Arista C-250 User manual

Quick Start Guide
C-250 Access Point
C-260 Access Point
Arista Networks
www.arista.com
DOC-03846-03

ii Quick Start Guide: Access Point
© Copyright 2020 Arista Networks, Inc. The information contained herein is subject to change without notice. Arista Networks
and the Arista logo are trademarks of Arista Networks, Inc in the United States and other countries. Other product or service
names may be trademarks or service marks of others.
Headquarters
5453 Great America Parkway
Santa Clara, CA 95054
USA
408 547-5500
www.arista.com
Support
408547-5502
866 476-0000
[e-mail]
Sales
408 547-5501
866 497-0000
[email protected]

Contents
About This Guide............................................................................................................3
Package Content.............................................................................................................4
Access Point Overview..................................................................................................6
Front Panel....................................................................................................................................................6
Rear Panel....................................................................................................................................................7
Side Panel.....................................................................................................................................................8
Install the Access Point................................................................................................10
Ceiling Mount the Access Point..................................................................................................................10
Wall Mount the Access Point......................................................................................................................11
Power the Access Point On.........................................................................................................................14
Using the C-250 with Power Adapter..........................................................................................................14
Connect the Access Point to the Network...................................................................................................14
Connect the Access Point using PoE..........................................................................................................15
Access Point Troubleshooting.....................................................................................16
Appendix A: AP-Server Mutual Authentication .........................................................17
Quick Start Guide: Access Pointii

AboutThis Guide
This installation guide explains how to deploy the C-250 or C-260 access point (AP).
Important: Please read the EULA before installing the access point (AP).You can download and read
the EULA from https://www.arista.com/en/support/product-documentation.
Installing theAP constitutes your acceptance of the terms and conditions of the EULA mentioned above.
Intended Audience
This guide can be referred by anyone who wants to install and configure the access point.
Document Overview
This guide contains the following chapters:
•Package Content on page 4
•Access Point Overview on page 6
•Install the Access Point on page 10
•Access Point Troubleshooting on page 16
Note: All instances of the term 'server' in this document refer to the Wireless Manager, unless the server
name or type is explicitly stated.
Product and Documentation Updates
To receive important news on product updates, please visit our website at
https://www.arista.com/en/support/product-documentation.We continuously enhance our product documentation
based on customer feedback
This telecommunication equipment conforms to the technical standards or requirements of NBTC.
3

Package Content
The access point (AP) package must contain the components shown in the following figure.
Figure 1: Package Components
Table 1: Labels: Package Components
DescriptionLabel
C-250 or C-260 Access Point1
15/16" (24 mm) Mounting Bracket2
Important: The MAC address of theAP is printed on a label at the bottom of the product and the packaging
box. Note down the MAC address before mounting the AP on the ceiling or at a location that is difficult
to access.
Quick Start Guide: Access Point4

If the package is not complete, please contact the Arista Networks Technical Support Team at
support-wifi@arista.com or return the package to the vendor or dealer where you purchased the product.
5

Access Point Overview
C-250 or C-260 is a tri-radio 802.11ax access point.
This chapter provides an overview of the C-250 or C-260 access point (AP) and describes:
•Front Panel on page 6.
•Rear Panel on page 7
•Side Panel on page 8.
Front Panel
The front panel of the C-250 or C-260 has 6 LEDs that indicate the status of various device functions.
Figure 2: Front Panel LEDs
Table 2: Labels: Front Panel LEDs
DescriptionLabel
Power1
2.4 GHz Radio2
5 GHz Radio3
Third Radio4
LAN15
LAN26
Power LED: The following table describes the Power LED states.
Quick Start Guide: Access Point6

Table 3: Power LED States Description
OrangeGreen
Running at reduced capabilityRunning at full capabilitySolid
Did not receive an IP addressReceived IP address, but not connected to the serverBlinking
Reduced capability indicates that theAP is getting lower than the required maximum power from the PoE switch,
i.e., 802.3at instead of 802.3bt.
LAN1 LED: ON when the corresponding interface is up.
LAN2LED: ON when the corresponding interface is up and either wired guest or link aggregation is configured.
Radio LEDs: ON when the corresponding radio is operational.
Rear Panel
The rear panel of the AP has its DC power port and 802.3bt compliant PoE LAN ports to power the device and
connect it to a wired LAN.
Figure 3: Rear Panel
Table 4: Labels: Rear Panel
DescriptionLabel
LAN11
LAN22
Power3
The first of the following tables shows port details for C-250, and the second one shows port details for C-260.
7

Table 5: C-250 Port Details
Speed/ProtocolConnectorTypeDescriptionPort
N/A5.5 mm overall diameter / 2.1 mm
center pinhole
12V DCPower
100/1000 Mbps / 2.5 Gbps
Ethernet
RJ-452.5 Gigabit Ethernet with 802.3bt
compliant PoE
LAN 1
100/1000 Mbps / 2.5 Gbps
Ethernet
RJ-452.5 Gigabit Ethernet with 802.3bt
compliant PoE
LAN 2
Table 6: C-260 Port Details
Speed/ProtocolConnectorTypeDescriptionPort
N/A5.5 mm overall diameter / 2.1 mm
center pinhole
12V DCPower
100/1000 Mbps / 2.5 /5 Gbps
Ethernet
RJ-455 Gigabit Ethernet with 802.3bt
compliant PoE
LAN 1
100/1000 Mbps / 2.5/5 Gbps
Ethernet
RJ-455 Gigabit Ethernet with 802.3bt
compliant PoE
LAN 2
Side Panel
The side panel of the AP has a console port, a USB port, and a Reset pin.
Figure 4: Side Panel
Quick Start Guide: Access Point8

Table 7: Labels: Side Panel
DescriptionLabel
Reset1
USB2
Console3
Speed/ProtocolConnector TypeDescriptionPort
RJ-45
Establish ‘config shell’terminal
session via serial connection
Console • RS 232 Serial (115200 bits per
second)
• Data bits:8; Stop bits: 1
• Parity: None
• Flow Control: None
Future UseUSBUSB 2.0 portUSB
N/APinhole push button
Reset to factory default settings
port. Hold down and power cycle
the device to reset.
Reset
When you reset the AP, the following settings are reset:
• Config shell password is reset to config.
• Server discovery value is erased and changed to the default, redirector.online.spectraguard.net (primary)
and wifi-security-server (secondary).
• All the VLAN configurations are lost.
• If a static IP is configured on the AP, the IP address is erased and DHCP mode is set. The factory default IP
address of the AP is 169.254.11.74.
9

Install the Access Point
This chapter contains the stepwise procedure to install the access point (AP).
Zero-Configuration of the Access Point
Zero-configuration is supported under the following conditions:
• The device is in AP mode with background scanning on and no SSID configured.
• A DNS entry wifi-security-server is set up on all the DNS servers. This entry should point to the IP address
of the server. By default, theAP looks for the DNS entry wifi-security-server.
• The AP is on a subnet that is DHCP enabled.
Important: If the AP is on a network segment that is separated from the server by a firewall, you must
first open port 3851 for bidirectional User Datagram Protocol (UDP) and Transport Control Protocol
(TCP) traffic on that firewall. This port number is assigned toArista Networks. Zero-configuration cannot
work if multiple APs are set up to connect to multiple servers. In this case, the APs must be configured
manually. For details on how to configure an AP manually, see the Access Point Configuration Guide on
our website at https://www.arista.com/en/support/product-documentation .
Take a configured AP; that is, ensure that a static IP is assigned to the AP or the settings have been changed for
DHCP. Note the MAC address and the IP address of theAP in a safe place before it is installed in a hard-to-reach
location. The MAC address of the AP is printed on a label at the bottom of the product.
The steps to install the AP with no configuration (zero-configuration) are as follows:
1. Ceiling Mount the Access Point on page 10 or Wall Mount the Access Point on page 11.
2. Connect the Access Point to the Network on page 14.
3. Power the Access Point On on page 14.
Ceiling Mount the Access Point
Mounting the access point (AP) on the ceiling consists of the following steps:
1. Affix the bracket to the T -grid: Use the mounting bracket to install theAP on the ceiling. Fix the bracket
to the T-grid and rotate the bracket so that it snaps on the T-grid. The bracket is now parallel to an arm of
the T-grid. Ensure that the bracket is properly snapped to the T-grid, as shown below.
Quick Start Guide: Access Point10

2. Mounting C-250 on the bracket: Place the first mounting post on the rear-side of the AP on to the lower
notch of the bracket. Rotate theAP such that the center mounting post fits in to the center notch on the bracket.
Ensure that all the mounting posts on the rear-side of theAP are snapped in to the respective notches on the
bracket. The mounting posts now properly fit in the respective notches of the bracket and theAP is mounted
properly.
Mounting Instructions using the Silhouette/Interlude Bracket Mount:The Silhouette/Interlude mounting
bracket is not a part of the standard package and must be procured separately. The mounting instructions for
the Silhouette/Interlude Bracket Mount are similar to the Standard Package Content's mounting instructions.
Note: You should label the APs using MAC addresses or your own convention. For example, use
serial numbers, so that you can easily identify the APs.
Wall Mount the Access Point
Note: The wall mounting accessory SKU can be ordered and purchased separately.
Mounting the access point (AP) on a wall consists of the following steps:
11

1. Drill four mounting holes in the wall, as shown below.
Table 8: Labels: Dimensions to drill holes
DescriptionLabel
46 mm1
83.4 mm2
Diameter: 6.5 mm, Depth: 30 mm3
2. Insert four anchors.
3. Affix the mounting bracket on the wall.
Quick Start Guide: Access Point12

4. Attach the AP to the mounting bracket. Pull the release key outward. Attach the AP stubs to the bracket
holder, ensuring a firm fit.
5. Once attached, push in the release key to lock the hooks and make sure all the hooks are locked in place.
13

6. Fasten the release key screw with a tamper-resistant T10 torx screwdriver to lock the AP to the bracket.
Power the Access Point On
You can power the access point (AP) on by plugging one end of the Ethernet cable into the PoE switch or injector
and the other end into the Ethernet/PoE port on the AP. Ensure the PoE source you are using is turned on.
As an alternative to PoE, you can insert a compatible power adaptor plug into an AC power outlet and the other
end into the power input port on theAP.
Note: If you are not using PoE, ensure that you use only an AC power adaptor supported by theAP.
Using the C-250 with Power Adapter
To power up the device with power adapter, perform the following steps:
1. Plug the power cable into the DC power receptacle at the rear of the device.
2. Plug the other end of the power cable into an 110V~240V 50/60 HzAC power source.
3. Wait until the device is ready. Refer to the LED status table.
Connect the Access Point to the Network
To connect the access point (AP) to the network, perform the following steps:
1. Ensure that a DHCP server is available on the network to enable network configuration of the AP.
2. Add the DNS entry wifi-security-server on all DNS servers. This entry must point to the IP address of the
server.
3. Ensure that DHCP is running on the subnet to which the AP is connected.
4. Check the LEDs on the AP to ensure that it is connected to the server.
5. Log on to the server using ssh and run the get sensor list command.
You will see a list of all Arista devices that are recognized by the server. Single Sign-On users can go to the
Monitor tab in CloudVision WiFi and check whether the device is visible under the Monitor tab.
The AP is connected and operational.
Quick Start Guide: Access Point14

Note: If zero configuration fails, the AP must be configured manually.
Important: If DHCP is not enabled on a subnet, the AP cannot connect to that subnet with
zero-configuration. If the DNS entry is not present on the DNS servers, or if you do not have the DHCP
server running on the subnet, you must manually configure theAP. For details on configuring an AP
manually, see the Access Point Configuration guide on our website at
https://www.arista.com/en/support/product-documentation .
Connect the Access Point using PoE
If you are using a PoE injector, make sure the data connection is plugged into a suitable switch port with proper
network connectivity.
For PoE port details, see the Rear Panel on page 7 section.
15

Access PointTroubleshooting
The table below lists some of the troubleshooting guidelines for the access point (AP).
SolutionProblem
Ensure that the DHCP server is on and available on theVLAN/subnet
to which the AP is connected. If the AP still fails to get a valid IP
address, you can reboot it to see if the problem is resolved.
The AP did not receive a valid IP address via the DHCP.
Unable to connect to the server. •Ensure that the server is running and is reachable from the network
to which the AP is connected. If a firewall or a router hasAccess
Control Lists (ACLs) enabled between theAP and the server, ensure
that traffic on UDP port 3851 is allowed.
•Use the IP-based server discovery method and ensure that you have
correctly entered the DNS name, wifi-security-server , on the DNS
server.
• Ensure that the DNS server IP addresses are either correctly
configured, or are provided by the DHCP server.
• The AP might fail to authenticate with the server. In this case, an
'Authentication failed ' event is raised on the server. Refer to the
event for recommended action.
The AP has encountered a problem. •If you are usingArista Cloud Services, then open the TCP port 443
(SSL). If you have an on-premises installation, then open UDP port
3851 and port 80.
• If you are using a Proxy, Web Accelerator, or URL Content Filter
between the AP and the Internet, ensure that the settings allow
communication between the AP and Arista Cloud Services.
• If your configuration requires you to specify an exact IP address
or IP range for Arista Cloud Services, please contact
support-wifi@arista.com.
Quick Start Guide: Access Point16

Appendix A: AP-Server Mutual
Authentication
TheAP-server communication begins with a mutual authentication step in which theAP and server authenticate
each other using a shared secret. TheAP-server communication takes place only if this authentication succeeds.
After the authentication succeeds, a session key is generated. From this point on, all communication between
the AP and server is encrypted using the session key.
TheAP and server are shipped with the same default value of the shared secret. Both the server and the AP have
CLI commands to change the shared secret.
Note: After the shared secret (communication key) is changed on the server, allAPs connected to the
server will automatically be set up to use the new communication key.You must manually configure the
new communication key on anAP if it is not connected to the server when the key is changed on the
server.
Note: Although the server is backward compatible—that is, older version APs can connect to a newer
version server—this is not recommended.
17