Aerohive HiveAP 20 ag Quick reference guide

Aerohive
DeploymentGuide

CopyrightNotice
Copyright 2007AerohiveNetworks,Inc.Allrightsreserved.
Aerohive Networks,the Aerohive Networkslogo, HiveOS,HiveAP,andHiveManageraretrademarksofAerohive
Networks,Inc.All othertrademarksandregisteredtrademarksarethe propertyoftheirrespectivecompanies.
Information inthis documentissubjecttochange withoutnotice.Nopartofthis documentmaybereproducedor
transmittedinanyform or byanymeans,electronic ormechanical, foranypurpose,withoutreceivingwritten
permissionfrom:
Aerohive Networks,Inc.
2045MartinAvenue,Suite206
SantaClara,CA95050
P/N330002-01,Rev.A

DeploymentGuide 3
HiveAPComplianceInformation
FederalCommunication Commission Interference
Statement
Thisequipmenthasbeentestedandfoundtocomplywiththe limitsfor
aClass Bdigitaldevice,pursuanttoPart15 oftheFCC Rules.These
limitsaredesignedtoprovidereasonableprotectionagainstharmful
interferenceinaresidentialinstallation.Thisequipmentgenerates,
usesandcanradiateradio frequencyenergyand,ifnotinstalledand
usedinaccordancewiththeinstructions,may causeharmful
interferencetoradio communications.However,thereisnoguarantee
thatinterferencewillnotoccur inaparticularinstallation.Ifthis
equipmentdoescauseharmfulinterferencetoradio ortelevision
reception,whichcanbedeterminedby turningthe equipmentoff and
on,theuser isencouragedtotrytocorrecttheinterferencebyoneof
the followingmeasures:
•Reorientorrelocatethereceivingantenna
•Increasethe separationbetweentheequipmentandreceiver
•Connecttheequipmentintoanoutletonacircuitdifferentfrom
thattowhichthereceiverisconnected
•Consultthedealer oranexperiencedradio/TVtechnicianforhelp
FCCCaution: Anychangesormodificationsnotexpresslyapprovedby
the partyresponsibleforcompliancecouldvoidtheuser'sauthorityto
operatethisequipment.ThisdevicecomplieswithPart15oftheFCC
Rules.Operationissubjecttothe followingtwoconditions:(1)This
devicemay notcauseharmful interference,and(2)thisdevicemust
acceptanyinterferencereceived,includinginterferencethatmay
causeundesiredoperation.
Important:FCC Radiation ExposureStatement
ThisequipmentcomplieswithFCC radiationexposurelimitssetforth
foranuncontrolledenvironment. Thisequipmentshouldbeinstalled
andoperatedwithaminimumdistanceof20centimeters(8 inches)
betweentheradiatorandyourbody.Thistransmittermustnotbeco-
locatedoroperatinginconjunctionwithanyotherantennaor
transmitter.
Wireless5GHzBandStatements
Highpowerradarsareallocatedasprimaryusers(meaningtheyhave
priority)ofthe5250-5350MHzand5650-5850 MHzbands.Theseradars
couldcauseinterferenceand/ordamagetotheHiveAP when usedin
Canada.
Theterm"IC"beforetheradiocertificationnumberonlysignifiesthat
IndustryCanadatechnicalspecificationsweremet.
IndustryCanada -ClassB
ThisdigitalapparatusdoesnotexceedtheClass Blimitsforradio noise
emissionsfromdigitalapparatusassetoutintheinterference-causing
equipmentstandardentitled"DigitalApparatus,"ICES-003ofIndustry
Canada.
Cetappareilnumérique respecteleslimitesdebruitsradioélectriques
applicablesauxappareilsnumériquesdeClasseBprescritesdansla
normesur lematérialbrouilleur:"AppareilsNumériques,"NMB-003
édictéeparl'Industrie.
ECConformanceDeclaration
Markingbythe abovesymbolindicatescompliancewiththeEssential
Requirementsofthe R&TTEDirectiveofthe EuropeanUnion(1999/5/
EC). Thisequipmentmeetsthefollowingconformancestandards:
•EN60950-1 (IEC 60950-1)-ProductSafety
•EN301 893-Technicalrequirementsfor5GHzradio equipment
•EN300 328-Technicalrequirementsfor2.4 GHzradio equipment
•EN301489-1 /EN301 489-17-EMCrequirementsforradio
equipment
Countriesof Operation andConditionsof Useinthe
EuropeanCommunity
ThisdeviceisintendedtobeoperatedinallcountriesoftheEuropean
Community.Requirementsforindoorvs.outdooroperation,license
requirementsandallowedchannelsofoperationapplyinsome
countriesasdescribedbelow.
Note: The usermustusetheconfigurationutilityprovidedwiththis
producttoensurethechannelsofoperationare inconformancewith
the spectrumusagerulesforEuropeanCommunitycountriesas
describedbelow.
•Thisdevicerequiresthatthe userorinstallerproperlyenterthe
currentcountryofoperationinthecommandlineinterfaceas
describedintheuserguide,beforeoperatingthisdevice.
•Thisdevicewillautomaticallylimittheallowable channels
determinedby the currentcountryofoperation.Incorrectly
enteringthecountryofoperationmay resultinillegaloperation
andmaycauseharmful interferencetoothersystems.Theuseris
obligatedtoensurethe deviceisoperatingaccordingtothe
channel limitations,indoor/outdoorrestrictionsandlicense
requirementsforeachEuropeanCommunitycountryasdescribed
inthisdocument.
•Thisdeviceemploysaradardetectionfeaturerequiredfor
EuropeanCommunityoperationinthe5GHzband.Thisfeatureis
automaticallyenabledwhenthecountryofoperationiscorrectly
configuredforanyEuropeanCommunitycountry.The presenceof
nearby radaroperationmay resultintemporaryinterruptionof
operationofthisdevice.Theradardetectionfeature will
automaticallyrestartoperationonachannelfreeofradar.
•The5GHzTurboModefeatureisnot allowedforoperationinany
EuropeanCommunitycountry.Thecurrent settingforthisfeature
isfoundinthe5GHz802.11aRadio Settings Windowasdescribed
inthe userguide.
•The5GHzradio'sAutoChannelSelectsettingdescribedinthe
userguidemust alwaysremainenabledtoensurethatautomatic5
GHzchannelselectioncomplieswithEuropeanrequirements.The
current settingforthisfeatureisfoundinthe5GHz802.11aRadio
SettingsWindowasdescribedintheuserguide.
•Thisdeviceisrestrictedtoindoorusewhenoperatedinthe
EuropeanCommunityusingthe5.15-5.35GHzband:Channels36,
40,44,48, 52,56,60, 64.Seetablebelowforallowed5GHz
channelsby country.
•Thisdevicemaybeoperatedindoorsoroutdoorsinallcountriesof
the EuropeanCommunityusingthe2.4GHzband: Channels1-13,
except wherenotedbelow.

HiveAPComplianceInformation
4Aerohive
–InItalytheend-usermust applyforalicensefromthe national
spectrumauthoritytooperatethisdeviceoutdoors.
–InBelgium outdooroperationisonlypermittedusingthe2.46-
2.4835GHzband:Channel13.
–InFranceoutdooroperationisonlypermittedusingthe 2.4-
2.454 GHzband:Channels1-7.
Operation Using5GHzChannelsin theEuropean
Community
Theuser/installermustusetheprovidedconfigurationutilitytocheck
the currentchannelofoperationandmakenecessaryconfiguration
changestoensureoperationoccursinconformancewithEuropean
Nationalspectrumusagelawsasdescribedbelowandelsewhere inthis
document.
*Outdooroperationisnotallowedusing5.15 –5.35 GHzbands
(Channels36 –64).
Declaration of Conformityin Languagesof the
EuropeanCommunity
SafetyCompliance
PowerCord Safety
Pleaseread the followingsafetyinformationcarefullybeforeinstalling
the HiveAP.
Warning: Installationandremovaloftheunitmustbecarriedoutby
qualifiedpersonnelonly.
•Theunitmustbeconnectedtoanearthed(grounded)outletto
complywithinternationalsafetystandards.
•DonotconnecttheunittoanA.C.outlet(powersupply)without
anearth(ground)connection.
•Theappliancecoupler(the connectortotheunitandnot thewall
plug)musthaveaconfigurationformatingwithanEN60320/IEC
320applianceinlet.
•Thesocketoutletmustbeneartotheunitandeasilyaccessible.
Youcanonlyremovepowerfromthe unitby disconnectingthe
power cordfromthe outlet.
•ThisunitoperatesunderSELV(SafetyExtraLowVoltage)
conditionsaccordingtoIEC60950. Theconditionsareonly
maintainediftheequipmenttowhichitisconnectedalso
operatesunder SELVconditions.
•ThePoE (PoweroverEthernet), whichistobeinterconnectedwith
otherequipmentthat must becontainedwithinthesamebuilding
includingtheinterconnectedequipment'sassociatedLAN
connections.
FranceandPeruonly:
Thisunitcannotbepoweredfrom IT*supplies.If yoursuppliesareofIT
type,thisunitmustbepoweredby 230V(2P+T)viaanisolation
transformerratio 1:1,withthesecondaryconnectionpointlabelled
Neutral,connecteddirectlytoearth(ground).
*Impédance àlaterre
Important!Beforemakingconnections,makesureyouhavethecorrect
cordset.Checkit(readthelabelonthecable)againstthe following:
Allowed 5GHz ChannelsinEachEuropeanCommunityCountry
Allowed
FrequencyBands AllowedChannel Numbers Countries
5.15 –5.25GHz*36, 40, 44,48Austria,Belgium
5.15 –5.35GHz*36, 40, 44,48,52, 56,
60,64 France,Switzerland, Liechtenstein
5.15 –5.35GHz*
and5.470 –5.725
GHz
36,40, 44, 48,52, 56,
60,64, 100,104, 108,
112, 116,120, 124,128,
132, 136,140
Denmark,Finland,
Germany,Iceland,
Ireland, Italy,
Luxembourg,
Netherlands,Norway,
Portugal,Spain,
Sweden,U.K.
5GHzOperation
NotAllowed NoneGreece
EnglishHereby,Edgecore,declaresthatthisRadioLAN
deviceisincompliancewiththe essential
requirementsandotherrelevantprovisionsof
Directive1999/5/EC.
FinnishValmistajaEdgecorevakuuttaatätenettäRadioLAN
devicetyyppinen laiteondirektiivin1999/5/EY
oleellistenvaatimustenjasitäkoskeviendirektiivin
muiden ehtojenmukainen.
DutchHierbijverklaartEdgecoredathettoestelRadio
LANdeviceinovereenstemmingismetde
essentiëleeisenen deandererelevantebepalingen
vanrichtlijn1999/5/EG.
BijdezeEdgecore datdezeRadio LANdevice
voldoetaandeessentiëleeisenenaandeoverige
relevantebepalingen vanRichtlijn1999/5/EC.
FrenchParlaprésenteEdgecoredéclarequel'appareil
Radio LANdeviceestconformeauxexigences
essentiellesetauxautresdispositionspertinentes
deladirective1999/5/CE.
SwedishHärmedintygarEdgecoreatt dennaRadio LAN
devicestårI överensstämmelsemeddeväsentliga
egenskapskravoch övrigarelevantabestämmelser
somframgåravdirektiv1999/5/EG.
DanishUndertegnedeEdgecoreerklærer herved, at
følgendeudstyrRadioLANdeviceoverholder de
væsentligekravog øvrigerelevantekravidirektiv
1999/5/EF.
GermanHiermiterklärtEdgecore,dasssichdieser/diese/
diesesRadio LANdevicein Übereinstimmungmit
dengrundlegendenAnforderungenunddenanderen
relevantenVorschriftenderRichtlinie1999/5/EG
befindet".(BMWi)
HiermiterklärtEdgecoredie Übereinstimmungdes
GerätesRadio LANdevicemitdengrundlegenden
Anforderungenunddenanderenrelevanten
FestlegungenderRichtlinie1999/5/EG.(Wien)
Greek
ItalianConlapresenteEdgecoredichiarachequestoRadio
LANdevice èconformeairequisitiessenzialiedalle
altredisposizionipertinentistabilitedalladirettiva
1999/5/CE.
SpanishPormedio delapresenteManufacturerdeclaraque
elRadioLANdevicecumpleconlosrequisitos
esencialesycualesquieraotrasdisposiciones
aplicablesoexigiblesdelaDirectiva1999/5/CE.
PortugueseManufacturerdeclaraqueesteRadio LANdevice
estáconformecom osrequisitosessenciaiseoutras
disposiçõesda Directiva1999/5/CE.

DeploymentGuide 5
HIVEAPCOMPLIANCE INFORMATION
Veuillezlire àfondl'informationdelasécuritésuivanteavant d'installer
leHiveAP.
Avertissement: L'installationetladéposedecegroupedoivent être
confiés àunpersonnelqualifié.
•Ne branchezpasvotreappareilsur une prisesecteur (alimentation
électrique)lorsqu'iln'yapasdeconnexiondemise àlaterre(mise
àlamasse).
•Vousdevezraccorder cegroupe àunesortiemise àlaterre (mise
àlamasse)afinderespecterlesnormesinternationalesde
sécurité.
•Lecoupleurd'appareil(leconnecteurdugroupeetnonpaslaprise
murale)doitrespecteruneconfigurationquipermetun
branchementsuruneentréed'appareilEN60320/IEC320.
•Laprisesecteurdoitsetrouver àproximitédel'appareiletson
accèsdoit êtrefacile.Vousnepouvezmettrel'appareilhors
circuitqu'endébranchantsoncordon électriqueauniveaude
cetteprise.
•L'appareilfonctionne àune tensionextrêmementbassede
sécuritéquiest conforme àlanormeIEC60950. Cesconditionsne
sontmaintenuesque sil'équipementauquel ilestraccordé
fonctionnedanslesmêmesconditions.
FranceetP rouuniquement:
Cegroupene peut pas êtrealimentéparun dispositif àimpédance àla
terre.Sivosalimentationssont dutypeimpédance àlaterre,cegroupe
doit êtrealimentéparunetensionde230 V(2P+T)parle biaisd'un
transformateur d'isolement àrapport1:1,avecunpointsecondaire de
connexionportant l'appellationNeutre et avecraccordement direct àla
terre (masse).
BitteunbedingtvordemEinbauen desHiveAPdiefolgenden
Sicherheitsanweisungendurchlesen.
Warnung: DieInstallationundderAusbaudesGerätsdarfnurdurch
Fachpersonalerfolgen.
•DasGerätsolltenichtaneineungeerdeteWechselstromsteckdose
angeschlossenwerden.
•DasGerätmußaneinegeerdeteSteckdoseangeschlossenwerden,
welchedieinternationalenSicherheitsnormenerfüllt.
•DerGerätestecker(derAnschlußandasGerät,nichtder
Wandsteckdosenstecker)mußeinen gemäß EN60320/IEC 320
konfiguriertenGeräteeinganghaben.
•DieNetzsteckdosemußinderNähedesGerätsundleicht
zugänglichsein.DieStromversorgungdesGerätskannnurdurch
Herausziehen desGerätenetzkabelsausderNetzsteckdose
unterbrochen werden.
•DerBetriebdiesesGerätserfolgtunterdenSELV-Bedingungen
(Sicherheitskleinstspannung)gemäß IEC60950.DieseBedingungen
sindnurgegeben,wennauchdieandasGerätangeschlossenen
GeräteunterSELV-Bedingungenbetriebenwerden.
PowerCordSet
U.S.A.
andCanada The cordsetmustbeUL-approvedandCSAcertified.
Minimumspecificationsfortheflexible cord:
-No.18 AWGnotlongerthan2meters,or16AWG
-TypeSVorSJ
-3-conductor
The cordsetmusthavearatedcurrentcapacityofat
least 10A.
The attachmentplugmust beanearth-grounding
typewithNEMA5-15P(15A,125V) orNEMA6-15 (15
A,250V)configuration.
DenmarkThesupplyplugmustcomplywithSection107-2-D1,
StandardDK2-1a orDK2-5a.
SwitzerlandThesupplyplugmustcomplywithSEV/ASE1011.
U.K.ThesupplyplugmustcomplywithBS1363(3-pin13 A)
andbefittedwitha5Afusethatcomplieswith
BS1362.
The mainscordmustbe<HAR>or<BASEC>markedand
beoftypeHO3VVF3GO.75 (minimum).
EuropeThesupplyplugmustcomplywithCEE7/7
("SCHUKO").
The mainscordmustbe<HAR>or<BASEC>markedand
beoftypeHO3VVF3GO.75 (minimum).
IEC-320receptacle.
Cordon lectrique-Ildoit êtreagr dans le paysd'utilisation
Etats-Unis
etCanada Lecordondoitavoirreçul'homologationdesULet un certificatdelaCSA.
Lesspécificationsminimalespouruncableflexible
-AWGNo.18, ouAWGNo.16pour uncable de
longueur inférieure à2mètres.
-TypeSVouSJ
-3conducteurs
Lecordondoit être enmesure d'acheminerun
courantnominald'aumoins10A.
Laprisefemelledebranchementdoit êtredutype à
mise àlaterre(mise àlamasse)etrespecterla
configurationNEMA5-15P (15A,125V)ouNEMA6-
15P(15 A,250 V).
DanemarkLaprisemâled'alimentationdoitrespecter lasection
107-2D1delanormeDK21aouDK25a.
SuisseLaprisemâle d'alimentationdoitrespecterlanorme
SEV/ASE1011.
EuropeLaprisesecteurdoit être conformeauxnormesCEE
7/7("SCHUKO").
LE cordonsecteurdoitporterlamention<HAR>ou
<BASEC>etdoit êtredetypeHO3VVF3GO.75
(minimum).
Stromkabel.Diesmuss vondemLand,indemesbenutztwird
geprüft werden:
U.S.A.
und
Kanada
Der CordmußdasULgepruftundwardasCSA
beglaubigt.
DasMinimum spezifikationfur derCordsind:
-Nu.18 AWG -nicht mehrals2meter,oder 16AWG.
-DertypSVoderSJ
-3-Leiter
Der Cordmußhabeneine strombelastbarkeitaus
wenigstens10 A.
DieserStromsteckermußhateinererdschluss mitder
typNEMA5-15P (15A,125V)oderNEMA6-15P(15A,
250V)konfiguration.
DanemarkDieser Stromsteckermußdieebene107-2-D1,der
standardDK2-1a oderDK2-5aBestimmungen
einhalten.
SchweizDieserStromsteckermußdieSEV/ASE
1011Bestimmungeneinhalten.
EuropeEuropeDasNetzkabel mußvomTypHO3VVF3GO.75
(Mindestanforderung)seinunddieAufschrift<HAR>
oder<BASEC>tragen.
Der NetzsteckermußdieNormCEE 7/7erfüllen
("SCHUKO").

HiveAPComplianceInformation
6Aerohive

DeploymentGuide 7
Contents
Chapter1TheHiveAPPlatform................................................................9
Productoverview...........................................................................................10
EthernetandConsole Ports......................................................................................12
StatusLEDs.........................................................................................................13
Antennas............................................................................................................14
Mountingthe HiveAP.......................................................................................15
Device,Power,andEnvironmentalSpecifications.....................................................16
Chapter2TheHiveManagerPlatform.......................................................17
Productoverview...........................................................................................18
EthernetandConsole Ports......................................................................................19
StatusLEDs.........................................................................................................20
RackMountingthe HiveManager..........................................................................21
Device,Power,andEnvironmentalSpecifications.....................................................22
Chapter3UsingHiveManager.................................................................23
InstallingandConnectingto the HiveManagerGUI....................................................25
IntroductionthetheHiveManagerGUI..................................................................28
Detaching Windows................................................................................................29
Cloning Configurations............................................................................................29
Sorting DisplayedData............................................................................................30
Multiselecting......................................................................................................30
HiveManagerConfigurationWorkflow...................................................................31
UpdatingHiveAPFirmware................................................................................32
UpdatingSoftwareonthe HiveManager.................................................................33
Chapter4HiveManagerExamples............................................................35
Example1:MappingLocationsandInstallingHiveAPs................................................37
SettingUpTopologyMaps........................................................................................37
Preparingthe HiveAPs............................................................................................40
Example2:DefiningNetworkObjects...................................................................42
Example3:DefiningUserProfiles andQoS Settings...................................................45
Example4:SettingSSIDProfiles..........................................................................49
Example5:SettingManagementServiceParameters.................................................52

Contents
8 Aerohive
Example6:SettingAAARADIUS Settings................................................................55
Example7:CreatingTwoDeviceGroups................................................................57
Example8:CreatingThree HiveProfiles................................................................60
Example9:AssigningHiveAPstoaDeviceGroup,RadioProfile,
HiveProfile,andTopologyMap...........................................................................61
Chapter5HiveOS................................................................................65
CommonDefault SettingsandCommands...............................................................66
ConfigurationOverview....................................................................................67
Device-LevelConfigurations.....................................................................................67
Policy-LevelConfigurations......................................................................................68
Chapter6DeploymentExamples(CLI)......................................................69
Example1:DeployingaSingleHiveAP...................................................................70
Example2:DeployingaHive..............................................................................73
Example3:UsingIEEE 802.1XAuthentication..........................................................78
Example4:ApplyingQoS..................................................................................81
CLI CommandsforExamples..............................................................................87
CommandsforExample 1........................................................................................87
CommandsforExample 2........................................................................................87
CommandsforExample 3........................................................................................88
CommandsforExample 4........................................................................................89

DeploymentGuide 9
Chapter1TheHiveAPPlatform
The Aerohive HiveAP20agisanewgeneration wirelessaccesspoint.HiveAPsofferunique abilitiestoself-organize
andcoordinatewitheachother,creatingadistributed-control WLAN solutionthatoffersgreatermobility,security,
quality ofservice,andradiocontrol.
Thisguidecombinesproduct information with installationinstructions.This chaptercoversthefollowingtopics:
•"Product overview"onpage10
•"EthernetandConsole Ports"onpage12
•"StatusLEDs" onpage13
•"Antennas"onpage14
•"MountingtheHiveAP"onpage15
•"Device,Power,andEnvironmentalSpecifications"on page16

Chapter1The HiveAPPlatform
10 Aerohive
PRODUCTOVERVIEW
The HiveAPisamulti-channelwirelessAP(accesspoint). ItiscompatiblewithIEEE 802.11b/g(2.4GHz)andIEEE
802.11a(5GHz)standardsandsupportsavarietyofWi-Fi(wireless fidelity)security protocols,includingWPA(Wi-Fi
ProtectedAccess)andWPA2.
You cansee thehardware componentsonthe HiveAPin Figure1.Eachcomponentisdescribedin Table1.
Figure1 HiveAP Hardware Components
Table1 HiveAPComponentDescriptions
Component Description
FixedDual-BandAntennasThe twofixedomnidirectionaldipoleantennascanoperateateitherof
the tworadiofrequencies:2.4GHz(for IEEE 802.11b/g)and5GHz(for
IEEE802.11a). For details,see "Antennas"onpage14.
StatusLEDsThestatusLEDsconveyoperationalstatesfor systempower,andtheLAN,
Access,andMeshinterfaces.For details,see "StatusLEDs" onpage13.
802.11aRP-SMAConnector(For futureuse)Youcan connectadetachablesingle-bandantennatothe
male 802.11aRP-SMA(reversepolarity-subminiature versionA)
connector.Notethatdoingsodisablesthe adjacentfixedantenna.
Power
Connector
Mounting
Screw
10/100 Mbps
Power-over-
Ethernet Port
Reset
Button Console
Port Device
Lock Slot
Fixed Dual-BandAntennas
For Detachable Single-Band Antennas
Status LEDs
RP-SMA
Connector for
802.11a
RadioAntenna
RP-SMA
Connector for
802.11b/g
Radio Antenna

DeploymentGuide 11
PRODUCTOVERVIEW
PowerConnectorThe 48-voltDCpowerconnector (0.38amps)is oneoftwomethods
through whichyoucanpoweraHiveAP.Toconnectittoa100 –240-volt
ACpowersource,usetheAC/DCpoweradaptor thatshipswith the
productasanoption.Because thatthe HiveAPdoesnothaveanon/off
switch,connectingittoapowersource automaticallypowerson the
device.
MountingScrewTomountthe HiveAPonasurface,attachthe mountingplatethatships
withthe product,andthenattach thedevice tothe platebytightening
the mountingscrew.For details,see "MountingtheHiveAP"onpage15.
10/100MbpsPoE PortThe 10/100-MbpsEthernetportsupportsIEEE802.3afPoE (Powerover
Ethernet)andreceivesRJ-45connectors.The HiveAPcanreceive its
powerthrough anEthernetconnection topowersourcingequipment
(PSE) thatis802.3af-compatible.(Ifyouconnect the HiveAPtoapower
sourcethroughthepowerconnector andPoE portsimultaneously,the
devicedrawspowerthroughthe powerconnectorandautomatically
disablesPoE.)
TheHiveAPcanalsoconnecttothewirednetworkor toawireddevice
(such as asecurity camera)throughthisport.Itiscompatible with10/
100Base-T/TX andautomaticallynegotiateshalf-andfull-duplex
connectionswiththe connectingdevice.Itisautosensingandadjuststo
straight-throughandcross-overEthernetcablesautomatically.Italso
automaticallyadjustsfor 802.3afAlternativeAandBmethodsofPoE.
ResetButtonTheresetbutton allowsyou torebootthedeviceor resetthe HiveAPto
itsfactorydefaultsettings.Insertapaperclip,or somethingsimilar,into
the Resetpinhole andpresstheresetbutton.Torebootthe device,hold
thebutton downbetween1and5seconds.Toreturnthe configurationto
the factorydefaultsettings,holditdownfor atleast5seconds.After
releasingthebutton,thePowerLEDgoesdark,andthenglowssteady
amberwhile thesoftwareloadsandthe systemperformsaself-test.
Afterthe softwarefinishesloading,thePowerLEDglowssteadygreen
Console PortAmaleDB-9serialporttowhich youcanmakeaconsoleconnectionusing
an RS-232(or "null modem")cable.The managementstationfrom which
youmake aserialconnection tothe HiveAPmusthave aVT100emulation
program, such asTeraTerm Pro (afree terminalemulator) or Hilgraeve
Hyperterminal®(providedwithWindows®operatingsystems). The
followingare the serialconnectionsettings:bitspersecond:9600,data
bits:8,parity:none,stopbits:1,flowcontrol: none.
Device LockSlotYou canphysicallysecuretheHiveAPbyattachingalockandcable(such
asaKensington®notebooklock)tothedevicelockslot.Afterloopingthe
cablearoundasecureobject,inserttheT-barcomponentofthelockinto
the slotontheHiveAPandturnthe keytoengage the lockmechanism.
802.11b/gRP-SMAConnector(Forfutureuse)Youcanconnectadetachablesingle-bandantennatothe
male 802.11b/gRP-SMAconnector.Note thatdoingsodisablesthe
adjacentfixedantenna.
Component Description

Chapter1The HiveAPPlatform
12 Aerohive
Ethernet and ConsolePorts
There are twoportsonthe HiveAP:a10/100Base-T/TX EthernetportandamaleDB-9consoleport.Bothportsuse
standardpinassignments.
The pinassignmentsinthe PoE (PoweroverEthernet)EthernetportfollowtheTIA/EIA-568-Bstandard(see
Figure2). ThePoE portacceptsstandardtypesofEthernetcable—cat3,cat5,cat5e,orcat6—andreceivespower
overthis cable from powersourcingequipment(PSE) thatis802.3af-compatible.Such equipmentcan beembedded
in aswitch or router,oritcan comefrom purpose-builtdevicesthatinject powerintothe Ethernetline en routeto
the HiveAP.BecausethePoE porthasautosensingcapabilities,the wiringterminationintheEthernetcable canbe
eitherstraight-throughor cross-over.
Figure2 PoE WireUsageandPin Assignments
Pin T568A WireColor
1White/Green
2Green
3White/Orange
4Blue
5White/Blue
6Orange
7White/Brown
8Brown
(Viewof the PoE port
ontheHiveAP)
1 8
PinNumbers
Pin T568BWireColor
1White/Orange
2Orange
3White/Green
4Blue
5White/Blue
6Green
7White/Brown
8Brown
T568A-Terminated Ethernet Cable
with an RJ-45 Connector
802.3afAlternativeA
(DataandPoweron
theSameWires)
802.3afAlternativeB
(DataandPoweron
SeparateWires)
Pin DataSignal MDI MDI-X MDIorMDI-X
1Transmit+DC+DC
2Transmit-DC+DC
3Receive+DC DC+
4(unused) DC+
5(unused) DC+
6Receive-DC DC+
7(unused) DC
8(unused) DC
MDI = Medium dependent interfaceforstraight-throughconnections
MDI-X = Mediumdependent interface for cross-over(X) connections
ThePoEport is auto-sensing and can automaticallyadjust totransmit andreceive data overstraight-throughor cross-over Ethernet
connections.Likewise, it can automatically adjustto 802.3af Alternative A and Bpower delivery methods. Furthermore, whenthe
Alternative A method is used, the PoEportautomatically allows for polarity reversalsdepending on its role aseither MDI or MDI-X.
T568B-terminatedEthernet Cable
with an RJ-45 Connector
T568A andT568B are two standard
wiring termination schemes. Notethat
theonlydifferencebetween them is
thatthe white/green+ solid green pair
of wiresandthe white/orange+ solid
orangepair are reversed.
Forstraight-throughEthernetcables—
using eitherthe T568A or T568B
standard—theeight wiresterminate at
thesame pins oneach end.
For cross-overEthernet cables, the
wires terminate at one end according
to the T568A standardandat the
other according to T568B.

DeploymentGuide 13
PRODUCTOVERVIEW
The pinassignmentsinthemaleDB-9consoleportfollowtheEIA(ElectronicIndustriesAlliance)RS-232standard.To
makeaserialconnectionbetweenyourmanagementsystemandthe console portontheHiveAP,you canuseanull
modemserialcable,useanotherserialcablethatcomplieswith the RS-232standard,orrefertothe pin-to-signal
mappingshownin Figure3tomakeyourownserialcable.Connectone endofthecable totheconsoleportonthe
HiveAPandtheotherendtotheserial(or COM) porton yourmanagementsystem. The managementsystemmust
haveaVT100terminalemulationprogram, such as TeraTerm Pro (afree terminalemulator) orHilgraeve
Hyperterminal®(providedwith Windows®operatingsystems).
Figure3 ConsolePortPinAssignments
Status LEDs
The fourstatusLEDson the topoftheHiveAPindicatevariousstatesofactivity throughtheircolor (dark,green,
amber) andilluminationpatterns(steadyglowor blinking). Themeaningsofthevariouscolor +illumination
patternsforeachLEDisexplainedbelow.
Power
•Dark:Nopower
•Steadygreen:Poweredonandthefirmware isrunningnormally
•Steadyamber: Firmwareisbootingupor isbeingupdated
•Blinkingamber: Alarm indicatingfirmwarefailure
LAN
•Dark:Ethernetlinkisdownor disabled
•Steadygreen:Ethernetlinkisupbutinactive
•Blinkinggreen:Ethernetlinkisupandactive
Access
•Dark:Wirelesslinkisdisabled
•Steadygreen:Wirelesslinkisupbutinactive
•Blinkinggreen:Wireless linkisupandactive
Mesh
•Dark:Wirelesslinkisdisabled
•Steadygreen:Wirelesslinkisupbutinactive
•Blinkinggreen (fast): Wireless linkisupandthe HiveAPis searchingfor otherhivemembers
•Blinkinggreen (slowly): Wirelesslinkisupandactive
12 3 45
6 7 8 9
Pin Signal Direction
1DCD (Data Carrier Detect)(unused)
2RXD (ReceivedData)Input
3TXD (TransmittedData)Output
4DTR (Data Terminal Ready)(unused)
5GroundGround
6DSR (Data Set Ready)(unused)
7RTS(Request toSend)(unused)
8CTS (Clear to Send)(unused)
9RI (Ring Indicator)(unused)
Male DB-9 Console Port
(Viewof the console
port ontheHiveAP) The above pin assignmentsshowa DTE configurationfor a
DB-9 connector complyingwith the RS-232 standard. Because
this is aconsole port, only pins 2,3, and 5need be used.
RS-232 Standard Pin Assignments

Chapter1The HiveAPPlatform
14 Aerohive
Antennas
The HiveAPincludestwofixeddual-bandantennas.These antennasareomnidirectional, providingfairlyequal
coverage inalldirectionsinatoroidal(donut-shaped)patternaroundeach antenna.Whenthe antennasare
positionedvertically,coverageexpandsprimarilyon the horizontalplane,extendinghorizontallymuchmorethan
vertically.See Figure4,which showsthe toroidalpattern emanatingfrom asingleverticallypositionedantenna.To
changecoveragetobemoreverticalthanhorizontal, positiontheantennashorizontally.Youcanalsoresizethe
areaofcoveragebyincreasingor decreasingthe signalstrength.
Figure4 OmnidirectionalRadiationPattern
Thepairoffixeddual-bandantennascanoperateatdifferentfrequenciesconcurrently—one antennaat2.4GHz
(IEEE 802.11b/g)andtheotherat5GHz(IEEE 802.11a)—andtheycanalsobothoperatecurrentlyatthe same
frequency—for example,at2.4GHz.Conceptually,the relationshipofantennasandradiosis shown in Figure5.
Figure5 AntennasandRadios
\
Note: To show the shapeof radiation moreclearly,
thisillustrationdepictsthe coverage providedby
only one active antenna and is not drawnto scale.
The omnidirectional antennas
radiate equally in all directions,
forminga toroidal pattern.
HiveAP
Radio 1
RF802.11b/g Radio 2 RF802.11a
Antenna
Switch 1 Antenna Switch2
RP-SMAConnectors
802.11a/b/g
Dual-Band
Fixed
Antenna
802.11a/b/g
Dual-Band
Fixed
Antenna
Cut-away viewof the HiveAPto showthe relationship
of the antennasandthe two internal radios.

DeploymentGuide 15
MOUNTINGTHE HIVEAP
Afterconnectinganexternalantenna,youmustenterthe followingcommandtomove subinterfacesfrom thefixed
antennastotheexternalantenna:
interface subinterface radioantennaexternal
where subinterface stemsfrom aninterface (wifi0or wifi1)linkedtothe radiotowhichthe externalantenna
connects:radio1(frequency=2.4GHzfor IEEE 802.11b/g)orradio2(frequency=5GHzforIEEE 802.11a).
Notethatyoulinkinterfacestoradios,andsubinterfacestoantennas.For example,tolinkthewifi0interface to
radio2,enterthis command:
interface wifi0 radio profile name phymode 11a
where radio profile name isasetofpreviouslydefinedradioparameters.Then,linkoneofthewifi0.x
subinterfacestotheexternalantennaconnectedtoradio2byusingthe interface subinterface radio
antennaexternal command.Ifyou donotenterthiscommand,the subinterface usesthe remainingfixed
antennathatremainsconnectedtoradio2(theexternalantennaonlydisablesthe adjacentfixedantenna).
MOUNTINGTHE HIVEAP
Youcanusethe mountingplatetoattachtheHiveAPtoanysurfacethatsupportsitsweight(1.5lb., 0.68kg)andto
whichyoucanscrewor nailtheplate.First,mountthe platetothe surface,andthenattachthe device tothe
plate,asshownin Figure6.
Figure6 MountingtheHiveAPon aWall
Note: Forinformationabouttheseandother commands,see the AerohiveCLIReferenceGuide.
Usethe mounting screw
to secure the HiveAP
to the plate.
Insert the pins on theunderside
of the HiveAP into thetwo slots.
With the two wings atthe sides ofthe plateextending
away from the surface, attach themounting plate to a
secure object such as a wall, ceiling, post, or beam.
1
2
3
Note: There area variety of holes through which you can
screw or nailtheplate in place. Choose thetwoorthreethat
best suit theobject towhich you are attachingit.

Chapter1The HiveAPPlatform
16 Aerohive
DEVICE,POWER,AND ENVIRONMENTAL SPECIFICATIONS
Understandingthe rangeofspecificationsfor theHiveAPisnecessaryfor optimaldeploymentandoperation ofthe
device.The followingspecificationsdescribethe physicalfeaturesandhardwarecomponents,the poweradapter
andPoE (PoweroverEthernet)electricalrequirements,andthetemperatureandhumidity rangein whichthe
devicecanoperate.
DeviceSpecifications
•Chassis dimensions:81/4"Wx1"Hx415/16"D(21cmWx2.5cmHx12.5cmD)
•Weight:1.5lb.(0.68kg)
•Antennas:Twofixeddual-band802.11a/b/gantennas,andtwoRP-SMAconnectorsfordetachable single-band
802.11aor 802.11b/gantennas
•Serialport:DB-9(bitspersecond:9600,databits:8,parity:none,stopbits:1,flowcontrol:none)
•Ethernetport:autosensing10/100Base-T/TX Mbps,with IEEE 802.3af-compliantPoE (PoweroverEthernet)
PowerSpecifications
•AC/DCpoweradapter:
•Input:100 –240VAC
•Output:48V/0.38A
•PoE nominalinputvoltages:48V,0.35A
•RJ-45powerinputpins:Wires4,5,7,8or 1,2,3,6
EnvironmentalSpecifications
•Operatingtemperature:32to122degreesF(0to50degreesC)
•Storage temperature:-4to158degreesF(-20to70degreesC)
•RelativeHumidity:Maximum95%

DeploymentGuide 17
Chapter2TheHiveManagerPlatform
The HiveManageris amanagementappliancethatprovidescentralizedconfiguration,monitoring,andreportingfor
multiple HiveAPs.The followingareafewofthe manybenefitsthataHiveManageroffers:
•True "zero configuration"installationsofHiveAPs
•Template-basedconfigurationsthatsimplifythe deploymentoflarge numbersofHiveAPs
•ScheduledfirmwareupgradesonHiveAPsbylocation
•Exportation ofdetailedinformationonHiveAPsfor reporting
Thischaptercoversthe followingtopicsrelatedtothe HiveManagerplatform:
•"Product overview"onpage18
•"EthernetandConsole Ports"onpage19
•"StatusLEDs" onpage20
•"RackMountingtheHiveManager"on page21
•"Device,Power,andEnvironmentalSpecifications"on page22

Chapter2TheHiveManagerPlatform
18 Aerohive
PRODUCTOVERVIEW
The Aerohive HiveManagerisacentralmanagementsystemfor configuringandmonitoringHiveAPs.Youcan seeits
hardware componentsin Figure1andreadadescriptionofeachcomponentin Table1.
Figure1 HiveManager Hardware Components
Table1 HiveManager ComponentDescriptions
Component Description
MountingBracketsThe twomountingbracketsallowyoutomounttheHiveManagerin a
standard19"(48.26cm) equipmentrack.Youcan alsomovethebrackets
totherearofthechassis ifyou needtoreversemountit.
ConsolePortAmaleDB-9serialporttowhich youcanmakeaconsoleconnectionusing
an RS-232(or "null modem")cable.The pin assignmentsarethe same as
thoseontheHiveAP(see "EthernetandConsole Ports"on page12).
The managementstationfromwhichyou makeaserialconnection tothe
HiveManagermusthaveaVT100emulation program,suchasTeraTerm
Pro (afree terminalemulator) or HilgraeveHyperterminal®(provided
withWindows®operatingsystems). The followingare the serial
connectionsettings:bitspersecond:9600,databits:8,parity:none,stop
bits:1,flowcontrol: none.The defaultlogin name is root andthe
passwordis aerohive.Aftermakingaconnection,youcanaccessthe
Linuxoperatingsystem.
USB
Port
Console
Port Status LEDs
Mounting
Bracket MGTand LAN Ethernet Ports Mounting Bracket
Power
Fan
System
Fans ACPower Inlet
Serial
Number
On/Off
Switch
Front Panel
Rear Panel

DeploymentGuide 19
PRODUCTOVERVIEW
Ethernet and ConsolePorts
The two10/100/1000-MbpsEthernetportson the HiveManagerlabeledMGTandLANusestandardRJ-45connector
pin assignmentsthatfollowtheTIA/EIA-568-Bstandard(see Figure2). TheyacceptstandardtypesofEthernet
cable—cat3,cat5,cat5e,or cat6.Becausethe portshaveautosensingcapabilities,the wiringtermination inthe
Ethernetcablescanbe eitherstraight-throughor cross-over.
Figure2 EthernetPortLEDsandPinAssignments
USBPortThe USBportis reservedfor internaluse.
StatusLEDsThe statusLEDsconveyoperationalstatesfor the systempowerandhard
disk drive.For details,see "StatusLEDs"on page20.
MGTandLAN EthernetPortsThe MGTandLAN Ethernetportsarecompatible with10/100/1000-Mbps
connections,automaticallynegotiatehalf-andfull-duplexmodewiththe
connectingdevices,andsupportRJ-45 connectors.Theyareautosensing
andautomaticallyadjusttostraight-throughandcross-overEthernet
cables.The twoportsallowyoutoseparate trafficbetweenthe
HiveManageranditsadministratorsfrom traffic between the
HiveManagerandthe HiveAPsitmanages.
SystemFansThetwosystemfansmaintain anoptimumoperatingtemperature.Be
surethatairflowthroughthe systemfanventsisnotobstructed.
SerialNumberTheserialnumber
ACPowerInletThe three-prongACpowerinletisaC14chassis plugthroughwhichyou
can connectaHiveManagertoa100 –240-voltACpowersource usingthe
10-amp/125-voltIECpowercordthatshipswith theproduct.
On/Off SwitchThe on(|)andoff ( )switchcontrolsthe powertotheHiveManager.
PowerFanThefanthatmaintainsthetemperatureofthe powersupply.
Note: ThedefaultIP address/netmaskfor theMGTinterfaceis192.168.2.10/24,andtheIPaddressofthe
defaultgatewayis 192.168.2.254.By default,theLANinterfaceisnotconfigured.
Component Description
(Viewof an Ethernet port
ontheHiveManager)
8 1
PinNumbers
Pin 10/100Base-T DataSignal 1000Base-T DataSignal
1Transmit +BI_DA+
2Transmit -BI_DA-
3Receive+BI_DB+
4(unused)BI_DC+
5(unused)BI_DC-
6Receive-BI_DB-
7(unused)BI_DD+
8(unused)BI_DD-
Legend: BI_D = bidirectional
A+/A-, B+/B-,C+/C-, D+/D- = wire pairings
The Ethernet portsare auto-sensingandcan automatically adjustto transmit and receivedata over straight-throughorcross-over
Ethernet connections.Fora diagram showing T568AandT568B wiring, see "Ethernet and Console Ports"on page12.
Link Rate LED
Dark: 10Mbps
Green:100 Mbps
Amber:1000Mbps
Link Activity LED
Dark: Link is down
Steady amber: Linkis up
but inactive
Blinking amber: Link is up
and active

Chapter2TheHiveManagerPlatform
20 Aerohive
The pinassignmentsinthemaleDB-9consoleportfollowtheEIA(ElectronicIndustriesAlliance)RS-232standard.To
makeaserialconnectionbetween yourmanagementsystemandthe consoleportontheHiveManager,youcanusea
null modemserialcable,useanotherserialcablethatcomplieswiththeRS-232standard,or refertothe
pin-to-signalmappingshown in Figure3tomake yourownserialcable.Connectoneendofthecable totheconsole
portontheHiveManagerandthe otherendtotheserial(or COM) porton yourmanagementsystem.The
managementsystemmusthaveaVT100terminalemulationprogram, suchasTeraTerm Pro (afree terminal
emulator) or Hilgraeve Hyperterminal®(providedwithWindows®operatingsystems).
Figure3 ConsolePortPinAssignments
The serialconnectionsettings areasfollows:
•Bitspersecond:9600
•Databits:8
•Parity:none
•Stopbits:1
•Flowcontrol: none
Status LEDs
The twostatusLEDsonthefrontoftheHiveManagerindicatevariousstatesofactivity throughtheircolor (dark,
green,amber) andillumination patterns(steadyglowor blinking). Themeaningsofthe variouscolor +illumination
patternsforeach LEDare shownin Figure4.
Figure4 StatusLEDs
12 3 45
6 7 8 9
Pin Signal Direction
1DCD (Data Carrier Detect)(unused)
2RXD (ReceivedData)Input
3TXD (TransmittedData)Output
4DTR (Data Terminal Ready)(unused)
5GroundGround
6DSR (Data Set Ready)(unused)
7RTS(Request toSend)(unused)
8CTS (Clear to Send)(unused)
9RI (Ring Indicator)(unused)
Male DB-9 Console Port
(Viewoftheconsole port
ontheHiveManager) The above pin assignmentsshowa DTE configurationfor a DB-9 connector complyingwith the RS-232 standard. Because
this is aconsole port, only pins 2,3, and 5need be used.
RS-232 Standard Pin Assignments
SystemPower
Dark: No power
Steadyillumination:Poweredon
Hard Disk Drive
Dark: Idle
Blinking: Active