Aruba Reference Architectures | Aruba Networks Version 3.3 manual

Chapter 1

Introduction

This design guide is one of a series of books that describes Aruba’s User-Centric Network Architecture and provides network administrators with guidelines to design and deploy a centralized enterprise-wide wireless LAN (WLAN) network for the most common customer scenarios.

This guide complements the technical documentation you received with software and hardware releases for Aruba components.

Aruba Reference Architectures

An Aruba Validated Reference Design (VRD) is a package of network decisions, deployment best practices, and detailed descriptions of product functionality that comprise a reference model for common customer deployment scenarios. The VRD presented in this guide is representative of a best practice architecture for a large Campus WLAN serving thousands of users spread across many different buildings joined by SONET, MPLS, or other high-speed, high-availability network backbone.

The Campus Wireless Network is one of five reference architectures commonly deployed by our customers. For a brief description of the other deployment models refer to Appendix C, “Alternative Deployment Architectures” on page 71.

Reference Documents

Refer to the following documentation for more detailed technical information about Aruba OS.

Title	Version

ArubaOS User Guide	3.3.1

ArubaOS CLI Guide	3.3.1

ArubaOS Release Note	3.3.1

ArubaOS Quick Start Guide	3.3.1

MMS User Guide	2.5

MMS Release Notes	2.5

Contacting Aruba Networks

Web Site Support

Main Site	http://www.arubanetworks.com

Support Site	http://www.arubanetworks.com/support

Software Licensing Site	https://licensing.arubanetworks.com

Wireless Security Incident Response Team (WSIRT)	http://www.arubanetworks.com/support/wsirt

Support Email	support@arubanetworks.com

WSIRT Email	wsirt@arubanetworks.com
Please email details of any security problem found in an
Aruba product.

Campus Wireless Networks Validated Reference Design Version 3.3 Design Guide

Introduction 5

Image 5

Aruba Networks Version 3.3 Aruba Reference Architectures, Reference Documents, Contacting Aruba Networks, Introduction

Contents

Campus Wireless Networks Validated Reference Design Version Crossman Avenue Sunnyvale, California Phone Fax Contents Chapter RF Planning and Operation Reference Documents Aruba Reference ArchitecturesContacting Aruba Networks Introduction Telephone Support Aruba’s User-Centric Network Architecture Understanding Centralized Wireless LAN Networks Centralized Wlan Model Introducing Aruba’s User-Centric Network ArubaOS ArubaOS and Mobility Controller Mobility Controller Air Monitor Multi-function Thin Access PointsAccess Point Aruba’s Secure Enterprise Mesh Network Mesh Portal or Mesh Point Remote AP Mobility Management System Mobility Management System Proof-of-Concept Network PoC Network Physical Design Vlan PoC Network Logical and RF Design Proof-of-Concept Network Proof-of-Concept Network Campus Wlan Validated Reference Design Aruba Campus Wlan Physical Architecture Aruba Campus Wlan Logical Architecture Data center ManagementMaster Campus Wlan Validated Reference Design Understanding Master and Local Operation Mobility Controller Access Point Deployment Mobility Controller High Availability Master Controller Redundancy Local Controller Redundancy Second Local controller has an opposite configuration Vlan Design Do Not Use Special VLANs Do Not Make Aruba the Default Router Vlan Vlan Pools VLANs 10, 20, 30 User Mobility and Mobility Domains MD1 ArubaOS Mobility Domain Master Controller Placement Mobility Controller Physical Placement and Connectivity Mobility Controller and Thin AP Communication AP Placement, Power, and ConnectivityLocal Controller Placement Office Deployment AP Power and ConnectivityAP Location and Density Considerations Active Rfid Tag Deployment Voice Deployment Mobility Controller Configuration Configuration Profiles and AP GroupsConfiguration Profiles Required Licenses AP group Profile Types Profile Planning SSIDs, VLANs and Role DerivationAP Groups VLANs SSIDs Role Derivation Secure Authentication Methods Authenticating with Corporate Authentication Methods for Legacy Devices Authenticating with Captive Portal Employee Role Configuring Roles for Employee, Guest and Application Users Guest Role Create a bandwidth contract and apply it to an AP group Create the block-internal-access policy Modify the guest-logon role Device Role Wireless Attacks Wireless Intrusion Detection SystemRole Variation by Authentication Method Rogue APs Page Mobility Controller Configuration RF Planning and Operation RF Plan Tool Adaptive Radio Management Page Minimum Scan Time Sec WMM and QoS Voice over Wi-FiQuality of Service Traffic Prioritization Voice Functionality and FeaturesNetwork Wide QoS Voice-Aware RF Management Comprehensive Voice Management Voice over Wi-Fi LAN / WAN Controller Clusters Mobility Management System Multiple Master/Local Clusters Page Multiple Master/Local Clusters Licenses Appendix a Licenses Wlan Extension with Remote AP Appendix B Wlan Extension with Remote AP Alternative Deployment Architectures Small Network Deployment Mobility Controller located in the network data center Medium Network Deployment Branch Office Deployment Corporate data center DMZ Pure Remote Access Deployment