of the table.
Indicates that the network is used for Guest data. This is
normally used when captive portal is enforced.
MismatchedIndicates a mismatched device configuration.
Used with text entry fields to perform an edit across
Multi-Edit
24 | Using Instant ConfigDell Network ing W-Ins tant in W-AirWav e 8.0 | Deployment Guide
multiple devices. This option is only available when the
Instant Config focus is the Group. It is not available when
viewing devices or networks.
Page 25
Table 2: Instant Config Buttons and Icons (Continued)
FunctionImageDescription
Drag a note from the menu bar onto the configuration
Note
Override
Policy Error
page. Notes that are placed on configuration pages can
be used to indicate why you changed an option or setting.
Indicates that an override exists. Navigate to the
AirWave >Overrides page for the selected device to
view the override(s).
Indicates that AirWave is unable to push or compare
configurations because the policy version does not
match the firmware version.
Save
Save & Apply
Voice Usage
Saves the information on the current page in the
AirWave database.
Saves changes to AirWave’s database and applies all
changes.
NOTE: Instant Config does not currently allow users to
apply individual edits. After you click Save and Apply,
changes made on other pages that have not been
canceled will also be applied.
Indicates that the network is used for voice traffic. This is
normally used when all traffic must be prioritized.
Importing Devices for Instant Config
The section "Enabling Instant Config" on page 23 describes how to set up an Instant Config group. Devices that
areadded to this group can be managed using Instant Config.
When importing Instant devices in bulk to a new group, AirWave randomly selects the first device that it encounters and
uses that device as the "golden" configuration. The configuration is used across all other Instant networks. As a
recommended best practice, select a device that can be used as the golden configuration, and add it to the group
before adding any others. New devices that are added after the golden configuration device will include the
configuration from that golden device.
Add Newly Discovered Devices to a Group
1. Select the New Devices link in the header to launch the APs/Devices >New page where information about
all newly discovered devices is displayed Figure 16). You might launch a different page if you specified a
different location while defining a scan set.
The information on this page includes the related controller (when known/applicable), the device type
(including vendor and model), the LAN MAC Address, the IP address, and the date/time of discovery. See
Figure 16.
Dell Network ing W-Ins tant in W-AirWave 8.0 | Deployment GuideUsing Instant Config | 25
Page 26
Figure 16:APs/Devices > New Page
2. Select the check box beside the device or devices that you want to add.
3. Use the drop-down lists to select the Group and Folder to which the devices will be added. The default group
appears at the top of the Group list.
4. Select Add when you are done. At this point, you can go to the APs/Devices > List page and select the
folder that contains the newly added devices. This enables you to verify that the devices have been properly
assigned.
Devices cannot be added to a Global Group because groups designated as "Global Groups" cannot contain access
points.
The Instant Config UI
The Groups >Instant Config feature allows network administrators to configure Instant access points on the
network remotely through AirWave. The flow of pages within the Instant Config UI closely resemble the pages
available in Dell Networking W-Instant.
When performing Instant configurations within AirWave, be sure to have a copy of the Dell Networking W-Instant UserGuide available.
Figure 17:Groups > Instant Config
Group Focus
The Instant Config page opens in the Group focus. Figure 18 shows a group named "GDrive." Click the group
name to view the available devices.
26 | Using Instant ConfigDell Network ing W-Ins tant in W-AirWav e 8.0 | Deployment Guide
Page 27
Figure 18:Group Focus
Group focus is used to changes settings and apply those changes to all devices within the group.
Virtual Controller Focus
Virtual Controller focus is used to change settings for selected devices. From this page, you can add and
configure wired and wireless networks. Select a device from the Group list to change to Device focus. Navigation
at the top of the page indicates the currently selected device. The selected device is also highlighted in the list of
Devices.
In Figure 19, the Instant-C5:15:F6 device is selected. You can see that the device currently has two networks
configured.
Figure 19:Device Focus
Network Focus
Network focus is used to configuresettings for the networks available on each device, for example, the
authentication mode, access point radio settings, VPN settings, etc. From this page, you can also add and delete
wired and wireless networks.
Figure 20 shows the General settings for the "default_wired_port_profile" network on the Instant-C5:15:F6
device.
Dell Network ing W-Ins tant in W-AirWave 8.0 | Deployment GuideUsing Instant Config | 27
Page 28
Figure 20:Network Focus
Instant Config > AirWave
The IGC's AirWave menu provides options to view configuration history, configuration mismatches, and AP
events, as well as, settings that dictate how AirWaveinteracts with IAP groups and virtual controllers.
Mismatches
The Mismatches page displays the configuration mismatches for the selected virtual controller. For more
information about resolving mismatches through the Instant Config, see "Resolving Mismatches when Instant
Config is Enabled" on page 34.
AP Events
The AP Events page provides a list of events pertaining to the selected virtual controller since being discovered
by AirWave.
Figure 21:AirWave > AP Events
Config History
Config History displays the current and previous configurations on the selected virtual controller as well the delta
between the two configurations.
28 | Using Instant ConfigDell Network ing W-Ins tant in W-AirWav e 8.0 | Deployment Guide
Page 29
Figure 22:AirWave > Config History
Config Archive
The Config Archive page displays the current running configuration on the selected virtual controller.
Additionally, you can run an audit on the selected virtual controller's configuration.
Clicking on the caret displays drop-down list of all audited configurations. By selecting two configurations and
clicking Delta, you can view the difference between any two configurations.
AirWave Settings
The AirWave Setting page changes depending on whether or not a virtual controller is specified.
With A Virtual Controller Specified
This page allows you to enter and save the latitude, longitude, altitude in meters, and any notes about the
specified virtual controller.
Figure 23:AirWave Settings (VC Selected)
Without A Virtual Controller Specified
This page contains a number options that allow AirWave to automatically make changes to certain settings on
any virtual controller connected to the AirWave server.
Dell Network ing W-Ins tant in W-AirWave 8.0 | Deployment GuideUsing Instant Config | 29
Page 30
l Auto-configure Virtual Controller - Selecting Yes allows AirWave to automatically push configuration to
new virtual controllers when the are added to the group.
l Allow Configuration of Country Code: Selecting Yes allows you to manually configure the country code
for the group under IGC > Settings > General > Country Code. When No is selected, the previously
described field is grayed-out. This is set to No by default.
l Allow configuration of AirWave Settings: Selecting Yes allows you manually configure the AirWave field
under IGC > Settings > Admin. When No is selected, the previously described field is grayed-out and
AirWave pushes this information to each virtual controller in the group. This is set to No be default.
l Policy Version and Copy policy from group: These options cannot be executed at the same time.
n Policy Version: This displays the current policy version, and when selected, allows you to select another
from the drop-down menu.
n Copy policy from group: When selected, this option allows you to copy the policy from another group.
Figure 24:AirWave Settings (No VC Selected)
Where to Get Additional Information
Field-Level Help
The Instant Config pages include field-level help. Click the Help link ()in the upper-right portion of the page
to turn on field-level help. Once enabled, the field labels switch to green italics font. Mouse over each field to
view the field-level help.
Figure 25:Field-level help
Additional Documentation
Refer to the following documents for additional information.
30 | Using Instant ConfigDell Network ing W-Ins tant in W-AirWav e 8.0 | Deployment Guide
Page 31
l Dell Networking W-Instant 6.4.3.0-4.2 User Guide
l Dell Networking W-Instant6.4.3.0-4.2 Quick Start Guide
l Dell Networking W-Instant 6.4.3.0-4.2 Release Notes
l Dell Networking W-AirWave 8.0 Release Notes
Dell Network ing W-Ins tant in W-AirWave 8.0 | Deployment GuideUsing Instant Config | 31
Page 32
32 | Using Instant ConfigDell Network ing W-Ins tant in W-AirWav e 8.0 | Deployment Guide
Page 33
Chapter 5
Other Available Tasks
The following additional tasks can be completed in AirWave. These include configuration and monitoring tasks.
l "Resolving Mismatches" on page 33
l "Enabling the IAP Role" on page35
l "Monitoring Devices" on page 36
l "Run Commands" on page 36
Resolving Mismatches
After adding a device, the new device will appear in AirWave as two devices: the first is the Virtual Controller for
that Instant network, and the second is the access point itself. In some cases, the Instant device shows up as
having Mismatched configuration. This occurs when the AirWave information was received from Instant via the
DHCP server (i.e, was not manually configured). The method for resolving mismatches varies based on whether
Instant Config is enabled.
l "Resolving Mismatches when Instant Config is Disabled" on page 33
l "Resolving Mismatches when Instant Config is Enabled" on page 34
Resolving Mismatches when Instant Config is Disabled
When Instant Config is disabled, configuration for IAP devices is done via the Instant UI. In this case, AirWave is
used to monitor the devices, and when necessary, to update the Instant template and variables within the
template.
Clicking on the mismatched device opens the audit page of the device, showing the reason for the mismatch. The
configuration shows the desired configuration versus the current Instant configuration. As shown in the
following image, the AirWave IP address, shared secret, and organization string has to be provisioned on the
Instant device.
Dell Network ing W-Ins tant in W-AirWave 8.0 | Deployment GuideOther Available Tasks | 33
Page 34
Figure 26:APs/Devices > Audit page
Perform the following steps to resolve the mismatch.
1. Navigate to the AP/Devices > Manage page for that Instant device.
The APs/Devices >Manage page is not available when Instant Config is enabled.
2. Change the Management Mode option to Manage Read/Write.
3. Click on Save and Apply at the bottom on the page.
4. When the Confirm changes page opens, click on Apply Changes Now for the changes take effect.
Upon completion, the configuration will be synced to the Instant network. The status of the device will initially
display as ‘Verifying’ during this process. The status will change to ‘Good’ after the provisioning is successful.
This is the same process for any configuration change sync that is done in future.
Resolving Mismatches when Instant Config is Enabled
In Instant Config, mismatches are indicated with a red, unequal symbol ( ) beside the device name. Click on the
device name, then navigate to AirWave >Mismatches to view the details for mismatch. Click Apply All at the
bottom of the page to resolve the mismatches.
The Apply All button resolves all mismatches. You cannot select individual mismatches to resolve.
34 | Other Available TasksDell Networking W-Instant in W-AirWave 8.0 | Deployment Guide
Page 35
Figure 27:Viewing mismatches in Instant Config
Enabling the IAP Role
As shown previously, new IAP devices can be added to AirWave automatically. In some cases, after a device is
added, the Admin may want to enable store-specific access. In this case, the Admin might enable a specific IAP
role.
1. Enable the newly created Admin User Role in AMP Setup > Roles, as shown in Figure 28.
Figure 28:Enable Admin User Roles in AMP Setup > Roles
2. In Groups > Template for the newly created group, verify the first Virtual Controller's auto-created
template.
Dell Network ing W-Ins tant in W-AirWave 8.0 | Deployment GuideOther Available Tasks | 35
Page 36
The auto-created template is most useful if the first Virtual Controller for the top-level Organization String is fully
configured on-site before it is pointed at AirWave in the Virtual Controller’s UI.
3. Evaluate, approve, or ignore incoming Virtual Controllers with a different top level Organization String and/or
Shared Secret in the APs/Devices > New list. Subsequent IAPs are auto-authorized if they have an
Organization/Shared Secret key that matches the Shared Secret key of any existing authorized Virtual
Controller in the top-level Organization String.
4. Set the initial Virtual Controller to Manage Read/Write mode and push the good configuration to the
subsequent IAPs.
5. Set up AirWave users to have access to specific folders, if desired.
Monitoring Devices
Use the APs/Devices > Monitor page to monitor your Instant devices. AirWave provides you with detailed
information for your virtual controller, APs, and radios. This information includes spectrum interferers, rogue
clients, and channel utilization. The image below shows an example of radio statistics.
Figure 29:Monitoring Radios
Run Commands
If you are running a minimum of IAP 3.2, then AirWave provides a set of commands that you can run from the
virtual controller and from the AP. On the virtual controller, you also have option to run commands for all APs as
well as for the current virtual controller.
When you first run a command, the results can take up to a minute to appear. For subsequent commands, the results
will appear after one or two seconds.
36 | Other Available TasksDell Networking W-Instant in W-AirWave 8.0 | Deployment Guide
Page 37
Figure 30:Run Commands
Dell Network ing W-Ins tant in W-AirWave 8.0 | Deployment GuideOther Available Tasks | 37
Page 38
38 | Other Available TasksDell Networking W-Instant in W-AirWave 8.0 | Deployment Guide
Page 39
Chapter 6
Best Practices and Known Issues
This section describes some best practices to follow when using AirWave to monitor and configure Instant
devices. It also includes some known issues to take into consideration when using AirWave. This list is inclusive of
the AirWave release notes and Instant release notes.
Best Practices
l Keep Instant devices in Monitor Only mode to audit the device and to ensure that configurations are not
automatically pushed. This practice is consistent with the rest of AirWave.
l Be sure that the default configuration is validated and has been pre-tested in a non-production environment
prior to applying it to a production network. Any changes that are made to this configuration will follow the
same process each time and will be applied to other Instant networks.
l If you modify an IAP device's configuration through the Instant user interface, we recommend that you put
the device in Manage Mode, and then use the Import Settings button from the APs/Devices > Manage
page. When using this method instead of Instant Config, you can import settings and update the template
from a single page. Import the settings and then wait approximately a minute. If you find that you need to
also update the template, the APs/Devices > Manage page for the Virtual Controller provides a link to
quickly access the template.
Known Issues with the Instant Integration with AirWave
l If the Organization String configured on the Instant device is different than what is statically written in the
template, AirWave will overwrite the configured Organization String to match the template.
l The Instant primary device sends an update message to AirWave every minute. If the send fails, then the
device will continue to send a state message every two seconds. If the send fails 25 times, then Instant will
determine that AirWave is down.
Dell Network ing W-Ins tant in W-AirWave 8.0 | Deployment GuideBest Practicesand Known Issues | 39
Page 40
40 | Best Practicesand Known IssuesDell Networking W-Instant in W-AirWave 8.0 | Deployment Guide
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.