Xirrus XR Series User Manual
  1. Manuals
  2. Brands
  3. Xirrus Manuals
  4. Speaker System
  5. XR Series
  6. User manual

Xirrus XR Series User Manual

Wireless arrays and access points
Hide thumbs Also See for XR Series:
Table of Contents

Advertisement

Quick Links

USER'S GUIDE
Wireless Arrays and
Access Points
XR Series
November 26, 2013
Release 6.7
High Performance Wireless Networks

Advertisement

Table of Contents
loading

Related Manuals for Xirrus XR Series

Summary of Contents for Xirrus XR Series

  • Page 1 USER’S GUIDE Wireless Arrays and Access Points XR Series November 26, 2013 Release 6.7 High Performance Wireless Networks...
  • Page 3 Wireless Arrays ™ and Access Points XR Series All rights reserved. This document may not be reproduced or disclosed in whole or in part by any means without the written consent of Xirrus, Inc. Part Number: 800-0022-001 (Revision J)
  • Page 4 Trademarks is a registered trademark of Xirrus, Inc. All other trademarks and brand names are marks of their respective holders. Please see Legal Notices, Warnings, Compliance Statements, and Warranty and License Agreements in “Appendix C: Notices (Arrays except XR-500/600 and Models Ending in H)”...

  • Page 5: Table Of Contents

    Introduction ..................1 The Xirrus Family of Products ................1 Nomenclature ....................2 Why Choose the Xirrus Wireless Array? .............. 3 Wireless Array Product Overview ................ 4 XR Wireless Array Product Family ..............6 XR-500 Series Access Points ..............6 XR-600 Series Access Points ..............
  • Page 6 Wireless Array About this User’s Guide ..................21 Organization ....................21 Notes and Cautions ..................23 Screen Images ....................23 Product Specifications ................... 24 Installing the Wireless Array............25 Installation Prerequisites ..................25 Optional Network Components ..............27 Client Requirements ..................27 Planning Your Installation ..................
  • Page 7 Wireless Array Common Deployment Options ..............57 Installation Workflow ................... 58 Installing Your Wireless Array ................60 Choosing a Location ..................60 Wiring Considerations ................61 Mounting and Connecting the Array ............63 Dismounting the Array .................. 63 Powering Up the Wireless Array ................. 64 Array LED Operating Sequences ..............
  • Page 8 Wireless Array Array Configuration ..................99 Admin History ....................100 Network Status Windows ................... 100 Network ......................101 Network Map ....................102 Content of the Network Map Window ..........103 Spanning Tree Status ..................105 Routing Table ....................106 ARP Table ...................... 106 DHCP Leases ....................
  • Page 9 Time Settings (NTP) ..................181 NetFlow ......................184 Wi-Fi Tag ....................... 185 Location ......................186 System Log ..................... 188 About Using the Splunk Application for Xirrus Arrays ....191 SNMP ......................193 DHCP Server ....................196 VLANs ........................199 Understanding Virtual Tunnels ............199 VLAN Management ..................
  • Page 10 Wireless Array Admin Management ..................214 Admin Privileges ..................216 Admin RADIUS .................... 218 About Creating Admin Accounts on the RADIUS Server ..... 218 Management Control ................... 221 Access Control List ..................228 Global Settings ....................230 External Radius ..................... 234 About Creating User Accounts on the RADIUS Server ....
  • Page 11 Wireless Array Global Settings .11an ..................298 Global Settings .11bgn .................. 303 Global Settings .11n ..................309 Global Settings .11ac ..................312 Global Settings .11u ..................314 Understanding 802.11u ................. 314 Advanced RF Settings .................. 320 About Standby Mode ................321 RF Monitor ....................
  • Page 12 Wireless Array Cluster Management ................... 362 Cluster Operation ..................363 Mobile ........................366 AirWatch ......................366 User Procedure for Wireless Access ........... 368 Using Tools on the Wireless Array..........371 System Tools ......................372 About Licensing and Upgrades ............373 System .....................
  • Page 13 Wireless Array acl ........................410 admin ......................411 auth ......................... 412 cdp ........................412 clear ......................... 414 cluster ......................416 contact-info ....................417 date-time ......................418 dhcp-server ....................419 dns ........................420 file ........................421 filter ......................... 425 Air Cleaner ..................... 426 group ......................
  • Page 14 Wireless Array uptime ......................451 vlan ........................451 wifi-tag ......................452 Sample Configuration Tasks ................454 Configuring a Simple Open Global SSID ..........455 Configuring a Global SSID using WPA-PEAP ......... 456 Configuring an SSID-Specific SSID using WPA-PEAP ......457 Enabling Global IAPs ...................
  • Page 15 Enabling Monitoring on the Array ............. 488 How Monitoring Works ................488 Radio Assurance ................... 489 Radio Assurance Options ..............490 RADIUS Vendor Specific Attribute (VSA) for Xirrus ........491 Location Service Data Formats ................492 Euclid Location Server ................. 492 Non-Euclid Location Server ................ 492 Upgrading the Array via CLI ................
  • Page 16 Wireless Array Appendix E: Medical Usage Notices ..............545 Glossary of Terms................551 Index....................563...

  • Page 17: List Of Figures

    Wireless Array List of Figures Figure 1. Xirrus Arrays: XR Series ................1 Figure 2. Wireless Array (XR Series) ................ 4 Figure 3. Wireless Coverage Patterns ..............12 Figure 4. XP8 - Power over Ethernet Usage ............13 Figure 5.
  • Page 18 Wi-Fi Array Figure 35. Notice for XMS-Managed Array ............78 Figure 36. Web Management Interface—Option = New Style......80 Figure 37. Web Management Interface—New Style (Default) ......80 Figure 38. Web Management Interface—Option = Classic Style ......81 Figure 39. Web Management Interface—Classic Style .......... 81 Figure 40.
  • Page 19 Wireless Array Figure 72. Station RSSI Values ................129 Figure 73. Station RSSI Values — Colorized Graphical View ......129 Figure 74. Station Signal-to-Noise Ratio Values ..........130 Figure 75. Station SNR Values — Colorized Graphical View......131 Figure 76. Station Noise Floor Values ..............132 Figure 77.
  • Page 20 Figure 119. Tunnel Management ................205 Figure 120. Tunnel SSID Assignments..............207 Figure 121. Security..................... 208 Figure 122. Import Xirrus Certificate Authority............. 212 Figure 123. Admin Management ................214 Figure 124. Admin Privileges ..................216 Figure 125. Admin RADIUS ..................219 Figure 126.
  • Page 21 Wireless Array Figure 146. Group Management ................271 Figure 147. IAPs......................276 Figure 148. Source of Channel Setting ..............277 Figure 149. IAP Settings ..................... 279 Figure 150. Global Settings (IAPs) ................285 Figure 151. Global Settings .11an ................298 Figure 152.
  • Page 22 Wi-Fi Array Figure 183. System Command (Ping)............... 383 Figure 184. Radius Ping Output................384 Figure 185. CLI Window .................... 385 Figure 186. API Documentation................387 Figure 187. API — Settings Requests List..............388 Figure 188. API — GET Request Details ..............389 Figure 189.

  • Page 23: Introduction

    Wireless Array Introduction These topics introduce the Xirrus Wireless Array, including an overview of its key features and benefits. “The Xirrus Family of Products” on page “Why Choose the Xirrus Wireless Array?” on page “Wireless Array Product Overview” on page “Key Features and Benefits”...

  • Page 24: Nomenclature

    ArrayOS. The Web Management Interface for browser-based management of the Array is referred to as WMI. The XR Series Arrays have very flexible radio capabilities — each of the radios may be independently configured to support IEEE802.11a, 11b, 11g, or 11n clients or a combination of client types.

  • Page 25: Why Choose The Xirrus Wireless Array

    Wireless Array The Xirrus Management System is referred to as XMS. The Power over Gigabit Ethernet system may be referred to as PoGE. Why Choose the Xirrus Wireless Array? The deployment of wireless is a necessity as businesses strive for greater flexibility in the workplace and the need for employee mobility rises.

  • Page 26: Wireless Array Product Overview

    Wireless Array Whether you have just a handful of users or thousands of users, the Xirrus Array has the scalability and flexibility to serve your needs. See Also Key Features and Benefits Wireless Array Product Overview The Xirrus Family of Products...
  • Page 27 Wireless Array Multiple versions of the Array with different numbers of Integrated Access Points (IAPs) support a variety of deployment applications. Introduction...

  • Page 28: Xr Wireless Array Product Family

    Wireless Array XR Wireless Array Product Family XR-500 Series Access Points These Access Points have one Gigabit Ethernet port and two radios—one multi- state radio (2.4GHz or 5GHz) and one 5GHz radio. They support 300Mbps, connecting up to 240 users at one time. The XR-500 provides flexibility for delivering wireless service in low-to-medium user density scenarios, in challenging deployments in areas with high RF attenuation, and in isolated or physically separated locations.

  • Page 29: Series Access Points

    Wireless Array XR-600 Series Access Points The XR-600 Series provides robust wireless service in low-to-medium user density scenarios. These Access Points have two Gigabit Ethernet ports and two multi-state radios (2.4GHz or 5GHz). Each of the XR-630’s 3x3 802.11ac radios supports 1.3Gbps, connecting up to 240 users at one time with 2.6Gbps total Wi-Fi bandwidth.
  • Page 30 (2.4GHz or 5GHz) that can support 300Mbps or 450Mbps, connecting up to 480 users at one time. The Xirrus XR-1000 Series Wireless Array is a two slot chassis available in a two multi-state (2.4GHz or 5GHz) radio configuration with up to 900Mbps of bandwidth (up to 450 Mbps per radio).

  • Page 31: Xr-2000 Series Arrays

    (2.4GHz or 5GHz) that can support 300Mbps or 450Mbps, connecting up to 960 users at one time. The Xirrus XR-2000 Series Wireless Array is a four slot chassis available in a four multi-state (2.4GHz or 5GHz) radio configuration supporting up to 1.8Gbps of bandwidth.

  • Page 32: Xr-4000 Series Arrays

    Wireless Array ports, one of which accepts POE+ power supplied by a Xirrus-supplied power injector or an IEEE802.3at powered switch. XR-4000 Series Arrays These Arrays include models with two Gigabit Ethernet ports and four or eight radios (IAPs), connecting up to 1920 users at one time and offering a maximum wireless bandwidth of 3.6 Gbps (up to 450 Mbps per radio).

  • Page 33: Xr-6000 Series Arrays

    A 10 Gigabit modular Ethernet expansion port (DVI connector) is available to meet high traffic demands. It is used only with an optional Xirrus 10 Gig fiber optics adapter. Feature Number of radios: 802.11a/b/g/n/monitor...

  • Page 34: Enterprise Class Security

    RF spectrum analysis are performed in the background by the Array automatically. Deployment Flexibility Xirrus’ unique multi-radio architecture (on all Arrays except the XR-500 Series) generates 360 degrees of sectored high-gain 802.11a/b/g/n coverage that provides extended range and the highest possible data rates for a large volume of clients.

  • Page 35: Power Over Gigabit Ethernet (Poge)

    Some smaller Arrays and APs (XR-500/600 and XR-2005 Series) are compatible with IEEE802.3af and/or IEEE802.3at PoE+, and may be connected to appropriate powered switches. For example, the Xirrus XT-5024 and XT-5048 are 24-and 48- port 802.3at POE+ managed switches. See the Quick Installation Guide for the Array/AP for compatible injectors or powered switches.

  • Page 36: Enterprise Class Management

    Wireless Array Specific models of the Array are compatible with specific PoGE modules. Enterprise Class Management The Wireless Array can be used with its default settings, or using zero touch cloud-based automated provisioning. Settings may also be customized using the Array’s embedded Web Management Interface (WMI).

  • Page 37: Key Features And Benefits

    Wireless Array Management Protocol) is also supported to allow management from an SNMP compliant management tool, such as the optional Xirrus Management System. For deployments of more than five Arrays, we recommend that you use the on-premise or cloud-based Xirrus Management System (XMS). XMS offers a rich set of features for fine control over large deployments.

  • Page 38: Extended Coverage

    Also supports fast inter-zone handoffs for time-sensitive applications and roaming. Fast Roaming Utilizes the Xirrus Roaming Protocol (XRP) ensuring fast and seamless roaming capabilities between IAPs or Arrays at both Layer 2 and Layer 3. Ease of Deployment The Xirrus Mobilize service simplifies and speeds deployment of the wireless network by automatically setting up each Array’s license, software image, and...

  • Page 39: Powerful Management

    XR Arrays. Application Control is an optional feature. Xirrus Advanced RF Performance Manager (RPM) The Xirrus RPM optimizes the bandwidth usage and station performance of 802.11n wireless networks. Leveraging the multiple integrated access point (multi-radio) design of the Xirrus Wireless Array, RPM manages the allocation of Introduction...

  • Page 40: Xirrus Advanced Rf Security Manager (Rsm)

    Standby Mode Xirrus Advanced RF Security Manager (RSM) The Xirrus RSM improves security and minimizes the risk in deploying 802.11n wireless networks. Leveraging an integrated 24/7 threat sensor and hardware- based encryption/decryption in each Array, RSM secures the wireless network...

  • Page 41: Xirrus Advanced Rf Analysis Manager (Ram)

    The deployment of 802.11n presents a set of unique challenges based on technology differences with legacy 802.11a/b/g networks, both on the wireless infrastructure and client side. Xirrus' RAM equips each Wireless Array with a powerful set of tools and features to optimally tune and verify an 802.11n installation, as well as give IT administrators the ability to troubleshoot issues that may occur within the wireless environment.

  • Page 42: Xirrus Application Control

    Netflow Support Network Tools: ping, RADIUS ping, traceroute Xirrus Application Control The Application Control feature is available on XR Arrays to provide real-time visibility of application usage by users across the wireless network. Network usage has changed enormously in the last few years, with the increase in smartphone and tablet usage stressing networks.

  • Page 43: About This User's Guide

    Wireless Array VoIP and WebEx. See “Application Control Windows” on page 147 for more information. About this User’s Guide This User’s Guide provides detailed information and procedures that will enable wireless network administrators to install, configure and manage the Wireless Array so that end users can take full advantage of the product’s features and functionality without technical assistance.
  • Page 44 Contains the legal notices, licensing, and compliance statements for the XR500 Series Access Points. Please read this section carefully if you are using these models. Glossary of Terms Provides an explanation of terms directly related to Xirrus product technology, organized alphabetically. Introduction...

  • Page 45: Notes And Cautions

    Wireless Array Index The index is a valuable information search tool. Use the index to locate specific topics discussed in this User’s Guide. Simply click on any page number in the index to jump to the referenced topic. Notes and Cautions The following symbols are used throughout this User’s Guide: This symbol is used for general notes that provide useful supplemental information.

  • Page 46: Product Specifications

    Wireless Array Product Specifications Please refer to the Xirrus web site for the latest specifications for these Arrays— www.xirrus.com Introduction...

  • Page 47: Installing The Wireless Array

    See the Quick Installation Guide for the Array/AP for compatible injectors or powered switches. Ethernet ports You need at least one 100/1000 BaseT port to establish wired Gigabit Ethernet connectivity. XR Series Arrays have one, two, or four Gigabit Installing the Wireless Array...
  • Page 48 SSH-2, since the Array will only allow SSH-2 connections. Secure Web browser Xirrus supports the latest version of the following Browsers: Internet Explorer, Mozilla Firefox, Chrome, or Safari. A secure Web browser is required for Web-based management of the Array. The browser must be on the same subnet as the Array, or you must set a static route for management as described in the warning above.

  • Page 49: Optional Network Components

    Wireless Array Optional Network Components The following network components are optional. Xirrus Management System (XMS) The optional XMS offers powerful management features for small or large Wireless Array deployments. External RADIUS server Although your Array comes with an embedded RADIUS server, for 802.1x authentication in large deployments you may want to add an...

  • Page 50: Planning Your Installation

    Wireless Array Planning Your Installation This section provides guidelines and examples to help you plan your Xirrus Wireless Array deployment to achieve the best overall coverage and performance. We recommend you conduct a site survey to determine the best location and settings for each Array you install.

  • Page 51: Figure 7. Wall Thickness Considerations

    Wireless Array on the types of materials and background RF (radio frequency) noise at your location. To maximize wireless range, follow these basic guidelines: Keep the number of walls and ceilings between the Array and your receiving devices to a minimum — each wall or ceiling can reduce the wireless range from between 3 and 90 feet (1 to 30 meters).

  • Page 52: Coverage And Capacity Planning

    Wireless Array Coverage and Capacity Planning This section considers coverage and capacity for your deployment(s), including placement options, RF patterns and cell sizes, area calculations, roaming considerations, and channel allocations. XR-500 Series radios are omni-directional rather than directional (sectored), and discussions involving sectored radios are not applicable to these Arrays. Placement Use the following guidelines when considering placement options: The best placement option for the Array is ceiling-mounted within an...

  • Page 53: Rf Patterns

    Wireless Array RF Patterns The Wireless Array allows you to control — automatically or manually — the pattern of wireless coverage that best suits your deployment needs. You can choose to operate with full coverage, half coverage, or custom coverage (by enabling or disabling individual sectors).

  • Page 54: Capacity And Cell Sizes

    Wireless Array Custom Coverage Where there are highly reflective objects in proximity to the Array, you can turn off specific radios to avoid interference and feedback. reflective object Figure 11. Custom Coverage Capacity and Cell Sizes Cell sizes should be estimated based on the number of users, the applications being used (for example, data/video/voice), and the number of Arrays available at the location.

  • Page 55: Fine Tuning Cell Sizes

    “RF Power & Sensitivity” on page 323. For a complete discussion of the Auto Cell size feature, see the Xirrus Auto Cell Application Note in the Xirrus Resource Center. If you are installing many units in proximity to each other, we recommend that you use Auto Cell Size;...

  • Page 56: Roaming Considerations

    Wireless Arrays or other Access Points. To enable the Sharp Cell feature, go to “RF Power & Sensitivity” on page 323. For more information about this feature, see the Xirrus Sharp Cell Application Note in Xirrus Resource Center. Roaming Considerations Cells should overlap approximately 10 - 15% to accommodate client roaming.
  • Page 57 Wireless Array automatically selecting and setting channels on the Array to the best channels available. This function is typically executed when initially installing Arrays in a new location and may optionally be configured to execute periodically to account for changes in the RF environment over time. Auto Channel selection has significant advantages, including: Allows the Array to come up for the first time and not interfere with existing equipment that may be already running, thereby limiting co-...

  • Page 58: Figure 15. Allocating Channels Manually

    Wireless Array Manual Channel Selection You can manually assign channels on a per radio basis, though manual selection is not recommended (and not necessary). To avoid co-channel interference, do not select adjacent channels for radios that are physically next to each other. Maintain channel separation Figure 15.

  • Page 59: Ieee 802.11N Deployment Considerations

    Wireless Array IEEE 802.11n Deployment Considerations The Xirrus Arrays support IEEE 802.11n on all IAPs, in both 2.4 GHz and 5 GHz bands. Use of 802.11n offers significant benefits: Higher data rates Higher throughput Supports more users More robust connections Increased coverage area More secure connections —...

  • Page 60: Mimo (Multiple-In Multiple-Out)

    Wireless Array should review the settings for your deployment, especially channel bonding. A global setting is provided to enable or disable 802.11n mode. See “Global Settings .11n” on page 309 to configure 802.11n operation. MIMO (Multiple-In Multiple-Out) MIMO (Multiple-In Multiple-Out) signal processing is one of the core technologies of 802.11n.

  • Page 61: Multiple Data Streams - Spatial Multiplexing

    Wireless Array Multipath signals were considered to be interference by 802.11a/b/g radios, and degraded performance. In 802.11n, these signals are used to enhance performance. This extra sensitivity can be used for greater range or higher data rates. The enhanced signal is the processed sum of individual antennas. Signal processing eliminates nulls and fading that any one antenna would see.

  • Page 62: Channel Bonding

    Wireless Array Channel Bonding Channel bonding increases data rates by combining two adjacent 20 MHz channels into one 40 MHz channel. This increases the data rate to slightly more than double. A bonded 40 MHz channel is specified in terms of the Primary channel and the adjacent channel to Bond.

  • Page 63: Improved Mac Throughput

    Wireless Array Improved MAC Throughput These changes make 802.11n transmission of MAC frames 40% more efficient than legacy transmission: MAC data frames are combined and given a single PHY header. Implicit Block ACK acknowledges all data frames within a combined frame.

  • Page 64: Obtaining Higher Data Rates

    Wireless Array quality will suffer and throughput will decrease. See “Global Settings .11n” on page 309 to configure the guard interval. Obtaining Higher Data Rates The data rate increase obtained by using 802.11n on an Array is incremental, based on the technologies that are applied and the options that you select: Higher encoding rates (Mandatory in 802.11n) Spatial Streams (Mandatory, but multiplier varies directly with number of streams selected.)

  • Page 65: 802.11N Capacity

    Wireless Array 802.11n Capacity 802.11n offers major increases in capacity over previous 802.11 standards, as shown in the table below. 802.11 Mode # Channels Max Theoretical Capacity 802.11 a/n: 3 Streams 23 * 450 Mbps = 10.2 Gbps 802.11 a/n: 2 Streams 23 * 300 Mbps = 6.8 Gbps 802.11 a/n: 1 Stream 23 * 150 Mbps = 3.4 Gbps...
  • Page 66 Wireless Array In addition, the Array has full failover protection between the bonded-pair Gigabit ports (see following table). Bridges Bridges Fails Over Interface IP address Data? Management Traffic? Gigabit port Bonded DHCP or static port Bonded Bonded Same Gigabit port port The Wireless Array Gigabit Ethernet ports actually support a number of modes: 802.3ad Link Aggregation...

  • Page 67: Switch Failover Protection

    Wireless Array Switch Failover Protection To ensure that service is continued in the event of a switch failure, you can connect Arrays having multiple Gigabit ports to more than one Ethernet switch (not a hub). Ethernet connections Backup switch Ethernet switch Figure 23.

  • Page 68: Power Planning

    Wireless Array Power Planning All XR Series Array models support Power over Gigabit Ethernet (PoGE) with an integrated splitter. Power over Gigabit Ethernet To deliver power to the Array, you must use Xirrus-supplied Power over Gigabit Ethernet (PoGE) modules or powered switches. They provide power over Cat 5e or Cat 6 cables to the Array without running power cables —...

  • Page 69: Security Planning

    TTLS, EAP-PEAP, and EAP-LEAP Passthrough). Administrators may also be authenticated via RADIUS when preferred, or to meet particular security standards. Xirrus Internal RADIUS server Recommended for smaller numbers of users (about 100 or less). Supports EAP-PEAP only Installing the Wireless Array...
  • Page 70 Wireless Array Pre-Shared Key Uses a pass-phrase or key that is manually distributed to all authorized users. The same passphrase is given to client devices and entered into each Array. MAC Access Control Lists (ACLs) MAC access control lists provide a list of client adapter MAC addresses that are allowed or denied access to the wireless network, and can be used in addition to any of the above authentication methods.

  • Page 71: Port Requirements

    Wireless Array Port Requirements A number of ports are used by various Array features and by the Xirrus Management System (XMS). The Port Requirements table on page 50 lists ports and the features that require them (XMS port requirements are included in the table for your convenience).
  • Page 72 1645) RADIUS Accounting 1813, 1646 RADIUS Accounting (some servers still use Server 1646) 2055 udp Netflow Client 5000 tcp Virtual Tunnel VTUN Server 22610 udp XRP (Xirrus Roaming) Arrays 22612 udp Xircon (Console Utility) Admin Workstation Installing the Wireless Array...
  • Page 73 Wireless Array Port Application Peer Configurable icmp Ping Arrays 22 tcp Arrays 25 tcp SMTP Mail Server 123 udp NTP Server 161 udp SNMP Arrays Via XMS 162 udp SNMP Traphost 1 Arrays config file 443 tcp HTTPS Arrays Via XMS 514 udp Resident Syslog server Internal*...
  • Page 74 Wireless Array See Also Management Control External Radius Services VLAN Management Installing the Wireless Array...

  • Page 75: Network Management Planning

    (one or two units). Centralized Web-based management, using the optional Xirrus Management System (XMS), which can be run on a dedicated Xirrus appliance or your own server. The XMS is used for managing large...

  • Page 76: Wds Planning

    Wireless Array WDS Planning WDS (Wireless Distribution System) creates wireless backhauls between Arrays, allowing your wireless network to be expanded using multiple Arrays without the need for a wired backbone to link them (see Figure 25). WDS features include: One to three IAPs may be used to form a single WDS link, yielding up to 1350 Mbps bandwidth per link.

  • Page 77: Figure 26. A Multiple Hop Wds Connection

    Wireless Array Figure 26. A Multiple Hop WDS Connection Multiple WDS links can provide link redundancy (failover capability - see Figure 27). A network protocol (Spanning Tree Protocol — STP) prevents Arrays from forming network loops. Figure 27. WDS Failover Protection Installing the Wireless Array...
  • Page 78 Wireless Array WDS links have a Host/Client relationship similar to the usual IAP/station pattern for Arrays: A WDS Client Link associates/authenticates to a host (target) Array in the same way that a station associates to an IAP. The client side of the link must be configured with the root MAC address of the target (host) Array.

  • Page 79: Common Deployment Options

    Wireless Array Common Deployment Options The following table lists some typical and recommended deployment options for a number of the features that have been discussed in this chapter. Number of Wireless Arrays Function One or Two Three or More Power Power over Gigabit Power over Gigabit Ethernet Ethernet...

  • Page 80: Installation Workflow

    Wireless Array Installation Workflow This workflow illustrates the steps that are required to install and configure your Wireless Array successfully. Review this flowchart before attempting to install the unit on a customer’s network. Cloud XMS customers will skip the last two steps. Determine the number of Arrays needed Choose the location(s) for your Wireless Arrays Run Ethernet cables for PoGE...
  • Page 81 Wireless Array Failover Planning Installation Prerequisites Planning Your Installation Power Planning Wireless Array Product Overview Security Planning Installing the Wireless Array...

  • Page 82: Installing Your Wireless Array

    Wireless Array Installing Your Wireless Array This section provides information about the physical installation of your Xirrus Wireless Array. For complete instructions, please see the Quick Installation Guide (QIG) for your model of Array or Access Point. Choosing a Location Based on coverage, capacity and deployment examples previously discussed, choose a location for the Array that will provide the best results for your needs.

  • Page 83: Wiring Considerations

    Gigabit 1 or Gigabit 2. For models with no console port, such as the XR-500, XR-1000, and some XR-2000 models, the Xirrus Xircon utility may be used locally to set up an IP address if necessary.
  • Page 84 Wireless Array The Array’s Ethernet ports should be plugged into an Ethernet switch, not an Ethernet hub — if a hub is used, we recommend that you connect only one Ethernet port. See Also Failover Planning Installation Prerequisites Installation Workflow Mounting and Connecting the Array Power over Gigabit Ethernet (PoGE) Installing the Wireless Array...

  • Page 85: Mounting And Connecting The Array

    Array. Please follow the provided instructions carefully. Data and power connections to the Array are detailed in the Quick Installation Guide for the Array or Access Point model, also available at support.xirrus.com. Please follow the cabling and connection instructions carefully. Dismounting the Array For all Array models, push up on the Array (i.e., push it against the mounting...

  • Page 86: Powering Up The Wireless Array

    Wireless Array Powering Up the Wireless Array When powering up, the Array follows a specific sequence of LED patterns showing the boot progress, and following a successful boot will provide extensive status information. Ethernet Activity and Status LEDs IAP LEDs Figure 30.

  • Page 87: Array Led Operating Sequences

    Wireless Array Array LED Operating Sequences Use the following tables to review the operating sequences of the Array’s LEDs. “LED Boot Sequence” on page 65 “LED Operation when Array is Running” on page 66 LED Boot Sequence The normal boot LED sequence is as follows: Array Activity Status LED IAP LEDs...

  • Page 88: Led Operation When Array Is Running

    Wireless Array LED Operation when Array is Running The normal LED operation when the Array is running is shown in the table below. Note that behavior may be modified using “LED Settings” on page 340 via the CLI LED Status Reason IAP LED is OFF IAP is down...

  • Page 89: Establishing Communication

    LED Settings Establishing Communication If you are a Xirrus Cloud customer or if this Access Point is part of an XMS “profile” managed network, your Access Points are completely managed by XMS, and you will not be able to access CLI or the Web Management Interface under normal operating circumstances.

  • Page 90: User Interfaces (Cli, Wmi)

    Wireless Array settings for each Array before deployment. Settings may be duplicated from one Array to the next or entered in bulk. Please see the Xirrus Mobilize User’s Guide. Mobilize sets up an initial software image and configuration upon deployment of the Array.

  • Page 91: Figure 32. Network Interfaces-Xr-2000 Series (Left); Xr-2005 Series (Right)

    Gigabit 4 (gig4) Figure 34. Network Interface Ports—XR-6000 Series The Xirrus Xircon utility may also be used to communicate with Arrays locally as an alternative to using a serial connection to the console. This is especially useful for the XR-500 and XR-1000 Series and some XR-2000 models, which do not have a console port.

  • Page 92: Using The Serial Port

    DHCP and DNS, then you can use this hostname. Otherwise, examine the DHCP tables on the server and find the addresses assigned to the Array (Xirrus MAC addresses begin with 000F7D). Alternatively, you may query the Array using the CLI via the console port (on all models except the XR-500, XR-1000, and some XR-2000 models).

  • Page 93: Starting The Wmi

    Powering Up the Wireless Array Licensing When a newly deployed Array boots up, it automatically contacts Xirrus with its serial number and MAC address and obtains its license key, software image, and initial configuration. Any unlicensed Array will update in this way after it boots up, if it has Internet connectivity.

  • Page 94: Performing The Express Setup Procedure

    If you need to enter the license manually, use the following procedure. It describes entering the license key using the WMI. If you are using the Xirrus Management System (XMS), you may use it to manage and upgrade large numbers of licenses for the wireless network.

  • Page 95: Securing Low Level Access To The Array

    Step 5 on page 163). Xirrus also provides the Xircon utility for connecting to Xirrus XR Arrays that are not reachable via the normal access methods (such as SSH or WMI) and that do not have a physical console port (XR-500 and XR-1000 Series Arrays and some XR-2000 models), or whose console port is not accessible.
  • Page 96 CLI/WMI! In this situation, there is no way to recover from a lost password, other than returning the Array to Xirrus. If you have Xircon access to XBL enabled, you can reset the password, but this recovery will require setting the unit to factory defaults with loss of all configuration data.
  • Page 97 Wireless Array Array42# Type configure to enter the CLI config mode. Array42#configure If Xircon access at the XBL level is to be allowed, use the following three commands to change the XBL username and password from the default values of admin/admin. In the example below, replace newusername and newpassword with your desired entries.
  • Page 98 Wireless Array Installing the Wireless Array...

  • Page 99: The Web Management Interface

    Wireless Array The Web Management Interface This topic provides an overview of the Xirrus Wireless Array’s embedded Web Management Interface (WMI), used for establishing your network’s configuration settings and wireless operating parameters. It also includes login instructions. The following topics are discussed:...

  • Page 100: Xms-Managed Arrays Restrict Local Management

    Wireless Array XMS-Managed Arrays Restrict Local Management For Xirrus deployments of any size, we recommend that you use the Xirrus Management System (XMS) to manage the network rather than directly managing each Array individually. When Arrays are under management by XMS, configuration changes typically cannot be made directly by the WMI and CLI.
  • Page 101 For troubleshooting or emergency purposes, write access to the Array is always available via the serial (console) port. You can also use Xircon for this purpose, if so instructed by Xirrus Customer Support. XMS Non-Managed Mode: The Array operates in this mode by default, and stays in this mode if it is not put into XMS managed mode as described above.

  • Page 102: An Overview

    Wireless Array An Overview The WMI is an easy-to-use graphical interface to your Wireless Array. It allows you to configure the product to suit your individual requirements and ensure that the unit functions efficiently and effectively. Options allow you to choose among different appearances for the WMI.

  • Page 103: Figure 38. Web Management Interface-Option = Classic Style

    Wireless Array Figure 38. Web Management Interface—Option = Classic Style Figure 39. Web Management Interface—Classic Style The Web Management Interface...

  • Page 104: Structure Of The Wmi

    Wireless Array Structure of the WMI The content of the WMI is organized by function and hierarchy, shown in the following table. Click on any item below to jump to the referenced destination. Status Windows Statistics Windows Array Status Windows IAP Statistics Summary Per-IAP Statistics Array Summary...
  • Page 105 Wireless Array Configuration Windows Configuration Windows (cont’d) Express Setup IAPs Network IAP Settings Global Settings (IAP) Network Interfaces Global Settings .11an Network Bonds Global Settings .11bgn DNS Settings Global Settings .11n CDP Settings Global Settings .11u Services Advanced RF Settings Time Settings (NTP) Hotspot 2.0 NetFlow...

  • Page 106: User Interface

    Wireless Array User Interface Left frame Right frame Array info Top level menu (expand/collapse) Pull-down menu Help Log Message counters Click to configure IAP/view statistics Figure 40. WMI: Frames The Web Management Interface...

  • Page 107: Figure 41. Major Menu Sections Collapsed (On Left)

    Wireless Array The WMI has been designed with simplicity in mind, making navigation quick and easy. In the following example, you’ll see that windows are divided into left and right frames. The left frame contains three main elements: Menu organized by function (for example, Network, SSIDs, Security, etc.). Click a heading, such as Network, to display a summary of its current configuration, as well as an associated pull-down menu.
  • Page 108 Uptime since the last reboot is also shown. Some settings are only available if the Array’s license includes appropriate Xirrus Advanced Feature Sets. If a setting is unavailable (grayed out), then your license does not support the feature. See “About Licensing and Upgrades”...

  • Page 109: Utility Buttons

    Figure 42. WMI: Utility Buttons Click on the Feedback button to generate a Web page that allows you to submit your comments to Xirrus, Inc. Click on the Print button to send a print file of the active window to your local printer.

  • Page 110: Logging In

    Wireless Array Logging In If you are a Cloud XMS customer, then Arrays are managed via the cloud, and local Array management interfaces are inaccessible. If the Array is being managed by your own server for XMS Release 6.5 or above, and if the Array has been assigned to a named network in XMS, you will be restricted to read-only Array access.

  • Page 111: Character Restrictions

    Wireless Array these cases, a particular section of a page may have its own Apply Settings button right below the settings. In both cases described above, the changes that you have made are not saved to the latest configuration file in the Array’s flash memory, so they will not be restored after a reboot.
  • Page 112 Wireless Array The Web Management Interface...

  • Page 113: Viewing Status On The Wireless Array

    Wireless Array Viewing Status on the Wireless Array If you are a Cloud XMS customer, then Arrays are managed via the cloud, and local Array management interfaces are inaccessible. If the Array is being managed by your own server for XMS Release 6.5 or above, and if the Array has been assigned to a named network in XMS, you will be restricted to read-only Array access.

  • Page 114: Array Status Windows

    Wireless Array Array Status Windows The following Array Status windows are available: Array Summary — displays information on the configuration of all Array interfaces, including IAPs. Array Information — provides version/serial number information for all Array components. Array Configuration — shows all configuration information for the Array in text format.

  • Page 115: Content Of The Array Summary Window

    Wireless Array Content of the Array Summary Window The Array Summary window is sub-divided into the Ethernet Interfaces section and the Integrated Access Points (radio) section, providing you with the following information: Ethernet Settings Summary This section provides information about network interface devices. To make configuration changes to these devices, go to “Network Interfaces”...
  • Page 116 Wireless Array Bond Settings Summary This section provides information about the relationship that has been selected for the Gigabit ports. For detailed explanations and to make configuration changes, see “Network Bonds” on page 171. • Bond: Lists all network bonds that have been configured. •...

  • Page 117: Figure 45. Disabled Iap (Partial View)

    Wireless Array Figure 45. Disabled IAP (Partial View) • Channel: Shows which channel each IAP is using, and the channel setting. To avoid co-channel interference, adjacent radios should not be using adjacent channels. To make channel selections for a specific IAP, go to “IAP Settings”...

  • Page 118: Figure 47. Network Assurance And Operating Status

    Wireless Array The cell size of an IAP is a function of its transmit power and determines the IAP’s overall coverage. To define cell sizes, go to “IAP Settings” on page 279. For additional information about cell sizes and the importance of planning for and defining the optimum cell sizes for your Array, go to “Coverage and Capacity Planning”...
  • Page 119 Wireless Array The Array checks connectivity to network servers that you have configured (for example, DNS and NTP servers) on an ongoing basis. For each Setting, this list shows the server’s Host Name (if any), IP Address, and Status. Network assurance must be enabled on the Array in order to perform these connectivity tests and display this information.

  • Page 120: Array Information

    Wireless Array Array Information This is a status only window that shows you the current firmware versions utilized by the Array, serial numbers assigned to each module, MAC addresses, licensing information, recent boot timestamps, and current internal temperatures and fan speed. Note that the License Features row lists the features that are supported by your Array’s license.

  • Page 121: Array Configuration

    Wireless Array You cannot make configuration changes in this window, but if you are experiencing issues with network services, you may want to print the content of this window for your records. Array Configuration This is a status only window that allows you to display the configuration settings assigned to the Array, based on the following filter options: Running —...

  • Page 122: Admin History

    Wireless Array To also include the default configuration settings in the output, choose your configuration then click in the Include Defaults check box. If Include Defaults is disabled, then only the changes from the default configuration are shown. Admin History It is useful to know who else is currently logged in to an array while you're configuring it.

  • Page 123: Network

    Wireless Array DHCP Leases — displays information about IP addresses (leases) that the Array has allocated to client stations. Connection Tracking/NAT — lists connections that have been established for client stations. CDP Neighbors — lists neighboring network devices using Cisco Discovery Protocol.

  • Page 124: Network Map

    Wireless Array WMI windows that allow you to change or view configuration settings associated with the network interfaces include: “Network Interfaces” on page 167 “Network Bonds” on page 171 “DNS Settings” on page 177 “CDP Settings” on page 178 Network Map This window offers detailed information about this Array and all neighboring Arrays, including how the Arrays have been set up within your network.

  • Page 125: Content Of The Network Map Window

    In Range: Informs you whether the Array is within wireless range of another Wireless Array. Fast Roam: Informs you whether or not the Xirrus fast roaming feature is enabled. This feature utilizes the Xirrus Roaming Protocol (XRP) ensuring fast and seamless roaming capabilities between IAPs or Arrays at both Layer 2 and Layer 3.
  • Page 126 Wireless Array To see additional information, select from the following checkboxes at the bottom of the page. This will show the columns described below. Hardware Model: The model number of each Array (XR-4820, XR-7630, etc.), plus the amount of RAM memory and the speed of the processor. Serial: Displays the serial number of each Array.

  • Page 127: Spanning Tree Status

    Wireless Array Spanning Tree Status Multiple active paths between stations can cause loops in the network. If a loop exists in the network topology, the potential exists for the duplication of messages. The spanning tree protocol is a link management protocol that provides path redundancy while preventing undesirable loops.

  • Page 128: Routing Table

    Wireless Array Routing Table This status-only window lists the entries in the Array’s routing table. The table provides the Array with instructions for sending each packet to its next hop on its route across the network. Figure 54. Routing Table See Also VLANs Configuring VLANs on an Open SSID...

  • Page 129: Dhcp Leases

    Wireless Array DHCP Leases This status-only window lists the IP addresses (leases) that the Array has allocated to client stations. For each, it shows the IP address assigned from one of the defined DHCP pools, and the MAC address and host name of the client station.

  • Page 130: Cdp Neighbors

    Wireless Array Click the Show Hostnames checkbox at the top of the page to display name information (if any) for the source and destination location of the connection. The Hostname columns will replace traffic statistics columns. You may sort the rows based on any column that has an active column header, indicated when the mouse pointer changes to the hand icon .

  • Page 131: Network Assurance

    Wireless Array Network Assurance This status-only window shows the results of ongoing network assurance testing. Figure 59. Network Assurance The Array checks connectivity to network servers that you have configured (for example, DNS and NTP servers) on an ongoing basis. For each server, this list shows the server’s host name (if any), IP address, and status.

  • Page 132: Undefined Vlans

    Wireless Array Undefined VLANs This status-only window lists VLANs that have not been configured on the Array, but that are being detected on the Array’s trunk port(s), i.e. wired ports. See “VLANs” on page 199. Figure 60. Undefined VLANs This feature alerts you to the fact that an 802.1Q trunk to the Array has VLANs that are not being properly handled on the Array.

  • Page 133: Rf Monitor Windows

    Wireless Array RF Monitor Windows Every Wireless Array includes an integrated RF spectrum analyzer as a standard feature. The spectrum analyzer allows you to characterize the RF environment by monitoring throughput, signal, noise, errors, and interference levels continually per channel. This capability uses the assigned threat-sensor (monitor) radio. The associated software is part of the ArrayOS.

  • Page 134: Iaps

    Wireless Array IAPs The RF Monitor — IAPs window displays traffic statistics and RF readings observed by each Array IAP (radio). Note that the data is an instantaneous snapshot for the IAP — it is not an average or a cumulative total. To graph these values over time for a particular channel, see “Channel History”...

  • Page 135: Spectrum Analyzer

    Wireless Array You may sort the rows based on any column that has an active column header, indicated when the mouse pointer changes to the hand icon . Click Refresh to update the information at any time. Click Auto Refresh to instruct the Array to refresh this window automatically.

  • Page 136: Figure 63. Rf Spectrum Analyzer

    Wireless Array Select Display Options Click Channel number to highlight Figure 63. RF Spectrum Analyzer The Spectrum Analyzer offers several display options: To display horizontal bar graphs, click the Rotate checkbox at the bottom of the data window. In the rotated view, if you wish to view data as a numerical table, click the Text checkbox.
  • Page 137 Wireless Array When viewing a graphical display, click Bars to have the bar graphs displayed against a gray background — you may find this easier on the eyes. This operation is not available when Text is selected. You may sort the rows based on any column that has an active column header, indicated when the mouse pointer changes to the hand icon Sorting is only available in the rotated view.

  • Page 138: Intrusion Detection

    Wireless Array some channels since the monitor radio is set to receive at a very sensitive level, enabling it to hear packets from devices at far distances. Average RSSI: Average RSSI level seen on 802.11 packets received on the channel. A dash value “-“means no RSSI data was available for the interval.
  • Page 139 Wireless Array The Intrusion Detection window provides the easiest method for classifying rogue APs as Blocked, Known, Approved, or Unknown. Choose one or more APs using the checkbox in the Select column, then use the buttons on the upper left to classify them with the following actions: Approve, Set Known, Block, or Set Unknown.

  • Page 140: Channel History

    Wireless Array Channel History The RF Monitor — Channel History window focuses on traffic statistics and RF readings observed for just one channel that you select in the Channel field. A new set of readings is added every 10 seconds for a 5 GHz channel, or every 5 seconds for a 2.4 GHz channel.

  • Page 141: Figure 66. Rf Monitor - Channel History (Rotated)

    Wireless Array Figure 66. RF Monitor — Channel History (Rotated) If you select Rotate and Text together, data is presented as a numerical table. (Figure Click Pause to stop collecting data, or Resume to continue. Figure 67. RF Monitor — Channel History (Text) Viewing Status on the Wireless Array...

  • Page 142: Radio Assurance

    Wireless Array Radio Assurance When Radio Assurance mode is enabled, the monitor radio performs loopback tests on the Array’s radios. When problems are encountered, the Array can take various actions to correct them by performing different levels of reset on the affected radio.
  • Page 143 Wireless Array System (i.e., reboot the Array) See Also IAPs Xirrus Advanced RF Analysis Manager (RAM) RF Resilience Radio Assurance Viewing Status on the Wireless Array...

  • Page 144: Station Status Windows

    Wireless Array Station Status Windows The following Station Status windows are available: Stations — this list describes all stations associated to the Array. — displays a map showing the approximate locations of all Location Map stations associated to the array. RSSI —...

  • Page 145: Stations

    Wireless Array Stations This status-only window shows client stations currently visible to the Array. You may choose to view only stations that have Associated to the Array, or only stations that are Unassociated, or both, by selecting the appropriate checkboxes above the list.
  • Page 146 Wireless Array reverse the sort order. You may select a specific station and perform one of the following actions by clicking the associated button: Deny Access: Sends a de-authentication frame to the selected station and explicitly denies it access by adding its MAC address to the Deny List in the Access Control List window.

  • Page 147: Location Map

    Wireless Array Location Map The Location Map shows the approximate locations of stations relative to this Array. The location of each station is computed based on the RSSI of its signal as received by the Array. The distance is adjusted based on the environment setting that you selected.

  • Page 148: Figure 71. Controls For Location Map

    Wireless Array completely obscure another. You may minimize a station that is not of interest by clicking it. There is also a Minimize All button. You may replace the range-finder background image above with your own custom image of the floorplan of the area served by the Array — see “Working with the Custom Image”...
  • Page 149 Wireless Array Display Associated/Unassociated: Select whether to display stations that are associated to the Array, stations that are not associated, or both. Display 2.4 GHz/5 GHz: Select whether to display 802.11bgn stations, or 802.11an stations, or both. Preferred Label: This field is located on the top of the window towards the right.
  • Page 150 Wireless Array construction), or Indoor dense (many walls or obstructions, or unusually dense walls). Scale: This view-only value shows the approximate distance represented by each hashmark on the default map background. Associated, Unassociated, Total Stations: These view-only values show the station counts observed by the Array. See Also Station Status Windows Working with the Custom Image...

  • Page 151: Rssi

    Wireless Array RSSI For each station that is associated to the Array, the RSSI (Received Signal Strength Indicator) window shows the station’s RSSI value as measured by each IAP. In other words, the window shows the strength of the station’s signal at each radio. You may choose to display Unassociated Stations as well with a checkbox at the bottom of the window.

  • Page 152: Signal-To-Noise Ratio (Snr)

    Wireless Array the Auto Refresh check box to instruct the Array to refresh this window automatically. See Also Station Status Windows RF Monitor Windows Signal-to-Noise Ratio (SNR) For each station that is associated to the Array, the Signal-to-Noise Ratio (SNR) window shows the station’s SNR value as measured by each IAP.

  • Page 153: Figure 75. Station Snr Values - Colorized Graphical View

    Wireless Array Figure 75. Station SNR Values — Colorized Graphical View In either graphical or tabular view, you may sort the rows based on any column that has an active column header, indicated when the mouse pointer changes to the hand icon .

  • Page 154: Noise Floor

    Wireless Array Noise Floor For each station that is associated to the Array, the Noise Floor window shows the ambient noise affecting a station’s signal as measured by each IAP. The noise floor is the RSSI value when the station is not transmitting, sometimes called a Silence value.

  • Page 155: Figure 77. Station Noise Floor Values - Colorized Graphical View

    Wireless Array Figure 77. Station Noise Floor Values — Colorized Graphical View In either graphical or tabular view, you may sort the rows based on any column that has an active column header, indicated when the mouse pointer changes to the hand icon .

  • Page 156: Max By Iap

    Wireless Array Max by IAP This status-only window shows the maximum number of client stations that have historically been associated to the Array. For each IAP, the list shows the IAP’s state and channel number, the current number of stations associated, and the highest number of stations that have been associated over various periods of time: hour, day, week, month, and year.

  • Page 157: Station Assurance

    Wireless Array Station Assurance Station assurance monitors the quality of the connections that users are experiencing on the wireless network. This window shows client stations that have had connectivity issues. You may enable or disable the station assurance feature and set thresholds for the problems that it checks, such as excessive packet retry or packet error rates, or stations that are unable to stay associated to the Array.
  • Page 158 Wireless Array See Also IAPs Station Status Windows Station Assurance Viewing Status on the Wireless Array...

  • Page 159: Statistics Windows

    Wireless Array Statistics Windows The following Array Statistics windows are available: IAP Statistics Summary — provides an overview of the statistical data associated with all IAPs. Expands to show links for displaying detailed statistics for individual IAPs. Per-IAP Statistics — provides detailed statistics for an individual IAP. Network Statistics —...

  • Page 160: Per-Iap Statistics

    Wireless Array You can Refresh the data (update the window with the latest information) or Clear the data (reset all content to zero and begin counting again) at any time by clicking on the appropriate button. You can also click in the Auto Refresh check box to instruct the Array to refresh this window automatically.

  • Page 161: Figure 81. Individual Iap Statistics Page

    Wireless Array Dropped Packets: the count of packets that were dropped due to various receive errors, including being received when all receive queues were full. These packets are dropped after being received. Overruns: indicate the number of times that First-In-First-Out (FIFO) overflow errors occur.

  • Page 162: Network Statistics

    Wireless Array See Also System Log Window Global Settings (IAP) Global Settings .11an Global Settings .11bgn IAPs Network Statistics This is a status only window that allows you to review statistical data associated with each network (Ethernet) interface and its activity. You can Refresh the data (update the window with the latest information) or Clear the data (reset all content to zero and begin counting again) at any time by clicking on the appropriate button.

  • Page 163: Vlan Statistics

    Wireless Array VLAN Statistics This is a status only window that allows you to review statistical data associated with your assigned VLANs. You can refresh the information that is displayed on this page at any time by clicking on the Refresh button, or select the Auto Refresh option for this window to refresh automatically.

  • Page 164: Wds Statistics

    Wireless Array WDS Statistics The main WDS Statistics window provides statistical data for all WDS client and host links. To access data about a specific WDS client or host link, simply click on the desired link in the left frame to access the appropriate window. You may also choose to view a sum of the statistics for all client links, all host links, or all links (both client and host links).

  • Page 165: Ids Statistics

    Wireless Array IDS Statistics The Xirrus Array employs a number of IDS/IPS (Intrusion Detection System/ Intrusion Prevention System) strategies to detect and prevent malicious attacks on the wireless network. This status-only window provides detailed intrusion detection statistics for the selected IAP. Use the Display Averages checkbox at the upper left to select the output format —...

  • Page 166: Filter Statistics

    Wireless Array Filter Statistics The Filter Statistics window provides statistical data for all configured filters. The name, state (enabled — on or off), and type (allow or deny) of each filter is shown. For enabled filters, this window shows the number of packets and bytes that met the filter criteria.

  • Page 167: Station Statistics

    Wireless Array Station Statistics This status-only window provides an overview of statistical data for all stations. Stations are listed by MAC address, and Receive and Transmit statistics are summarized for each. For detailed statistics for a specific station, click the desired MAC address in the Station column and see “Per-Station Statistics”...

  • Page 168: Per-Station Statistics

    Wireless Array Per-Station Statistics This window provides detailed statistics for the selected station. This window is accessed from the Station Statistics window — click the MAC address of the desired entry in the Station column to display its Per-Station Statistics window. Receive and Transmit statistics are listed by Rate —...

  • Page 169: Application Control Windows

    Wireless Array Application Control Windows This feature is only available if the Array license includes Application Control. See “About Licensing and Upgrades” on page 373. The Application Control feature provides real-time visibility of application usage by users across the wireless network. Network usage has changed enormously in the last few years, with the increase in smartphone and tablet usage stressing networks.
  • Page 170 Usage may be tracked by Array, VLAN, or station. Many hundreds of applications are recognized and grouped into a number of categories. The distributed architecture of Xirrus Arrays allows Application Control to scale naturally as you grow the network. About Risk and Productivity Application Control ranks applications in terms of their levels of risk an productivity.

  • Page 171: Application Control

    Wireless Array Application Control This display-only window provides a snapshot of the application usage on your Array. In order to view the Application Control window, the Array must have a license that supports this feature, and you must have enabled the Application Control option on the Filter Lists page (see “Filter Lists”...
  • Page 172 Array Management Traffic: Check this box if you wish to analyze management traffic on this Array, including the load due to functions such as Xirrus Roaming. Tracking traffic into the array on the management side can alert you to nefarious activity—and even to traffic on the wired network that would best be blocked before it hits the Array.

  • Page 173: Figure 90. Application Control (Pie Charts)

    Wireless Array Pie Charts Figure 90. Application Control (Pie Charts) These charts provide a quick way to determine how your wireless bandwidth is being used. There are charts for Station Traffic and/or Array Management Traffic, depending on which checkboxes you selected. Similarly, there are charts for By Application and/or By Category, depending on your selections.
  • Page 174 Wireless Array These tables provide detailed information about how your wireless bandwidth is being used. There are tables for Station Traffic and/or Array Management Traffic, depending on which checkboxes you selected. Similarly, there are tables for By Application and/or By Category, depending on your selections. In addition to showing traffic statistics, there are two unique and highly useful columns.

  • Page 175: Stations (Application Control)

    Wireless Array Stations (Application Control) This status-only window shows client stations currently visible to the Array. The MAC address in the first column is a link. Click on a selected station, and the Application Control window opens with the Display for Station field set to that station, to perform a detailed analysis of its application usage.

  • Page 176: System Log Window

    Wireless Array System Log Window This is a status only window that allows you to review the system log, where system alerts and messages are displayed. Although there are no configuration options available in this window, you do have the usual choice of deciding how the event messages are sorted by clicking in the column header for the desired field (Time Stamp, Priority, or Message).

  • Page 177: Ids Event Log Window

    Wireless Array IDS Event Log Window This status only window displays the Intrusion Detection System (IDS) Event log, listing any detected attacks on your network. For descriptions of the types of attacks detected, as well as the settings to fine-tune IDS on the Array, please see “Intrusion Detection”...
  • Page 178 Wireless Array Period — the length of the window used to determine whether the count of this type of event exceeded the threshold. Current — the count of this type of event for the current period. Average — the average count per period of this type of event. Maximum —...

  • Page 179: Configuring The Wireless Array

    Wireless Array Configuring the Wireless Array If you are a Cloud XMS customer, then Arrays are managed via the cloud, and local Array management interfaces are inaccessible. If the Array is being managed by your own server for XMS Release 6.5 or above, and if the Array has been assigned to a named network in XMS, you will be restricted to read-only Array access.
  • Page 180 Wireless Array otherwise the changes you make will not be applied the next time the Array is rebooted. Some settings are only available if the Array’s license includes appropriate features. If a setting is unavailable (grayed out), then your license does not support the feature.

  • Page 181: Express Setup

    Wireless Array Express Setup Initial Array configuration via Mobilize sets items such as the SSIDs, encryption and authentication, and SNMP settings, as described in “Zero-Touch Setup Using Mobilize” on page 67. The Express Setup page allows you to see many of these values, or change them locally.
  • Page 182 Wireless Array Procedure for Performing an Express Setup License Key: An unlicensed Array will automatically contact Xirrus to obtain its license, if it has Internet connectivity. If you need to enter a license manually, enter it here. See “Licensing” on page Configure the Contact Information settings.
  • Page 183 SSID Name is a unique name that identifies a wireless network. The default SSID is xirrus. Entering a value in this field will replace the this default SSID with the new name. For additional information about SSIDs, go to the...
  • Page 184 Wireless Array source and destination stations can use to alter frame bits to avoid disclosure to eavesdroppers. • WPA (Wi-Fi Protected Access) — A Wi-Fi Alliance standard that contains a subset of the IEEE 802.11i standard, using TKIP or AES as an encryption method and 802.1x for authentication.
  • Page 185 Wireless Array Admin Settings: This section allows you to change the default admin username, password, and privileges for the Array. You may change the password and leave the user name as is, but we suggest that you change both to improve Array security. New Admin User (Replaces user “admin”): Enter the name of a new administrator user account.

  • Page 186: Figure 96. Leds Are Switched On

    Wireless Array to your deployment, select it and click Apply. For example, the High- Density option uses best practices to configure the Array for high density settings such as lecture halls, convention centers, stadiums, etc. IAP Settings: LED on Figure 96. LEDs are Switched On Enable/Configure All IAPs: Click on the Execute button to enable and auto configure all IAPs (a message displays the countdown time —...

  • Page 187: Network

    Wireless Array Network This is a status-only window that provides a snapshot of the configuration settings currently established for the Ethernet interfaces. DNS Settings Settings (Cisco Discovery Protocol) are summarized as well. You must go to the appropriate configuration window to make changes to any of the settings displayed here (configuration changes cannot be made from this window).
  • Page 188 Wireless Array Spanning Tree Status Network Statistics Configuring the Wireless Array...

  • Page 189: Network Interfaces

    Wireless Array Network Interfaces XR-500, XR-1000, and some XR-2000 Series Arrays have one Gigabit Ethernet interface, while XR-4000 and some XR-2000 Series Arrays have two, and XR-6000 Series models have four. This window allows you to establish configuration settings for these interfaces. Configuring the Wireless Array...

  • Page 190: Network Interface Ports

    When the status of a port changes, a Syslog entry is created describing the change. Network Interface Ports The following diagram shows the location of network interface ports on the underside of an XR Series Array. XR-6000 Series XR-4000 Series Console...
  • Page 191 Wireless Array LED Indicator: Choose Enabled to allow the LED for this interface to blink with traffic on the port, or choose Disabled to turn the LED off. The LED will still light during the boot sequence, then turn off. This option is only available for the Gigabit interfaces.
  • Page 192 Wireless Array Configuration Server Protocol / IP Settings: Choose DHCP to instruct the Array to use DHCP when assigning IP addresses to the Array, or choose Static IP if you intend to enter IP addresses manually. If you select the Static IP option you must specify the IP address, IP subnet mask and default gateway.

  • Page 193: Network Bonds

    Wireless Array Network Bonds On models with more than one Gigabit port these ports may be bonded, i.e. configured to work together in sets. For example, one port may provide active backup or load balancing for another, or other options as described in this section. XR-6000 Series Arrays have four Gigabit ports, and you may specify which ports are bonded to work together as a pair.
  • Page 194 Wireless Array If a set of Gigabit ports have been bonded, the IP address, IP mask, IP gateway, IP DHCP, and Management settings are shared between bonded ports. Any changes you make to these settings on one member will be reflected in the settings of the other members.

  • Page 195: Figure 101. Port Modes (A, B)

    Wireless Array (a) Active backup (b) Aggregate using 802.3ad Figure 101. Port Modes (a, b) Aggregate Traffic from gig ports using 802.3ad — The Array sends network traffic across all member Gigabit ports to increase link speed to the network. These ports act as a single logical interface, using a load balancing algorithm to balance traffic across the ports.

  • Page 196: Figure 102. Port Modes (C)

    Wireless Array (c) Transmit on all ports Figure 102. Port Modes (c) (d) Load balance traffic Figure 103. Port Modes (d) Configuring the Wireless Array...
  • Page 197 Wireless Array Load balance traffic between gig ports — This option provides trunking, similar to option (b) — Aggregate Traffic from gig1 & gig2 using 802.3ad, but it does not use 802.3ad and it uses a different load balancing algorithm to determine the outgoing Gigabit port. The outgoing port used is based on an exclusive OR of the source and destination MAC address.

  • Page 198: Figure 104. Mirroring Traffic

    Wireless Array Active VLANs list. If you create new VLANs, they will not be passed unless you take action to add them to the list. Mirror — Specify one of the active bonds (Bondx) that is to be mirrored by this bond (Bondy).

  • Page 199: Dns Settings

    Wireless Array See Also Network Interfaces DNS Settings Network Network Statistics Spanning Tree Status DNS Settings This window allows you to establish your (Domain Name System) settings. The Array uses these DNS servers to resolve host names into IP addresses. The Array also registers its own Host Name with these DNS servers, so that others may address the Array using its name rather than its IP address.

  • Page 200: Cdp Settings

    Wireless Array DNS Server 2 and DNS Server 3: Enter the IP address of the secondary and tertiary DNS servers (if required). Use DNS settings assigned by DHCP: If you are using DHCP to assign the Array’s IP address, you may turn this option On. The Array will then obtain its DNS domain and server settings from the network DHCP server that assigns an IP address to the Array, rather than using the DNS Server fields above.

Table of Contents