Aruba Networks Version 3.3 - page 27

Campus Wireless Networks Validated Reference Design Version 3.3 | Design Guide Mobility Controller and Access Point Deployment | 27

When one active Local Controller becomes unreachable, APs connected to the unreachable controller

fail over to the standby Local Controller loading that controller to 100% capacity. Therefore each

controller must have sufficient processing power and licenses to accommodate all of the APs served by

the entire cluster. In this model, preemption should be enabled to force the APs to fail back to the

original primary when it comes back online.

The configuration for each Local controller is a mirror image of the other. In the example below, the

first controller is primary on 23 and standby on 24:

The second Local controller has an opposite configuration:

Using this scenario it is recommended to use the MMC-6000 chassis with redundant power supplies

connected to at least two independent power sources. The recommended controller blade is the

Multiservice Module. It is further recommended that these controllers have a “one-armed” connection

to distribution layer switches, using Etherchannel to bond the two 10 Gigabit Ethernet connections.

N+1 designs are a common feature of other vendors’ centralized WLAN architectures. This is usually

because the maximum number of APs that can be managed by one controller is limited to a few dozen

or a few hundred at most, requiring the deployment of many controllers simply to service the

vrrp 23

vlan 23

ip address 10.200.23.254

priority 100

preempt

authentication <password>

description initial-primary-23

no shutdown

vrrp 24

vlan 24

ip address 10.200.24.254

priority 110

preempt

authentication <password>

description initial-standby-24

no shutdown

vrrp 24

vlan 24

ip address 10.200.24.254

priority 100

preempt

authentication <password>

description initial-primary-24

no shutdown

vrrp 23

vlan 23

ip address 10.200.23.254

priority 110

preempt

authentication <password>

description initial-standby-23

no shutdown

Contents

Main Page Chapter 1 Introduction 5 Chapter 2 Arubas User-Centric Network Architecture 7 Chapter 3 A Proof-of-Concept Network 15 Chapter 4 Campus WLAN Validated Reference Design 19 Chapter 5 Mobility Controller and Access Point Deployment 23 Chapter 6 Mobility Controller Configuration 37 Chapter 7 RF Planning and Operation 55 Chapter 8 Voice over Wi-Fi 59 Chapter 1 Introduction Contacting Aruba Networks Aruba Reference Architectures Reference Documents Telephone Support Chapter 2 Arubas User-Centric Network Architecture Understanding Centralized Wireless LAN Networks Introducing Arubas User-Centric Network ArubaOS and Mobility Controller ArubaOS Mobility Controller Multi-function Thin Access Points Access Point Air Monitor Mesh Portal or Mesh Point Arubas Secure Enterprise Mesh Network Remote AP Home Office Corporate HQBranch Office Mobility Management System Mobility Management System Chapter 3 A Proof-of-Concept Network PoC Network - Physical Design PoC Network - Logical and RF Design Data center Internet Page Page Chapter 4 Campus WLAN Validated Reference Design Aruba Campus WLAN Physical Architecture Aruba Campus WLAN Logical Architecture LocalLocal Other Aruba Reference Architectures Management Aggregation Wireless Access Page Chapter 5 Mobility Controller and Access Point Deployment Understanding Master and Local Operation Mobility Controller High Availability Master Controller Redundancy Local Controller Redundancy Page VLAN Design Do Not Make Aruba the Default Router Do Not Use Special VLANs VLAN Pools VLAN 10 VLAN 40 VLAN 30VLAN 20 User Mobility and Mobility Domains VLANs 10, 20, 30, 40 ArubaOS Mobility Domain LAN MD1 Los Angeles Mobility Controller Physical Placement and Connectivity Master Controller Placement Local Controller Placement AP Placement, Power, and Connectivity Distribution Mobility Controller and Thin AP Communication AP Power and Connectivity AP Location and Density Considerations Office Deployment Voice Deployment Active RFID Tag Deployment Chapter 6 Mobility Controller Configuration Required Licenses Configuration Profiles and AP Groups Configuration Profiles Profile Types AP Groups Profile Planning SSIDs, VLANs and Role Derivation SSIDs VLANs Employee SSID Application SSID Guest SSID Role Derivation Secure Authentication Methods Authenticating with 802.1X Page Authenticating with Captive Portal Authentication Methods for Legacy Devices Configuring Roles for Employee, Guest and Application Users Employee Role Guest Role Page Create aliases: Create the guest-logon-access policy: Create the auth-guest-access policy: Create the auth-guest role: Configure the guest VLAN: Configure captive portal authentication: Modify the guest-logon role: Configure the AAA profile: Configure the guest WLAN: Device Role Role Variation by Authentication Method Wireless Intrusion Detection System Wireless Attacks Rogue APs Page Page Chapter 7 RF Planning and Operation RF Plan Tool Adaptive Radio Management Page Page Chapter 8 Voice over Wi-Fi WMM and QoS Quality of Service Traffic Prioritization Voice Functionality and Features Voice-Aware RF Management Call Admission Control Comprehensive Voice Management Page Chapter 9 Controller Clusters and the Mobility Management System LAN / WAN Page Page Page Appendix A Licenses Page Appendix B WLAN Extension with Remote AP Page Appendix C Alternative Deployment Architectures Small Network Deployment Medium Network Deployment Branch Office Deployment Corporate data center Pure Remote Access Deployment DMZ