Xirrus XR-520 User Manual
  1. Manuals
  2. Brands
  3. Xirrus Manuals
  4. Wireless Access Point
  5. XR-520
  6. User manual

Xirrus XR-520 User Manual

Wireless arrays and access points. xr series; xr-500 series; xr-600 series; xr-1000 series; xr-2000 series; xr-2005 series; xr-4000 series; xr-6000 series
Hide thumbs Also See for XR-520:
Table of Contents

Advertisement

Quick Links

USER'S GUIDE
Wireless Arrays and
Access Points
XR Series
March 10, 2014
Release 6.7
High Performance Wireless Networks

Advertisement

Table of Contents
loading

Related Manuals for Xirrus XR-520

Summary of Contents for Xirrus XR-520

  • Page 1 USER’S GUIDE Wireless Arrays and Access Points XR Series March 10, 2014 Release 6.7 High Performance Wireless Networks...
  • Page 3 Wireless Arrays ™ and Access Points XR Series All rights reserved. This document may not be reproduced or disclosed in whole or in part by any means without the written consent of Xirrus, Inc. Part Number: 800-0022-001 (Revision J)
  • Page 4 Trademarks is a registered trademark of Xirrus, Inc. All other trademarks and brand names are marks of their respective holders. Please see Legal Notices, Warnings, Compliance Statements, and Warranty and License Agreements in “Appendix C: Notices (Arrays except XR-500/600 and -H Models)”...

  • Page 5: Table Of Contents

    Introduction ..................1 The Xirrus Family of Products ................1 Nomenclature ....................2 Why Choose the Xirrus Wireless Array? .............. 3 Wireless Array Product Overview ................ 4 XR Wireless Array Product Family ..............5 XR-500 Series Access Points ..............5 XR-600 Series Access Points ..............
  • Page 6 Wireless Array Xirrus Application Control ................21 About this User’s Guide ..................21 Organization ....................21 Notes and Cautions ..................23 Screen Images ....................23 Product Specifications ................... 24 Installing the Wireless Array............25 Installation Prerequisites ..................25 Optional Network Components ..............27 Client Requirements ..................
  • Page 7 Wireless Array Network Management Planning ..............56 WDS Planning ....................57 Common Deployment Options ..............60 Installation Workflow ................... 61 Installing Your Wireless Array ................63 Choosing a Location ..................63 Wiring Considerations ................63 Mounting and Connecting the Array/AP ..........66 Dismounting the Array ..................
  • Page 8 Wireless Array Viewing Status on the Wireless Array ........... 91 Array Status Windows ..................92 Array Summary ....................92 Content of the Array Summary Window ..........93 Array Information ..................98 Array Configuration ..................99 Admin History ....................100 Network Status Windows ................... 100 Network ......................
  • Page 9 NetFlow ......................182 Wi-Fi Tag ....................... 183 Location ......................184 System Log ..................... 186 About Using the Splunk Application for Xirrus Arrays ....189 SNMP ......................191 DHCP Server ....................194 Proxy Forwarding ..................196 About Proxy Forwarding ..............196 Proxy Forwarding for HTTPS ..............
  • Page 10 Wireless Array VLAN Management ..................206 Tunnels ........................209 About Xirrus Tunnels ................209 Tunnel Management ..................210 SSID Assignments ..................211 Security ........................213 Understanding Security ................ 214 Certificates and Connecting Securely to the WMI ......217 Using the Array’s Default Certificate ..........217 Using an External Certificate Authority ..........
  • Page 11 Wireless Array Groups ........................280 Understanding Groups ................. 280 Using Groups ..................281 Group Management ..................282 Group Limits ..................285 IAPs ........................287 Understanding Fast Roaming .............. 288 IAP Settings ....................290 Global Settings (IAP) ................... 295 Beacon Configuration ................297 Station Management ................
  • Page 12 Wireless Array LED Settings ....................354 DSCP Mappings .................... 355 Roaming Assist ....................356 WDS ........................358 About Configuring WDS Links ............358 Long Distance Links ................360 WDS Client Links ..................361 Filters ........................365 Filter Lists ...................... 366 Filter Management ..................
  • Page 13 Wireless Array The Command Line Interface ............409 Establishing a Secure Shell (SSH) Connection ..........409 Getting Started with the CLI ................411 Inputting Commands ................... 411 Getting Help ....................411 Top Level Commands ..................413 Root Command Prompt ................413 configure Commands ...................
  • Page 14 Wireless Array authentication-server ................... 452 reboot ......................453 reset ......................... 453 restore ......................454 roaming-assist ....................455 run-tests ......................456 security ......................458 snmp ....................... 459 ssid ........................460 syslog ......................461 tunnel ......................462 uptime ......................463 vlan ........................463 wifi-tag ......................
  • Page 15 Enabling Monitoring on the Array ............. 500 How Monitoring Works ................500 Radio Assurance ................... 501 Radio Assurance Options ..............502 RADIUS Vendor Specific Attribute (VSA) for Xirrus ........503 Location Service Data Formats ................504 Euclid Location Server ................. 504 Non-Euclid Location Server ................ 504 Upgrading the Array via CLI ................
  • Page 16 Wireless Array Appendix D: Notices (XR500/600 Series Only) ..........533 Notices ........................533 EU Directive 1999/5/EC Compliance Information ........537 Compliance Information (Non-EU) ..............544 Safety Warnings ....................545 Translated Safety Warnings ................546 Software License and Product Warranty Agreement ........547 Hardware Warranty Agreement ...............

  • Page 17: List Of Figures

    Figure 30. Array Placement ..................63 Figure 31. LED Locations ..................66 Figure 32. Network Interface Ports—XR-520 (left); XR-1000 Series (right) ..71 Figure 33. Network Interface Ports—XR-600 Series ..........71 Figure 34. Network Interfaces—XR-2000 Series (left); XR-2005 Series (right) ... 72...
  • Page 18 Wi-Fi Array Figure 35. Network Interface Ports—XR-4000 Series ..........72 Figure 36. Network Interface Ports—XR-6000 Series ..........72 Figure 37. Web Management Interface ..............82 Figure 38. WMI: Frames .................... 85 Figure 39. WMI Header ..................... 86 Figure 40. WMI Command Log ................87 Figure 41.
  • Page 19 Wireless Array Figure 72. Station RSSI Values — Colorized Graphical View ......129 Figure 73. Station Signal-to-Noise Ratio Values ..........130 Figure 74. Station SNR Values — Colorized Graphical View......130 Figure 75. Station Noise Floor Values ..............131 Figure 76. Station Noise Floor Values — Colorized Graphical View ....132 Figure 77.
  • Page 20 Figure 124. Tunnel Management ................210 Figure 125. Tunnel SSID Assignments..............211 Figure 126. Security..................... 213 Figure 127. Import Xirrus Certificate Authority ............ 217 Figure 128. Admin Management ................219 Figure 129. Admin Privileges ..................221 Figure 130. Admin RADIUS ..................224 Figure 131.
  • Page 21 Wireless Array Figure 146. SSID Management—Encryption, Authentication, Accounting ..265 Figure 147. WPR Internal Splash Page Fields (SSID Management)..... 269 Figure 148. Customizing an Internal Login or Splash Page ......... 272 Figure 149. Whitelist Configuration for WPR............273 Figure 150. Setting Active IAPs per SSID ..............275 Figure 151.
  • Page 22 Wi-Fi Array Figure 183. Cluster Management................376 Figure 184. Cluster Mode Operation................ 377 Figure 185. Cluster Mode Activation ............... 377 Figure 186. Viewing Statistics in Cluster Mode............378 Figure 187. AirWatch Settings................... 380 Figure 188. System Tools.................... 386 Figure 189. Saving the Diagnostic Log..............394 Figure 190.

  • Page 23: Introduction

    Wireless Array Introduction These topics introduce the Xirrus Wireless Array, including an overview of its key features and benefits.  “The Xirrus Family of Products” on page  “Why Choose the Xirrus Wireless Array?” on page  “Wireless Array Product Overview” on page ...

  • Page 24: Nomenclature

    Radios support both 2.4GHz and 5 GHz, and are named iap1, iap2, ... iapn. The Xirrus Management System is referred to as XMS. The Power over Gigabit Ethernet system may be referred to as PoGE.

  • Page 25: Why Choose The Xirrus Wireless Array

    Supports a higher transmission speed of 54 Mbps in the 2.4 GHz range and is backwards compatible with 802.11b. Whether you have just a handful of users or thousands of users, the Xirrus Array has the scalability and flexibility to serve your needs.

  • Page 26: Wireless Array Product Overview

    The Xirrus Family of Products Wireless Array Product Overview Part of the family of Xirrus products, the Wireless Array is a high capacity, multi- mode device designed with up to four times the coverage and eight times the bandwidth and user density compared with legacy thin access point wireless products.

  • Page 27: Xr Wireless Array Product Family

    RF attenuation, and in isolated or physically separated locations. These models have an integrated controller, firewall, threat sensor and spectrum analyzer. These models have omni-directional antennas rather than directional antennas. XR-520 Feature No. radios: 802.11  a/b/g/n/monitor Radio type...

  • Page 28: Series Access Points

    Wireless Array XR-600 Series Access Points These Access Points provide robust wireless service in low-to-medium user density scenarios. These Access Points have two Gigabit Ethernet ports and two multi-state radios (2.4GHz or 5GHz), so that as more of your clients migrate to 802.11ac, you can increase the number of radios operating at 5 GHz.
  • Page 29 (2.4GHz or 5GHz) that can support 300Mbps or 450Mbps, connecting up to 480 users at one time. The Xirrus XR-1000 Series Wireless Array is a two slot chassis available in a two multi-state (2.4GHz or 5GHz) radio configuration with up to 900Mbps of bandwidth (up to 450 Mbps per radio).

  • Page 30: Xr-2000/2005 Series Arrays

    (2.4GHz or 5GHz) that can support 300Mbps or 450Mbps, connecting up to 960 users at one time. The Xirrus XR-2000 Series Wireless Array is a four slot chassis available in a four multi-state (2.4GHz or 5GHz) radio configuration supporting up to 1.8Gbps of bandwidth.

  • Page 31: Xr-4000 Series Arrays

    Console port. Those ending in “5” (called the XR-2005 Series) have no console port, but have two Gigabit ports, one of which accepts POE+ power supplied by a Xirrus-supplied power injector or an IEEE802.3at powered switch. XR-4000 Series Arrays These Arrays include models with two Gigabit Ethernet ports and four or eight radios (IAPs), connecting up to 1920 users at one time and offering a maximum wireless bandwidth of 3.6 Gbps (up to 450 Mbps per radio).

  • Page 32: Xr-6000 Series Arrays

    A 10 Gigabit modular Ethernet expansion port (DVI connector) is available to meet high traffic demands. It is used only with an optional Xirrus 10 Gig fiber optics adapter. Feature Number of radios:...

  • Page 33: Enterprise Class Security

    RF spectrum analysis are performed in the background by the Array automatically. Deployment Flexibility Xirrus’ unique multi-radio architecture (on all Arrays except the XR-500 Series) generates 360 degrees of sectored high-gain 802.11a/b/g/n coverage that provides extended range and the highest possible data rates for a large volume of clients.

  • Page 34: Power Over Gigabit Ethernet (Poge)

    Some smaller Arrays and APs (XR-2000 models ending in “5”, and XR-500/600 Series) are compatible with IEEE802.3af and/or IEEE802.3at PoE+, and may be connected to appropriate powered switches. For example, the Xirrus XT-5024 and XT-5048 are 24-and 48-port 802.3at POE+ managed switches. See the Quick Installation Guide for the Array/AP for compatible injectors or powered switches.

  • Page 35: Enterprise Class Management

    In addition, a fully featured Command Line Interface (CLI) offers IT professionals a familiar management and control environment. SNMP (Simple Network Management Protocol) is also supported to allow management from an SNMP compliant management tool, such as the optional Xirrus Management System. Introduction...

  • Page 36: Key Features And Benefits

     For deployments of more than five Arrays, we recommend that you use the cloud-based or enterprise version of Xirrus Management System (XMS). XMS offers a rich set of features for fine control over large deployments. Key Features and Benefits...

  • Page 37: Extended Coverage

    Wireless Array In the recommended configuration, one IAP is configured in RF monitoring and intrusion detection/prevention mode. Extended Coverage One XR-7630 solution enables you to replace fifteen access points (including one omnidirectional IAP for monitoring the network). Fifteen IAP radios with integrated directional antennas provide increased wireless range and enhanced data rates in all directions.

  • Page 38: Non-Overlapping Channels

    Wireless Array Figure 7. Coverage Schemes (XR-7230 shown)  802.11a/n Delivers 60° wireless coverage per IAP, with 6 dBi of gain.  802.11b/g/n Delivers 180° wireless coverage, with 3 dBi of gain.  802.11a/b/g/n (monitor only) Delivers 360° wireless coverage, with 2 dBi of gain. Non-Overlapping Channels Complete use of non-overlapping channels limits interference and delivers maximum capacity.

  • Page 39: Sdma Optimization

    IAPs or Arrays at both Layer 2 and Layer 3. Ease of Deployment The Xirrus XMS and Mobilize services simplify and speed deployment of the wireless network by automatically setting up each Array’s license, software image, and initial configuration. When the Array is installed and has Internet connectivity, it contacts Xirrus, which performs these initialization tasks.

  • Page 40: Advanced Feature Sets

    The Xirrus RPM optimizes the bandwidth usage and station performance of wireless networks. Leveraging the multiple integrated access point (multi-radio) design of the Xirrus Wireless Array, RPM manages the allocation of wireless bandwidth to wireless stations across multiple RF channels. The result maximizes overall network performance with superior flexibility and capacity.

  • Page 41: Xirrus Advanced Rf Security Manager (Rsm)

    Standby Mode Xirrus Advanced RF Security Manager (RSM) The Xirrus RSM improves security and minimizes the risk in deploying 802.11 wireless networks. Leveraging an integrated 24/7 threat sensor and hardware- based encryption/decryption in each Array, RSM secures the wireless network from multiple types of threats.

  • Page 42: Xirrus Advanced Rf Analysis Manager (Ram)

    The deployment of 802.11ac presents a set of unique challenges based on technology differences with legacy 802.11a/b/g/n networks, both on the wireless infrastructure and client side. Xirrus' RAM equips each Wireless Array with a powerful set of tools and features to optimally tune and verify an 802.11ac installation, as well as give IT administrators the ability to troubleshoot issues that may occur within the wireless environment.

  • Page 43: Xirrus Application Control

    Wireless Array Xirrus Application Control The Application Control feature is available on XR Arrays to provide real-time visibility of application usage by users across the wireless network. Network usage has changed enormously in the last few years, with the increase in smart phone and tablet usage stressing networks.
  • Page 44 Appendix B: FAQ and Special Topics Offers guidance to resolve technical issues, including general hints and tips to enhance your product experience, and a procedure for isolating problems within an Array-enabled wireless network. Also includes Frequently Asked Questions (FAQs) and Xirrus contact information. Introduction...

  • Page 45: Notes And Cautions

    XR500 Series Access Points. Please read this section carefully if you are using these models.  Glossary of Terms Provides an explanation of terms directly related to Xirrus product technology, organized alphabetically.  Index The index is a valuable information search tool. Use the index to locate specific topics discussed in this User’s Guide.

  • Page 46: Product Specifications

    Wireless Array Product Specifications Please refer to the Xirrus web site for the latest specifications for these Arrays— www.xirrus.com. Introduction...

  • Page 47: Installing The Wireless Array

    Some smaller Arrays and APs are compatible with IEEE802.3af and/or IEEE802.3at, and may be connected to appropriate powered switches. For example, the Xirrus XT-5024 is a 24-port 802.3at PoE+ managed switch. See the Quick Installation Guide for the Array/AP for compatible injectors or powered switches.
  • Page 48 SSH-2, since the Array will only allow SSH-2 connections.  Secure Web browser Xirrus supports the latest version of the following Browsers: Internet Explorer, Mozilla Firefox, Chrome, or Safari. A secure Web browser is required for Web-based management of the Array. The browser must be on the same subnet as the Array, or you must set a static route for management as described in the warning above.

  • Page 49: Optional Network Components

    Wireless Array Optional Network Components The following network components are optional.  Xirrus Management System (XMS) The optional XMS offers powerful management features for small or large Wireless Array deployments.  External RADIUS server Although your Array comes with an embedded...

  • Page 50: Planning Your Installation

    Wireless Array Planning Your Installation This section provides guidelines and examples to help you plan your Xirrus Wireless Array deployment to achieve the best overall coverage and performance. We recommend you conduct a site survey to determine the best location and settings for each Array you install.

  • Page 51: Figure 8. Wall Thickness Considerations

    Wireless Array depending on the types of materials and background RF (radio frequency) noise at your location. To maximize wireless range, follow these basic guidelines: Keep the number of walls and ceilings between the Array and your receiving devices to a minimum — each wall or ceiling can reduce the wireless range from between 3 and 90 feet (1 to 30 meters).

  • Page 52: Coverage And Capacity Planning

    Wireless Array Coverage and Capacity Planning This section considers coverage and capacity for your deployment(s), including placement options, RF patterns and cell sizes, area calculations, roaming considerations, and channel allocations.  XR-500 Series radios are omni-directional rather than directional (sectored), and discussions involving sectored radios are not applicable to these Arrays.

  • Page 53: Rf Patterns

    Wireless Array RF Patterns The Wireless Array allows you to control — automatically or manually — the pattern of wireless coverage that best suits your deployment needs. You can choose to operate with full coverage, half coverage, or custom coverage (by enabling or disabling individual sectors).

  • Page 54: Capacity And Cell Sizes

    Wireless Array Custom Coverage Where there are highly reflective objects in proximity to the Array, you can turn off specific radios to avoid interference and feedback. reflective object Figure 12. Custom Coverage Capacity and Cell Sizes Cell sizes should be estimated based on the number of users, the applications being used (for example, data/video/voice), and the number of Arrays available at the location.

  • Page 55: Fine Tuning Cell Sizes

    Wireless Array Fine Tuning Cell Sizes Adjusting the transmit power allows you to fine tune cell sizes. There are four standard sizes — Small, Medium, Large, or Max (the default is Max). There is also an Auto setting that automatically determines the best cell size, and a Manual setting that allows you to choose your power settings directly.

  • Page 56: Roaming Considerations

    Wireless Array Sharp Cell This patented Xirrus RF management option automatically creates more intelligently defined cells and improves performance by creating smaller, high- throughput cells. By dynamically limiting each cell to a defined boundary (cell size), the trailing edge bleed of RF energy is reduced, thus minimizing interference between neighboring Wireless Arrays or other Access Points.
  • Page 57 Wireless Array new location and may optionally be configured to execute periodically to account for changes in the RF environment over time. Auto Channel selection has significant advantages, including:  Allows the Array to come up for the first time and not interfere with existing equipment that may be already running, thereby limiting co- channel interference.

  • Page 58: Figure 16. Allocating Channels Manually

    Wireless Array Manual Channel Selection You can manually assign channels on a per radio basis, though manual selection is not recommended (and not necessary).  To avoid co-channel interference, do not select adjacent channels for radios that are physically next to each other. Maintain channel separation Figure 16.

  • Page 59: About Ieee 802.11Ac

    Gbps. Wave 2 and future products will add 160MHz channels and up to 8 streams, for a maximum data rate of 6.93Gbps. Xirrus currently supports up to three streams (in units with 3x3 radios) and 80 MHz channels. Xirrus models that offer 802.11ac support this technology on all IAPs, not just on one.
  • Page 60 Wireless Array The techniques that 802.11ac uses to realize these performance improvements and the expected results are discussed in:  “Up to Eight Simultaneous Data Streams — Spatial Multiplexing” on page 39  “MIMO (Multiple-In Multiple-Out)” on page 39  “MU-MIMO (Multi-User Multiple-In Multiple-Out)”...

  • Page 61: Up To Eight Simultaneous Data Streams - Spatial Multiplexing

    Wireless Array Up to Eight Simultaneous Data Streams — Spatial Multiplexing Spatial Multiplexing transmits completely separate data streams on different antennas (in the same channel) that are recombined to produce new 802.11ac data rates. Previously used for 802.11n, the maximum number of streams for 802.11ac has been increased to eight.

  • Page 62: Mu-Mimo (Multi-User Multiple-In Multiple-Out)

    Wireless Array 802.11a/b/g radios, and degraded performance. In 802.11n and 802.11ac, these signals are used to enhance performance. MIMO Processed Signal Antenna 1 Signal Antenna 2 Signal Receiver Antenna 3 Signal Frequency Across Subcarriers Figure 18. MIMO Signal Processing 802.11ac increases the number of antennas and spatial streams from a maximum of four in 802.11n to a maximum of eight, contributing to much higher maximum data rates (up to 6.93Gbit/s).

  • Page 63: Figure 19. Mu-Mimo With Four Antennas

    Wireless Array one is directed to a mobile phone. When a transmission is complete, the antennas are reallocated. Tx 1 Rx 1 Tx 2 Rx 2 Data Stream Transmitter (Access Data Stream Point) Tx 3 Rx 3 Spatial Streams Data Stream Tx 4 Rx 1 Figure 19.

  • Page 64: Higher Precision In The Physical Layer

    The default value is MCS9, the highest level. The higher the MCS value, the higher the data rate, as shown in the table below. Xirrus Arrays/APs support MCS7 -MCS9. Higher MCS levels require higher Installing the Wireless Array...

  • Page 65: 80 Mhz And 160 Mhz Channel Widths (Bonding)

    Channels 36-64 may be used: as eight 20 MHz channels; four 40 MHz channels; two 80 MHz channels; or one 160 MHz channel. Xirrus currently supports channels up to 80 MHz wide. Installing the Wireless Array...

  • Page 66: 802.11Ac Data Rates

    Wireless Array UNII-1 UNII-2 Figure 21. Channel Bonding (Channels 36-64 shown) 802.11ac Data Rates Maximum # Transmit Bandwidth Data Rate Antennas (MHz) Streams Modulation 293Mbps 64QAM 433Mbps 256QAM Phase 1 867Mbps 256QAM 1.299Gbps 256QAM 1.730Gbps 256QAM 3.470Gbps 256QAM 867Mbps 256QAM Phase 2+ 1.730Gbps 256QAM...

  • Page 67: Acexpress

    ACExpress intelligently separates clients by type onto different radios, grouping fast clients separately from slow clients, thereby maximizing performance for all. ACExpress is supported on all Xirrus 802.11ac products, both APs and Arrays. ACExpress may be enabled or disabled as part of the Load Balancing feature.
  • Page 68 Wireless Array  Migration to 802.11ac will take time. Older Wi-Fi technologies will continue to be with us for years. In order for 802.11ac to provide maximum data rates, it is important to keep interference from earlier Wi- Fi standards at a minimum. For example, 802.11n devices operating in the 5GHz band can slow down 802.11ac devices to 300Mbps or 450Mbps depending on the 2x2 or 3x3 MIMO technology used.

  • Page 69: Failover Planning

    Wireless Array Failover Planning This section discusses failover protection at the unit and port levels. To ensure that service is continued in the event of a port failure, you can utilize two Gigabit Ethernet ports simultaneously as a bonded pair (on Arrays with two or more Gigabit ports).

  • Page 70: Switch Failover Protection

    Wireless Array For more details on Gigabit port modes and their configuration, please see “Bonds and Bridging” on page 169. Switch Failover Protection To ensure that service is continued in the event of a switch failure, you can connect Arrays having multiple Gigabit ports to more than one Ethernet switch (not a hub).

  • Page 71: Power Planning

    Power over Gigabit Ethernet To deliver power to the Array, you must use Xirrus-supplied Power over Gigabit Ethernet (PoGE) modules or powered switches. They provide power over Cat 5e or Cat 6 cables to the Array without running power cables — see...

  • Page 72: Security Planning

    TTLS, EAP-PEAP, and EAP-LEAP Passthrough). Administrators may also be authenticated via RADIUS when preferred, or to meet particular security standards.  Xirrus Internal RADIUS server Recommended for smaller numbers of users (about 100 or less). Supports EAP-PEAP only Installing the Wireless Array...
  • Page 73 Wireless Array  Pre-Shared Key Uses a pass-phrase or key that is manually distributed to all authorized users. The same passphrase is given to client devices and entered into each Array.  MAC Access Control Lists (ACLs) MAC access control lists provide a list of client adapter MAC addresses that are allowed or denied access to the wireless network, and can be used in addition to any of the above authentication methods.

  • Page 74: Port Requirements

    Wireless Array Port Requirements A number of ports are used by various Array features and by the Xirrus Management System (XMS). The Port Requirements table on page 53 lists ports and the features that require them (XMS port requirements are included in the table for your convenience).
  • Page 75 1645) RADIUS Accounting 1813, 1646 RADIUS Accounting (some servers still use Server 1646) 2055 udp Netflow Client 5000 tcp Virtual Tunnel VTUN Server 22610 udp XRP (Xirrus Roaming) Arrays 22612 udp Xircon (Console Utility) Admin Workstation Installing the Wireless Array...
  • Page 76 Wireless Array Port Application Peer Configurable icmp Ping Arrays 22 tcp Arrays 25 tcp SMTP Mail Server 123 udp NTP Server 161 udp SNMP Arrays Via XMS 162 udp SNMP Traphost 1 Arrays config file 443 tcp HTTPS Arrays Via XMS 514 udp Resident Syslog server Internal*...
  • Page 77 Wireless Array See Also Management Control External Radius Services VLAN Management Installing the Wireless Array...

  • Page 78: Network Management Planning

    Cloud provides zero-touch provisioning and ongoing management. XMS is run on a dedicated Xirrus appliance or your own server. XMS manages large Wireless Array deployments from a centralized Web-based interface and offers the following features:  Globally manage large numbers of Arrays ...

  • Page 79: Wds Planning

    Wireless Array WDS Planning WDS (Wireless Distribution System) creates wireless backhaul connections between Arrays, allowing your wireless network to be expanded using multiple Arrays without the need for a wired backbone to link them (see Figure 26). WDS features include: ...

  • Page 80: Figure 27. A Multiple Hop Wds Connection

    Wireless Array Figure 27. A Multiple Hop WDS Connection  Multiple WDS links can provide link redundancy (failover capability - see Figure 28). A network protocol (Spanning Tree Protocol — STP) prevents Arrays from forming network loops. Figure 28. WDS Failover Protection Installing the Wireless Array...
  • Page 81 Wireless Array WDS links have a Host/Client relationship similar to the usual IAP/station pattern for Arrays:  A WDS Client Link associates/authenticates to a host (target) Array in the same way that a station associates to an IAP. The client side of the link must be configured with the root MAC address of the target (host) Array.

  • Page 82: Common Deployment Options

    Wireless Array Common Deployment Options The following table lists some typical and recommended deployment options for a number of the features that have been discussed in this chapter. Number of Wireless Arrays Function One or Two Three or More Power Power over Gigabit Power over Gigabit Ethernet Ethernet...

  • Page 83: Installation Workflow

    Wireless Array Installation Workflow This workflow illustrates the steps that are required to install and configure your Wireless Array successfully. Review this flowchart before attempting to install the unit on a customer’s network. Cloud XMS customers will skip the last two steps. Determine the number of Arrays needed Choose the location(s) for your Wireless Arrays Run Ethernet cables for PoGE...
  • Page 84 Wireless Array Failover Planning Installation Prerequisites Planning Your Installation Power Planning Wireless Array Product Overview Security Planning Installing the Wireless Array...

  • Page 85: Installing Your Wireless Array

    Wireless Array Installing Your Wireless Array This section provides information about the physical installation of your Xirrus Wireless Array. For complete instructions, please see the Quick Installation Guide (QIG) for your model of Array or Access Point. Choosing a Location Based on coverage, capacity and deployment examples previously discussed, choose a location for the Array that will provide the best results for your needs.
  • Page 86 Power No separate power cable is required to the Array—Xirrus wireless Arrays and APs use PoGE (Power over Gigabit Ethernet). See the Quick Installation Guide for your Array/AP model for compatible power injectors or switches.
  • Page 87 Wireless Array Important Note About Network Connections The Array’s Ethernet ports should be plugged into an Ethernet switch, not an Ethernet hub — if a hub is used, we recommend that you connect only one Ethernet port. See Also Failover Planning Installation Prerequisites Installation Workflow Mounting and Connecting the Array/AP...

  • Page 88: Mounting And Connecting The Array/Ap

    Wireless Array Mounting and Connecting the Array/AP A detailed Quick Installation Guide is available at support.xirrus.com that describes mounting your Array/AP. Please follow the provided instructions carefully. Data and power connections to the Array are also detailed in the Quick Installation Guide.

  • Page 89: Array Led Operating Sequences

    Wireless Array Array LED Operating Sequences Use the following tables to review the operating sequences of the Array’s LEDs.  “LED Boot Sequence” on page 67  “LED Operation when Array is Running” on page 68 LED Boot Sequence The normal boot LED sequence is as follows: Array Activity Status LED IAP LEDs...

  • Page 90: Led Operation When Array Is Running

    Wireless Array LED Operation when Array is Running The normal LED operation when the Array is running is shown in the table below. Note that behavior may be modified using “LED Settings” on page 354 via the CLI LED Status Reason IAP LED is OFF IAP is down...

  • Page 91: Zero-Touch Provisioning And Ongoing Management

    Zero-Touch Provisioning and Ongoing Management Most customers employ the Xirrus Management System (XMS) for the initial setup and continuing management of Xirrus devices. XMS users can readily set up their new devices for zero touch provisioning and ongoing maintenance via the following platforms.

  • Page 92: If You Are Not Using Xms

    Array. Note that every unlicensed Array with Internet connectivity obtains its license by contacting Xirrus. You have the option of whether or not to use Mobilize to update your software image and download initial configuration.

  • Page 93: Array/Ap Management Interfaces

    Array/AP Management Interfaces User Interfaces (CLI, WMI) With zero-touch setup provided by XMS and Mobilize, your Xirrus network is ready for use a few minutes after deployment. We recommend that you use the Xirrus Management System (XMS) for ongoing monitoring and fine-tuning of the network.

  • Page 94: Figure 34. Network Interfaces-Xr-2000 Series (Left); Xr-2005 Series (Right)

    Figure 36. Network Interface Ports—XR-6000 Series  The Xirrus Xircon utility may also be used to communicate with Arrays locally as an alternative to using a serial connection to the console. This is especially useful for the XR-500/600/1000 Series and some XR-2000 models, which do not have a console port.

  • Page 95: Using The Serial Port

    DHCP and DNS, then you can use this hostname. Otherwise, examine the DHCP tables on the server and find the addresses assigned to the Array (Xirrus MAC addresses begin with 00:0F:7D or 50:60:28 and are found on the Array label and shipping container).

  • Page 96: Starting The Wmi

    Powering Up the Wireless Array Licensing When a newly deployed Array boots up, it automatically contacts Xirrus with its serial number and MAC address and obtains its license key, software image, and initial configuration from XMS or Mobilize. Any unlicensed Array running ArrayOS release 6.5 or above will update in this way after it boots up, if it has...

  • Page 97: Performing The Express Setup Procedure

    If you need to enter the license manually, use the following procedure. It describes entering the license key using the WMI. If you are using the Xirrus Management System (XMS), you may use it to manage and upgrade large numbers of licenses for the wireless network.

  • Page 98: Securing Low Level Access To The Array

    163). XBLXirconXBL Xirrus also provides the Xircon utility for connecting to Xirrus XR Arrays that are not reachable via the normal access methods (such as SSH or WMI) and that do not have a physical console port (XR-500/600/1000 Series Arrays and some XR- 2000 models), or whose console port is not accessible.
  • Page 99 CLI/WMI! In this situation, there is no way to recover from a lost password, other than returning the Array to Xirrus. If you have Xircon access to XBL enabled, you can reset the password, but this recovery will require setting the unit to factory defaults with loss of all configuration data.
  • Page 100 Wireless Array jsmith@xr4012802207c's password: Xirrus Wi-Fi Array ArrayOS Version 6.1.2-3299 Copyright (c) 2005-2012 Xirrus, Inc. http://www.xirrus.com Array42# Type configure to enter the CLI config mode. Array42#configure If Xircon access at the XBL level is to be allowed, use the following three commands to change the XBL username and password from the default values of admin/admin.
  • Page 101 Wireless Array wish. See “Management Control” on page 226. Note that you cannot change the XBL username and password via the WMI. Installing the Wireless Array...
  • Page 102 Wireless Array Installing the Wireless Array...

  • Page 103: The Web Management Interface

    Applying Configuration Changes Managing Arrays Locally or via XMS For Xirrus deployments of any size, we recommend that you use the Xirrus Management System (XMS) to manage the network rather than directly managing each Array individually. You may change settings directly on the Array/AP—but be aware that XMS may not sync up with these changes for up to...

  • Page 104: An Overview

    Wireless Array An Overview The WMI is an easy-to-use graphical interface to your Wireless Array. It allows you to configure the product to suit your individual requirements and ensure that the unit functions efficiently and effectively. Figure 37. Web Management Interface The Web Management Interface...

  • Page 105: Structure Of The Wmi

    Wireless Array Structure of the WMI The content of the WMI is organized by function and hierarchy, shown in the following table. Click on any item below to jump to the referenced destination. Status Windows Statistics Windows Array Status Windows IAP Statistics Summary Per-IAP Statistics Array Summary...
  • Page 106 Wireless Array Configuration Windows Configuration Windows (cont’d) Express Setup Groups Network Group Management IAPs Network Interfaces Bonds and Bridging IAP Settings DNS Settings Global Settings (IAP) CDP Settings Global Settings .11an Services Global Settings .11bgn Global Settings .11n Time Settings (NTP) Global Settings .11u NetFlow Global Settings .11ac...

  • Page 107: User Interface

    Wireless Array User Interface Left frame Right frame Utilities Expanded menu section Help Log Message counters Command log Utilities Figure 38. WMI: Frames The Web Management Interface...

  • Page 108: Figure 39. Wmi Header

    Wireless Array The WMI has been designed with simplicity in mind, making navigation quick and easy. In the following example, you’ll see that windows are divided into left and right frames. (Figure 38 The left frame contains two main elements: ...

  • Page 109: Figure 40. Wmi Command Log

    Figure 41. WMI: Utility Buttons  Click the Feedback button to generate a Web page that allows you to submit your comments to Xirrus, Inc.  Click the Print button to open a print dialog to send a copy of the active window to your local printer.

  • Page 110: Logging In

     Some pages or individual settings are only available if the Array’s license includes appropriate Xirrus Advanced Feature Sets. If a setting is unavailable (grayed out), then your license does not support the feature. See “About Licensing and Upgrades” on page 387.

  • Page 111: Applying Configuration Changes

    Wireless Array Applying Configuration Changes In most of the WMI configuration windows, your changes to settings are applied to the Array as you make them. In most cases, there is no separate Apply button to click to make the changes take effect. There are a few exceptions to this rule. In these cases, a particular section of a page may have its own Apply Settings button right below the settings.
  • Page 112 Wireless Array The Web Management Interface...

  • Page 113: Viewing Status On The Wireless Array

    Wireless Array Viewing Status on the Wireless Array These windows provide status information and statistics for your Array using the product’s embedded Web Management Interface (WMI). You cannot make configuration changes to your Array from these windows. The following topics have been organized into functional areas that reflect the flow and content of the...

  • Page 114: Array Status Windows

    Wireless Array Array Status Windows The following Array Status windows are available:  Array Summary — displays information on the configuration of all Array interfaces, including IAPs.  Array Information — provides version/serial number information for all Array components.  Array Configuration —...

  • Page 115: Content Of The Array Summary Window

    Wireless Array Content of the Array Summary Window The Array Summary window is sub-divided into the Ethernet Interfaces section and the Integrated Access Point (radio) section, providing you with the following information:  Ethernet Settings Summary This section provides information about network interface devices. To make configuration changes to these devices, go to “Network Interfaces”...
  • Page 116 Wireless Array  Bond Settings Summary This section provides information about the relationship that has been selected for the Gigabit ports. For detailed explanations and to make configuration changes, see “Bonds and Bridging” on page 169. • Bond: Lists all network bonds that have been configured. •...

  • Page 117: Figure 44. Disabled Iap (Partial View)

    Wireless Array Figure 44. Disabled IAP (Partial View) • Channel: Shows which channel each IAP is using, and the channel setting. To avoid co-channel interference, adjacent radios should not be using adjacent channels. To make channel selections for a specific IAP, go to “IAP Settings”...

  • Page 118: Figure 46. Network Assurance And Operating Status

    Wireless Array • Rx Threshold: Shows the receive threshold for each IAP. • Stations: Informs you how many client stations are currently associated with each IAP.XN Arrays can handle up to 96 concurrent users per individual IAP, thus 16-port XN models can handle 1536 users per Array.
  • Page 119 Wireless Array Network assurance must be enabled on the Array in order to perform these connectivity tests and display this information. See “Management Control” on page 226.  Operating Status Section This section shows the Array controller board’s current internal temperatures, current fan speed, and compass heading.

  • Page 120: Array Information

    Wireless Array Array Information This is a status only window that shows you the current firmware versions utilized by the Array, serial numbers assigned to each module, MAC addresses, licensing information, recent boot timestamps, and current internal temperatures and fan speed. Note that the License Features row lists the features that are supported by your Array’s license.

  • Page 121: Array Configuration

    Wireless Array Array Configuration This is a status only window that allows you to display the configuration settings assigned to the Array, based on the following filter options:  Running — displays the current configuration (the one running now).  Saved —...

  • Page 122: Admin History

    Wireless Array Admin History It is useful to know who else is currently logged in to an array while you're configuring it. It's also nice to see who has logged in since the array booted. This status-only window shows you all administrator logins to the Array that have occurred since the last reboot.

  • Page 123: Network

    Wireless Array  CDP Neighbors — lists neighboring network devices using Cisco Discovery Protocol.  — shows results of connectivity tests for network Network Assurance servers.  Undefined VLANs — shows VLANs present on an 802.1Q connection to the Array, that are not configured in the Array's VLAN list. Network This window provides a snapshot of the configuration settings currently established for Array’s wired interfaces.

  • Page 124: Network Map

    Wireless Array  “CDP Settings” on page 177 Network Map This window offers detailed information about this Array and all neighboring Arrays, including how the Arrays have been set up within your network. Figure 51. Network Map The Network Map has a number of options at the top of the page that allow you to customize your output by selecting from a variety of information that may be displayed.
  • Page 125 In Range: Informs you whether the Array is within wireless range of another Wireless Array.  Fast Roam: Informs you whether or not the Xirrus fast roaming feature is enabled. This feature utilizes the Xirrus Roaming Protocol (XRP) ensuring fast and seamless roaming capabilities between IAPs or Arrays at both Layer 2 and Layer 3.
  • Page 126 Wireless Array License  License: The license key of each Array.  Licensed Features: Lists the features enabled by the key. Software (enabled by default)  Enable/disable display of the Array OS column. Firmware  Boot Loader: The software version number of the boot loader on each Array.

  • Page 127: Spanning Tree Status

    Wireless Array Spanning Tree Status Multiple active paths between stations can cause loops in the network. If a loop exists in the network topology, the potential exists for the duplication of messages. The spanning tree protocol is a link management protocol that provides path redundancy while preventing undesirable loops.

  • Page 128: Routing Table

    Wireless Array Routing Table This status-only window lists the entries in the Array’s routing table. The table provides the Array with instructions for sending each packet to its next hop on its route across the network. Figure 53. Routing Table See Also VLANs Configuring VLANs on an Open SSID...

  • Page 129: Dhcp Leases

    Wireless Array DHCP Leases This status-only window lists the IP addresses (leases) that the Array has allocated to client stations. For each, it shows the IP address assigned from one of the defined DHCP pools, and the MAC address and host name of the client station.

  • Page 130: Cdp Neighbors

    Wireless Array You may sort the rows based on any column that has an active column header, indicated when the mouse pointer changes to the hand icon . Click Refresh to update the information at any time. Click Auto Refresh to instruct the Array to refresh this window automatically.

  • Page 131: Network Assurance

    Wireless Array Network Assurance This status-only window shows the results of ongoing network assurance testing. Figure 58. Network Assurance The Array checks connectivity to network servers that you have configured (for example, DNS and NTP servers) on an ongoing basis. For each server, this list shows the server’s host name (if any), IP address, and status.

  • Page 132: Undefined Vlans

    Wireless Array Undefined VLANs This status-only window lists VLANs that have not been configured on the Array, but that are being detected on the Array’s trunk port(s), i.e. wired ports. See “VLANs” on page 204. Figure 59. Undefined VLANs This feature alerts you to the fact that an 802.1Q trunk to the Array has VLANs that are not being properly handled on the Array.

  • Page 133: Rf Monitor Windows

    Wireless Array RF Monitor Windows Every Wireless Array includes an integrated RF spectrum analyzer as a standard feature. The spectrum analyzer allows you to characterize the RF environment by monitoring throughput, signal, noise, errors, and interference levels continually per channel. This capability uses the assigned threat-sensor (monitor) radio. The associated software is part of the ArrayOS.

  • Page 134: Iaps

    Wireless Array IAPs The RF Monitor — IAPs window displays traffic statistics and RF readings observed by each Array IAP (radio). Note that the data is an instantaneous snapshot for the IAP — it is not an average or a cumulative total. To graph these values over time for a particular channel, see “Channel History”...

  • Page 135: Spectrum Analyzer

    Wireless Array You may sort the rows based on any column that has an active column header, indicated when the mouse pointer changes to the hand icon . Click Refresh to update the information at any time. Click Auto Refresh to instruct the Array to refresh this window automatically.

  • Page 136: Figure 62. Rf Spectrum Analyzer

    Wireless Array number again. Click Refresh to update the information at any time. Click Auto Refresh to instruct the Array to refresh this window automatically. Select Display Options Click Channel number to highlight Figure 62. RF Spectrum Analyzer The Spectrum Analyzer offers several display options: ...
  • Page 137 Wireless Array  You may sort the rows based on any column that has an active column header, indicated when the mouse pointer changes to the hand icon Sorting is only available in the rotated view.  At the bottom left of the frame, you may select whether to display only 2.4 GHz channels, 5 GHz channels, or both (the default is both).

  • Page 138: Intrusion Detection

    Wireless Array  Average RSSI: Average RSSI level seen on 802.11 packets received on the channel. A dash value “-“means no RSSI data was available for the interval.  Average Data Rate: Average data rate over time (per byte, not per packet) seen on 802.11 packets received on the channel.
  • Page 139 Wireless Array You can sort the results based on the following parameters by clicking the desired column header:   SSID Security   BSSID Type   Manufacturer Status   Channel Discovered   RSSI Last Active You can refresh the list at any time by clicking on the Refresh button, or click in the Auto Refresh check box to instruct the Array to refresh the list automatically.

  • Page 140: Channel History

    Wireless Array Channel History  Channel History is not available for Arrays or Access Points featuring 802.11ac IAPs. The RF Monitor — Channel History window focuses on traffic statistics and RF readings observed for just one channel that you select in the Channel field. A new set of readings is added every 10 seconds for a 5 GHz channel, or every 5 seconds for a 2.4 GHz channel.

  • Page 141: Figure 65. Rf Monitor - Channel History (Rotated)

    Wireless Array Figure 65. RF Monitor — Channel History (Rotated) If you select Rotate and Text together, data is presented as a numerical table. (Figure Click Pause to stop collecting data, or Resume to continue. Figure 66. RF Monitor — Channel History (Text) Viewing Status on the Wireless Array...

  • Page 142: Radio Assurance

    Wireless Array Radio Assurance When Radio Assurance mode is enabled, the monitor radio performs loopback tests on the Array’s radios. When problems are encountered, the Array can take various actions to correct them by performing different levels of reset on the affected radio.
  • Page 143 Wireless Array ArraySee Also IAPs Xirrus Advanced RF Analysis Manager (RAM) RF Resilience Radio Assurance Viewing Status on the Wireless Array...

  • Page 144: Station Status Windows

    Wireless Array Station Status Windows The following Station Status windows are available:  Stations — this list describes all stations associated to the Array.  Location Map — displays a map showing the approximate locations of all stations associated to the array. ...

  • Page 145: Stations

    Wireless Array Stations This window shows client stations currently visible to the Array. You may choose to view only stations that have Associated to the Array, or include stations that are Unassociated by selecting the appropriate buttons above the list. The list always shows the MAC address of each station, its IP address, the SSID used for the association, the Group...
  • Page 146 Wireless Array You may sort the rows based on any column that has an active column header. Click again to reverse the sort order. You may select one or more specific stations and perform one of the following actions by clicking the associated button: ...

  • Page 147: Location Map

    Wireless Array Location Map The Location Map shows the approximate locations of stations relative to this Array. The location of each station is computed based on the RSSI of its signal as received by the Array. The distance is adjusted based on the environment setting that you selected.

  • Page 148: Figure 70. Controls For Location Map

    Wireless Array completely obscure another. You may minimize a station that is not of interest by clicking it. There is also a Minimize All button. You may replace the range-finder background image above with your own custom image of the floor plan of the area served by the Array — see “Working with the Custom Image”...
  • Page 149 Wireless Array  Display Associated/Unassociated: Select whether to display stations that are associated to the Array, stations that are not associated, or both.  Display 2.4 GHz/5 GHz: Select whether to display 802.11bgn stations, or 802.11an stations, or both.  Preferred Label: This field is located on the top of the window towards the right.

  • Page 150: Rssi

    Wireless Array construction), or Indoor dense (many walls or obstructions, or unusually dense walls).  Scale: This view-only value shows the approximate distance represented by each hash mark on the default map background.  Associated, Unassociated, Total Stations: These view-only values show the station counts observed by the Array.

  • Page 151: Figure 72. Station Rssi Values - Colorized Graphical View

    Wireless Array By default, the RSSI is displayed numerically. You may display the relative strength using color if you select Colorize Intensity, with the strongest signals indicated by the most intense color. (Figure 71) If you select Graph, then the RSSI is shown on a representation of the Array, either colorized or numerically based on your selection.

  • Page 152: Signal-To-Noise Ratio (Snr)

    Wireless Array Signal-to-Noise Ratio (SNR) For each station that is associated to the Array, the Signal-to-Noise Ratio (SNR) window shows the station’s SNR value as measured by each IAP. In other words, the window shows the SNR of the station’s signal at each IAP radio. The signal- to-noise ratio can be very useful for determining the cause of poor performance at a station.

  • Page 153: Noise Floor

    Wireless Array the hand icon . Click on the Refresh button to refresh the station list, or click in the Auto Refresh check box to instruct the Array to refresh this window automatically. See Also Station Status Windows RF Monitor Windows Noise Floor For each station that is associated to the Array, the Noise Floor window shows the ambient noise affecting a station’s signal as measured by each IAP.

  • Page 154: Figure 76. Station Noise Floor Values - Colorized Graphical View

    Wireless Array Figure 76. Station Noise Floor Values — Colorized Graphical View In either graphical or tabular view, you may sort the rows based on any column that has an active column header, indicated when the mouse pointer changes to the hand icon .

  • Page 155: Max By Iap

    Wireless Array Max by IAP This status-only window shows the maximum number of client stations that have historically been associated to the Array. For each IAP, the list shows the IAP’s state and channel number, the current number of stations associated, and the highest number of stations that have been associated over various periods of time: hour, day, week, month, and year.

  • Page 156: Station Assurance

    Wireless Array Station Assurance Station assurance monitors the quality of the connections that users are experiencing on the wireless network. This window shows client stations that have had connectivity issues. You may enable or disable the station assurance feature and set thresholds for the problems that it checks, such as excessive packet retry or packet error rates, or stations that are unable to stay associated to the Array.

  • Page 157: Statistics Windows

    Wireless Array Statistics Windows The following Array Statistics windows are available:  IAP Statistics Summary — provides an overview of the statistical data associated with all IAPs. Expands to show links for displaying detailed statistics for individual IAPs.  Per-IAP Statistics —...

  • Page 158: Per-Iap Statistics

    Wireless Array See Also System Log Window Global Settings (IAP) Global Settings .11an Global Settings .11bgn IAPs Per-IAP Statistics This is a status only window that provides detailed statistics for the selected IAP. Scroll the window down to see a breakout of the statistics by connection rate. For a summary of statistics for all IAPs, see “IAP Statistics Summary”...

  • Page 159: Figure 80. Individual Iap Statistics Page

    Wireless Array Figure 80. Individual IAP Statistics Page You can Refresh the data (update the window with the latest information) or Clear the data (reset all content to zero and begin counting again) at any time by clicking on the appropriate button. You can also click in the Auto Refresh check box to instruct the Array to refresh this window automatically.

  • Page 160: Network Statistics

    Wireless Array Global Settings (IAP) Global Settings .11an Global Settings .11bgn IAPs Network Statistics This is a status only window that allows you to review statistical data associated with each network (Ethernet) interface and its activity. You can Refresh the data (update the window with the latest information) or Clear the data (reset all content to zero and begin counting again) at any time by clicking on the appropriate button.

  • Page 161: Vlan Statistics

    Wireless Array VLAN Statistics This is a status only window that allows you to review statistical data associated with your assigned VLANs. You can refresh the information that is displayed on this page at any time by clicking on the Refresh button, or select the Auto Refresh option for this window to refresh automatically.

  • Page 162: Wds Statistics

    Wireless Array See Also VLAN Management VLANs WDS Statistics The main WDS Statistics window provides statistical data for all WDS client and host links. To access data about a specific WDS client or host link, simply click on the desired link in the left frame to access the appropriate window. You may also choose to view a sum of the statistics for all client links, all host links, or all links (both client and host links).

  • Page 163: Ids Statistics

    Wireless Array IDS Statistics The Xirrus Array employs a number of IDS/IPS (Intrusion Detection System/ Intrusion Prevention System) strategies to detect and prevent malicious attacks on the wireless network. This status-only window provides detailed intrusion detection statistics for the selected IAP.

  • Page 164: Figure 85. Filtered Ids Statistics

    Wireless Array For example, in Figure 85, the filter Packet/Event Contains assoc finds events that include the string assoc in any position. If you have an Array with 12 IAPs, then IAP Contains 1 will show entries for iap1, iap10, iap11, and iap12. Click the Reset button to return to showing all entries.

  • Page 165: Filter Statistics

    Wireless Array Filter Statistics The Filter Statistics window provides statistical data for all configured filters. The name, state (enabled — on or off), and type (allow or deny) of each filter is shown. For enabled filters, this window shows the number of packets and bytes that met the filter criteria.

  • Page 166: Station Statistics

    Wireless Array Station Statistics This status-only window provides an overview of statistical data for all stations. Stations are listed by MAC address, and Receive and Transmit statistics are summarized for each. For detailed statistics for a specific station, click the desired MAC address in the Station column or click the details button in the station’s Link column, and see...

  • Page 167: Per-Station Statistics

    Wireless Array Per-Station Statistics This window provides detailed statistics for the selected station. This window is accessed from the Station Statistics window — click the MAC address of the desired entry in the Station column to display its Per-Station Statistics window. Receive and Transmit statistics are listed by Rate —...

  • Page 168: Application Control Windows

    Wireless Array Application Control Windows  This feature is only available if the Array license includes Application Control. See “About Licensing and Upgrades” on page 387. The Application Control feature provides real-time visibility of application usage by users across the wireless network. Network usage has changed enormously in the last few years, with the increase in smart phone and tablet usage stressing networks.
  • Page 169 Usage may be tracked by Array, VLAN, or station. Many hundreds of applications are recognized and grouped into a number of categories. The distributed architecture of Xirrus Arrays allows Application Control to scale naturally as you grow the network. About Risk and Productivity Application Control ranks applications in terms of their levels of risk an productivity.

  • Page 170: Application Control

    Wireless Array Application Control This display-only window provides a snapshot of the application usage on your Array. In order to view the Application Control window, the Array must have a license that supports this feature, and you must have enabled the Application Control option on the Filter Lists page (see “Filter Lists”...

  • Page 171: Vlans

    Array Management Traffic: Check this box if you wish to analyze management traffic on this Array, including the load due to functions such as Xirrus Roaming. Tracking traffic into the array on the management side can alert you to nefarious activity—and even to traffic on the wired network that would best be blocked before it hits the Array.

  • Page 172: Figure 90. Application Control (Pie Charts)

    Wireless Array  By Category: Check this box if you wish to analyze and list traffic by what types of applications are in use, such as Games or Collaboration.  Auto Refresh instructs the Array to periodically refresh this window automatically.

  • Page 173: Figure 91. Application Control (Station Traffic)

    Wireless Array Traffic Tables Figure 91. Application Control (Station Traffic) These tables provide detailed information about how your wireless bandwidth is being used. There are tables for Station Traffic and/or Array Management Traffic, depending on which checkboxes you selected. Similarly, there are tables for By Application and/or By Category, depending on your selections.

  • Page 174: Stations (Application Control)

    Wireless Array When you find risky or unproductive applications taking up bandwidth on the network, you can easily create Filters to control them. See “Filter Management” on page 368. You may use filters to:  Block problematic traffic, such as BitTorrent or Y8. ...

  • Page 175: System Log Window

    Wireless Array System Log Window This is a status only window that allows you to review the system log, where system alerts and messages are displayed. Although there are no configuration options available in this window, you do have the usual choice of deciding how the event messages are sorted by clicking in the column header for the desired field (Time Stamp, Priority, or Message).
  • Page 176 Wireless Array Note that there is a shortcut way to view system log messages. If you click Log Messages near the bottom of the left hand frame, WMI displays counts of log messages at different severity levels. Click a count to display just those messages in the System Log window.

  • Page 177: Ids Event Log Window

    Wireless Array IDS Event Log Window This status only window displays the Intrusion Detection System (IDS) Event log, listing any detected attacks on your network. For descriptions of the types of attacks detected, as well as the settings to fine-tune IDS on the Array, please see “Intrusion Detection”...
  • Page 178 Wireless Array  Event — the type of attack, as described in Intrusion Detection.  SSID — the SSID that was attacked.  MAC Address — the MAC address of the attacker.  Period — the length of the window used to determine whether the count of this type of event exceeded the threshold.

This manual is also suitable for:

Xr-620Xr-2220Xr-2225Xr-2230Xr-2235Xr-2420 ... Show all

Table of Contents