Aruba Networks Version 3.3 manual

Campus Wireless Networks

Validated Reference Design

Version 3.3

Design Guide

Contents

Main Page Chapter 1 Introduction 5 Chapter 2 Arubas User-Centric Network Architecture 7 Chapter 3 A Proof-of-Concept Network 15 Chapter 4 Campus WLAN Validated Reference Design 19 Chapter 5 Mobility Controller and Access Point Deployment 23 Chapter 6 Mobility Controller Configuration 37 Chapter 7 RF Planning and Operation 55 Chapter 8 Voice over Wi-Fi 59 Chapter 1 Introduction Contacting Aruba Networks Aruba Reference Architectures Reference Documents Telephone Support Chapter 2 Arubas User-Centric Network Architecture Understanding Centralized Wireless LAN Networks Introducing Arubas User-Centric Network ArubaOS and Mobility Controller ArubaOS Mobility Controller Multi-function Thin Access Points Access Point Air Monitor Mesh Portal or Mesh Point Arubas Secure Enterprise Mesh Network Remote AP Home Office Corporate HQBranch Office Mobility Management System Mobility Management System Chapter 3 A Proof-of-Concept Network PoC Network - Physical Design PoC Network - Logical and RF Design Data center Internet Page Page Chapter 4 Campus WLAN Validated Reference Design Aruba Campus WLAN Physical Architecture Aruba Campus WLAN Logical Architecture LocalLocal Other Aruba Reference Architectures Management Aggregation Wireless Access Page Chapter 5 Mobility Controller and Access Point Deployment Understanding Master and Local Operation Mobility Controller High Availability Master Controller Redundancy Local Controller Redundancy Page VLAN Design Do Not Make Aruba the Default Router Do Not Use Special VLANs VLAN Pools VLAN 10 VLAN 40 VLAN 30VLAN 20 User Mobility and Mobility Domains VLANs 10, 20, 30, 40 ArubaOS Mobility Domain LAN MD1 Los Angeles Mobility Controller Physical Placement and Connectivity Master Controller Placement Local Controller Placement AP Placement, Power, and Connectivity Distribution Mobility Controller and Thin AP Communication AP Power and Connectivity AP Location and Density Considerations Office Deployment Voice Deployment Active RFID Tag Deployment Chapter 6 Mobility Controller Configuration Required Licenses Configuration Profiles and AP Groups Configuration Profiles Profile Types AP Groups Profile Planning SSIDs, VLANs and Role Derivation SSIDs VLANs Employee SSID Application SSID Guest SSID Role Derivation Secure Authentication Methods Authenticating with 802.1X Page Authenticating with Captive Portal Authentication Methods for Legacy Devices Configuring Roles for Employee, Guest and Application Users Employee Role Guest Role Page Create aliases: Create the guest-logon-access policy: Create the auth-guest-access policy: Create the auth-guest role: Configure the guest VLAN: Configure captive portal authentication: Modify the guest-logon role: Configure the AAA profile: Configure the guest WLAN: Device Role Role Variation by Authentication Method Wireless Intrusion Detection System Wireless Attacks Rogue APs Page Page Chapter 7 RF Planning and Operation RF Plan Tool Adaptive Radio Management Page Page Chapter 8 Voice over Wi-Fi WMM and QoS Quality of Service Traffic Prioritization Voice Functionality and Features Voice-Aware RF Management Call Admission Control Comprehensive Voice Management Page Chapter 9 Controller Clusters and the Mobility Management System LAN / WAN Page Page Page Appendix A Licenses Page Appendix B WLAN Extension with Remote AP Page Appendix C Alternative Deployment Architectures Small Network Deployment Medium Network Deployment Branch Office Deployment Corporate data center Pure Remote Access Deployment DMZ