Aerohive HiveAP 20 Quick reference guide

AerohiveDeployment Guide

1
AerohiveDeployment Guide
ForHiveAPandHiveManagerDevices
Aerohive TechnicalPublications
CopyrightNotice
Copyright 2008AerohiveNetworks,Inc.All rightsreserved.
AerohiveNetworks,theAerohiveNetworkslogo,HiveOS,HiveAP,andHiveManager aretrademarksofAerohive
Networks,Inc.All other trademarksandregisteredtrademarksarethepropertyoftheirrespectivecompanies.
Informationinthis documentissubjectto changewithoutnotice.No partofthisdocumentmaybereproducedor
transmittedinanyform or byanymeans,electronicormechanical,foranypurpose,withoutreceivingwritten
permissionfrom:
AerohiveNetworks,Inc.
3150-CCoronadoDrive
SantaClara,CA95054
P/N330002-06,Rev.A

HiveAP ComplianceInformation
2Aerohive
HiveAP ComplianceInformation
FederalCommunicationCommissionInterference
Statement
Thisequipmenthasbeentestedandfoundtocomply withthelimitsfor
aClass Bdigital device,pursuanttoPart15 oftheFCC Rules.These
limitsare designedtoprovidereasonableprotectionagainstharmful
interferenceinaresidentialinstallation.Thisequipmentgenerates,
usesandcanradiateradiofrequency energyand,ifnotinstalledand
usedinaccordancewiththeinstructions, maycauseharmful
interferencetoradiocommunications.However,thereisnoguarantee
thatinterferencewill notoccurinaparticularinstallation.Ifthis
equipmentdoescauseharmfulinterferencetoradioortelevision
reception,whichcanbedeterminedbyturningtheequipmentoffand
on,theuserisencouragedtotrytocorrecttheinterferencebyoneof
thefollowingmeasures:
•Reorientorrelocatethereceivingantenna
•Increasetheseparationbetweentheequipmentandreceiver
•Connecttheequipmentintoanoutletonacircuitdifferentfrom
thattowhichthereceiverisconnected
•Consultthedealeroranexperiencedradio/TVtechnicianforhelp
FCCCaution: Anychangesormodificationsnotexpresslyapprovedby
theparty responsibleforcompliancecouldvoidtheuser'sauthorityto
operatethisequipment.ThisdevicecomplieswithPart15 oftheFCC
Rules.Operationissubjecttothe followingtwoconditions:(1) This
devicemaynotcauseharmfulinterference,and(2) thisdevicemust
acceptanyinterferencereceived, includinginterferencethatmay
causeundesiredoperation.
Important:FCCRadiationExposure Statement
ThisequipmentcomplieswithFCC radiationexposurelimitssetforth
foranuncontrolledenvironment.Thisequipmentshouldbeinstalled
andoperatedwithaminimumdistanceof20 centimeters(8 inches)
betweentheradiatorandyourbody.Thistransmittermustnotbeco-
locatedoroperatinginconjunctionwithanyotherantennaor
transmitter.
Wireless 5GHzBandStatements
Tocomply withFCC regulations,donotusechannels36, 40,44,and48
inthe5.15–5.25GHzbandwhenHiveAPs aredeployedoutdoors.In
addition,thetransmissionpower islimitedtoamaximumof15 dBm.
Becauseradarsystems usesomebands inthe5GHzspectrum, WLAN
devicesoperatinginthesebands mustuseDFS(DynamicFrequency
Selection)todetectradaractivity andswitchchannelsautomaticallyto
avoid interferingwithradaroperations. DFSisrequiredforWLAN
devicesoperatingwithinthe5.25–5.35 GHzUNII-2andthe5.47–5.725
UNIIMid-Bandspectrums intheFCC regionsofNorthAmericaandthe
ETSIregionsinthe EuropeanCommunity.DFSisnotrequiredforWLAN
devicesoperatinginthe5.725-5.850 GHzspectruminFCC regions.(The
5.725-5.850GHzspectrumisnotavailableforwirelessuseinETSI
regions.) HiveAP300 seriesmodelssupportDFS-FCCandDFS-ETSIand
arepermittedtooperateinthe5.25–5.35 GHzand5.47–5.725 GHz
bands inoutdoordeploymentsintheFCCandETSIregions.
Note:Theterm"IC"beforetheradiocertificationnumbersignifiesthat
Industry Canadatechnical specificationswere met.
Industry Canada-Class B
Thisdigital apparatusdoesnotexceedtheClassBlimitsforradionoise
emissionsfromdigital apparatusassetoutintheinterference-causing
equipmentstandardentitled"Digital Apparatus,"ICES-003 ofIndustry
Canada.
Cetappareilnumériquerespecteleslimitesdebruitsradioélectriques
applicablesauxappareilsnumériquesdeClasseBprescritesdansla
normesurlematérielbrouilleur:"AppareilsNumériques,"NMB-003
édictéeparl'Industrie.
Wi-FiCertification
The Wi-FiCERTIFIED™Logo isacertificationmarkoftheWi-Fi
Alliance®.TheAerohiveHiveAP20aghasbeencertifiedforWPA™,
WPA2™,WMM®(Wi-FiMultimedia™),WMM PowerSave,andthe
followingtypesofEAP(ExtensibleAuthenticationProtocol):
•EAP-TLS
•EAP-TTLS/MSCHAPv2
•PEAPv0/EAP-MSCHAPv2
•PEAPv1/EAP-GTC
•EAP-SIM
ECConformanceDeclaration
MarkingbytheabovesymbolindicatescompliancewiththeEssential
RequirementsoftheR&TTEDirectiveoftheEuropeanUnion(1999/5/
EC). Thisequipmentmeetsthefollowingconformancestandards:
•EN60950-1 (IEC60950-1)-ProductSafety
•EN301 893 -Technical requirementsfor5GHzradioequipment
•EN300 328 -Technical requirementsfor2.4 GHzradioequipment
•EN301 489-1 /EN301489-17 -EMCrequirementsforradio
equipment
CountriesofOperationandConditions
ofUsein theEuropean Community
HiveAPs areintendedtobeoperatedinallcountriesoftheEuropean
Community.Requirementsforindoorvs. outdooroperation,license
requirementsandallowedchannelsofoperationapplyinsome
countriesasdescribedbelow.
•BeforeoperatingaHiveAP,theadminorinstallermustproperly
enterthecurrentcountryofoperationinthecommandline
interfaceasdescribedin "AppendixACountry Codes" onpage177.
NotetoU.S.modelowners:TocomplywithU.S.FCCregulations,
thecountry selectionfunctionhasbeencompletely removedfrom
all U.S.models.Theabovefunctionisfornon-U.S.modelsonly.
•HiveAPsautomaticallylimittheallowablechannelsdeterminedby
thecurrentcountryofoperation.Incorrectlyenteringthecountry
ofoperationmightresultinillegal operationandcauseharmful
interferencetoothersystems. Theadminisobligatedtoensure
HiveAPs areoperatingaccordingtothechannellimitations,
indoor/outdoorrestrictionsandlicenserequirementsforeach
EuropeanCommunity country asdescribedinthissection.
•HiveAPscanbeoperatedindoorsoroutdoorsinall countriesofthe
EuropeanCommunityusingthe2.4 GHzband:Channels1-13,
exceptwherenotedbelow.
–In Italy,youmustapplyforalicensefromthenational
spectrumauthority tooperateaHiveAPoutdoors.
–In Belgiumoutdooroperationisonly permittedusingthe2.46-
2.4835GHzband: Channel13.
–In Franceoutdooroperationisonlypermittedusingthe2.4 -
2.454GHzband:Channels1-7.
•HiveAPsusingthe5.15–5.25 GHzband(Channels36,40, 44, 48)
arerestrictedtoindoorusewhenoperatedintheEuropean
Community.Becausethefrequencyranges5.25–5.35and5.47–
5.725areaffectedbyDFS(DynamicFrequency Selection),HiveAP
20 and28modelsblockchannels52, 56,60,64, and100, 104, 108,
112,116, 120,124, 128,132, 136,140.

DeploymentGuide 3
HIVEAP COMPLIANCE INFORMATION
Theavailabilityofsomespecificchannelsand/oroperational
frequency bands arecountrydependentandarefirmware
programmedatthefactorytomatchtheintendeddestination.
Thefirmwaresettingisnotaccessibleby theenduser.
•The5GHzTurboModefeatureisnotallowedforoperationinany
EuropeanCommunitycountry.Youcanfindthecurrentsettingfor
thisfeature intwoplaces. IntheHiveManagerGUI,click
Configuration > NetworkObjects>Radio Profiles> profile >
Advanced.IntheHiveAPCLI,enter thiscommand: showradio
profile profile.By default,TurboModeisdisabled.
DeclarationofConformity inLanguages
oftheEuropean Community
HiveAP20 agSafety Compliance
PowerCordSafety
Pleasereadthefollowingsafetyinformationcarefullybeforeinstalling
aHiveAP.
Warning: Installationandremoval ofHiveAPsmustbecarriedoutby
qualifiedpersonnelonly.
•HiveAPsmustbeconnectedtoanearthed(grounded)outletto
comply withinternational safety standards.
•Do notconnectHiveAPs toanA.C.outlet(power supply)without
anearth(ground)connection.
•Theappliancecoupler(theconnectortotheunitandnotthewall
plug)musthaveaconfigurationformatingwithanEN60320/IEC
320 applianceinlet.
•ThesocketoutletmustbeneartheHiveAPandeasilyaccessible.
YoucanonlyremovepowerfromaHiveAPbydisconnectingthe
powercordfromtheoutlet.
•HiveAPsoperateunderSELV(SafetyExtraLowVoltage)conditions
accordingtoIEC60950. Theconditionsareonlymaintainedifthe
equipmenttowhichtheyareconnectedalsooperatesunderSELV
conditions.
•AHiveAPreceivingpowerthroughitsPoE(PoweroverEthernet)
interfacemustbeinthe samebuildingastheequipmentfrom
whichitreceivespower.
FranceandPeruonly:
HiveAPs cannotbepoweredfromIT*supplies. IfyoursuppliesareofIT
type,thenaHiveAPmustbepoweredby230V(2P+T)viaanisolation
transformer ratio1:1, withthesecondaryconnectionpointlabelled
Neutral,connecteddirectly toearth(ground).
*Impédance àla terre
Important!Beforemakingconnections,make sureyouhavethecorrect
cordset.Checkit(readthelabelonthecable)againstthedescription
onthefollowingpage.
Veuillezlireattentivementlesinformationsdesécuritérelatives à
l'installationd'unpointd'accèsHiveAP.
EnglishHereby,Edgecore,declaresthatthisRadioLAN
deviceisincompliancewiththeessential
requirementsandother relevantprovisionsof
Directive1999/5/EC.
FinnishValmistajaEdgecorevakuuttaa tätenettäRadioLAN
devicetyyppinenlaiteondirektiivin1999/5/EY
oleellistenvaatimustenjasitäkoskeviendirektiivin
muidenehtojenmukainen.
Dutch HierbijverklaartEdgecoredathettoestelRadio
LANdeviceinovereenstemmingismetde
essentiëleeisenendeandererelevantebepalingen
vanrichtlijn1999/5/EG.
BijdezeEdgecoredatdezeRadioLANdevice
voldoetaandeessentiëleeisenen aandeoverige
relevantebepalingenvanRichtlijn1999/5/EC.
FrenchParlaprésenteEdgecore déclarequecetappareil
RadioLANestconformeauxexigencesessentielles
etauxautresdispositionsrelatives àla directive
1999/5/CE.
SwedishHärmedintygarEdgecoreattdennaRadioLAN
devicestårI överensstämmelsemeddeväsentliga
egenskapskravoch övrigarelevantabestämmelser
somframgåravdirektiv1999/5/EG.
Danish UndertegnedeEdgecoreerklærerherved,at
følgendeudstyrRadioLANdeviceoverholderde
væsentligekravog øvrigerelevantekravidirektiv
1999/5/EF.
GermanHiermiterklärtEdgecore,dass sichdieser/diese/
diesesRadioLANdevicein Übereinstimmungmit
dengrundlegendenAnforderungenundden anderen
relevantenVorschriftenderRichtlinie1999/5/EG
befindet".(BMWi)
HiermiterklärtEdgecoredie Übereinstimmungdes
GerätesRadioLANdevicemitdengrundlegenden
Anforderungen unddenanderenrelevanten
FestlegungenderRichtlinie1999/5/EG. (Wien)
Greek
Italian Conla presenteEdgecoredichiarachequestoRadio
LANdevice èconformeairequisitiessenzialiedalle
altredisposizionipertinentistabilitedalla direttiva
1999/5/CE.
SpanishPormediodela presenteManufacturerdeclaraque
elRadioLANdevicecumpleconlosrequisitos
esencialesycualesquieraotrasdisposiciones
aplicablesoexigiblesdela Directiva1999/5/CE.
PortugueseManufacturerdeclaraqueesteRadioLANdevice
estáconformecomosrequisitosessenciaiseoutras
disposiçõesdaDirectiva1999/5/CE.
PowerCordSet
U.S.A.
andCanada ThecordsetmustbeUL-approvedandCSAcertified.
Minimumspecificationsfortheflexiblecord:
-No.18 AWGnotlonger than2meters,or16 AWG
-TypeSVorSJ
-3-conductor
Thecordsetmusthavearatedcurrentcapacityofat
least10A.
The attachmentplugmustbeanearth-grounding
typewithNEMA5-15P(15A,125 V)orNEMA6-15 (15
A,250 V)configuration.
DenmarkThesupply plugmustcomply withSection107-2-D1,
StandardDK2-1a orDK2-5a.
SwitzerlandThesupply plugmustcomply withSEV/ASE1011.
U.K. ThesupplyplugmustcomplywithBS1363(3-pin13 A)
andbefittedwitha5Afusethatcomplieswith
BS1362.
Themainscordmustbe<HAR>or<BASEC>markedand
beoftypeHO3VVF3GO.75(minimum).
EuropeThesupply plugmustcomplywithCEE7/7
("SCHUKO").
Themainscordmustbe<HAR>or<BASEC>markedand
beoftypeHO3VVF3GO.75(minimum).
IEC-320 receptacle.

HiveAP ComplianceInformation
4Aerohive
Avertissement: L'installationetla déposedepointsd'accèsHiveAP
doivent êtreeffectuéesuniquementparunpersonnelqualifié.
•Lespointsd'accèsHiveAPdoivent être connectéssurlesecteur
paruneprise électriquemuniedeterre(masse)afinderespecter
lesstandardsinternationauxdesécurité.
•Nejamaisconnecterdespointsd'accèsHiveAP àunealimentation
électriquenon-pourvuedeterre (masse).
•Le boitierd'alimentation(connectédirectementaupointd'accès)
doit êtrecompatibleavecuneentrée électriquedetypeEN
60320/IEC320.
•Laprisesecteurdoitsetrouver àproximitédupointd'accès
HiveAPetfacilementaccessible.Vousnepouvezmettrehors
tensionun pointd'accèsHiveAPqu'endébranchantson
alimentation électriqueauniveaudecetteprise.
•Pourdesraisonsdesécurité,lepointd'accèsHiveAPfonctionne à
unetensionextrêmementbasse,conformément àla normeIEC
60950.Lesconditionsdesécuritésontvalablesuniquementsi
l'équipementauquellepointd'accèsHiveAPestraccordé
fonctionne égalementseloncettenorme.
•Unpointd'accèsHiveAPalimentéparsoninterfaceréseau
EthernetenmodePOE(Powerover Ethernet)doit être
physiquementdanslemêmebâtimentquel'équipementréseau
quiluifournitl'électricité.
Franceet P rouuniquement:
Unpointd'accèsHiveAPnepeutpas êtrealimentéparundispositif à
impédance àla terre.Sivosalimentationssontdutypeimpédance àla
terre,alorslepointd'accèsHiveAPdoit êtrealimentéparunetension
de230 V(2P+T)viauntransformateurd'isolement àrapport1:1,avec
leneutre connectédirectement àla terre(masse).
BitteunbedingtvordemEinbauendesHiveAPdiefolgenden
Sicherheitsanweisungendurchlesen.
Warnung: DieInstallationundderAusbaudesGerätsdarfnurdurch
Fachpersonal erfolgen.
•DasGerätsolltenichtaneineungeerdeteWechselstromsteckdose
angeschlossenwerden.
•DasGerätmußaneinegeerdeteSteckdoseangeschlossenwerden,
welchedieinternationalenSicherheitsnormen erfüllt.
•DerGerätestecker(derAnschlußandasGerät,nichtder
Wandsteckdosenstecker)mußeinengemäß EN60320/IEC320
konfiguriertenGeräteeinganghaben.
•DieNetzsteckdosemußinderNähedesGerätsundleicht
zugänglichsein.DieStromversorgungdesGerätskannnurdurch
HerausziehendesGerätenetzkabelsausderNetzsteckdose
unterbrochenwerden.
•DerBetriebdiesesGerätserfolgtunterdenSELV-Bedingungen
(Sicherheitskleinstspannung)gemäß IEC60950.DieseBedingungen
sindnurgegeben,wennauchdieandasGerätangeschlossenen
GeräteunterSELV-Bedingungen betrieben werden.
Liability Disclaimer
InstallationofAerohiveequipmentmustcomply withlocal andnational electricalcodesandwithotherregulationsgoverningthistypeofinstallation.
AerohiveNetworks, itschannelpartners,resellers, anddistributorsassumenoliabilityforpersonalinjury,propertydamage,orviolationof
governmentregulationsthatmay arisefromfailingtocomply withtheinstructionsinthisguideandappropriateelectrical codes.
Cordon lectrique-Ildoit êtreagr danslepaysd'utilisation
Etats-Unis
etCanada Lecordondoitavoirreçul'homologationdesULetun certificatdela CSA.
Lesspécificationsminimalespouruncableflexible
-AWGNo.18, ouAWGNo.16 pour uncablede
longueurinférieure à2mètres.
-TypeSVouSJ
-3conducteurs
Lecordondoit êtreenmesured'acheminerun
courantnominal d'aumoins10 A.
Laprisefemelledebranchementdoit être dutype à
mise àla terre(mise àlamasse)etrespecterla
configurationNEMA5-15P(15 A,125 V)ouNEMA6-
15P(15 A,250 V).
DanemarkLaprisemâled'alimentationdoitrespecterla section
107-2D1delanormeDK21a ouDK25a.
SuisseLaprisemâled'alimentationdoitrespecterla norme
SEV/ASE1011.
EuropeLaprisesecteur doit être conformeauxnormesCEE
7/7 ("SCHUKO").
LEcordonsecteurdoitporterla mention<HAR>ou
<BASEC>etdoit être detypeHO3VVF3GO.75
(minimum).
Stromkabel.DiesmussvondemLand,indemesbenutztwird
geprüftwerden:
U.S.A.
und
Kanada
DerCordmußdasULgepruftundwardasCSA
beglaubigt.
DasMinimumspezifikationfurderCordsind:
-Nu.18 AWG-nichtmehr als2meter,oder16 AWG.
-DertypSVoder SJ
-3-Leiter
DerCordmußhaben einestrombelastbarkeitaus
wenigstens10 A.
DieserStromsteckermußhateinererdschluss mitder
typNEMA5-15P(15A,125V)oderNEMA6-15P(15A,
250V)konfiguration.
DanemarkDieserStromsteckermußdieebene107-2-D1, der
standardDK2-1a oderDK2-5a Bestimmungen
einhalten.
SchweizDieserStromsteckermußdieSEV/ASE
1011Bestimmungen einhalten.
EuropeEuropeDasNetzkabelmußvomTypHO3VVF3GO.75
(Mindestanforderung)seinunddieAufschrift<HAR>
oder<BASEC>tragen.
DerNetzsteckermußdieNormCEE7/7erfüllen
("SCHUKO").

DeploymentGuide 5
Contents
Chapter1Preparing foraWLANDeployment...............................................9
AssessingYourRequirements.............................................................................10
Planning......................................................................................................10
UpgradingfromExistingWi-Fi...................................................................................10
NewWLANDeployment...........................................................................................11
SiteSurveys.........................................................................................................12
BudgetingWi-Fi:The Chicken andEgg Problem..............................................................13
PlanningTools.................................................................................................13
AssociatedAccessPointCosts...............................................................................14
BandwidthAssumptionsforWi-Fi...............................................................................14
OvercomingPhysicalImpediments..............................................................................15
PreparingtheWiredNetworkforWireless....................................................................17
OperationalConsiderations................................................................................18
Tuning...............................................................................................................18
Troubleshooting....................................................................................................18
Management........................................................................................................18
DeployingwithConfidence.......................................................................................18
BasicWi-Fi Concepts.......................................................................................19
Chapter2TheHiveAP20 agPlatform.......................................................23
HiveAP20 ProductOverview..............................................................................24
EthernetandConsolePorts......................................................................................26
StatusLEDs.........................................................................................................27
Antennas............................................................................................................28
MountingtheHiveAP20....................................................................................29
CeilingMount.......................................................................................................29
SurfaceMount......................................................................................................30
Device,Power, andEnvironmentalSpecifications.....................................................31
Chapter3TheHiveAP28 OutdoorPlatform...............................................33
HiveAP28 ProductOverview..............................................................................34
EthernetPort.......................................................................................................35
PowerConnector..................................................................................................36
Antennas............................................................................................................37

Contents
6Aerohive
MountingtheHiveAP28 andAttachingAntennas......................................................38
PoleMount..........................................................................................................39
StrandMount.......................................................................................................40
SurfaceMount......................................................................................................41
AttachingAntennas................................................................................................42
ConnectingAntennasDirectlytothe HiveAP28..........................................................42
MountingAntennasSeparately..............................................................................42
Device,Power, andEnvironmentalSpecifications.....................................................44
Chapter4TheHiveAP340Platform.........................................................45
HiveAP340ProductOverview.............................................................................46
EthernetandConsolePorts......................................................................................48
SmartPoE......................................................................................................49
AggregateandRedundantInterfaces......................................................................49
ConsolePort...................................................................................................51
StatusLEDs.........................................................................................................52
Antennas............................................................................................................52
MIMO............................................................................................................53
UsingMIMOwithLegacy Clients.............................................................................55
MountingtheHiveAP340..................................................................................56
CeilingMount.......................................................................................................56
LockingtheHiveAP340......................................................................................57
SurfaceMount......................................................................................................58
Device,Power, andEnvironmentalSpecifications.....................................................59
Chapter5TheHiveManagerPlatform.......................................................61
ProductOverview...........................................................................................62
EthernetandConsolePorts......................................................................................63
StatusLEDs.........................................................................................................64
RackMountingtheHiveManager..........................................................................65
Device,Power, andEnvironmentalSpecifications.....................................................66
Chapter6TheHighCapacityHiveManagerPlatform.....................................67
ProductOverview...........................................................................................68
RackMountingtheHighCapacityHiveManager........................................................70
ReplacingPowerSupplies..................................................................................73
ReplacingHardDiskDrives................................................................................74
Device,Power, andEnvironmentalSpecifications.....................................................75

DeploymentGuide 7
Chapter7Using HiveManager.................................................................77
InstallingandConnectingtotheHiveManagerGUI....................................................79
IntroductiontotheHiveManagerGUI....................................................................82
CloningConfigurations............................................................................................83
Multiselecting......................................................................................................83
SortingDisplayedData............................................................................................84
HiveManagerConfigurationWorkflow...................................................................85
UpdatingSoftwareonHiveManager......................................................................86
UpdatingHiveOSFirmware................................................................................87
UpdatingHiveAPsinaMeshEnvironment......................................................................88
Chapter8HiveManagerConfigurationExamples..........................................89
Example1:MappingLocationsandInstallingHiveAPs................................................91
SettingUpTopologyMaps........................................................................................91
PreparingtheHiveAPs............................................................................................94
UsingSNMP.....................................................................................................94
UsingMACAddresses..........................................................................................95
Example2:DefiningNetworkObjectsandMACFilters...............................................97
DefiningaMACOUI................................................................................................97
Mappingthe MACOUIandServicestoAerohiveClasses................................................98
DefiningVLANs...................................................................................................100
CreatingIPAddresses...........................................................................................101
CreatingaMACFilter...........................................................................................103
Example3:ProvidingGuestAccess....................................................................104
GuestAccesswithPresharedKeys............................................................................104
GuestAccesswithCaptiveWebPortal.......................................................................105
CaptiveWebPortalwithExternalDHCPandDNS Servers............................................105
CaptiveWebPortalwithInternalDHCPandDNS Servers.............................................107
CustomizingtheRegistrationPage.......................................................................108
LoadingCustomizedCaptiveWebPortalFiles..........................................................111
DefiningaCaptiveWebPortal............................................................................112
Example4:CreatingUserProfiles......................................................................113
Example5:SettingSSIDs.................................................................................117
Example6:SettingManagementServiceParameters...............................................120
Example7:DefiningAAARADIUS Settings.............................................................123
Example8:CreatingHives...............................................................................125

Contents
8Aerohive
Example9:CreatingWLANPolicies....................................................................126
WLANpolicy-hq1..................................................................................................126
WLANpolicy-hq1(Page1)..................................................................................126
WLANpolicy-hq1(Page2)..................................................................................128
WLANpolicy-hq1(Page3)..................................................................................131
WLANpolicy-hq2..................................................................................................134
WLANpolicy-branch1............................................................................................134
Example10:AssigningConfigurations toHiveAPs....................................................135
Chapter9HiveOS..............................................................................141
CommonDefaultSettingsandCommands.............................................................142
ConfigurationOverview..................................................................................143
Device-LevelConfigurations...................................................................................143
Policy-LevelConfigurations....................................................................................144
HiveOSConfigurationFileTypes........................................................................145
Chapter10 Deployment Examples (CLI)..................................................149
Example1:DeployingaSingleHiveAP.................................................................150
Example2:DeployingaHive............................................................................153
Example3:UsingIEEE802.1XAuthentication........................................................158
Example4:ApplyingQoS................................................................................161
Example5:LoadingaBootstrapConfiguration.......................................................167
CLICommandsforExamples............................................................................170
CommandsforExample1......................................................................................170
CommandsforExample2......................................................................................170
CommandsforExample3......................................................................................171
CommandsforExample4......................................................................................172
CommandsforExample5......................................................................................174
Chapter11 TrafficTypes....................................................................175
AppendixACountryCodes..................................................................177

DeploymentGuide 9
Chapter1PreparingforaWLANDeployment
To ensureasmoothWLANdeployment,youneedtobeginwithabitofplanning.Astraightforwardreviewofyour
deploymentplanbeforeyoubeginwill resultinoptimalresultsmorequickly.Thegoalsofthis chapter aretoassist
youinassessingyourreadiness for WLANimplementationandtoprovidetipsandtricksto resolveanyissuesthat
mightariseinyourenvironment.Thechapter coversthefollowingtopics:
•"AssessingYourRequirements"onpage10
•"Planning" onpage10
•"Upgradingfrom ExistingWi-Fi"onpage10
•"NewWLANDeployment"onpage11
•"SiteSurveys"onpage12
•"BudgetingWi-Fi:TheChicken andEgg Problem"onpage13
•"BandwidthAssumptionsfor Wi-Fi"onpage14
•"OvercomingPhysicalImpediments"onpage15
•"OperationalConsiderations"onpage18
•"PreparingtheWiredNetworkforWireless"onpage17
•"DeployingwithConfidence"onpage18
Althoughthisguideassumesanunderstandingofcorporatedatanetworking,previousexperiencewithLAN
configurationanddeployment,andsomebasicWi-Fiunderstanding,thechapterconcludeswithasectionthat
providesadditionalsupportfortheprecedingsections: "BasicWi-FiConcepts"onpage19.
Note: Thisguideassumesanunderstandingofcorporate datanetworkingandpastexperiencewithLAN
configurationanddeployment.Italso assumessomebasicWi-Fiunderstanding.

Chapter1Preparing foraWLANDeployment
10 Aerohive
ASSESSING YOUR REQUIREMENTS
TogetstartedwithyourAerohiveWLANinstallation,examine the basicrequirementsofyourimplementation.First,
considerwhoyour stakeholdersareandtakethetimetofullyunderstandtheiraccess requirements.Talkto
departmentmanagerswithinyourorganizationandmakesureeveryone has documentedthe full complementof
potentialusersofyournetwork.Checkiftheapplicationsarestandardemployeeapplicationsor ifthereareother
requirements,suchas access for guestsor consultants.
Next,makeacompletelistofthe applicationtypesthatyour Aerohivenetworkwillneedtosupport.Beginyour list
withmission-criticalapplications,payingspecialattentiontothosethatgenerate highlevelsoftrafficandthose
requiringdeterministicbehavior.Identifyapplicationswithheavydatarequirementsandexpectedservicelevels.
Demandingapplicationssuchas voiceandvideowill requireahigher densityofaccess points.Manyenterprisesare
investigatingthepotentialofVoWLAN(VoiceoverWLAN)inthehopesofintegratingmobilephonesandIP-PBX
systems.Doingso requiresanevaluationofother datatransmissiontypesthatcandisruptthequalityofvoice
conversations.Becausevoicetrafficis sensitivetonetworkjitter andlatency,aninadequatenumber ofaccess
pointscandegradequality.Totheuser,excessivejitteranddelaycancauseclippedconversationsordroppedcalls.
Additionalqualityandreliabilityissuesmightarisewhentransmittingvideo,suchas fortrainingvideoor
surveillanceoperations,becauseofthesheer sizeofthedatastream.
Otherapplicationssuchas networkbackupandfiletransferscanalso haveanimpactonthe network.Therefore,
takeintoaccountanybandwidth-intensiveapplicationsifyouexpectyourmobileworkforcetobeaccessingthe
WLANwhiletheseapplicationsor servicesareoccurring.
Consideringthe aboveissueswill resultinamoreinformed—andthereforemoresuccessful—deploymentplan.
PLANNING
Thissectionreviewsthefundamentalelementsfor planningyourWLANdeployment.Thisincludesconductingasite
survey,bothfor anupgradefrom anexistingWLANandfor acompletelyfresh—or greenfield—deployment.
UpgradingfromExisting Wi-Fi
IfyouareupgradingtoAerohivefrom anexistingWLAN,youalreadyhaveplentyofdataabouthow your current
networkis performing.Thisinformationcanleadto moreinformeddecisionsaboutyour new implementation.
To begin,perform aquicksitesurveywiththeexistingaccess pointsinplace.Iftheyareless thanthreeyearsold
andsupport802.11g,their coverageandcapacityshould beequivalentorslightlylower thantheAerohive802.11g
radio.Ifthecoverageiscorrectandhas theappropriatedensityforyour deployment,then yousimplyneedto
replaceonesetofaccesspointswithanewsetofHiveAPs.However,this scenarioisrarebecausenetworkupgrades
areusuallydoneto improvecapacityandto augmentthe existinglayoutwithadenser deploymentofaccesspoints.
Besuretotakenotewhether yourexistingnetworkuses"fat"or "thin"APs(access points).A"fat"AP is an
autonomousorstandaloneaccesspoint,whichcontainstheintelligenceandcapabilitytoconnecttoanyEthernet
switch.Witha"thin"AP,mostoftheintelligencehasbeenremovedandreplacedinacentralizedWANcontroller.A
fatupgradeto AerohiveHiveAPsis verynatural.Generally,withfatAPsyousimplyneedtounplugtheexistingones
andpluginthe newHiveAPsandprovisionthem.Withthis approach,youcanmaintainor enhanceall existingVLANs
andsecuritypolicies.This isahugeadvantageover migratingfrom fatAPto controller-basedsolutionsbecauseyou
typicallyneedtore-architectthenetwork.

DeploymentGuide 11
PLANNING
Upgradingfrom athinAP solutionisalsoeasy.However,becauseathinAP makesuseofanoverlaytunneled
network,yousometimeshavetoadd alocalVLANfor access or usetunnelstoreplicate the overlaynetwork.
However,becauseusingVLANs ratherthantunnelsprovidessignificantperformanceandscalabilityadvantages,that
is clearlytherecommendedpath.
NewWLANDeployment
Inanew—or greenfield—WLANdeployment,youdonothavethebenefitofanexistingnetworkfor testingand
analysis,whichmakesyour jobabitmoredifficult.Inthiscase,thefollowingkeyquestionsarecriticaltothe
properdesignofyourWLAN:
•How manyuserswill needwirelessserviceandwhatapplicationswill theyuse?
Determiningthe scopeofyourWLANdeploymentwill haveamajor impactoncapacityandcoverage.Will only
certaingroupswithinthe organizationhaveWLANaccess,orwill itberolledoutacross theenterprise? Will you
provideguestaccess tovisitors,consultants,andcontractors?MostWLANssupportjustdataapplications,but
manyorganizationsareconsideringaddingvoiceservices.Voicesupportraisesotherdesignconsiderationsthat
drivethe needfordenser deploymentsofaccess pointsanddifferentQoS(QualityofService)settings.
•Arethereanyknownmajor sourcesofinterference?
Forexample,is thereanearbycafeteriawithmicrowaveovens?Commercial-grademicrowavesarea
particularlybadsourceofinterference.Isthereawirelesstelephone orvideosurveillancesystemnotusing
Wi-Fi?Istherearadarinstallationnearby?Ifyoucannotfindthe answertothesequestionseasily,consider
employingaspectrumanalysis product,suchas the AirMagnet SpectrumAnalyzer.
•Arebuildingblueprintsavailable?
Withblueprints,youcanseethelocationofelevators,load-bearingwalls,andother buildingcharacteristics
thatcanimpactsignalquality.Differentmaterials,suchas concretewalls,brickwalls,cubiclewalls,glass,and
elevator shaftsimpactsignalqualitydifferently.Youcanoftenloadtheseblueprintsintoaplanningor site
surveytoolto makethe process easier.
•Whatdevicesneedtoaccess the WLAN?
Determineanddocumentthe fullcomplementofdevicesthatpeoplewill usetoaccess theWLAN.The
performancerequirementsoftheWLANwill dependonboththeapplicationsandthecapabilitiesoftheclient
devices.For example, designengineers,architects,anddoctorstendtoworkwithbandwidth-hungry
applications,so youmightneedto providegreater capacity.Conversely,ifitis awarehousewithalowclient
densityofmostlybarcodescanners,aloweraccess pointdensitymightbesuitable.Finallyitisimportantto
considervoice,orthe futureuseofvoice.Ifsomeor all peoplewill useVoWLAN(Voiceover WLAN)devices,
thatcanaffecthowmanyuserseachaccess pointcanaccommodate.
Note: For someaccess pointdeployment guidelines,see "BandwidthAssumptionsfor Wi-Fi"onpage14.

Chapter1Preparing foraWLANDeployment
12 Aerohive
SiteSurveys
OneofthefirstquestionsITmanagersaskwhentheyarepreparingfor aWLANdeploymentiswhether or notasite
surveyshould beperformed.Inasitesurvey,theadministrator walksaroundthefacilitywithasitesurveytoolto
measurethe RF (radio frequency)coverageofatestaccesspointorthe existingWLANinfrastructure.
Whetheror notyoudecidetodoasitesurveyforyour enterprisedependsonthecostofthesurveyandthe
complexityofthe environment.Thethreeways todeployawireless network—withandwithoutasitesurvey—are
explainedbelow:
•PredeploymentSurvey
Thesafestapproachistoperform asitesurveybeforedeploymenttodeterminethebestlocationsforthe
access points.Typically,sitesurveyprofessionalstemporarilyplaceaccess pointsindifferentlocations,take
measurements,andadjusttheir settingsandlocationsas necessary.Aftertheycompletethe survey,they
install theaccess points,andthenperform anothersite surveyto confirm thatthegoalshavebeen
achieved.Thismethodisclearlythe mostreliablewayto deployawirelessnetwork;however,itcanbe
expensive, timeconsuming,andimpracticalifanenterprisehas manysites.
•DeployandCheck
Inthis scenario,aninitialsitesurveyis notperformed.Instead,wireless administratorsmakeeducated
guessesonthebestlocationsforthe accesspointsortheyuseaplanningtooltodeterminethelocations
morereliably.Afterdeployingtheaccesspoints,the administratorsdoaquicksitesurvey.Iftheyneedto
providegreater coverage, theydeployadditionalaccess points.Ifthereareareas whereaccess pointsare
interferingwitheachother,theythenrelocateoneormoreofthem.Withthe AerohivecooperativeRF
control,HiveAPsautomaticallyadjusttheir channelandpower tocompensatefor coveragegapsandareas
ofinterference.
Thedeploy-and-checkapproachis oftenmuchcheaperandfasterthandoingapredeploymentsitesurvey.
Theriskisthatyoumighthaveto movesomeaccesspointsandCAT5 (Category5)Ethernet cablesifyoudo
notplanproperly.Aerohiveprovidesahugecompetitiveadvantageinthedeploy-and-checkapproach,
thanksto itsflexiblemeshnetworkingcapability.Anadministratorcandeploywithmesh(beforerunning
wires)andchecktheperformanceinseverallayouts,determine the bestlayout,andthenrun thewiresto
theirfinallocation.
•DeploywithoutSurvey
Whileitis usuallyadvisableto do asitesurvey,therearemanysituationsinwhichitis notfeasibleoreven
necessary.Ifthe locationissufficientlysmall—forexample, adeploymentofonlythreeorfeweraccess
points—sitesurveyshavelimitedvaluebecausethereisvirtuallynoopportunityforinterference.Ifthere
arenumerousremotelocations,asitesurveymightbeimpracticalbecauseofthe costoftravelingtoeach
site.Intheselocations,youcanuseaslightlydenserdeploymenttoensureappropriatecoverageand
capacity.WithAerohiveCooperativeRF control,HiveAPsautomaticallyadjusttheirradiopowerlevelsto
ensurethatthereis minimaloverlapfrom interferingchannels.Usuallythe costofextraaccesspointsis
offsetbythecostsavedbynotdoingasitesurveyinaremotelocation.

DeploymentGuide 13
PLANNING
Budgeting Wi-Fi:The Chicken and Egg Problem
ThehardwarecostofaWi-Fisolutionisgenerallydrivenbythe numberofaccess pointsneeded,andanAerohive
networkis no exception.Unfortunately,atraditionalchallengeofbudgetingfor Wi-Fiisthatitis difficultto know
how manyaccess pointstoplanfor untilyouhavedeployedandmeasuredthem.Therearemethodsofdoingsite
surveys beforeadeploymenttoanswerthesequestions.Whiledoingsoisoftenworthwhile, youmightjustneeda
generalideaofwhatyouwould needtobudget.Fortunatelytherearesomesimpleguidelinesthatyoucanuseto
figureouthow manyaccesspointsyouneed,includingthe numberofaccesspointspersquarefoot,thenumberof
clientsperaccess point,andthedistancebetweenaccess points.
•Access PointsperSquareFoot
Thesimplestandmostcommonwayofbudgetingaccesspointsis persquarefoot.Yousimplytakethe
squarefootageofabuildinganddivideitbysomenumber.Themostcommonmetricusedtodayisone
access pointforevery4,000 to5,000squarefeet forstandardofficeswithcubicles.However,ifyouneedto
supportvoiceapplications,youneedahigherconcentrationofaccess points.Inthis case,the
recommendedformulais oneaccess pointfor every3,000 squarefeet,or evenas low as one access point
for every2,000squarefeet.Inthe lightestweightconveniencenetworks,itis possibleto usefewer access
points,anddensitiesaslow as oneaccess pointfor every10,000 to15,000 squarefeetcanbesuccessful.
Keepinmindthatsuchadeploymentoften has deadspotsandcanonlysupportverylow clientdensities.
•Number ofClientsforEach AccessPoint
Anotherwayto determinethenumberofaccesspointsneededistoconsiderthe numberofclientsyou
wanteachaccesspointto support.Inastandardofficeenvironment,mostenterprisesplanto supportan
averageof5to 15 clientsper access point. Whilethespecificationsofmostaccess pointsstate thatthey
cansupportuptoabout120 clients,asignificantlylower densityisrecommendedtogetanacceptable
throughputfor standardofficeapplications.Ifyouexpectto supportvoiceoverWi-Fiintheenterprise,
accountfor thosephonesas well.Withtheadditionofvoice,theclientdensitysubstantiallyincreases,
requiringyoutoplanfor anaverageof5to10dataclientsand5to10 voiceclientsforeachaccesspoint.
Remember thatvoiceclientsconsumevirtuallyzero bandwidthwhentheyarenotonacall.However,when
theyareonacall,itis imperativethatthetrafficgoesthrough.
•DistanceBetweenAccess Points
Inastandardofficeenvironment,itisagoodideatoensurethataccess pointsarebetween 30 and100 feet
fromoneanother.Adistanceof30feetis neededinhigh-densityenvironmentsandthosewithmanywalls
separatingaccess points.Adistanceof100 feetissufficientinlow-densityareas withplentyofopen space.
Thethreetipsabovecanhelp determinehowmanyaccesspointsto deployinagivenarea.Ingeneral,thesquare
footageestimateprovidesthebestbudgetingestimate,withclientestimationsandthe distancebetweenaccess
pointsconfirmingthesquarefootagecalculations.
Aswithall rules,thereareexceptions.Ifcertainlocationsinthe networkhaveahigher densityofclients,suchas
conferenceroomsor lecturehalls,ahigherdensityofaccesspointsis required.Converselyiftherearelargeopen
areas withfewactiveclients,fewer accesspointsaresufficient.
PlanningTools
Iffollowinggeneralguidelinesdoesnotprovideenoughconfidenceor ifthe deploymentenvironmentisparticularly
challenging,youmightconsider usingsoftwareplanningtoolslikeAirMagnet'sPlannersoftware.Suchtoolsare
usefulindeterminingtheplacementofaccess pointswithoutperformingasitesurvey.

Chapter1Preparing foraWLANDeployment
14 Aerohive
AssociatedAccessPointCosts
Afteryoudeterminehowmanyaccess pointsyouneed,itbecomessimpler to determinethe othercostsinvolved
withdeployingWi-Fibecausemostaredrivenbythequantityofaccesspoints.Thesecostsincludethe following:
•InstallationandWiring
•CAT5 –CAT5wiringis requiredfor all HiveAPsactingasportals.1OneadvantageofAerohiveNetworksisthat
youcandeployHiveAPsinameshtoavoidsomeofthewiringcosts.
•Power –Powerlinesarerequiredforall HiveAPsactingas meshpoints.2Portalsreceivepowerthrough
power linesor throughEthernetcablesbyusingthePower-over-Ethernet(PoE)option.
•Installation –HiveAPscansimplysnapintostandarddropped-ceilingenvironments.However,ifthe
installationis inawarehouseoranyenvironmentwithoutdroppedceilings,considerthe installationcosts.
•Infrastructure:PoESwitches
YoumustcableeveryHiveAP actingas aportalto aswitchport.For PoE,thereareseveralconsiderations:
•802.3af –ThecurrentPoE specificationprovidesenoughpower forall 802.11a/b/gaccesspoints.
•802.3at –TheemergingPoE specificationsupportshigherpowerdeviceslike802.11naccess points.This
standardis expectedtoberatifiedatthe endof2008,soproductsarenotyetavailable.
•PoE injectorsandmidspans –Thesesavemoneyonswitchupgradesbyinjectingpowerintostandard
Ethernetconnections.
•SiteSurvey andDebugging Software
•Forasizabledeployment,youprobablywill usesitesurveyanddebuggingsoftware.AirMagnet Laptop
Analyzer andSurveyaretwoproductsthatpayfor themselvesveryquickly.Theseproductsenablethe
validationofadeploymentandallowyouto troubleshootclientandaccess pointissues.(For more
information,seethesectionon "OperationalConsiderations"onpage18.)
•ProfessionalServices
•Whendeployingwireless LANs,professionalservicesareoften requiredperform sitesurveys.
•ClientSoftware
•Dependingonthedeployment,userscanusebuilt-inMicrosoftWindows,Linuxand/or Macintoshclient
software(supplicants).
•Forbetterservicesandtroubleshooting,considerathird-partysupplicantsuchas JuniperNetworksOdyssey
Client.
BandwidthAssumptionsforWi-Fi
Peoplefrequentlytalkabouthowmuchcoverageanaccesspointprovides;however,itis capacity—not
coverage—thattypicallyconstrainsanaccess pointinanenterpriseenvironment.Thechallengeisnothowfar the
RF signalcantravel(coverage),buthowto deliverenoughbandwidthto meetthedemandsofbusiness applications
(capacity).Inotherwords,youmightbeabletocoveranofficeof50 peoplewithoneaccess point,butifall50
peoplechoosetoaccessitatthesametime,itwill certainlybecomeoverloaded.Indeed,ifyouusethe formulas
providedinthis paper,youshould findthesaturationofaccesspointsonyour campusto bemorethansufficient.
Enterpriseusersareaccustomedtospeedyswitchednetworksandexpectsimilarperformancefromtheir wireless
LANconnections.This is whydocumentingthe sizeandtypeofapplicationsthatwill relyonyourWLANisso critical
toyourplanning.Inshort,ifyouplanforoptimalcapacity,completecoveragewillfollowautomatically.
1.Aportalisahivemember thatlinksone ormoremeshpointstothe wiredLAN.
2.Meshpointsarehivemembersthatuseawireless backhaulconnectiontolinkthroughaportalto thewiredLAN.

DeploymentGuide 15
PLANNING
Ingeneral,thewayto increasecapacityis toadd moreaccess points(withinreason)andtunedownthe radiopower
to avoidinterference.Onereasonfor deployingahighcapacitynetworkistocreateaWLANfor voiceanddata
applications.InsuchaWLAN,everyone hasaVoIPhandsetrunningwirelesslyall the time.
Ingeneral,thefollowingtableshowsthestandarddensitiesfor officedeployments.
Overcoming Physical Impediments
Noteverypotentialdeploymentisastandardbusiness campus.Thefollowingscenariosareafewthatmeritspecial
consideration.
•OpenSpace
Openspaces,suchasalargefoyeroranoutdoor area,areveryeasy to cover withWi-Fibecausetherearefew
impedimentstopropagationandfeweropportunitiesformultipathinterference. Insuchspaces,Wi-Fisignals
canpropagatemanyhundredsoffeet.Thisis goodifyouwantto providecoverageforjustafewusers.
Youwill runintochallengesiftherearemanyusersandhighcapacityservicegoals.Inthesesituations,itis
importantto tunedowntheRF to aminimallevel.IfyouareusingAerohivecooperativeRF control,the HiveAPs
dothisontheirownautomatically.AnothertrickistotakeadvantageofobstaclesthatblockWi-Fi.Lookfor
treesor wallsandputneighboringaccess pointsoneither sideofthem.Doingsolimitsthe interferenceofthe
twoaccess pointsandallowsfor theinstallationofmoreaccess pointswithless interference.
•WarehouseandRetail
Warehouseandretailenvironmentspresentmanychallenges.Oneofthelargestchallengesis thatRF
characteristics oftenchangebecauseofvaryinginventorylevelsand,inthe caseofretail,seasonaldisplays
(suchas tinselorastackofsodacansonanendcap).Additionally,metalshelvesandhighceilingscanbe
challengesto propagation.Toresolvewiththeseissues,itis wisetoputatleastoneaccess pointperaisleto
ensurecoveragefor thataisle.This usuallyrequiresahigher densityofaccess pointsthanwould otherwisebe
required.
•ConfiguringAntennas
Asanyonewho has administeredaWLANsystem inthe pastknows,properconfigurationoftheaccesspoint
antennas atthe outsetcansaveyoulotsoftrouble. HiveAPscomestandardwithfixedomnidirectional
antennas.Youtypicallyorienttheseantennasvertically,positioningtheantennas onall HiveAPsinthesame
direction.Omnidirectionalantennas createacoverageareathatlookslikeadoughnut,broadcastingto the
sidesmuchmoreeffectivelythanupordown(see Figure1onpage16).Ingeneral,this isgoodformostoffice
environmentsbecauseyouhavelargeflatfloors.However,itcanbeaprobleminenvironmentswithhigh
ceilings.
OfficeRequirements ExpectedDataRateUsing 802.11g
forEachAccessPoint
Access PointDensity
Coverage(low capacity) 12 Mbpsto24 Mbps 1accesspointper8000 squarefeet
Standardofficedeployment36 Mbps 1accesspointper5000 squarefeet
Standardofficedeploymentwith
voice 54 Mbps 1accesspointper2000 –3000 square feet
Note: Datarate isnot thesameasTCPthroughput.Because ofvariousheaders,inter-framegaps,andsession
creation,real TCPthroughputusuallydoesnot exceed22 Mbpsatdataratesof54 Mbps.

Chapter1Preparing foraWLANDeployment
16 Aerohive
Figure1 OmnidirectionalAntennaRadiationPattern
TheHiveAP canaccommodateexternalantennasviacoaxialjacksonitschassis (see "Antennas"onpage28).
ThejackisastandardmaleRP-SMAconnector.Variouspatch,directional,andomnidirectionalantennas canbe
usedtochangethe coveragepattern.Themostcommonexternalantennas arepatchantennas.Theseare
directionalantennas thatprovidecoverageinasingledirection.Mostcommonlytheyhaveatransmission
patternasshownin Figure2.Basedonthegain,thesignalwill bewide(likethelowgainantennashownontop)
ornarrowandlong(likethehighgainantennashownonthebottom).Notethatthe coveragepatternsarenot
perfectfor theseantennas andthattheyoftenbroadcastslightlyinotherdirectionsthantheprimaryone.
Theseextra"lobes"canbeseeninbothofthe patternsshownbelow.
Figure2 Directional AntennaPatterns
Thefollowingaresomequickhintsfor deployingaccesspoints:
•Standardsheetrockwallsanddroppedceilingsarethe bestlocationsfor mountingaccess points.
•WhendeployingWLANs inretailstores,doingasite surveyateachstoreis likelyto beimpractical.Itis more
commonto rundetailedsitesurveys atafewlocationsandusetheresultsto setupdeploymentguidelinesfor
theremainingsites.
•Beawareofmetal-linedfirewalls,steelpillars,andothermetallicsurfaces.RF signalscanreflectoffmetal
surfaces,whichcancauseunexpectedcoveragepatterns.Alsowatchoutfor objectsthatcanblockor reflect
signals,suchas mirrors,plants,walls,steeldoors,elevator shafts,andbathroom stalls.
Ø·¹¸»®Ù¿·²
Ô±©»®Ù¿·²
øÞ·®¼Ž-Û§»Ê·»©÷
п¬½¸
ß²¬»²²¿-
Ø·
¹
¸»®Ù¿·²

DeploymentGuide 17
PLANNING
•ThequalityandperformanceofaWi-Finetworkisafunctionofthe signal-to-noiseratio.To avoidnoiseissues,
checktheareafor commonnoisegeneratorssuchas industrialmicrowaveovens,wireless video cameras,
cordless phonesandheadsets,andBluetoothdevices.Suchdevicesespeciallycauseinterferenceinthe2.4GHz
spectrum.
•Planappropriatelyforhighceilings.Withanomnidirectionalantenna,thedownwardcoverageis notgreat.In
normalofficespace,theceilingsrarelyexceed15feet, so thisissuedoesnotcomeupveryoften.In
environmentssuchas warehouses,whereceilingscanbeupto 50 feethigh,ceiling-mountedaccesspointsare
notoptimal.Itisbestto deploythemonnon-metallicwallsabout10 feet to15 feet abovethe floor.Ifthisis
notfeasible,usingpatchantennas canhelp directthe RF energydownward.
•Inhigh-densityor high-capacityenvironments,placingaccess pointsonexteriorwallsallowsfor agreater
numberofcellsinsidethe buildingandmorecapacity.Inotherdeployments,itisrecommendedthattheouter
access pointsbenofartherthan30 feetfrom theexteriorwallstoensurecoverage.
Preparingthe WiredNetworkforWireless
Oneoftheadvantagesofmovingto anAerohiveWLANis thatyoudonothaveto makechangestothe underlying
network,suchas puttingcontrollersintowiringclosets.Thiscansaveyouconsiderabletimeandeffortduring
installation.However,somenetworkchangesmightmakesensefor somedeployments.For example, youmight
wanttoadd additionalVLANs or securitysettings.This sectioncoversafew ofthe morecommonconsiderations
thatITdepartmentsarehandling.
•802.1QVLANs
HiveAPscansegmentusersintoVLANsifanadministrator wants.This decisioncanbemadebyareturned
RADIUSattributeoritcanbeconfiguredas partofauser profileorSSID.Enterprisesoften setupseparate
VLANsforwirelessandguestaccess,sothatthis trafficis segmentedfrom therestofthe network;however,it
ispossibletosetupanynumberofotherVLANs for furthersegmentation.(For anexample,see "Example9:
CreatingWLANPolicies"onpage126.)
•Firewalls
Dependingontheenvironment,enterprisesmightusefirewallsto segmentwiredandwirelessdata.Thiscanbe
implementedas adiscretefirewall enforcingtrafficbetween VLANs or between ports,oryoumightusethe
statefulfirewall thatis integratedinHiveOS(theHiveAP operatingsystem).
•RADIUSAuthentication
IfRADIUSauthenticationis required,thenaRADIUSservermustbeinplaceandbeabletosupportthe
necessaryprotocolsforwireless—oftencalled802.1XEAP types:PEAP,EAP-TLS,EAP-TTLS,WEP8021.x(dynamic
WEP),LEAP,EAP-FAST,andcaptivewebportalauthenticationusingCHAP.
•DNSandDHCPConfiguration
IfyouusetheAerohiveHiveManager(seethesectionon "OperationalConsiderations"onpage18),itispossible
toinstall HiveAPswithoutanyextraconfigurationandtheywill beabletocontactHiveManagerfor
management.IftheHiveAPsarelinkedtoadifferentsubnetthantheone towhichHiveManagerisconnected,
thenyoucanseteitheraDHCPoptionor DNSentrytogivethe locationofHiveManager (see "How HiveAPs
ConnecttoHiveManager"onpage95).

Chapter1Preparing foraWLANDeployment
18 Aerohive
OPERATIONAL CONSIDERATIONS
To makeyourWLANdeploymentprocess as smoothaspossible,youshould considermorethanjustthedistribution
andinstallationofaccess points.Youshould also considerhowyouwill manage,optimize,andtroubleshootyour
WLANafterdeployment.
Tuning
ApproachbuildinganenterpriseWLANwiththe samelife-cycleapproachyouwould applytoawirednetwork.After
youdeploythe WLAN,revisitkeynetworkengineeringprocessesto accountforchangesinthe environment.Watch
for access pointsthatareoverloadedorareunderutilized,andcheckfor potentialdeadspots.Furthermore,be
awarethatthe likelypointsoffailurecanchangeas the environmentchanges.For example, aneighboringbusiness
mightinstallaccess pointsthatcauseRF interferenceonyour network.Youshould scheduleandperform periodic
walkthroughstoensurethatthedesigngoalsofthe wireless networkcontinuetobemet.TheAerohiveHiveManager
providesquickviewsintohow thenetworkisbehaving,whichHiveAPsarethemostheavilyloaded,andwhichhave
themostclients.
Troubleshooting
SomeofthemostcommonissuesthatariseafterdeployinganewwirelessnetworkareRF interference,RADIUS
issues,anddesktopclientissues.The firststepintroubleshootingistolookatlogsandusedebugcommands.
AerohiveoffersanextensivesetofeventmonitoringanddebugtoolsthatyoucanusethroughHiveManager,the
Aerohivenetworkmanagementsystem.For additionaltroubleshooting,particularlyofclientsor neighboring
networks,Aerohiverecommendstwo tools:EtherealWarehouser(http://www.wireshark.org/)andAirMagnet
LaptopAnalyzer(http://www.airmagnet.com/products/laptop.htm).
Management
CurrentWi-Finetworkstypicallyspananentirecompanyandhavecomplexsecuritypolicies.Fortunately,the
HiveManager NetworkManagementSystem makesitsimpleto managelargenetworksfromacentrallocation.It
providesasinglecentralizedmanagementinstancefor theentirewireless network.WhilemanagedHiveAPscan
operatewithoutHiveManager,itsimplifiestheprovisioningofglobalpolicy managementandcentralized
configurationandmonitoring.HiveManager lowersoperatingcostsbyspeedingdeployment,configuration,and
monitoringofthewirelessnetwork.
Managingfaultsandalarmsis criticalto maintaininguptime.YoucanviewandmanageeventsthroughHiveManager
logging.Optionally,youcanuseathird-partytoolsuchasHPOpenView.
HiveManagermakesiteasytomonitor andtroubleshootHiveAPswithinaWLANinfrastructure.HiveManagercan
importhierarchicalmapviewsthatrepresentthephysicallocationofthenetwork,from theperspectiveofthe
entireworld downtothe floorlevel.
Deploying withConfidence
Movingalargeenterprise—orevenasmall one—to aWLANfor theveryfirsttimeneednotbedaunting.Ifyouhave
moderateexperiencewithLANdeploymentsofothertypesandyouhavetakentimetogetanswerstotheimportant
questionsthatwillaffectthe networkdataload,youhaveeveryprerequisitefor success.Thebottom line is to
remember totakestockofyourprojectbeforeyoubegintowardagainstunforeseencostsandperformance
bottlenecks.Ifyouhaveconsideredtheissuesandguidelinespresentedhere,youarenotfarawayfromasuccessful
AerohiveWLANdeployment.

DeploymentGuide 19
BASIC WI-FICONCEPTS
BASIC WI-FICONCEPTS
Thegoalofthis sectionis to providesomebackgroundonWi-Fipropagationandhowto layoutawireless network.
WhileRF (radiofrequency)engineeringis arathercomplicatedscience,thissectionprovidesasimpleoverview on
thebasicsofWi-Fipropagationandchannellayoutthatyouneedtobeabletoinstall anenterpriseWLAN.
Thefirstthingtoknowis thatWi-Fiisforgiving.Wi-Fitendstotransmitabitfartherthanyouexpect,andevenin
casesofinterference, ittendstojustwork.This canbebothablessingandacurse.Itisablessingbecausepeople
will likelyhaveaccess tothenetwork,anditis acursebecauseyour overall performancemightbesuboptimal
withoutobvioussymptoms,likelackofconnectivity.Understandingthebasicspresentedinthis sectionwill help
ensureahighperformancelayout.
Thefirstconceptto understandis signalstrengthandhowitrelatestothroughput.Radio power ismeasuredindBm
(decibelsrelativetoonemilliwatt) where0dBm=1milliwatt,butdecibelsincreaseusingalog10 mathfunction.
Ratherthandustingoff yourold mathbooksandpullingoutyourcalculator,lookatthe dBm-to-milliwattconverter
thatappearsbelow.Often inWi-Fi,dBm andmilliwatts(mW)—andmicrowatts( W)—areusedinterchangeably.The
followingtableconvertsbetweenthetwounitsofmeasurement.
InRF,thereisalsoarelativemeasurementthatyoucanusetocomparetwonumbers.This measurementissimply
dB(withoutthe"m").Toseehowthis conceptis applied,considerhow radio signalpropagationchangesovera
distanceandhow itcanbeaffected. Figure3onpage20 showssignalstrengthoverdistanceas acurvethathas the
bestsignalstrengthcloserto theaccesspoint.Italso showsnoise.Ingeneral,noiseis consideredtobelow-level
backgroundRF signalsthatcaninterferewithaWLAN.ThisnoisetendstobethegarbledbackgroundRF thatcomes
fromeverythingfromthesunandstarsto man-madeinterferingdeviceslikeBluetoothheadsets.Itisimpossibleto
blockoutnoiseanditshould notbeattempted.Thislowlevelofbackgroundnoiseiscalledthe"noisefloor".
dBm-to-milliwatt
20 dBm=100 mW 2dBm =1.6mW
15 dBm=32 mW 1dBm =1.3mW
10 dBm=10 mW 0dBm =1.0mW
5dBm =3.2mW -1dBm =794 µW
4dBm =2.5mW -5dBm =316 µW
3dBm =2.0mW -10dBm =100 µW