Aruba Networks Version 3.3 manual Profile Types, AP group

Page 38

names. This allows the administrator to define a particular profile once and reuse it as needed which reduces errors and data entry.

The ArubaOS Profile system is set up so that the configuration flow goes from high level to low level in a hierarchical manner. Unlike other hierarchical systems such as LDAP, the system does not provide arbitrary levels of depth or inheritance. The ability to copy a profile when creating a new profile allows for rudimentary inheritance when the new profile is created. Changes to the original profile will not be reflected in the new profile.

Profile Types

The basic idea of a profile is very straightforward. With nearly 30 types of profiles available, ArubaOS

3.3offers the administrator almost unlimited control over how their wireless network can be implemented. The main categories of profiles are shown below. Each box represents a different profile. Note that certain profiles are nested within others.

AP group

	Wireless LAN	RF	AP	QoS	IDS
	Wireless LAN	management	AP	QoS	IDS
		management
	Virtual AP	a/g radio	System profile	VoIP
	properties	settings	System profile	VoIP
	properties	settings
	SSID	RF	Ethernet	a/g
	SSID	optimizations	Ethernet	management
		optimizations		management
	AAA		Regulatory
			SNMP

Some of the more common profiles administrators work with daily include:

zAP Profiles

Configure AP operation parameters, radio settings, port operations, regulatory domain, and SNMP information.

zQoS Profiles

Configure traffic management and VOIP functions.

zRF Management Profiles

Configure radio tuning and calibration, AP load balancing, coverage hole detection, and RSSI metrics.

zIDS Profiles

IDS functions for APs. There is a top-level IDS profile that contains other IDS profiles in which you configure detection of denial of service (DoS) and impersonation attacks; unauthorized devices on the wireless network, as well as intrustion signatures.

38 Mobility Controller Configuration

Campus Wireless Networks Validated Reference Design Version 3.3 Design Guide

Image 38

Contents Campus Wireless Networks Validated Reference Design Version Crossman Avenue Sunnyvale, California Phone Fax Contents Chapter RF Planning and Operation Contacting Aruba Networks Aruba Reference ArchitecturesReference Documents IntroductionTelephone Support Understanding Centralized Wireless LAN Networks Aruba’s User-Centric Network ArchitectureIntroducing Aruba’s User-Centric Network Centralized Wlan ModelArubaOS and Mobility Controller ArubaOSMobility Controller Air Monitor Multi-function Thin Access PointsAccess Point Mesh Portal or Mesh Point Aruba’s Secure Enterprise Mesh NetworkMobility Management System Remote APMobility Management System PoC Network Physical Design Proof-of-Concept NetworkPoC Network Logical and RF Design VlanProof-of-Concept Network Proof-of-Concept Network Aruba Campus Wlan Physical Architecture Campus Wlan Validated Reference DesignAruba Campus Wlan Logical Architecture Data center ManagementMaster Campus Wlan Validated Reference Design Mobility Controller Access Point Deployment Understanding Master and Local OperationMobility Controller High Availability Master Controller Redundancy Local Controller Redundancy Second Local controller has an opposite configuration Vlan Design Do Not Make Aruba the Default Router Do Not Use Special VLANsVlan Pools VlanUser Mobility and Mobility Domains VLANs 10, 20, 30ArubaOS Mobility Domain MD1Mobility Controller Physical Placement and Connectivity Master Controller PlacementMobility Controller and Thin AP Communication AP Placement, Power, and ConnectivityLocal Controller Placement Office Deployment AP Power and Connectivity AP Location and Density Considerations Voice Deployment Active Rfid Tag DeploymentConfiguration Profiles Configuration Profiles and AP GroupsMobility Controller Configuration Required LicensesProfile Types AP groupProfile Planning SSIDs, VLANs and Role DerivationAP Groups SSIDs VLANsSecure Authentication Methods Role DerivationAuthenticating with Corporate Authenticating with Captive Portal Authentication Methods for Legacy DevicesConfiguring Roles for Employee, Guest and Application Users Employee RoleGuest Role Create a bandwidth contract and apply it to an AP group Create the block-internal-access policy Modify the guest-logon role Device Role Wireless Attacks Wireless Intrusion Detection SystemRole Variation by Authentication Method Rogue APs Page Mobility Controller Configuration RF Plan Tool RF Planning and OperationAdaptive Radio Management Page Minimum Scan Time Sec WMM and QoS Voice over Wi-FiQuality of Service Network Wide QoS Voice Functionality and FeaturesTraffic Prioritization Voice-Aware RF ManagementComprehensive Voice Management Voice over Wi-Fi Controller Clusters Mobility Management System LAN / WANMultiple Master/Local Clusters Page Multiple Master/Local Clusters Appendix a LicensesLicenses Appendix B Wlan Extension with Remote APWlan Extension with Remote AP Small Network Deployment Alternative Deployment ArchitecturesMedium Network Deployment Mobility Controller located in the network data centerBranch Office Deployment Corporate data center Pure Remote Access Deployment DMZ