1. Manuals
  2. Brands
  3. Xirrus Manuals
  4. Wireless Access Point
  5. Wi-Fi Array XN16
  6. User manual

Xirrus Wi-Fi Array XN16 User Manual

Hide thumbs Also See for Wi-Fi Array XN16:
Table of Contents

Advertisement

Quick Links

October 28, 2009

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the Wi-Fi Array XN16 and is the answer not in the manual?

Questions and answers

Related Manuals for Xirrus Wi-Fi Array XN16

Summary of Contents for Xirrus Wi-Fi Array XN16

  • Page 1 October 28, 2009...
  • Page 3 XN16, XN12, XN8, XN4 XS16, XS12, XS8, XS4 XS-3900, XS-3700, XS-3500 All rights reserved. This document may not be reproduced or disclosed in whole or in part by any means without the written consent of Xirrus, Inc. Part Number: 800-0006-001 (Revision W)
  • Page 4 Trademarks is a registered trademark of Xirrus, Inc. All other trademarks and brand names are marks of their respective holders. Please see Legal Notices, Warnings, Compliance Statements, and Warranty and License Agreements in “Appendix F: Notices” on page 433. Xirrus, Inc.

  • Page 5: Table Of Contents

    Your User’s Guide as a PDF Document ............6 Hyperlinks ......................7 Window or Page? ....................7 Why Choose the Xirrus Wi-Fi Array? ..............7 Wi-Fi Array Product Overview ................9 Enterprise Class Security ................. 9 Wi-Fi Array Product Family ................. 10 XN Family of Arrays ................
  • Page 6 Wi-Fi Array Product Specifications—XS16/XS-3900, XS12, and XS8/XS-3700 ......................34 Product Specifications—XS4/XS-3500 ............... 40 Installing the Wi-Fi Array ..............45 Installation Prerequisites ..................45 Optional Network Components ..............47 Client Requirements ..................47 Planning Your Installation ..................48 General Deployment Considerations ............48 Coverage and Capacity Planning ..............
  • Page 7 Wi-Fi Array Port Requirements ..................72 Network Management Planning ..............75 WDS Planning ....................76 Common Deployment Options ..............79 Installation Workflow ................... 80 Unpacking the Wi-Fi Array .................. 81 Installing Your Wi-Fi Array .................. 83 Choosing a Location ..................83 Wiring Considerations ................
  • Page 8 Wi-Fi Array LED Boot Sequence ................108 LED Operation when Array is Running ..........109 Establishing Communication with the Array ..........110 Using the Serial Port ..................110 Using the Ethernet Ports ................110 Logging In ...................... 111 Performing the Express Setup Procedure ............112 Procedure for Performing an Express Setup ..........
  • Page 9 Wi-Fi Array Station Status Windows ..................150 Stations ......................151 Location Map ....................152 RSSI ......................... 158 Signal-to-Noise Ratio (SNR) ................ 160 Noise Floor ..................... 162 Max by IAP ....................164 Statistics Windows ....................165 IAP Statistics Summary ................165 Per-IAP Statistics ...................
  • Page 10 Wi-Fi Array Using the Array’s Default Certificate ..........213 Using an External Certificate Authority ..........214 Admin Management ..................215 Admin RADIUS .................... 216 About Creating Admin Accounts on the RADIUS Server ....217 Management Control ................... 219 Access Control List ..................223 Global Settings ....................
  • Page 11 Wi-Fi Array RF Resilience ..................278 RF Power & Sensitivity ................. 279 RF Spectrum Management ..............280 LED Settings ....................283 WDS ........................285 About Configuring WDS Links ............285 WDS Client Links ..................287 Filters ........................289 Filter Lists ...................... 290 Filter Management ..................
  • Page 12 Wi-Fi Array contact-info ....................324 date-time ......................325 dhcp-server ....................326 dns ........................327 file ........................328 filter ......................... 331 fips ........................333 group ......................334 hostname ......................334 https ........................ 335 interface ......................336 license ......................337 load ......................... 337 location ......................
  • Page 13 Wi-Fi Array Enabling Global IAPs ................... 359 Disabling Global IAPs .................. 360 Enabling a Specific IAP ................361 Disabling a Specific IAP ................362 Setting Cell Size Auto-Configuration for All IAPs ........363 Setting the Cell Size for All IAPs ..............364 Setting the Cell Size for a Specific IAP ............
  • Page 14 Appendix D: Implementing PCI DSS ............... 419 Payment Card Industry Data Security Standard Overview ......419 PCI DSS and Wireless ..................420 The Xirrus Array PCI Compliance Configuration .......... 421 The pci-audit Command ..................422 Additional Resources ..................423 Appendix E: Implementing FIPS Security ............425 Appendix F: Notices ...................
  • Page 15 Wi-Fi Array Glossary of Terms................455 Index....................467 Table of Contents...
  • Page 16 Wi-Fi Array Table of Contents...

  • Page 17: List Of Figures

    Wi-Fi Array List of Figures Figure 1. Xirrus Arrays....................2 Figure 2. The Xirrus Management System .............. 3 Figure 3. Wi-Fi Array (XN16) ..................9 Figure 4. Wireless Coverage Patterns ..............12 Figure 5. XP8 - Power over Ethernet Usage ............13 Figure 6.
  • Page 18 Wi-Fi Array Figure 35. Installation Workflow ................80 Figure 36. Array Placement ..................83 Figure 37. Attaching the T-Bar Clips to the Template ........... 86 Figure 38. Attaching the T-Bar Clips to the Ceiling Grid........87 Figure 39. Installing the Mounting Plate ..............88 Figure 40.
  • Page 19 Wi-Fi Array Figure 72. Spanning Tree Status................137 Figure 73. Routing Table ..................138 Figure 74. ARP Table ....................138 Figure 75. DHCP Leases................... 139 Figure 76. Connection Tracking ................140 Figure 77. CDP Neighbors ..................141 Figure 78. RF Monitor—IAPs .................. 143 Figure 79.
  • Page 20 Figure 118. DHCP Management ................203 Figure 119. VLANs...................... 205 Figure 120. VLAN Management ................207 Figure 121. Security..................... 209 Figure 122. Import Xirrus Certificate Authority............. 214 Figure 123. Admin Management ................215 Figure 124. Admin RADIUS ..................217 Figure 125. Management Control ................219 Figure 126.
  • Page 21 Wi-Fi Array Figure 146. .Configuring a WDS Link ..............286 Figure 147. WDS Client Links ................... 287 Figure 148. Filters ......................289 Figure 149. Filter Lists ....................290 Figure 150. Filter Management ................. 291 Figure 151. System Tools.................... 296 Figure 152. Saving the Diagnostic Log..............299 Figure 153.
  • Page 22 Wi-Fi Array Figure 183. Removing the Chassis Cover ..............382 Figure 184. Lifting the Integrated Access Point Module ........383 Figure 185. Disconnect the Integrated Access Point Module ....... 383 Figure 186. Installing a New Access Panel (with Power Supply) ......385 Figure 187.

  • Page 23: Introduction

    Wi-Fi Array Introduction These topics introduce the Xirrus Wi-Fi Array, including an overview of its key features and benefits, and a detailed listing of the product’s physical, environmental, technology and regulatory specifications. “The Xirrus Family of Products” on page “About this User’s Guide” on page “Why Choose the Xirrus Wi-Fi Array?”...

  • Page 24: The Xirrus Family Of Products

    Figure 1. Xirrus Arrays The Xirrus family of products includes the following: The XS Series of Xirrus Wi-Fi Arrays (XS16 / XS12 / XS8 / XS4) XS Arrays integrate multiple Integrated Access Points—radios with high- gain directional antennas for increased range and coverage. The Array...

  • Page 25: Figure 2. The Xirrus Management System

    XMS is used for managing large Array deployments from a centralized Web-based interface. The XMS server is available pre-installed on the Xirrus XM-33xx-CC Management Platform Series, or as a software package (XA-3300-CC) to be installed on your own server hardware.

  • Page 26: Nomenclature

    Wi-Fi Array Nomenclature Throughout this User’s Guide, the Xirrus Wi-Fi Array is also referred to as simply the Array. In some instances, the terms product and unit are also used. When discussing specific products from the Xirrus family, the product name is used (for example, XN16, XS12, or XS-3500).
  • Page 27 Wi-Fi Array Installing the Wi-Fi Array Defines prerequisites for deploying and installing the Array and provides instructions to help you plan and complete a successful installation. The Web Management Interface Offers an overview of the product’s embedded Web Management Interface, including its content and structure. It emphasizes what you need to do to ensure that any configuration changes you make are applied, and provides a list of restricted characters.

  • Page 28: Notes And Cautions

    Contains the legal notices, licensing, and compliance statements for the Array. Please read this section carefully. Glossary of Terms Provides an explanation of terms directly related to Xirrus product technology, organized alphabetically. Index The index is a valuable information search tool. Use the index to locate specific topics discussed in this User’s Guide.

  • Page 29: Hyperlinks

    Window when referring to how the Wi-Fi Array’s Web Management Interface is displayed on your monitor. Why Choose the Xirrus Wi-Fi Array? The deployment of wireless LANs is becoming increasingly common as businesses strive for greater flexibility in the workplace and the need for employee mobility rises.
  • Page 30 Whether you have just a handful of users or thousands of users, wireless has the scalability and flexibility to serve your needs. See Also Key Features and Benefits Wi-Fi Array Product Overview Product Specifications—XN16, XN12, and XN8 Product Specifications—XS4/XS-3500 Product Specifications—XS16/XS-3900, XS12, and XS8/XS-3700 The Xirrus Family of Products Introduction...

  • Page 31: Wi-Fi Array Product Overview

    Wi-Fi Array Wi-Fi Array Product Overview Part of the family of Xirrus products, the Wi-Fi Array is a high capacity, multi- mode device designed for the Enterprise market, with twice the range and up to eight times the capacity of competitive wireless products.

  • Page 32: Wi-Fi Array Product Family

    Wi-Fi Array detection, site monitoring, and RF spectrum analysis are performed in the background by the Array automatically. Wi-Fi Array Product Family The following tables provide an overview of the main features supported by the Wi-Fi Array product family. XN Family of Arrays Feature XN16 XN12...

  • Page 33: Xs Family Of Arrays

    216 Mb Users supported 1,024 See Also Key Features and Benefits Wi-Fi Array Product Overview Product Specifications—XN16, XN12, and XN8 Product Specifications—XS4/XS-3500 Product Specifications—XS16/XS-3900, XS12, and XS8/XS-3700 Power over Gigabit Ethernet (PoGE) (Optional) Why Choose the Xirrus Wi-Fi Array? Introduction...

  • Page 34: Deployment Flexibility

    Wi-Fi Array Deployment Flexibility Xirrus’ unique multi-radio architecture generates 360 degrees of sectored high- gain 802.11a/b/g/n or 802.11a/b/g coverage that provides extended range and the highest possible data rates for a large volume of clients. Each sector can be controlled automatically or manually, creating a pattern of wireless coverage perfectly tailored to individual customer needs.

  • Page 35: Power Over Gigabit Ethernet (Poge) (Optional)

    Wi-Fi Array Power over Gigabit Ethernet (PoGE) (Optional) The Xirrus XP1 and XP8 Power over Gigabit Ethernet modules provide power to your Arrays over the same Cat 5e or Cat 6 cable used for data, eliminating the need to run power cables and provide an AC power outlet in proximity to each unit.

  • Page 36: Enterprise Class Management

    Wi-Fi Array Enterprise Class Management The Wi-Fi Array can be configured with its default RF settings, or the RF settings can be customized using the Array’s embedded Web Management Interface (WMI). The WMI enables easy configuration and control from a graphical console, along with a full compliment of troubleshooting tools and statistics.
  • Page 37 Xirrus Management System. For deployments of more than five Arrays, we recommend that you use the Xirrus Management System (XMS). The XMS offers a rich set of features for fine control over large deployments.

  • Page 38: Key Features And Benefits

    Wi-Fi Array Key Features and Benefits This section describes some of the key product features and the benefits you can expect when deploying the Wi-Fi Array (the XN16 product is highlighted in this section). High Capacity and High Performance an12 an11 abgn4 abgn1...

  • Page 39: Extended Coverage

    Wi-Fi Array In the recommended configuration, IAP (radio) abg(n)2 is configured in RF monitoring and rogue AP detection mode. abg4 abg1 abg3 abg2 abg2 (RF monitoring) Mode(s) IAP number Figure 8. Naming of IAPs (XS16) Extended Coverage One XN16 solution enables you to replace up to sixteen access points (includes one omnidirectional IAP for monitoring the network).

  • Page 40: Flexible Coverage Schemes

    Wi-Fi Array Flexible Coverage Schemes Your Wi-Fi Array offers flexible coverage schemes for each wireless technology. 802.11a/n 802.11a/b/g/n Monitor only Figure 9. Coverage Schemes 802.11a/n, 802.11a Delivers 60° wireless coverage per IAP, with 6 dBi of gain. 802.11b/g/n, 802.11b/g Delivers 180° wireless coverage, with 3 dBi of gain. 802.11a/b/g/n, 802.11a/b/g (monitor only) Delivers 360°...

  • Page 41: Applications Enablement

    Enterprise market. It also allows you to import floor plans to help you plan your deployment. The Xirrus Wi-Fi Array chassis has a plenum rated, lockable and tamper resistant case. See Also Wi-Fi Array Product Overview Product Specifications—XN16, XN12, and XN8...

  • Page 42: Product Specifications-Xn16, Xn12, And Xn8

    Wi-Fi Array Product Specifications—XN16, XN12, and XN8 Element Specifications Number of Users Maximum of 64 associated users per radio XN16: 1024 users per Array XN12: 768 users per Array XN8: 512 users per Array Physical Diameter: 18.65 inches (47.37 cm) Height: 3.87 inches (9.83 cm) Weight: 10 lbs (3.63 kg) Environmental...
  • Page 43 Wi-Fi Array Element Specifications Electrical Each Array supports both AC and PoGE AC Input Power: 100-240VAC at 50-60 Hz PoGE (DC) Input Power: Power over Gigabit Ethernet—no splitter required, 48VDC, Maximum 2A Nominal Power: XN16: 90W XN12: 75W XN8: 60W All Models: For PoGE, see “Power over Gigabit Ethernet...
  • Page 44 Wi-Fi Array Element Specifications Management Xirrus Management System (XMS)—Layer 3 Element Management System HTTPS Web Management Interface (WMI) CLI via SSHv2, Telnet, local serial Console Enable/disable management for any interface Read-write and read-only admin accounts may be authenticated via RADIUS SNMP v2c, v3 Configuration Files—text-based files may be...
  • Page 45 CHAP, PAP Firewall: Integrated stateful-inspection, rules-based firewall IDS/IPS: Integrates with Xirrus XDM Intrusion Detection/ Prevention System for real-time wireless security protection Rogue AP detection and blocking: Integrated Rogue AP detection and alerting via dedicated internal RF Threat Sensor. Rogue AP...
  • Page 46 Wi-Fi Array Element Specifications Security Time of Day Access: (continued) Specify when access is allowed, per SSID or User Group Station-Station Blocking: Station-to-Station traffic blocking option Wireless Wireless Standards: 802.11a 802.11b 802.11d 802.11g 802.11e 802.11h 802.11i 802.11j 802.11n Number of Radios: XN16: 12 x 802.11a/n radios 4 x 802.11a/b/g/n radios...
  • Page 47 Wi-Fi Array Element Specifications Wireless Frequency Bands: (continued) 11a/n: 4.945 – 4.985 (restricted Public Safety band) 11a/n: 5.15-5.25 GHz (UNII 1) 11a/n: 5.15-5.25 GHz (TELEC) 11a/n: 5.25-5.35 GHz (UNII 2) 11a/n: 5.470-5.725 (ETSI) 11a/n: 5.725-5.825 GHz (UNII 3) 11b/g/n: 2.412-2.462 GHz (FCC) 11b/g/n: 2.412-2.472 GHz (ETSI) 11b/g/n: 2.412-2.484 GHz (TELEC) Channel Selection:...
  • Page 48 90 Days Standard (extendable) See Also Key Features and Benefits Wi-Fi Array Product Overview Product Specifications—XN4 Product Specifications—XS16/XS-3900, XS12, and XS8/XS-3700 Product Specifications—XS4/XS-3500 Power over Gigabit Ethernet (PoGE) (Optional) The Xirrus Family of Products Why Choose the Xirrus Wi-Fi Array? Introduction...

  • Page 49: Product Specifications-Xn4

    Wi-Fi Array Product Specifications—XN4 Element Specifications Number of Users Maximum of 64 associated users per radio, 256 users per XN4 Physical Diameter: 12.58 inches (31.95 cm) Height: 2.58 inches (6.55 cm) Weight: 4lbs (1.81 kg) Environmental Operating Temperature: 0°C to 55°C 0% to 90% relative humidity (non-condensing) Storage Temperature: -20°C to 60°C...
  • Page 50 System status, Ethernet, Radio Networking DHCP client, DHCP server (multiple DHCP pools), DNS Client, NTP client, NAT Management Xirrus Management System (XMS)—Layer 3 Element Management System HTTPS Web Management Interface (WMI) CLI via SSHv2, Telnet, local serial Console Enable/disable management for any interface...
  • Page 51 Wi-Fi Array Element Specifications Quality of Service Multiple SSIDs: (QoS) Support 16 unique SSIDs per Array Each SSID beacons a unique BSSID per radio VLAN and QoS settings for each SSID VLANs: Up to 16 VLANs, 802.1Q, 802.1p Prioritization: 802.11e wireless prioritization 802.1p wired prioritization Fair queuing of downstream traffic Wireless Voice Support:...
  • Page 52 CHAP, PAP Firewall: Integrated stateful-inspection, rules-based firewall IDS/IPS: Integrates with Xirrus XDM Intrusion Detection/ Prevention System for real-time wireless security protection Rogue AP detection and blocking: Integrated Rogue AP detection and alerting via dedicated internal RF Threat Sensor. Rogue AP...
  • Page 53 Wi-Fi Array Element Specifications Security Time of Day Access: (continued) Specify when access is allowed, per SSID or User Group Station-Station Blocking: Station-to-Station traffic blocking option Wireless Wireless Standards: 802.11a 802.11b 802.11d 802.11g 802.11e 802.11h 802.11i 802.11j 802.11n Number of Radios: 4 x 802.11a/b/g/n radios Advanced RF design includes 20 integrated antennas...
  • Page 54 Wi-Fi Array Element Specifications Wireless Frequency Bands: (continued) 11a/n: 4.945 – 4.985 (restricted Public Safety band) 11a/n: 5.15-5.25 GHz (UNII 1) 11a/n: 5.15-5.25 GHz (TELEC) 11a/n: 5.25-5.35 GHz (UNII 2) 11a/n: 5.470-5.725 (ETSI) 11a/n: 5.725-5.825 GHz (UNII 3) 11b/g/n: 2.412-2.462 GHz (FCC) 11b/g/n: 2.412-2.472 GHz (ETSI) 11b/g/n: 2.412-2.484 GHz (TELEC) Channel Selection:...
  • Page 55 See Also Key Features and Benefits Wi-Fi Array Product Overview Product Specifications—XN16, XN12, and XN8 Product Specifications—XS16/XS-3900, XS12, and XS8/XS-3700 Product Specifications—XS4/XS-3500 Power over Gigabit Ethernet (PoGE) (Optional) The Xirrus Family of Products Why Choose the Xirrus Wi-Fi Array? Introduction...

  • Page 56: Product Specifications-Xs16/Xs-3900, Xs12, And Xs8/Xs-3700

    Wi-Fi Array Product Specifications—XS16/XS-3900, XS12, and XS8/XS-3700 Element Specifications Number of Users Maximum of 64 associated users per radio 1024 users per Array (XS16/XS-3900) 768 users per Array (XS12) 512 users per Array (XS8/XS-3700) Physical Diameter: 18.65 inches (47.37 cm) Height: 3.87 inches (9.83 cm) Weight: 8lbs (3.63 kg) Environmental...
  • Page 57 Wi-Fi Array Element Specifications Interfaces Serial: 1 x RS232 – RJ45 connector Ethernet Interfaces: 2 x Gigabit 100/1000 Mbps w/failover 1 x Fast Ethernet 10/100 Mbps Status LEDs: System status, Ethernet, Radio Electrical XS16/XS8: Each Array supports both AC and PoGE AC Input Power: 90-265VAC at 47-63Hz PoGE Input Power: Power over Gigabit Ethernet—...
  • Page 58 User and System Authentication: WPA and WPA2 Pre-Shared Key authentication Internal RADIUS Server, supports EAP-PEAP only 802.1x EAP-TLS 802.1x EAP-TTLS/MSCHAPv2 802.1x PEAPv0/EAP-MSCHAPv2 802.1x PEAPv1/EAP-GTC 802.1x EAP-SIM 802.1x EAP-LEAP Passthrough External RADIUS servers Authentication of Wi-Fi Arrays to the Xirrus Management System (XMS) Introduction...
  • Page 59 Wi-Fi Array Element Specifications Wireless Number of Radios: XS16/XS-3900: 12 x 802.11a radios 4 x 802.11a/b/g radios Only 12 radios should be used as 802.11a radios concurrently. XS12: 8 x 802.11a radios 4 x 802.11a/b/g radios XS8/XS-3700: 4 x 802.11a radios 4 x 802.11a/b/g radios Wireless Standards: 802.11a/b/g and g-only mode...
  • Page 60 FCC (United States) and EN 301.893 (Europe) Note: External RP-TNC antenna connectors are not for outside plant connection. Management Web-based HTTPS SNMP v2c, v3 CLI via SSHv2 or Telnet TFTP Serial Xirrus Management System (XMS) Syslog reporting for alerts/alarms Introduction...
  • Page 61 One year (hardware and software) See Also Key Features and Benefits Wi-Fi Array Product Overview Product Specifications—XN4 Product Specifications—XN16, XN12, and XN8 Product Specifications—XS4/XS-3500 Power over Gigabit Ethernet (PoGE) (Optional) The Xirrus Family of Products Why Choose the Xirrus Wi-Fi Array? Introduction...

  • Page 62: Product Specifications-Xs4/Xs-3500

    Wi-Fi Array Product Specifications—XS4/XS-3500 Element Specifications Number of Users Maximum of 64 associated users per radio (256 users per Array) Physical Diameter: 12.58 inches (31.95 cm) Height: 2.58 inches (6.55 cm) Weight: 4lbs (1.81 kg) Environmental Operating Temperature: -10°C to 50°C 0% to 90% relative humidity (non-condensing) Storage Temperature: -20°C to 60°C...
  • Page 63 XS-3500: AC Input Power: 90-265VAC at 47-63Hz Input Power (DC version): 48VDC All Models: Power over Gigabit Ethernet (PoGE): all 4-port models work with all Xirrus PoGE modules, splitter required, 48VDC “Power over Gigabit Ethernet Compatibility Matrix” on page 414.
  • Page 64 User and System Authentication: WPA Pre-Shared Key authentication Internal RADIUS Server, supports EAP-PEAP only 802.1x EAP-TLS 802.1x EAP-TTLS/MSCHAPv2 802.1x PEAPv0/EAP-MSCHAPv2 802.1x PEAPv1/EAP-GTC 802.1x EAP-SIM 802.1x EAP-LEAP Passthrough External RADIUS servers Authentication of Wi-Fi Arrays to the Xirrus Management System (XMS) Introduction...
  • Page 65 Wi-Fi Array Element Specifications Wireless Number of Radios: 4 x 802.11a/b/g radios Wireless Standards: 802.11a/b/g and g-only mode 802.11e, 802.11i Channel Selection: Manual and Automatic Frequency Bands: 11a: 4.945 – 4.985 (restricted Public Safety band) 11a: 5.15-5.25 GHz (UNII 1) 11a: 5.15-5.25 GHz (TELEC) 11a: 5.25-5.35 GHz (UNII 2) 11a: 5.470-5.725 (ETSI)
  • Page 66 See Also Key Features and Benefits Wi-Fi Array Product Overview Product Specifications—XN16, XN12, and XN8 Product Specifications—XN4 Product Specifications—XS16/XS-3900, XS12, and XS8/XS-3700 Power over Gigabit Ethernet (PoGE) (Optional) The Xirrus Family of Products Why Choose the Xirrus Wi-Fi Array? Introduction...

  • Page 67: Installing The Wi-Fi Array

    Your Wi-Fi Array deployment requires the presence of hardware and services in the host wired/wireless network, including: Power Source Most Arrays are powered via Xirrus Power over Gigabit Ethernet. PoGE supplies power over the same Cat 5e or Cat 6 cable used for data, thus reducing cabling and installation effort.
  • Page 68 To connect directly to the console port on the Array, your computer must be equipped with a male 9-pin serial port and terminal emulation software (for example, HyperTerminal). The Xirrus Array only supports serial cable lengths up to 25’ per the RS-232 specification.

  • Page 69: Optional Network Components

    Flow control None Optional Network Components The following network components are optional. Xirrus Management System (XMS) The optional XMS offers powerful management features for small or large Wi-Fi Array deployments. External RADIUS server Although your Array comes with an embedded...

  • Page 70: Planning Your Installation

    Wi-Fi Array Planning Your Installation This section provides guidelines and examples to help you plan your Xirrus Wi-Fi Array deployment to achieve the best overall coverage and performance. We recommend you conduct a site survey to determine the best location and settings for each Array you install.

  • Page 71: Figure 10. Wall Thickness Considerations

    Wi-Fi Array wireless range from between 3 and 90 feet (1 to 30 meters). Position your devices so that the number of walls or ceilings is minimized. Be aware of the direct line between each device. For example, a wall that is 1.5 feet thick (half a meter) at 90°...

  • Page 72: Coverage And Capacity Planning

    Wi-Fi Array Coverage and Capacity Planning This section considers coverage and capacity for your deployment(s), including placement options, RF patterns and cell sizes, area calculations, roaming considerations, and channel allocations. Placement Use the following guidelines when considering placement options: The best placement option for the Array is ceiling-mounted within an open plan environment (cubicles rather than fixed walls).

  • Page 73: Rf Patterns

    Wi-Fi Array RF Patterns The Wi-Fi Array allows you to control—automatically or manually—the pattern of wireless coverage that best suits your deployment needs. You can choose to operate with full coverage, half coverage, or custom coverage (by enabling or disabling individual sectors). Full (Normal) Coverage In normal operation, the Array provides a full 360 degrees of coverage.

  • Page 74: Capacity And Cell Sizes

    Wi-Fi Array Custom Coverage Where there are highly reflective objects in proximity to the Array, you can turn off specific radios to avoid interference and feedback. reflective object Figure 14. Custom Coverage Capacity and Cell Sizes Cell sizes should be estimated based on the number of users, the applications being used (for example, data/video/voice), and the number of Arrays available at the location.

  • Page 75: Fine Tuning Cell Sizes

    To enable the Auto Cell Size feature, go to “RF Power & Sensitivity” on page 279. For a complete discussion of the Auto Cell size feature, see the Xirrus Auto Cell Application Note in the Xirrus Library. Installing the Wi-Fi Array...

  • Page 76: Roaming Considerations

    Wi-Fi Arrays or other Access Points. To enable the Sharp Cell feature, go to “RF Power & Sensitivity” on page 279. For more information about this feature, see the Xirrus Sharp Cell Application Note in the Xirrus Library. Roaming Considerations Cells should overlap approximately 10 - 15% to accommodate client roaming.
  • Page 77 May be configured to run periodically. To set up the automatic channel selection feature, go to “Advanced RF Settings” on page 275. For more information about this feature, see the Xirrus Auto Channel Application Note in the Xirrus Library. Manual Channel Selection You can manually assign channels on a per radio basis, though manual selection is not recommended (and not necessary).

  • Page 78: Figure 18. Allocating Channels Manually

    Wi-Fi Array Maintain channel separation Figure 18. Allocating Channels Manually See Also Deployment Examples Failover Planning Installation Prerequisites Installing the Wi-Fi Array...

  • Page 79: Deployment Examples

    Wi-Fi Array Deployment Examples The following examples employ 802.11a cells, each offering minimum throughputs of 54 Mbps, 36 Mbps, and 18 Mbps per sector respectively, and assume a floor plan covering a total area of about 60,000 square feet (5574 sq m). Figure 19.

  • Page 80: Figure 21. Deployment Scenario (18 Mbps)-Per Sector

    Wi-Fi Array Figure 21. Deployment Scenario (18 Mbps)—Per Sector See Also Coverage and Capacity Planning Failover Planning Planning Your Installation Installing the Wi-Fi Array...

  • Page 81: Ieee 802.11N Deployment Considerations

    IEEE 802.11n features are supported only on XN Array models, and this section applies only to those Arrays. The Xirrus XN Arrays support IEEE 802.11n on all IAPs, in both 2.4 GHz and 5 GHz bands. Use of 802.11n offers significant benefits:...

  • Page 82: Mimo (Multiple-In Multiple-Out)

    Wi-Fi Array 802.11n’s speed improvements and because they are optional and configurable, as opposed to the parts of 802.11n that are fixed. While the settings for 802.11n IAPs come pre-configured on the Array for robust performance in typical usage, you should review the settings for your deployment, especially channel bonding.

  • Page 83: Figure 23. Mimo Signal Processing

    Wi-Fi Array MIMO Processed Signal Antenna 1 Signal Antenna 2 Signal Receiver Antenna 3 Signal Frequency Across Subcarriers Figure 23. MIMO Signal Processing MIMO signal processing uses multiple antennas to send and receive data. It takes advantage of multipath reflections to improve signal coherence and greatly increase receiver sensitivity (Figure 23).

  • Page 84: Multiple Data Streams-Spatial Multiplexing

    Wi-Fi Array Multiple Data Streams—Spatial Multiplexing Spatial Multiplexing transmits completely separate data streams on different antennas (in the same channel) that are recombined to produce new 802.11n data rates. Higher data rates are achieved by splitting the original data stream into separate data streams.

  • Page 85: Channel Bonding

    Wi-Fi Array Channel Bonding Channel bonding increases data rates by combining two adjacent 20 MHz channels into one 40 MHz channel. This increases the data rate to slightly more than double. A bonded 40 MHz channel is specified in terms of the Primary channel and the adjacent channel to Bond.

  • Page 86: Improved Mac Throughput

    Wi-Fi Array Improved MAC Throughput These changes make 802.11n transmission of MAC frames 40% more efficient than legacy transmission: MAC data frames are combined and given a single PHY header. Implicit Block ACK acknowledges all data frames within a combined frame.

  • Page 87: Obtaining Higher Data Rates

    Wi-Fi Array inappropriate environment, the signal quality will suffer and throughput will decrease. See “Global Settings .11n” on page 273 to configure the guard interval. Obtaining Higher Data Rates The data rate increase obtained by using 802.11n on an Array is incremental, based on the technologies that are applied and the options that you select: Higher encoding rates (Mandatory in 802.11n) Spatial Streams (Mandatory, but multiplier varies directly with number of...

  • Page 88: Capacity

    Wi-Fi Array 802.11n Capacity 802.11n offers major increases in capacity over previous 802.11 standards, as shown in Figure 28. Note that this chart shows figures for 802.11n (with one spatial stream and channel bonding). 802.11a/n Capacity 802.11a/n Capacity 23 channels * 150Mbps = 23 channels * 150Mbps = 3.4Gbps 3.4Gbps 802.11a Capacity...

  • Page 89: Failover Planning

    Wi-Fi Array Failover Planning This section discusses failover protection at the unit and port levels. Port Failover Protection To ensure that service is continued in the event of a port failure, you can utilize the Gigabit 1 and Gigabit 2 ports simultaneously. Multiple port connections Ethernet switch Figure 29.

  • Page 90: Switch Failover Protection

    Wi-Fi Array Load Balancing Broadcast Link Backup Bridged Mirrored For more details on Gigabit port modes and their configuration, please see “Network Interface Ports” on page 184. Switch Failover Protection To ensure that service is continued in the event of a switch failure, you can connect Arrays to more than one Ethernet switch (not a hub).

  • Page 91: Power Planning

    Wi-Fi Array Power Planning All XN Series Array models and XS16/12/8/4 Arrays support Power over Gigabit Ethernet (PoGE) with an integrated splitter. AC power is also supported on all XN Arrays and some versions of the XS8, XS12, and XS16. This section discusses the AC and PoGE power options.

  • Page 92: Security Planning

    TTLS, EAP-PEAP, and EAP-LEAP Passthrough). Administrators may also be authenticated via RADIUS when preferred, or to meet particular security standards. Xirrus Internal RADIUS server Recommended for smaller numbers of users (about 100 or less). Supports EAP-PEAP only Installing the Wi-Fi Array...

  • Page 93: Meeting Pci Dss Standards

    Wi-Fi Array Pre-Shared Key Uses a pass-phrase or key that is manually distributed to all authorized users. The same passphrase is given to client devices and entered into each Array. MAC Access Control Lists (ACLs) MAC access control lists provide a list of client adapter MAC addresses that are allowed or denied access to the wireless network, and can be used in addition to any of the above authentication methods.

  • Page 94: Port Requirements

    Wi-Fi Array Port Requirements A number of ports are used by various Array features and by the Xirrus Management System (XMS). The Port Requirements table on page 73 lists ports and the features that require them (XMS port requirements are included in the table for your convenience).
  • Page 95 Wi-Fi Array The following table lists port requirements for the Array and for XMS, how they are used, and whether they may be changed Port Application Peer Configurable Array 20 tcp Client 21 udp 22 tcp Client 23 tcp Telnet Client 25 tcp SMTP...
  • Page 96 Wi-Fi Array Port Application Peer Configurable 25 tcp SMTP Mail Server 161 udp SNMP Arrays Via XMS 162 udp SNMP Traphost 1 Arrays config file 443 tcp HTTPS Arrays Resident Syslog Via XMS 514 udp Internal* server config file 1099 tcp RMI Registry Internal* 2000 tcp...

  • Page 97: Network Management Planning

    (one or two units). Centralized Web-based management, using the optional Xirrus Management System (XMS), which can be run on a dedicated Xirrus appliance (XM-3300) or your own server. The XMS is used for managing...

  • Page 98: Wds Planning

    Wi-Fi Array WDS Planning WDS (Wireless Distribution System) creates wireless backhauls between arrays, allowing your wireless network to be expanded using multiple Arrays without the need for a wired backbone to link them (see Figure 32). WDS features include: One to three IAPs may be used to form a single WDS link, yielding up to 900 Mbps bandwidth per link (up to 162 Mbps for XS model Arrays).

  • Page 99: Figure 33. A Multiple Hop Wds Connection

    Wi-Fi Array Figure 33. A Multiple Hop WDS Connection Multiple WDS links can provide link redundancy (failover capability - see Figure 34). A network protocol (Spanning Tree Protocol—STP) prevents Arrays from forming network loops. Figure 34. WDS Failover Protection Installing the Wi-Fi Array...
  • Page 100 Wi-Fi Array WDS links have a Host/Client relationship similar to the usual IAP/station pattern for Arrays: A WDS Client Link associates/authenticates to a host (target) Array in the same way that a station associates to an IAP. The client side of the link must be configured with the root MAC address of the target (host) Array.

  • Page 101: Common Deployment Options

    Wi-Fi Array Common Deployment Options The following table lists some typical and recommended deployment options for a number of the features that have been discussed in this chapter. Number of Wi-Fi Arrays Function One or Two Three or More Power AC (some Array models) AC (some Array models) Power over Gigabit...

  • Page 102: Installation Workflow

    Wi-Fi Array Installation Workflow This workflow illustrates the steps that are required to install and configure your Wi-Fi Array successfully. Review this flowchart before attempting to install the unit on a customer’s network. Determine the number of Arrays needed Choose the location(s) for your Wi-Fi Arrays PoGE AC or PoGE? Run Ethernet cables (<100m total...

  • Page 103: Unpacking The Wi-Fi Array

    Unpacking the Wi-Fi Array When you unpack your Wi-Fi Array, you will find the following items in the carton: Item Quantity Xirrus Wi-Fi Array AC power cord (for AC-equipped models) Console cable Mounting plate Mounting screws Tile grid mounting clamps...
  • Page 104 Wi-Fi Array Item Quantity CD-ROM containing: This User’s Guide in PDF format End User License Agreement (EULA) README file Quick Install Guide Registration Card See Also Installation Prerequisites Installation Workflow Installing the Wi-Fi Array...

  • Page 105: Installing Your Wi-Fi Array

    Wi-Fi Array Installing Your Wi-Fi Array This section provides instructions for completing a physical installation of your Xirrus Wi-Fi Array. Choosing a Location Based on coverage, capacity and deployment examples previously discussed, choose a location for the Array that will provide the best results for your needs.

  • Page 106: Wiring Considerations

    Wi-Fi Array Wiring Considerations If you are using the Xirrus Power over Gigabit Ethernet modules (PoGE) to distribute power, see “Power over Gigabit Ethernet (PoGE) (Optional)” on page 13. If you prefer to use AC power and you have an Array that supports AC, an AC power outlet must be available to the Array.
  • Page 107 Wi-Fi Array Important Notes About Network Connections Read the following notes before making any network connections. When the unit’s IP address is unknown or a network connection has not been established, the serial cable is used for connecting directly with the Command Line Interface (CLI) via HyperTerminal.

  • Page 108: Mounting The Array On A Ceiling

    Wi-Fi Array Mounting the Array on a Ceiling Most offices have drop-down acoustical ceiling tiles set into a standard grid. The Wi-Fi Array has been designed to enable mounting to a tiled ceiling via a mounting plate and clamps that attach to the grid. Once the mounting plate is attached, the Array simply rotates onto the plate (similar to a smoke detector).

  • Page 109: Secure The T-Bar Clips To The Ceiling Support Grid

    Wi-Fi Array Secure the T-Bar Clips to the Ceiling Support Grid The mounting template should be oriented so that the Array’s abg(n)2 omni- directional monitoring IAP (radio) is pointing in the direction of the least required wireless signal coverage—for example, a nearby exterior wall or entrance. Template Ceiling tile grid T-bar clips (4 places)

  • Page 110: Installing The Mounting Plate

    Wi-Fi Array Installing the Mounting Plate Locate the mounting plate on the four screw posts. Secure the plate to the four clamps using the nuts provided. Tighten the nuts to 10-12 lbf.ft (1.38-1.66 kgf.m), but do not overtighten. Cut an access hole for the cables in the ceiling tile. Tile grid Mounting Plate Figure 39.

  • Page 111: Connecting The Cables-Ac Option

    Wi-Fi Array Connecting the Cables—AC Option This section is for Array models that have a separate AC input. If supplying AC to the Array directly (not using PoGE), refer to Figure 40 to connect cables. Otherwise, skip to Connecting the Cables—PoGE Option.

  • Page 112: Connecting The Cables-Poge Option

    Wi-Fi Array Gigabit2 (optional)—may be used for load balancing, fail-over, mirroring, or increasing link speed to the wired network. Fast Ethernet (optional)—for a management-only connection to the Array. Serial cable (optional)—for connecting directly with the Array using CLI. Connecting the Cables—PoGE Option For the XS8, XS12, or XS16, use the procedure below and refer to Figure 41.

  • Page 113: Figure 42. Connecting The Cable (Poge-Xs4)

    Wi-Fi Array Do not connect the cable from the injector directly to a Gigabit port! It must be connected to the port (towards the right in Figure 41). Connect the supplied short orange Cat 5e data cable from the Array’s Data port to Gigabit1, as shown.

  • Page 114: Attaching The Array To The Mounting Plate

    Wi-Fi Array Attaching the Array to the Mounting Plate Before attaching the Array to the mounting plate, verify that it is powering up. The Ethernet link LED lights up and the radio LEDs on the front of the unit will illuminate in rotation, indicating that the Wi-Fi Array software is loading and the unit is functioning correctly.

  • Page 115: Figure 44. Attaching The Unit (Xs-3900)

    Wi-Fi Array See Also Installation Workflow Installing Your Wi-Fi Array Mounting the Wi-Fi Array on a Wall (XS4 and XS-3500) Mounting Array on a Wall (All models except 4-port Arrays) Securing the Array Mounting the XS-3900/XS-3700 Align the port recess on the Array with the access hole in the mounting plate, then connect the Array with the lugs on the mounting plate (4 places) and turn the Array clockwise to lock the unit into place (similar to a smoke detector).

  • Page 116: Securing The Array

    Wi-Fi Array Securing the Array For added security, there is a locking bracket incorporated into the mounting plate, which will accept a small luggage-style padlock (if desired). There is also a Kensington lock slot located near the Ethernet ports. In addition, the mounting plate incorporates a positive locking tab that prevents the unit from being inadvertently released.

  • Page 117: Dismounting The Array

    Wi-Fi Array Dismounting the Array To dismount the XS-3700/3900 To dismount the Array, place your fingers so as to increase the space between the Array and the mounting plate at the positions indicated by the decals on the mounting plate—these are aligned with IAPs (radios) abg(n)1 and abg(n)3, as indicated on the clock-face of the Array.

  • Page 118: Mounting Array On A Wall (All Models Except 4-Port Arrays)

    Wi-Fi Array Securing the Array Mounting Array on a Wall (All models except 4-port Arrays) This procedure is applicable to the Wi-Fi Array’s 16-radio models, 12-radio models, and 8-radio models. If you are mounting a 4-radio model, go to “Mounting the Wi-Fi Array on a Wall (XS4 and XS-3500)” on page 101.

  • Page 119: Mark The Wall Position

    Wi-Fi Array Mark the Wall Position Use the Wall Mounting Bracket as a template and mark the locations on the wall for the mounting holes. Mark holes (5 places) Figure 47. Wall Mount—Marking the Holes When marking the holes, ensure that the mounting plate is level—you may need assistance.

  • Page 120: Install The Snaptoggle™ Toggle Bolts

    Wi-Fi Array Install the SNAPTOGGLE™ Toggle Bolts At the locations you marked in Step 1, drill a 1/2 inch (13mm) hole (there must be a minimum clearance behind the wall of 1 7/8 inches—48mm). (Refer to Figure 48, graphic A) Hold the metal channel flat alongside the plastic straps and slide the channel through the hole.

  • Page 121: Attach The Mounting Plate To The Wall Mounting Bracket

    Wi-Fi Array Attach the Mounting Plate to the Wall Mounting Bracket Secure the Wi-Fi Array’s mounting plate to the Wall Mounting Bracket, in 4 places. Tighten the bolts to a torque of 10–12 lbf.ft (1.38–1.66 kgf.m). Do not overtighten the bolts. Mounting Plate Secure (x4 bolt assemblies) Figure 49.

  • Page 122: Mount The Array

    Wi-Fi Array Mount the Array Mount the Wi-Fi Array to the Wall Mounting Bracket in the same way that you would mount the Array to a ceiling mount (the procedure is identical). See “Attaching the Array to the Mounting Plate” on page 92 “Mounting the XS-3900/XS-3700”...

  • Page 123: Mounting The Wi-Fi Array On A Wall (Xs4 And Xs-3500)

    Wi-Fi Array Mounting the Wi-Fi Array on a Wall (XS4 and XS-3500) This procedure is applicable to the 4 radio models of the Wi-Fi Array (XS4 and XS-3500). If you are mounting a 16-, 12-, or 8-radio model, go to “Mounting Array on a Wall (All models except 4-port Arrays)”...

  • Page 124: Mark The Wall Position

    Wi-Fi Array Mark the Wall Position Use the Wall Mounting Bracket as a template and mark the locations on the wall for the mounting holes. Mark holes (5 places) Figure 51. Wall Mount—Marking the Holes The bracket must be secured to the wall in 5 places, using the top 2 holes and the bottom 3 holes (5 toggle bolts are provided).

  • Page 125: Figure 52. Installing The Toggle Bolts

    Wi-Fi Array (Refer to Figure 52, graphic A) Hold the metal channel flat alongside the plastic straps and slide the channel through the hole. Figure 52. Installing the Toggle Bolts (Refer to Figure 52, graphic B) Hold the strap handle between your thumb and forefinger and pull towards you until the metal channel rests flush behind the wall.

  • Page 126: Attach The Mounting Plate To The Wall Mounting Bracket

    Wi-Fi Array Attach the Mounting Plate to the Wall Mounting Bracket Secure the Wi-Fi Array’s mounting plate to the Wall Mounting Bracket, in 4 places. Tighten the bolts to a torque of 10–12 ft-lb (1.38–1.66 kg.m). Do not overtighten the bolts. Mounting Plate Secure (x4 bolt assemblies) Figure 53.

  • Page 127: Attach The Wall Mounting Bracket/Plate Assembly To The Wall

    Wi-Fi Array Attach the Wall Mounting Bracket/Plate Assembly to the Wall Secure the Wall Mounting Bracket (with attached Mounting Plate) to the wall at the 5 toggle bolt anchors you created in Steps 2 through 5—using all 5 places. Secure with 5 toggle bolts Figure 54.

  • Page 128: Mount The Array

    Wi-Fi Array Mount the Array Mount the Wi-Fi Array to the Wall Mounting Bracket by positioning the key post (on the underside of the mounting bracket) into the key receptacle on the underside of the Array. When the key post is properly located, gently turn the Array in a clockwise direction to secure the Array to the mounting plate.

  • Page 129: Removing The Array

    Wi-Fi Array Removing the Array To remove the Array from the Wall Mount Assembly, simply apply a little upward pressure to the Array, then gently turn the Array in a counterclockwise direction to release the unit from the bracket. See Also Installation Workflow Installing Your Wi-Fi Array Mounting Array on a Wall (All models except 4-port Arrays)

  • Page 130: Array Led Operating Sequences

    Wi-Fi Array Array LED Operating Sequences Use the following tables to review the operating sequences of the Array’s LEDs. LED Boot Sequence The normal boot LED sequence is as follows: Array Activity Status LED IAP LEDs Power ON Blinking GREEN All OFF Boot loader power ON Blinking GREEN...

  • Page 131: Led Operation When Array Is Running

    Wi-Fi Array LED Operation when Array is Running The normal LED operation when the Array is running is as follows: LED Status Reason IAP LED is OFF IAP is down IAP LED is solid ON IAP is up, but no associations and no traffic IAP is up, with stations IAP LED heartbeat...

  • Page 132: Establishing Communication With The Array

    Examine the DHCP tables on the server and find the addresses assigned to the Array (Xirrus MAC addresses begin with 000F7D). Query the Array using the CLI via the serial port. Use the show ethernet command to view the IP addresses assigned to each port.

  • Page 133: Logging In

    Wi-Fi Array Logging In When logging in to the Array, use the default user name and password—the default user name is admin, and the default password is admin. See Also Installation Workflow Performing the Express Setup Procedure Powering Up the Wi-Fi Array Installing the Wi-Fi Array...

  • Page 134: Performing The Express Setup Procedure

    Wi-Fi Array Performing the Express Setup Procedure The Express Setup procedure establishes global configuration settings that enable basic Array functionality. Changes made in this window will affect all radios. Figure 58. Express Setup Installing the Wi-Fi Array...

  • Page 135: Procedure For Performing An Express Setup

    Configure SNMPv2: Select whether to Enable SNMPv2 on the Array, and change the SNMP Community Strings if desired. If you are using the Xirrus Management System (XMS), these strings must match the values used by XMS. The default values for the Array match the defaults in XMS.
  • Page 136 SSID (Wireless Network Name): The SSID (Service Set Identifier) is a unique name that identifies a wireless network. All devices attempting to connect to a specific WLAN must use the same SSID. The default for this field is “xirrus.” For additional information about SSIDs, go to the Multiple SSIDs section of “Frequently Asked Questions”...
  • Page 137 Wi-Fi Array • WPA (Wi-Fi Protected Access)—A Wi-Fi Alliance standard that contains a subset of the IEEE 802.11i standard, using TKIP or AES as an encryption method and 802.1x for authentication. • WPA2 (Wi-Fi Protected Access 2)—WPA2 is the follow-on security method to WPA for wireless networks and provides stronger data protection and network access control.
  • Page 138 Wi-Fi Array Time and Date Settings: This section specifies an optional time (NTP - Network Time Protocol) server or modifies the system time if you’re not using a server. Time Zone: Select your time zone from the choices available in the pull-down list.

  • Page 139: Figure 59. Leds Are Switched On

    Wi-Fi Array IAP Settings: Enable/Configure All IAPs: Click on the Execute button to enable and auto configure all IAPs (a message displays the countdown time—in seconds—to complete the auto-configuration task). When an IAP is enabled, its LED is switched on. (Figure LED on Figure 59.
  • Page 140 Wi-Fi Array Installing the Wi-Fi Array...

  • Page 141: The Web Management Interface

    Wi-Fi Array The Web Management Interface This topic provides an overview of the Xirrus Wi-Fi Array’s embedded Web Management Interface (WMI), used for establishing your network’s configuration settings and wireless operating parameters. It also includes login instructions. The following topics are discussed:...

  • Page 142: An Overview

    Wi-Fi Array An Overview The WMI is an easy-to-use graphical interface to your Wi-Fi Array. It allows you to configure the product to suit your individual requirements and ensure that the unit functions efficiently and effectively. Figure 60. Web Management Interface The Web Management Interface...

  • Page 143: Structure Of The Wmi

    Wi-Fi Array Structure of the WMI The content of the WMI is organized by function and hierarchy, shown in the following table. Click on any item below to jump to the referenced destination. Status Windows Configuration Windows (cont’d) Array Status Windows Services Array Summary Time Settings (NTP)
  • Page 144 Wi-Fi Array Statistics Windows System Log Window IAP Statistics Summary Tool Windows Per-IAP Statistics System Tools Network Statistics VLAN Statistics Logout WDS Statistics Filter Statistics Station Statistics Per-Station Statistics The Web Management Interface...

  • Page 145: User Interface

    Wi-Fi Array User Interface The WMI has been designed with simplicity in mind, making navigation quick and easy. In the following example, you’ll see that windows are divided into left and right frames. Left frame Right frame Array info Message counters Click to configure/view statistics Pull-down menu Figure 61.

  • Page 146: Utility Buttons

    Wi-Fi Array The left frame contains three main elements: Configuration menu organized by function (for example, radio interfaces, security, etc.). Click the heading to display a summary of its current configuration, as well as an associated pull-down menu. Three Log Messages counters are located at the bottom of the menu. They provide a running total of messages generated by the ArrayOS Syslog subsystem during your session—organized into Critical, Warning, and General messages.

  • Page 147: Figure 63. Feedback Form

    Wi-Fi Array Click on the Feedback button to generate a Web page that allows you to submit your comments to Xirrus, Inc. You can also access the feedback page at http://www.xirrus.com/public/feedback/. Refer to Figure 63 on page 125 to see a sample of the feedback form.

  • Page 148: Logging In

    Wi-Fi Array Logging In Use this procedure to log in to the WMI via your Web browser. Establish a network connection and open your Web browser. Connect to the Wi-Fi Array via its default IP address (10.0.2.1 for both Gigabit 1 and Gigabit 2 Ethernet ports) or via a DHCP assigned IP address.

  • Page 149: Viewing Status On The Wi-Fi Array

    Wi-Fi Array Viewing Status on the Wi-Fi Array These windows provide status information and statistics for your Array using the product’s embedded Web Management Interface (WMI). You cannot make configuration changes to your Array from these windows. The following topics have been organized into functional areas that reflect the flow and content of the...

  • Page 150: Array Summary

    Wi-Fi Array Array Summary This is a status only window that provides a snapshot of the global configuration settings for all Wi-Fi Array network interfaces and IAPs. You must go to the appropriate configuration window to make changes to any of the settings displayed here—configuration changes cannot be made from this window.

  • Page 151: Figure 66. Disabled Iap (Partial View)

    Wi-Fi Array • Status: Shows the current state of each interface, either enabled or disabled. • Link: Shows whether the link on this interface is up or down. • DHCP: Shows whether DHCP on this port is enabled or disabled. •...

  • Page 152: Figure 67. Iap Cells

    Wi-Fi Array • Channel: Shows which channel each IAP is using, and the channel setting. To avoid co-channel interference, adjacent radios should not be using adjacent channels. To make channel selections for a specific IAP, go to “IAP Settings” on page 255.

  • Page 153: Array Information

    Wi-Fi Array • Description: The description (if any) that you set for this IAP. Array Information This is a status only window that shows you the current firmware versions utilized by the Array, the serial numbers assigned to each module, and MAC addresses.

  • Page 154: Array Configuration

    Wi-Fi Array Array Configuration This is a status only window that allows you to display the configuration settings assigned to the Array, based on the following filter options: Running—displays the current configuration (the one running now). Saved—displays the saved configuration from this session. Lastboot—displays the configuration as it was after the last reboot.

  • Page 155: Admin History

    Wi-Fi Array Admin History It is useful to know who else is currently logged in to an array while you're configuring it. It's also nice to see who has logged in since the array booted. This status-only window shows you all administrator logins to the Array that have occurred since the last reboot.

  • Page 156: Network Map

    Wi-Fi Array Neighbors—lists neighboring network devices using Cisco Discovery Protocol. Network Map This window offers detailed information about this Array and all neighboring Arrays, including how the Arrays have been set up within your network. Figure 71. Network Map The Network Map has a number of options at the bottom of the page that allow you to customize your output by selecting from a variety of information that may be displayed.
  • Page 157 In Range: Informs you whether the Array is within wireless range of another Wi-Fi Array. Fast Roam: Informs you whether or not the Xirrus fast roaming feature is enabled. This feature utilizes the Xirrus Roaming Protocol (XRP) ensuring fast and seamless roaming capabilities between IAPs or Arrays at both Layer 2 and Layer 3.

  • Page 158: Spanning Tree Status

    Wi-Fi Array Software (enabled by default) Enable/disable display of the Array OS column. Firmware Boot Loader: The software version number of the boot loader on each Array. SCD Firmware: The software version number of the SCD firmware on each Array. IAP Info (enabled by default) Enable/disable display of the IAP/Up columns.

  • Page 159: Figure 72. Spanning Tree Status

    Wi-Fi Array link by activating the standby path. The spanning tree function is transparent to client stations. Figure 72. Spanning Tree Status This window shows the spanning tree status (forwarding or blocked) for path segments that terminate on the gigabit ports and WDS links of this Array. You may sort the rows based on the VLAN Name or Number columns by clicking the column header.

  • Page 160: Routing Table

    Wi-Fi Array Routing Table This status-only window lists the entries in the Array’s routing table. The table provides the Array with instructions for sending each packet to its next hop on its route across the network. Figure 73. Routing Table See Also VLANs Configuring VLANs on an Open SSID...

  • Page 161: Dhcp Leases

    Wi-Fi Array See Also Routing Table ARP Filtering DHCP Leases This status-only window lists the IP addresses (leases) that the Array has allocated to client stations. For each, it shows the IP address assigned from one of the defined DHCP pools, and the MAC address and host name of the client station.

  • Page 162: Connection Tracking/Nat

    Wi-Fi Array Connection Tracking/NAT This status-only window lists the session connections that have been created on behalf of clients. This table may also be used to view information about current NAT sessions. Figure 76. Connection Tracking Click the Show Netbios checkbox at the bottom of the page to display NetBIOS name information for the source and destination location of the connection.

  • Page 163: Cdp Neighbors

    Wi-Fi Array CDP Neighbors This status-only window lists devices on the Array’s network that support the Cisco Discovery Protocol (CDP). The Array performs discovery on the network on an ongoing basis. This list shows the devices that have been discovered—Cisco devices and other devices on the network that have CDP running.

  • Page 164: Rf Monitor Windows

    Wi-Fi Array RF Monitor Windows Every Wi-Fi Array includes an integrated RF spectrum analyzer as a standard feature. The spectrum analyzer allows you to characterize the RF environment by monitoring throughput, signal, noise, errors, and interference levels continually per channel. This capability uses the built-in threat-sensor radio abg(n)2. The associated software is part of the ArrayOS.

  • Page 165: Iaps

    Wi-Fi Array IAPs The RF Monitor—IAPs window displays traffic statistics and RF readings observed by each Array IAP (radio). Note that the data is an instantaneous snapshot for the IAP—it is not an average or a cumulative total. Figure 78. RF Monitor—IAPs Figure 78 presents the data as a graphical display, enabled by selecting the Graph checkbox on the lower left.

  • Page 166: Spectrum Analyzer

    Wi-Fi Array Spectrum Analyzer The RF measurements for this feature are obtained by IAP abg(n)2, which must be set to monitor mode for any data to be available. See “IAP Settings” on page 255. Spectrum analysis on Wi-Fi Arrays is a distributed capability that automatically covers the entire Wi-Fi network, since a sensor is present in every unit.

  • Page 167: Figure 79. Rf Spectrum Analyzer

    Wi-Fi Array Click Channel number to highlight Select Display Options Figure 79. RF Spectrum Analyzer Viewing Status on the Wi-Fi Array...
  • Page 168 Wi-Fi Array The Spectrum Analyzer offers several display options: To display horizontal bar graphs, click the Rotate checkbox at the bottom of the data window. In the rotated view, if you wish to view data as a numerical table, click the Text checkbox.
  • Page 169 Wi-Fi Array Signal to Noise: Average SNR (signal to noise ratio) seen on the channel, calculated from the signal seen on valid 802.11 packets less the noise floor level. A dash value “-“means no SNR data was available for the interval. Noise Floor: Average noise floor reading seen on the channel (ambient noise).

  • Page 170: Intrusion Detection

    Wi-Fi Array Intrusion Detection This window displays all detected access points, according to the category you select from the drop-down list at the top—either Unknown, Known or Approved. This includes ad hoc access points (station-to-station connections). You can sort the results based on the following parameters by clicking the desired column header: SSID Security...
  • Page 171 Wi-Fi Array You can refresh the list at any time by clicking on the Refresh button, or click in the Auto Refresh check box to instruct the Array to refresh the list automatically. See Also Network Map Rogue Control List SSIDs SSID Management Viewing Status on the Wi-Fi Array...

  • Page 172: Station Status Windows

    Wi-Fi Array Station Status Windows The following Station Status windows are available: Stations—this list describes all stations associated to the Array. Location Map—displays a map showing the approximate locations of all stations associated to the array. RSSI—for each associated station, this displays the Received Signal Strength Indicator at each of the Array’s IAPs.

  • Page 173: Stations

    Wi-Fi Array Stations This status-only window shows client stations currently visible to the Array. You may choose to view only stations that have associated to the Array, or only stations that are not associated, or both, by selecting the appropriate checkboxes above the list.

  • Page 174: Location Map

    Wi-Fi Array Click on the Refresh button to refresh the station list, or click in the Auto Refresh check box to instruct the Array to refresh this window automatically. See Also Access Control List Station Status Windows Location Map The Location Map shows the approximate locations of stations relative to this Array.

  • Page 175: Figure 82. Location Map

    Wi-Fi Array Hover mouse to show details Array Unassociated Station Associated Station Figure 82. Location Map A station is identified by its NetBIOS name if known, or else by its IP or MAC address. Hover the mouse over a station to show detailed information. If multiple stations are near each other, they will be displayed slightly offset so that one station does not completely obscure another.

  • Page 176: Figure 83. Controls For Location Map

    Wi-Fi Array Controls and items displayed on the Location Map window The controls for the Location Map are all at the bottom of the window and take up a fair amount of width. If some of the controls shown in Figure 83 are not visible, resize your browser window to be wider until all of the controls appear.

  • Page 177: Figure 84. Minimizing Stations

    Wi-Fi Array detailed information for the station by hovering over it. To enlarge all rectangles, clear the Minimize All checkbox. Minimized station display Normal station display Figure 84. Minimizing stations Scale: This view-only value shows the approximate distance represented by each hashmark on the default map background. Scale is the rightmost of the items displayed in the control area - you may need to scroll to the right edge to see it.
  • Page 178 Wi-Fi Array Rotate: Click this button to rotate the orientation of the entire map. It rotates the map 45 counter-clockwise. Enlarge: Click this button to enlarge (zoom in on) the map. The displayed Scale on the bottom right is updated with the new scale for the map. Reduce: Click this button to reduce (zoom out on) the map.

  • Page 179: Figure 85. Setting Array Location On A Custom Image

    Wi-Fi Array Array Location Controls Click here to move are at upper left of Map Array to center of map Click an arrow to move the Array Apply Button Figure 85. Setting Array location on a Custom Image Viewing Status on the Wi-Fi Array...

  • Page 180: Rssi

    Wi-Fi Array RSSI For each station that is associated to the Array, the RSSI (Received Signal Strength Indicator) window shows the station’s RSSI value as measured by each IAP. In other words, the window shows the strength of the station’s signal at each radio. You may choose to display Unassociated Stations as well with a checkbox at the bottom of the window.

  • Page 181: Figure 87. Station Rssi Values-Colorized Graphical View

    Wi-Fi Array Figure 87. Station RSSI Values—Colorized Graphical View In either graphical or tabular view, you may sort the rows based on any column that has an active column header, indicated when the mouse pointer changes to the hand icon .

  • Page 182: Signal-To-Noise Ratio (Snr)

    Wi-Fi Array Signal-to-Noise Ratio (SNR) For each station that is associated to the Array, the Signal-to-Noise Ratio (SNR) window shows the station’s SNR value as measured by each IAP. In other words, the window shows the SNR of the station’s signal at each IAP radio. The signal- to-noise ratio can be very useful for determining the cause of poor performance at a station.

  • Page 183: Figure 89. Station Snr Values-Colorized Graphical View

    Wi-Fi Array Figure 89. Station SNR Values—Colorized Graphical View In either graphical or tabular view, you may sort the rows based on any column that has an active column header, indicated when the mouse pointer changes to the hand icon .

  • Page 184: Noise Floor

    Wi-Fi Array Noise Floor For each station that is associated to the Array, the Noise Floor window shows the ambient noise affecting a station’s signal as measured by each IAP. The noise floor is the RSSI value when the station is not transmitting, sometimes called a Silence value.

  • Page 185: Figure 91. Station Noise Floor Values-Colorized Graphical View

    Wi-Fi Array Figure 91. Station Noise Floor Values—Colorized Graphical View In either graphical or tabular view, you may sort the rows based on any column that has an active column header, indicated when the mouse pointer changes to the hand icon .

  • Page 186: Max By Iap

    Wi-Fi Array Max by IAP This status-only window shows the maximum number of client stations that have historically been associated to the Array. For each IAP, the list shows the IAP’s state and channel number, the current number of stations associated, and the highest number of stations that have been associated over various periods of time: hour, day, week, month, and year.

  • Page 187: Statistics Windows

    Wi-Fi Array Statistics Windows The following Array Statistics windows are available: IAP Statistics Summary—provides an overview of the statistical data associated with all IAPs. Expands to show links for displaying detailed statistics for individual IAPs. Per-IAP Statistics—provides detailed statistics for an individual IAP. Network Statistics—displays statistical data associated with each network (Ethernet) interface.

  • Page 188: Per-Iap Statistics

    Wi-Fi Array Figure 93. IAP Statistics Summary Page See Also System Log Window Global Settings (IAP) Global Settings .11a Global Settings .11bg IAPs Per-IAP Statistics This is a status only window that provides detailed statistics for the selected IAP. If you click the link for IAP All in the left frame, each detailed statistic field will show the sum of that statistic for all IAPs.

  • Page 189: Figure 94. Individual Iap Statistics Page (For Iap Abg(N)1)

    Wi-Fi Array Figure 94. Individual IAP Statistics Page (for IAP abg(n)1) You can Refresh the data (update the window with the latest information) or Clear the data (reset all content to zero and begin counting again) at any time by clicking on the appropriate button.

  • Page 190: Network Statistics

    Wi-Fi Array Network Statistics This is a status only window that allows you to review statistical data associated with each network (Ethernet) interface and its activity. You can Refresh the data (update the window with the latest information) or Clear the data (reset all content to zero and begin counting again) at any time by clicking on the appropriate button.

  • Page 191: Vlan Statistics

    Wi-Fi Array VLAN Statistics This is a status only window that allows you to review statistical data associated with your assigned VLANs. You can refresh the information that is displayed on this page at any time by clicking on the Refresh button, or select the Auto Refresh option for this window to refresh automatically.

  • Page 192: Wds Statistics

    Wi-Fi Array WDS Statistics The main WDS Statistics window provides statistical data for all WDS client and host links. To access data about a specific WDS client or host link, simply click on the desired link in the left frame to access the appropriate window. You may also choose to view a sum of the statistics for all client links, all host links, or all links (both client and host links).

  • Page 193: Filter Statistics

    Wi-Fi Array Filter Statistics The Filter Statistics window provides statistical data for all configured filters. The name, state (enabled—on or off), and type (allow or deny) of each filter is shown. For enabled filters, this window shows the number of packets and bytes that met the filter criteria.

  • Page 194: Per-Station Statistics

    Wi-Fi Array You can Refresh the data (update the window with the latest information) at any time by clicking on the appropriate button. You can also click in the Auto Refresh check box to instruct the Array to refresh this window automatically. See Also Per-Station Statistics Per-Station Statistics...

  • Page 195: System Log Window

    Wi-Fi Array System Log Window This is a status only window that allows you to review the system log, where system alerts and messages are displayed. Although there are no configuration options available in this window, you do have the usual choice of deciding how the event messages are sorted by clicking in the column header for the desired field (Time Stamp, Priority, or Message).
  • Page 196 Wi-Fi Array Viewing Status on the Wi-Fi Array...

  • Page 197: Configuring The Wi-Fi Array

    Wi-Fi Array Configuring the Wi-Fi Array The following topics include procedures for configuring the Array using the product’s embedded Web Management Interface (WMI). Procedures have been organized into functional areas that reflect the flow and content of the WMI. The following WMI windows allow you to establish configuration parameters for your Array, and include: “Express Setup”...

  • Page 198: Express Setup

    Wi-Fi Array Express Setup The Express Setup procedure allows you to establish global configuration settings that will enable basic Array functionality. Any changes you make in this window will affect all radios. When finished, click on the Apply button to apply the new settings to this session, or click Save to apply your changes and make them permanent.
  • Page 199 SNMP Read-Write Community String is xirrus. If you are using the Xirrus Management System (XMS), the read-write string must match the string used by XMS. XMS also uses the default value xirrus. Configure the 10/100 Ethernet 0 (10/100 Mb) and Gigabit Ethernet 1 network interface settings.
  • Page 200 (SSID stands for Service Set Identifier). All devices attempting to connect to a specific WLAN must use the same SSID. The default SSID is xirrus. Entering a value in this field will replace the default SSID with the new name.
  • Page 201 Wi-Fi Array required to use a VPN connection through a secure SSH utility, like PuTTy. • WEP (Wired Equivalent Privacy)—An optional IEEE 802.11 function that offers frame transmission privacy similar to a wired network. WEP generates secret shared encryption keys that both source and destination stations can use to alter frame bits to avoid disclosure to eavesdroppers.
  • Page 202 Wi-Fi Array write privileges on the Array (i.e., the new user will be able to change the configuration of the Array). The default admin user is deleted. Note that the Array also offers the option of authenticating administrators using a RADIUS server (see “Admin Management”...

  • Page 203: Figure 103. Leds Are Switched On

    Wi-Fi Array NTP Secondary Server: Enter the IP address or domain name of an optional secondary NTP server to be used in case the Array is unable to contact the primary server. Set Time (hrs:min:sec): If you are not using NTP, check this box if you want to adjust the current system time.

  • Page 204: Network

    Wi-Fi Array Network This is a status-only window that provides a snapshot of the configuration settings currently established for the 10/100 Ethernet 0 interface and the Gigabit 1 Gigabit 2 interfaces. DNS Settings CDP Settings (Cisco Discovery Protocol) are summarized as well. You must go to the appropriate configuration window to make changes to any of the settings displayed here (configuration changes cannot be made from this window).

  • Page 205: Network Interfaces

    Wi-Fi Array Network Interfaces This window allows you to establish configuration settings for the 10/100 Fast Ethernet interface and the Gigabit 1 Gigabit 2 interfaces. Figure 105. Network Settings Gigabit 2 settings will “mirror” Gigabit 1 settings (except for MAC addresses) and cannot be configured separately.

  • Page 206: Network Interface Ports

    Wi-Fi Array When finished making changes, click on the Apply button to apply the new settings to this session, or click Save to apply your changes and make them permanent. When the status of an Ethernet or Gigabit port changes, a Syslog entry is created describing the change.
  • Page 207 Port mode: Select the desired behavior for the gigabit Ethernet ports from the following options. For a more detailed discussion of the use of the Gigabit ports and the options below, please see the Xirrus Gigabit Ethernet Port Modes Application Note in the Xirrus Library.

  • Page 208: Figure 107. Port Modes (A-B)

    Wi-Fi Array Active Backup (gig1/gig2 failover to each other)—This mode provides fault tolerance and is the default mode. Gigabit 1 acts as the primary link. Gigabit2 is the backup link and is passive. Gigabit2 assumes the IP properties of Gigabit1. If Gigabit 1 fails the Array automatically fails over to Gigabit2.

  • Page 209: Figure 108. Port Modes (C-D)

    Wi-Fi Array Bridge traffic between gig1 & gig2—Traffic received on Gigabit1 is transmitted by Gigabit2; similarly, traffic received on Gigabit2 is transmitted by Gigabit1. This allows the Array to act as a wired bridge and allows Arrays to be daisy-chained and still maintain wired connectivity.

  • Page 210: Figure 109. Port Modes (E-F)

    Wi-Fi Array (e) Load balance traffic Gig1 Gig2 Destinations Array load balances outgoing traffic based on source and destination address Switch (f) Mirror traffic Gig1 Gig2 Gig1 Gig2 Gig1 Gig2 Traffic from Gig 1 is processed Traffic from Gig 2 is processed Received wireless traffic is for wireless transmission and for wireless transmission and...
  • Page 211 Wi-Fi Array processor as well as out Gigabit1. This allows a network analyzer to be plugged into one port to capture traffic for troubleshooting, while the other port provides network connectivity for data traffic. See Figure 109 (f). Configuration Server Protocol: Choose DHCP to instruct the Array to DHCP when assigning IP addresses to the Array, or choose Static IP if you intend to enter IP addresses manually.

  • Page 212: Dns Settings

    Wi-Fi Array DNS Settings This window allows you to establish your (Domain Name System) settings. The Array uses these DNS servers to resolve host names into IP addresses. The Array also registers its own Host Name with these DNS servers, so that others may address the Array using its name rather than its IP address.

  • Page 213: Cdp Settings

    Wi-Fi Array Network Interfaces Network Statistics Spanning Tree Status CDP Settings (Cisco Discovery Protocol) is a layer 2 network protocol used to share information (such as the device manufacturer and model, network capabilities, and IP address) with other directly connected network devices. Wi-Fi Arrays can both advertise their presence by sending CDP announcements, and gather and display information sent by neighbors (see “CDP Neighbors”...
  • Page 214 Wi-Fi Array CDP Hold Time: CDP information received from neighbors is retained for this period of time before aging out of the Array’s neighbor list. Thus, if a neighbor stops sending announcements, it will no longer appear on CDP Neighbors window after CDP Hold Time seconds from its last announcement.

  • Page 215: Services

    Wi-Fi Array Services This is a status-only window that allows you to review the current settings and status for services on the Array, including DHCP, SNMP, Syslog, and Network Time Protocol (NTP) services. For example, for the DHCP server, it shows each DHCP pool name, whether the pool is enabled, the IP address range, the gateway address, lease times, and the DNS domain being used.

  • Page 216: Time Settings (Ntp)

    Wi-Fi Array Time Settings (NTP) This window allows you to manage the Array’s time settings, including synchronizing the Array’s clock with a universal clock from an NTP (Network Time Protocol) server. Synchronizing the Array’s clock with an NTP server ensures that Syslog time-stamping is maintained across all units. Figure 113.

  • Page 217: Figure 114. Time Settings (Ntp Time Enabled)

    Wi-Fi Array Adjust Date (month/day/year): If you are not using NTP, check this box if you want to adjust the current system date. When the box is checked, the date fields become active. Enter the revised date (month, day and year) in the corresponding fields. If you don’t want to adjust the current date, this box should be left unchecked (default).

  • Page 218: Netflow

    Wi-Fi Array NetFlow This window allows you to enable or disable the sending of NetFlow information to a designated collector. NetFlow is a proprietary but open network protocol developed by Cisco Systems for collecting IP traffic information. When NetFlow is enabled, the Array will send IP flow information (traffic statistics) to the designated collector.

  • Page 219: System Log

    Wi-Fi Array System Log This window allows you to enable or disable the Syslog server, define primary, secondary, and tertiary servers, set up email notification, and set the level for Syslog reporting for each of the servers and for email notification—the Syslog service will send Syslog messages that are at the selected severity or above to the defined Syslog servers and email address.
  • Page 220 Wi-Fi Array Local File Size (1-500): Enter a value in this field to define how many Syslog records are retained locally on the Array’s internal Syslog file. The default is 500. Primary Server Address (Domain or IP): If you enabled Syslog, enter the domain name or IP address of the primary Syslog server.
  • Page 221 Wi-Fi Array Local File: For records to be stored on the Array’s internal Syslog file, choose your preferred level of Syslog reporting from the pull-down list. The default level is Debugging and more serious. Primary Server: Choose the preferred level of Syslog reporting for the primary server.

  • Page 222: Snmp

    If you enable both, be aware that data and keys are not encrypted when SNMPv2 is used. NOTE: If you are managing your Arrays with XMS (the Xirrus Management System), it is very important to use SNMP v2 and the correct Read-Write Community String for proper operation of XMS with the Array.
  • Page 223 Procedure for Configuring SNMP Enable SNMPv2: Choose Yes to enable SNMP v2 functionality, or choose No to disable this feature. When used in conjunction with the Xirrus Management System, SNMP v2 (not SNMP v3) must be enabled on each Array to be managed with XMS. The default for this feature is Yes (enabled).
  • Page 224 Array. The default is xirrus-ro. SNMP Read-Only Authentication Password: Enter the read-only password for authentication (i.e., logging in). The default is xirrus-ro. SNMP Read-Only Privacy Password: Enter the read-only password for privacy (i.e., a key for encryption). The default is xirrus-ro.

  • Page 225: Dhcp Server

    Wi-Fi Array DHCP Server This window allows you to create, modify and delete DHCP (Dynamic Host Configuration Protocol) pools and enable or disable DHCP server functionality. DHCP allows the Array to provide wireless clients with IP addresses and other networking information. The DHCP server will not provide DHCP services to the wired side of the network.
  • Page 226 Wi-Fi Array Network Address Translation (NAT): Check this box to enable the Network Address Translation feature. Lease IP Range—Start: Enter an IP address to define the start of the IP range that will be used by the DHCP server. The default is 192.168.1.100. Lease IP Range—End: Enter an IP address to define the end of the IP range that will be used by the DHCP server.

  • Page 227: Vlans

    Figure 119. VLANs For a complete discussion of implementing Voice over Wi-Fi on the Array, see the Xirrus Voice over Wi-Fi Application Note in the Xirrus Library. Understanding Virtual Tunnels Xirrus Arrays support Layer 2 tunneling with Virtual Tunnels. This allows an Array to use tunnels to transport traffic for one or more SSID-VLAN pairs onto a single destination network through the Layer 3 core network.
  • Page 228 Wi-Fi Array Virtual Tunnel Server (VTS) Tunneling capability is provided by a Virtual Tunnel Server. You supply the server and deploy it in your network using open-source VTun software, available from vtun.sourceforge.net. To enable the Array to use tunneling for a VLAN, simply enter the IP address, port and secret for the tunnel server as described in Step 10 page...

  • Page 229: Vlan Management

    Wi-Fi Array VLAN Management This window allows you to assign and configure VLANs. After creating a new VLAN (added to the list of VLANs), you can modify the configuration parameters of an existing VLAN or delete a selected VLAN. Figure 120. VLAN Management The Wi-Fi Array supports dynamic VLAN assignments specified by RADIUS policy settings.
  • Page 230 Wi-Fi Array New VLAN Name/Number: Enter a name and number for the new VLAN in this field, then click on the Create button. The new VLAN is added to the list. VLAN Number: Enter a number for this VLAN (1-4094). Management: Check this box to allow management over this VLAN.

  • Page 231: Security

    Wi-Fi Array Security This status- only window allows you to review the Array’s security parameters. It includes the assigned network administration accounts, Access Control List (ACL) values, management settings, encryption and authentication protocol settings, and RADIUS configuration settings. There are no configuration options available in this window, but if you are experiencing issues with security, you may want to print this window for your records.

  • Page 232: Understanding Security

    “Internal Radius” on page 231 “Rogue Control List” on page 233 Understanding Security The Xirrus Wi-Fi Array incorporates many configurable security features. After initially installing an Array, always change the default administrator password (the default is admin), and choose a strong replacement password (containing letters, numbers and special characters).
  • Page 233 Wi-Fi Array required to use a VPN connection through a secure SSH utility, like PuTTy. • WEP (Wired Equivalent Privacy)—this option provides minimal protection (though much better than using an open network). An early standard for wireless data encryption and supported by all Wi-Fi certified equipment, WEP is vulnerable to hacking and is therefore not recommended for use by Enterprise networks.
  • Page 234 Wi-Fi Array Choosing an authentication method: User authentication ensures that users are who they say they are. For this purpose, the Array allows you to choose between the following user authentication methods: • Pre-Shared Key—users must manually enter a key (passphrase) on the client side of the wireless network that matches the key stored by the administrator in the Array.

  • Page 235: Certificates And Connecting Securely To The Wmi

    WMI. The Array ships with a default certificate that is signed by the Xirrus CA. You may choose to use this certificate, or to use a certificate issued by the CA of your choice, as described in the following sections: Using the Array’s Default Certificate...

  • Page 236: Figure 122. Import Xirrus Certificate Authority

    Array’s CA will regenerate and sign a new certificate. This happens automatically the next time you reboot after changing the host name. If you have already installed the Xirrus CA on a browser, this new Array certificate should automatically be trusted.

  • Page 237: Figure 123. Admin Management

    Wi-Fi Array WMI provides options for creating a Certificate Signing Request that you can send to an external CA, and for uploading the signed certificate to the Array after you obtain it from the CA. This certificate will be tied to the Array’s host name and private key.

  • Page 238: Admin Radius

    Wi-Fi Array Verify Password: Re-enter the password in this field to verify that you typed the password correctly. If you do not re-enter the correct password, an error message is displayed). Click on the Create button to add this administrator ID to the list. Click Apply to apply modified settings to this session, or click Save to apply your changes and make them permanent.

  • Page 239: About Creating Admin Accounts On The Radius Server

    Wi-Fi Array About Creating Admin Accounts on the RADIUS Server Permissions for RADIUS administrator accounts are controlled by the RADIUS Service-Type attribute (Attribute 6). To grant read-write permission, configure the RADIUS server to send back the Service-Type attribute with a value of Administrative.
  • Page 240 Wi-Fi Array Admin RADIUS Settings: Enable Admin RADIUS: Click Yes to enable the use of RADIUS to authenticate administrators logging in to the Array. You will need to specify the RADIUS server(s) to be used. Timeout (seconds): Define the maximum idle time (in seconds) before the RADIUS server’s session times out.

  • Page 241: Figure 125. Management Control

    Wi-Fi Array Management Control This window allows the Array management interfaces to be enabled and disabled and their inactivity time-outs set. The supported range is 300 (default) to 100,000 seconds. Figure 125. Management Control Procedure for Configuring Management Control SSH: Enable Management: Choose Yes to enable management of the Array over a Secure Shell (SSH-2) connection, or No to disable this feature.
  • Page 242 Wi-Fi Array Array. SSH clients used for connecting to the Array must be configured to use SSH-2. Connection Timeout 30-100000 (Seconds): Enter a value in this field to define the timeout (in seconds) before your SSH connection is disconnected. The value you enter here must be between 30 seconds and 100,000 seconds.
  • Page 243 Xirrus CA certificate. Click Install Certificate to start your browser’s Certificate Install Wizard. We recommend that you use this process to install Xirrus as a root authority in your browser. When you assign a Host Name to your Array using the...
  • Page 244 Upload Signed Certificate: To use a custom certificate signed by an authority other than Xirrus, use the Browse button to locate the certificate file, then click Upload to copy it to the Array. The Array’s web server will be restarted and will pick up the new certificate. This will terminate any current web sessions, and you will need to reconnect and re-login to the Array.

  • Page 245: Figure 126. Access Control List

    Wi-Fi Array Address. Click the Create button to create the certificate signing request. See Step 5 above to use this request. Click on the Apply button to apply the new settings to this session, or click Save to apply your changes and make them permanent. See Also Network Interfaces - to enable/disable management over an Ethernet interface...
  • Page 246 Wi-Fi Array Procedure for Configuring Access Control Lists Access Control List Type: Select Disabled to disable the Access Control List, or select the Access Control List type—either Allow List or Deny List. Then click Apply to apply your changes. • Allow List: Only allows these MAC addresses to associate to the Array.

  • Page 247: Figure 127. Global Settings (Security)

    Wi-Fi Array Global Settings This window allows you to establish the security parameters for your wireless network, including WEP, WPA, WPA2 and RADIUS authentication. When finished, click on the Apply button to apply the new settings to this session, or click Save to apply your changes and make them permanent.
  • Page 248 Wi-Fi Array Procedure for Configuring Network Security RADIUS Server Mode: Choose the RADIUS server mode you want to use, either Internal or External. Parameters for these modes are configured in “External Radius” on page 228 “Internal Radius” on page 231. WPA Settings These settings are used if the WPA or WPA2 encryption type is selected on the SSIDs >SSID Management window or the Express Setup window (on this...
  • Page 249 Wi-Fi Array WEP Settings These settings are used if the WEP encryption type is selected on the SSIDs > SSID Management window or the Express Setup window (on this window, encryption type is set in the SSID Settings: Wireless Security field). Key Mode / Length: If you enabled WEP, choose the mode (either ASCII or Hex) and the desired key length (either 40 or 104) from the pull-down lists.

  • Page 250: Figure 128. External Radius Server

    Wi-Fi Array Security Planning SSID Management External Radius This window allows you to define the parameters of an external RADIUS server for user authentication. To set up an external RADIUS server, you must choose External as the RADIUS server mode in Global Settings. Refer to “Global Settings”...

  • Page 251: Filters

    Wi-Fi Array Procedure for Configuring an External RADIUS Server Primary Server: This is the external RADIUS server that you intend to use as your primary server. Address: Enter the IP address or domain name of this external RADIUS server. Port Number: Enter the port number of this external RADIUS server. The default is 1812.

This manual is also suitable for:

Wi-fi array xn4Wi-fi array xn12Wi-fi array xn8Wi-fi array xs12Wi-fi array xs8Wi-fi array xs4 ... Show all

Table of Contents