Aruba Networks Version 3.3 Chapter 9

Campus Wireless Networks Validated Reference Design Version 3.3 | Design Guide Multiple Master/Local Clusters | 63

Chapter 9

Controller Clusters and the

Mobility Management

System™

The Aruba Mobility Management System™ (MMS) is designed to give network administrators the

ability to manage the system state and rapidly scope problems for individual users across one or more

Master/Local Mobility Controller clusters.

As the network grows beyond a single Master/Local cluster the configuration and troubleshooting of

the system grows in complexity. This complexity is increased further if more than a single cluster exists

on the same campus as users could easily roam between clusters. To simplify the job of the network

administrator, Aruba recommends using the MMS system any time more than one Master/Local

Mobility Controller cluster exists in the network.

The MMS product provides a consolidated view of all components and users on the network in a single,

flexible console. In addition to the functionality already present in the Mobility Controllers, the MMS

adds network-wide configuration, advanced reporting and trending to the Aruba system, allowing

network administrators to interface with a single tool for planning, configuration, and troubleshooting.

The Mobility Management System reduces total cost of ownership by automatically discovering and

managing hundreds of controllers and thousands of access points and users from a single network

operations center.

Centralized configuration management, coupled with the ability to track client devices, identify rouge

devices, and plan new deployments and visualize RF coverage patterns with an intuitive, seamless user

interface, is a key differentiator. MMS provides a comprehensive suite of applications for planning,

configuration, fault and performance management, reporting, RF visualization, and Wi-Fi® device and

RFID location tracking for Aruba’s User-Centric Networks. This product seamlessly integrates with

Aruba’s Access Points and Mobility Controllers to support the new paradigm of adaptive wireless LANs,

identity-based security, and application continuity.

arun_063

Headquarters

Regional office

Branch office

Home office

Data center

LAN / WAN

Internet

Contents

Main Page Chapter 1 Introduction 5 Chapter 2 Arubas User-Centric Network Architecture 7 Chapter 3 A Proof-of-Concept Network 15 Chapter 4 Campus WLAN Validated Reference Design 19 Chapter 5 Mobility Controller and Access Point Deployment 23 Chapter 6 Mobility Controller Configuration 37 Chapter 7 RF Planning and Operation 55 Chapter 8 Voice over Wi-Fi 59 Chapter 1 Introduction Contacting Aruba Networks Aruba Reference Architectures Reference Documents Telephone Support Chapter 2 Arubas User-Centric Network Architecture Understanding Centralized Wireless LAN Networks Introducing Arubas User-Centric Network ArubaOS and Mobility Controller ArubaOS Mobility Controller Multi-function Thin Access Points Access Point Air Monitor Mesh Portal or Mesh Point Arubas Secure Enterprise Mesh Network Remote AP Home Office Corporate HQBranch Office Mobility Management System Mobility Management System Chapter 3 A Proof-of-Concept Network PoC Network - Physical Design PoC Network - Logical and RF Design Data center Internet Page Page Chapter 4 Campus WLAN Validated Reference Design Aruba Campus WLAN Physical Architecture Aruba Campus WLAN Logical Architecture LocalLocal Other Aruba Reference Architectures Management Aggregation Wireless Access Page Chapter 5 Mobility Controller and Access Point Deployment Understanding Master and Local Operation Mobility Controller High Availability Master Controller Redundancy Local Controller Redundancy Page VLAN Design Do Not Make Aruba the Default Router Do Not Use Special VLANs VLAN Pools VLAN 10 VLAN 40 VLAN 30VLAN 20 User Mobility and Mobility Domains VLANs 10, 20, 30, 40 ArubaOS Mobility Domain LAN MD1 Los Angeles Mobility Controller Physical Placement and Connectivity Master Controller Placement Local Controller Placement AP Placement, Power, and Connectivity Distribution Mobility Controller and Thin AP Communication AP Power and Connectivity AP Location and Density Considerations Office Deployment Voice Deployment Active RFID Tag Deployment Chapter 6 Mobility Controller Configuration Required Licenses Configuration Profiles and AP Groups Configuration Profiles Profile Types AP Groups Profile Planning SSIDs, VLANs and Role Derivation SSIDs VLANs Employee SSID Application SSID Guest SSID Role Derivation Secure Authentication Methods Authenticating with 802.1X Page Authenticating with Captive Portal Authentication Methods for Legacy Devices Configuring Roles for Employee, Guest and Application Users Employee Role Guest Role Page Create aliases: Create the guest-logon-access policy: Create the auth-guest-access policy: Create the auth-guest role: Configure the guest VLAN: Configure captive portal authentication: Modify the guest-logon role: Configure the AAA profile: Configure the guest WLAN: Device Role Role Variation by Authentication Method Wireless Intrusion Detection System Wireless Attacks Rogue APs Page Page Chapter 7 RF Planning and Operation RF Plan Tool Adaptive Radio Management Page Page Chapter 8 Voice over Wi-Fi WMM and QoS Quality of Service Traffic Prioritization Voice Functionality and Features Voice-Aware RF Management Call Admission Control Comprehensive Voice Management Page Chapter 9 Controller Clusters and the Mobility Management System LAN / WAN Page Page Page Appendix A Licenses Page Appendix B WLAN Extension with Remote AP Page Appendix C Alternative Deployment Architectures Small Network Deployment Medium Network Deployment Branch Office Deployment Corporate data center Pure Remote Access Deployment DMZ