Alcatel-Lucent and OV3600 Best Practices

53 Pages·2016·3.09 MB·English

OmniVista 3600 Air
Manager 8.2
e
d
i
u
G
s
e
c
i
t
c
a
r
P
t
s
e
B
Copyright
©2016Alcatel-Lucent.Allrightsreserved.
Specificationsinthismanualaresubjecttochangewithoutnotice.
OriginatedintheUSA.
AOS-W,Alcatel4302,Alcatel4304,Alcatel4306,Alcatel4308,Alcatel4324,Alcatel4504,Alcatel4604,Alcatel
4704,Alcatel6000,OAW-AP41,OAW-AP68,OAW-AP60/61/65,OAW-AP70,OAW-AP80,OAW-AP92/93,OAW-
AP105,OAW-AP120/121,OAW-AP124/125,OAW-AP175,OAW-IAP92/93/105,OAW-RAP2,OAW-RAP5,and
Omnivista3600AirManageraretrademarksofAlcatel-LucentintheUnitedStatesandcertainothercountries.
Anyothertrademarksappearinginthismanualarethepropertyoftheirrespectivecompanies.Includes
softwarefromLitechSystemsDesign.TheIF-MAPclientlibrarycopyright2011Infoblox,Inc.Allrightsreserved.
ThisproductincludessoftwaredevelopedbyLarsFennebergetal.
March2016 | OmniVista3600AirManager8.2 | BestPracticesGuide
Contents
Overview 5
UnderstandingAlcatel-LucentTopology 5
PrerequisitesforIntegratingAlcatel-LucentInfrastructure 5
Configuring OV3600 for Global Alcatel-Lucent Infrastructure 7
DisablingRateLimitinginOV3600Setup>General 7
EnteringCredentialsinDeviceSetup>Communication 7
SettingUpRecommendedTimeoutandRetries 9
SettingUpTimeSynchronization 9
ManuallySettingtheClockonaswitch 9
EnablingSupportforChannelUtilizationAndStatistics 9
OV3600Setup 9
switchSetup(MasterAndLocal) 10
Configuring an Alcatel-Lucent Group in OV3600 11
BasicMonitoringConfiguration 11
AdvancedConfiguration 12
Discovering Alcatel-Lucent Infrastructure 13
DiscoveringorAddingMasterswitches 13
LocalswitchDiscovery 15
ThinAPDiscovery 15
OV3600 and Alcatel-Lucent Integration Strategies 17
IntegrationGoals 17
ExampleUseCases 18
WhentoUseEnableStats 18
WhentoUseWMSOffload 18
WhentoUseRTLS 18
WhentoDefineOV3600asaTrapHost 19
WhentoUseChannelUtilization 19
PrerequisitesforIntegration 19
EnableswitchStatisticsUsingOV3600 19
WMSOffloadwithOV3600 20
DefineOV3600asaTrapHostUsingtheAOS-WCLI 21
EnsuringThatIDSandAuthTrapsDisplayinOV3600 21
UnderstandingWMSOffloadImpactonAlcatel-LucentInfrastructure 23
Alcatel-Lucent Specific Capabilities in OV3600 25
Alcatel-LucentTrapsforRADIUSAuthandIDSTracking 25
RemoteAPMonitoring 26
ARMandChannelUtilizationInformation 27
VisualRFandChannelUtilization 28
ConfiguringChannelUtilizationTriggers 30
ViewingChannelUtilizationAlerts 30
ViewChannelUtilizationinRFHealthReports 31
ViewingswitchLicenseInformation 32
RogueDeviceClassification 32
Rules-BasedControllerClassification 35
UsingRAPIDSDefaultsforControllerClassification 35
OmniVista3600AirManager8.2 | BestPracticesGuide Contents | iii
ChangingRAPIDSBasedonswitchClassification 35
Appendix A AOS-W and OV3600 CLI Commands 37
EnableChannelUtilizationEvents 37
EnableStatsWiththeAOS-WCLI 37
OffloadWMSUsingtheAOS-WorOV3600CLI 37
AOS-WCLI 37
OV3600SNMP 38
PushingConfigsfromMastertoLocalswitches 38
DisableDebuggingUtilizingtheAOS-WCLI 38
RestartWMSonLocalswitches 39
ConfigureAOS-WCLIwhennotOffloadingWMS 39
CopyandPastetoEnableProperTrapswiththeAOS-WCLI 39
Appendix B OV3600 Data Acquisition Methods 43
Appendix C WMS Offload Details 46
StateCorrelationProcess 46
UsingOV3600asaMasterDeviceStateManager 47
Appendix D Increasing Location Accuracy 48
UnderstandBandSteering'sImpactonLocation 48
LeveragingRTLStoIncreaseAccuracy 48
DeploymentTopology 48
Prerequisites 49
EnableRTLSServiceontheOV3600Server 49
EnableRTLSontheswitch 50
TroubleshootingRTLS 51
UsingtheWebUItoSeeStatus 51
UsingtheCLI 51
Wi-FiTagSetupGuidelines 52
iv | Contents OmniVista3600AirManager8.2 | BestPracticesGuide
Chapter 1
Overview
ThisdocumentprovidesbestpracticesforleveragingOmniVista3600AirManagertomonitorandmanageyour
Alcatel-Lucentinfrastructure,whichprovidesawealthoffunctionalitysuchasfirewall,VPN,remoteAP,IDS,IPS,
andARM,aswellasanabundanceofstatisticalinformation.
FollowthesimpleguidelinesinthisdocumenttogarnerthefullbenefitofyourAlcatel-Lucentinfrastructure.
Thisoverviewchaptercontainsthefollowingtopics:
l "UnderstandingAlcatel-LucentTopology"onpage5
l "PrerequisitesforIntegratingAlcatel-LucentInfrastructure"onpage5
Understanding Alcatel-Lucent Topology
Figure1depictsatypicalmaster-localdeploymentforOmniVista3600AirManager:
Figure1:TypicalAlcatel-LucentDeployment
ThereshouldneverbealocalswitchmanagedbyanOV3600serverwhosemasterswitchisalsonotunder
management.
Prerequisites for Integrating Alcatel-Lucent Infrastructure
YouwillneedthefollowinginformationtomonitorandmanageyourAlcatel-Lucentinfrastructure:
l SNMPcommunitystring(monitoringanddiscovery)
l Telnet/SSHcredentials(configurationonly)
l Enablepassword(configurationonly)
WithoutproperTelnet/SSHcredentials,OV3600willnotbeabletoacquirelicenseandserialinformationfrom
switches.
l SNMPv3credentialsarerequiredforWirelessLANManagementSystem(WMS)Offload:
n Username
OmniVista3600AirManager8.2 | BestPracticesGuide Overview | 5
n Authpassword
n Privacypassword
n Authprotocol
6 | Overview OmniVista3600AirManager8.2 | BestPracticesGuide
Chapter 2
Configuring OV3600 for Global Alcatel-Lucent
Infrastructure
ThissectionexplainshowtoconfigureOV3600togloballymanageyourAlcatel-Lucentinfrastructure.
l "DisablingRateLimitinginOV3600Setup>General"onpage7
l "EnteringCredentialsinDeviceSetup>Communication"onpage7
l "SettingUpRecommendedTimeoutandRetries"onpage9
l "SettingUpTimeSynchronization"onpage9
l "EnablingSupportforChannelUtilizationAndStatistics"onpage9
Disabling Rate Limiting in OV3600 Setup > General
TheSNMPRateLimitingforMonitoredDevicesoptionaddsasmalldelaybetweeneachSNMPGETrequest,
whichresultsintheactualpollingintervalsthatarelongerthanwhatisconfigured.Forexample,settingaten-
minutepollingintervalwillresultinanactual12-minutepollinginterval.Disablingratelimitingisrecommended
inmostcases.
TodisableratelimitinginOV3600,followthesesteps:
1. NavigatetoOV3600 Setup> General.
2. LocatethePerformance section.
3. IntheSNMPRate Limiting forMonitoredDevicesfield,selectNo,asshowninFigure2.
4. ClickSave.
Figure2:SNMPRateLimitinginOV3600Setup> General > Performance
Entering Credentials in Device Setup > Communication
OV3600requiresseveralcredentialstoproperlyinterfacewithAlcatel-Lucentdevices.Toenterthesecredentials,
followthesesteps:
1. NavigatetoDevice Setup> Communication.
2. IntheDefault Credentialssection,selecttheEditlinknexttoAlcatel-Lucent.ThepageillustratedinFigure
3appears.
ConfiguringOV3600forGlobalAlcatel-LucentInfrastructure
OmniVista3600AirManager8.2 | BestPracticesGuide
| 7
3. EntertheSNMPCommunity String.
BesuretonotethecommunitystringbecauseitmustmatchtheSNMPtrapcommunitystring,whichis
configuredlaterinthisdocument.
Figure3:CredentialsinDeviceSetup> Communication
4. Entertherequiredinformationforconfigurationandbasicmonitoring:
l Telnet/SSHusername
l Telnet/SSHpassword
l Enablemodepassword
5. EntertherequireddataforWMSOffload:
l SNMPv3username
l Authenticationpassword
l SNMPv3authenticationprotocol(mustbeSHA-1)
l Privacypassword
l SNMPv3privacyprotocol(mustbeDES)
TheauthenticationandprivacyprotocolsmustbeSHA-1andDESforWMSOffloadtoworkcorrectly.
6. ClickSave.
8 | ConfiguringOV3600forGlobalAlcatel-LucentInfrastructure OmniVista3600AirManager8.2 | BestPracticesGuide
Setting Up Recommended Timeout and Retries
1. IntheDevice Setup> Communicationpage,locatetheSNMPSetting section.
2. ChangetheSNMPTimeout settingtoavalueoreither3,4,or5.ThisisthenumberofsecondsthatOV3600
willwaitforaresponsefromadeviceaftersendinganSNMPrequest,soasmallernumberismoreideal.
3. ChangetheSNMPRetriesvalueto10.ThisvaluerepresentsthenumberoftimesOV3600triestopolla
devicewhenitdoesnotreceivearesponsewithintheSNMPTimeoutPeriodortheGroup’sMissedSNMPPoll
Thresholdsetting(1-100).
Althoughtheupperlimitforthisvalueis40,someSNMPlibrariesstillhaveahardlimitof20retries.Inthese
cases,anyretryvaluethatissetabove20willstillstopat20.
Figure4:TimeoutsettingsinDeviceSetup> Communication
4. ClickSavewhenyouaredone.
Setting Up Time Synchronization
YoucansettheclockonaswitchmanuallyorbyconfiguringtheswitchtouseaNetworkTimeProtocol(NTP)
servertosynchronizeitssystemclockwithacentraltimesource.
Manually Setting the Clock on a switch
YoucanuseeithertheWebUIorCLItomanuallysetthetimeontheswitch’sclock.
1. NavigatetotheConfiguration > Management > Clockpage.
2. Underswitch Date/Time,setthedateandtimefortheclock.
3. UnderTime Zone,enterthenameofthetimezoneandtheoffsetfromGreenwichMeanTime(GMT).
4. Toadjusttheclockfordaylightsavingstime,clickEnabledunderSummerTime.Additionalfieldsappearthat
allowyoutosettheoffsetfromUTCandthestartandendrecurrences.
5. ClickApply.
Enabling Support for Channel Utilization And Statistics
Toenablesupportforchannelutilizationstatistics,yourOV3600serverandAlcatel-LucentAOS-WandAlcatel-
LucentInstantdevicesmustberunningthefollowingversionsofsoftware:
l OmniVista3600AirManager7.6orlater
l Alcatel-LucentAOS-W6.0.1orlater
l Alcatel-LucentInstant3.3orlater
DevicesrunningAOS-W6.0.1canreportRFutilizationmetrics,butAOS-W6.1orlaterisnecessarytoalso
obtainclassifiedinterfererinformation.
OV3600 Setup
1. NavigatetoOV3600 Setup> General.
ConfiguringOV3600forGlobalAlcatel-LucentInfrastructure
OmniVista3600AirManager8.2 | BestPracticesGuide
| 9
2. IntheAdditionalOV3600 Services section,setEnable AMON DataCollectiontoYes,andsetPrefer
AMON vs SNMPPollingtoYes.
3. ClickSave.
Figure5:AMONDataCollectionSettinginOV3600Setup> General
switch Setup (MasterAnd Local)
EnablingthesecommandsonAOS-Wversionspriorto6.0.1.0canresultinperformanceissuesontheswitch.Ifyouare
runningpreviousfirmwareversionssuchasAOS-W6.0.0.0,youshouldupgradetoAOS-W6.0.1(toobtainRFutilization
metrics)or6.1(toobtainRFutilizationandclassifiedinterfererinformation)beforeyouenterthiscommand.
ThefollowingcommandsareforAOS-Wversions6.3.1andlater.Togetthecommandsforotherversionsof
AOS-W,refertotheCommand-LineInterfaceReferenceGuideforthatversion.
UseSSHtoaccesstheswitch’scommand-lineinterface,enterenablemode,andissuethefollowingcommands:
(switch-Name) # configure terminal
Enter Configuration commands, one per line. End with CNTL/Z
(switch-Name) (config) # mgmt-server type ov3600 primary-server <OV3600-IP>
(switch-Name) (config) # mgmt-server profile <profile-name>
(switch-Name) (config) # write mem
Youcanadduptofour<OV3600-IP>addresses.
10 | ConfiguringOV3600forGlobalAlcatel-LucentInfrastructure OmniVista3600AirManager8.2 | BestPracticesGuide