Dell PowerConnect W-Airwave W-Airwave 7.1 User Guide - Page 7

Dell PowerConnect W AirWave 7.1

|

User Guide

|

7

Using RAPIDS Rules with Additional AWMS Functions

..................................................

210

Score Override

................................................................................................................................

210

Audit Log

..........................................................................................................................................

212

Additional Rogue Device Resources

...........................................................................................

212

Additional Security-Related Topics

....................................................................................

212

Chapter 8

Performing Daily Administration in AWMS

.................................................................

213

Overview of Triggers and Alerts

..........................................................................................

213

Viewing Triggers

.....................................................................................................................

213

Creating New Triggers

..........................................................................................................

214

Setting Triggers for Devices

.........................................................................................

216

Setting Triggers for Radios

...........................................................................................

218

Setting Triggers for Discovery

.....................................................................................

220

Setting Triggers for Users

.............................................................................................

221

Setting Triggers for RADIUS Authentication Issues

................................................

222

Setting Triggers for IDS Events

....................................................................................

223

Setting Triggers for AWMS Health

.............................................................................

225

Delivering Triggered Alerts

...................................................................................................

225

Viewing Alerts

.........................................................................................................................

226

Responding to Alerts

..............................................................................................................

227

Monitoring and Supporting WLAN Users

...................................................................................

228

Overview of the Users Pages

...............................................................................................

228

Monitoring WLAN Users With the Users > Connected and Users > All Pages

...........

229

Supporting Guest WLAN Users With the Users > Guest Users Page

...........................

231

Supporting Users on Thin AP Networks With the Users > Tags Page

..........................

233

Evaluating and Diagnosing User Status and Issues

.................................................................

234

Evaluating User Status with the Users > User Detail Page

.............................................

234

Using the Deauthenticate User Feature

.............................................................................

235

Evaluating User Status with the Users > Diagnostics Page

...........................................

235

Introduction and Overview of the Diagnostics Page

...............................................

235

Supporting AWMS Stations with the Master Console

.............................................................

239

Adding a Managed AMP with the Master Console

..........................................................

239

Monitoring and Supporting AWMS with the Home Pages

......................................................

241

Monitoring AWMS with the Home > Overview Page

.......................................................

241

Viewing and Updating License Information with the Home > License Page

...............

245

Searching AWMS with the Home > Search Page

............................................................

246

Accessing AWMS Documentation with the Home > Documentation Page

................

247

Configuring Your Own User Information with the Home > User Info Page

..................

248

Monitoring and Supporting AWMS with the System Pages

...................................................

249

Using the System > Status Page

..........................................................................................

251

Using the System > Event Logs Page

..................................................................................

252

Using the System > Configuration Change Jobs Page

....................................................

253

Using the System > Performance Page

..............................................................................

254

Upgrading AWMS

..........................................................................................................................

256

Upgrade Instructions

.............................................................................................................

256

Upgrading Without Internet Access

...................................................................................

256

Backing Up AWMS

........................................................................................................................

256

Overview of Backups

.............................................................................................................

256

Viewing and Downloading Backups

...................................................................................

257

Running Backup on Demand

................................................................................................

257

Restoring from a Backup

.......................................................................................................

257

AWMS Failover

...............................................................................................................................

258

Navigation Section of AWMS Failover

.......................................................................

258

Adding Watched AWMS Stations

.......................................................................................

258

Section	Page
Dell PowerConnect W AirWave Version 7.1	1
Contents	3
Preface	11
Document Organization	11
Notice Icons	12
Contacting Support	12
Introduction	13
AWMS—A Unified Wireless Network Command Center	13
AirWave Management Platform™	13
Dell PowerConnect W Configuration	14
VisualRF™	14
RAPIDS™	14
Master Console and Failover	15
Integrating AWMS into the Network and Organizational Hierarchy	15
Installing AWMS	17
AWMS Hardware Requirements and Installation Media	17
Installing Linux CentOS 5 (Phase 1)	17
Installing AWMS Software (Phase 2)	18
Getting Started	18
Step 1: Configuring Date and Time, Checking for Prior Installations	18
Date and Time	18
Previous AWMS Installations	19
Step 2: Installing AWMS Software, Including AWMS	19
Step 3: Checking the AWMS Installation	19
Step 4: Assigning an IP Address to the AWMS System	19
Step 5: Naming the AWMS Network Administration System	20
Step 6: Assigning a Host Name to the AWMS	20
Step 7: Changing the Default Root Password	21
Completing the Installation	21
Configuring and Mapping Port Usage for AWMS	21
AWMS Navigation Basics	22
Status Section	23
Navigation Section	23
Activity Section	25
Help Links in the GUI	26
Common List Settings	26
Buttons and Icons	27
Getting Started with AWMS	29
Completing Initial Login	29
Configuring AWMS	31
Before You Begin	31
Formatting the Top Header	31
Customizing Columns in Lists	33
Resetting Pagination Records	34
Using the Pagination Widget	34
Using CSV Export for Lists and Reports	35
Defining Graph Display Preferences	35
Customizing the Overview Subtab Display	36
Customized Search	38
Setting Severe Alert Warning Behavior	38
Defining General AWMS Server Settings	39
What Next?	46
Defining AWMS Network Settings	47
What Next?	48
Creating AWMS Users	48
What Next?	50
Creating AWMS User Roles	50
What Next?	52
Enabling AWMS to Manage Your Devices	52
Configuring Communication Settings for Discovered Devices	53
Loading Device Firmware onto AWMS (Optional)	58
Overview of the Device Setup > Upload Files Page	58
Loading Firmware Files to AWMS	59
Using Web Auth Bundles in AWMS	60
Configuring TACACS+ and RADIUS Authentication	62
Configuring TACACS+ Authentication	62
What Next?	63
Configuring RADIUS Authentication and Authorization	64
Integrating a RADIUS Accounting Server	65
What Next?	65
Configuring Cisco WLSE and WLSE Rogue Scanning	66
Introduction to Cisco WLSE	66
Configuring WLSE Initially in AWMS	66
Adding an ACS Server for WLSE	67
Enabling Rogue Alerts for Cisco WLSE	67
Configuring WLSE to Communicate with APs	67
Discovering Devices	67
Managing Devices	67
Inventory Reporting	68
Defining Access	68
Grouping	68
Configuring IOS APs for WDS Participation	68
WDS Participation	68
Primary or Secondary WDS	68
Configuring ACS for WDS Authentication	69
Configuring Cisco WLSE Rogue Scanning	69
What Next?	70
Configuring ACS Servers	71
What Next?	72
Integrating AWMS with an Existing Network Management Solution (NMS)	73
What Next?	74
Auditing PCI Compliance on the Network	74
Introduction to PCI Requirements	74
PCI Auditing in the AWMS Interface	75
Enabling or Disabling PCI Auditing	76
What Next?	77
Deploying WMS Offload	77
Overview of WMS Offload in AWMS	77
General Configuration Tasks Supporting WMS Offload in AWMS	78
Additional Information Supporting WMS Offload	78
Configuring and Using Device Groups in AWMS	79
AWMS Group Overview	80
Viewing All Defined Device Groups	81
Editing Columns on the Groups > List Page and Additional Pages	82
Configuring Basic Group Settings	83
What Next?	90
Configuring Group Security Settings	91
Configuring Group SSIDs and VLANs	94
Adding and Configuring Group AAA Servers	98
Configuring Radio Settings for Device Groups	100
An Overview of Cisco WLC Configuration	106
Accessing Cisco WLC Configuration	106
Navigating Cisco WLC Configuration	106
Configuring WLANs for Cisco WLC Devices	107
Defining and Configuring LWAPP AP Groups for Cisco Devices	109
Viewing and Creating AP Groups	109
Configuring Cisco Controller Settings	110
Configuring Wireless Parameters for Cisco Controllers	110
Configuring Security Parameters and Functions	110
Configuring Management Settings for Cisco	111
Configuring Group PTMP/WiMAX Settings	112
Configuring Proxim Mesh Radio Settings	116
Configuring Group MAC Access Control Lists	118
Specifying Minimum Firmware Versions for APs in a Group	119
Comparing Device Groups	120
Deleting a Group	121
Changing Multiple Group Configurations	121
Modifying Multiple Devices	122
Using Global Groups for Group Configuration	125
Discovering, Adding, and Managing Devices	127
Device Discovery Overview	127
Discovering and Adding Devices	127
SNMP/HTTP Scanning	128
Adding Networks for SNMP/HTTP Scanning	128
Adding Credentials for SNMP/HTTP Scanning	129
Defining a SNMP/HTTP Scan Set	130
Running a Scan Set	131
What Next?	133
Enabling Cisco Discovery Protocol (CDP)	134
Assigning Devices to AWMS from APs/Devices > New Page	134
Manually Adding Individual Devices	136
Adding Devices with the Device Setup > Add Page	136
Adding Multiple Devices from a CSV File	139
Adding Universal Devices	140
Assigning Devices to the Ignored Page	141
Monitoring Devices	142
Viewing Device Monitoring Statistics	142
Understanding the APs/Devices > Monitor Pages for All Device Types	146
Monitoring Data Specific to Wireless Devices	148
Monitoring Data Specific to Wired Devices (Routers and Switches)	153
Understanding the APs/Devices > Interfaces Page	154
What Next?	155
Auditing Device Configuration	156
Using Device Folders (Optional)	157
Configuring and Managing Devices	158
Moving a Device from Monitor Only to Manage Read/Write Mode	158
Configuring AP Settings	159
Configuring Device Interfaces for Cisco Catalyst Switches	165
Configuring Cisco Router and Switch Interface Settings	169
Individual Device Support and Firmware Upgrades	169
Troubleshooting a Newly Discovered Device with Down Status	172
Creating and Using Templates	175
Group Templates	175
Supported Device Templates	175
Template Variables	176
Viewing and Adding Templates	177
Configuring General Template Files and Variables	181
Configuring General Templates	181
IOS Configuration File Template:	182
Device Configuration File on APs/Devices > Audit Configuration Page	182
Using Template Syntax	183
Using Directives to Eliminate Reporting of Configuration Mismatches	183
Ignore_and_do_not_push Command	183
Push_and_exclude Command	183
Using Conditional Variables in Templates	184
Using Substitution Variables in Templates	184
Using AP-Specific Variables	185
Configuring Cisco IOS Templates	186
Applying Startup-config Files	186
WDS Settings in Templates	186
SCP Required Settings in Templates	187
Supporting Multiple Radio Types via a Single IOS Template	187
Configuring Single and Dual-Radio APs via a Single IOS Template	188
Configuring Cisco Catalyst Switch Templates	188
Configuring Symbol Controller / HP WESM Templates	188
Configuring a Global Template	191
Using RAPIDS and Rogue Classification	195
Overview Tab	195
List	197
Viewing Ignored Rogue Devices	201
Using RAPIDS Workflow to Process Rogue Devices	201
RAPIDS Setup	202
Basic Configuration	202
Containment Options	203
Additional Settings	204
RAPIDS Rules	204
Controller Classification with WMS Offload	205
Device OUI Score	205
Rogue Device Threat Level	206
Viewing and Configuring RAPIDS Rules	206
Deleting or Editing a Rules	210
Recommended RAPIDS Rules	210
Using RAPIDS Rules with Additional AWMS Functions	210
Score Override	210
Audit Log	212
Additional Rogue Device Resources	212
Additional Security-Related Topics	212
Performing Daily Administration in AWMS	213
Overview of Triggers and Alerts	213
Viewing Triggers	213
Creating New Triggers	214
Setting Triggers for Devices	216
Setting Triggers for Radios	218
Setting Triggers for Discovery	220
Setting Triggers for Users	221
Setting Triggers for RADIUS Authentication Issues	222
Setting Triggers for IDS Events	223
Setting Triggers for AWMS Health	225
Delivering Triggered Alerts	225
Viewing Alerts	226
Responding to Alerts	227
Monitoring and Supporting WLAN Users	228
Overview of the Users Pages	228
Monitoring WLAN Users With the Users > Connected and Users > All Pages	229
Supporting Guest WLAN Users With the Users > Guest Users Page	231
Supporting Users on Thin AP Networks With the Users > Tags Page	233
Evaluating and Diagnosing User Status and Issues	234
Evaluating User Status with the Users > User Detail Page	234
Using the Deauthenticate User Feature	235
Evaluating User Status with the Users > Diagnostics Page	235
Introduction and Overview of the Diagnostics Page	235
Supporting AWMS Stations with the Master Console	239
Adding a Managed AMP with the Master Console	239
Monitoring and Supporting AWMS with the Home Pages	241
Monitoring AWMS with the Home > Overview Page	241
Viewing and Updating License Information with the Home > License Page	245
Searching AWMS with the Home > Search Page	246
Accessing AWMS Documentation with the Home > Documentation Page	247
Configuring Your Own User Information with the Home > User Info Page	248
Monitoring and Supporting AWMS with the System Pages	249
Using the System > Status Page	251
Using the System > Event Logs Page	252
Using the System > Configuration Change Jobs Page	253
Using the System > Performance Page	254
Upgrading AWMS	256
Upgrade Instructions	256
Upgrading Without Internet Access	256
Backing Up AWMS	256
Overview of Backups	256
Viewing and Downloading Backups	257
Running Backup on Demand	257
Restoring from a Backup	257
AWMS Failover	258
Navigation Section of AWMS Failover	258
Adding Watched AWMS Stations	258
Creating, Running, and Emailing Reports	261
Overview of AWMS Reports	261
Reports > Definitions Page Overview	261
Reports > Generated Page Overview	263
Using Daily Reports	264
Viewing Generated Reports	264
Using Custom Reports	265
Using the Capacity Planning Report	266
Using the Configuration Audit Report	267
Using the Device Summary Report	268
Using the Device Uptime Report	271
Using the IDS Events Report	272
Using the Inventory Report	273
Using the Memory and CPU Usage Report	274
Using the Network Usage Report	276
Using the New Rogue Devices Report	277
Using the New Users Report	280
Using the PCI Compliance Report	281
Using the Port Usage Report	282
Using the RADIUS Authentication Issues Report	284
Using the Rogue Containment Audit Report	284
Using the User Session Report	285
Defining Reports	289
Emailing and Exporting Reports	292
Emailing Reports in General Email Applications	292
Emailing Reports to Smarthost	292
Exporting Reports to XML or CSV	293
Transferring Reports Using FTP	293
Using the AWMS Helpdesk	295
AWMS Helpdesk Overview	295
Monitoring Incidents with Helpdesk	296
Creating a New Incident with Helpdesk	297
Creating New Snapshots or Incident Relationships	298
Using the Helpdesk Tab with an Existing Remedy Server	299
Package Management for AWMS	303
Yum for AWMS	303
Third-Party Security Integration for AWMS	305
Bluesocket Integration	305
Bluesocket Configuration	305
ReefEdge Integration	305
ReefEdge Configuration	306
HP ProCurve 700wl Series Secure Access Controllers Integration	306
Example Network Configuration	306
HP ProCurve 700wl Series Configuration	306
Access Point Notes	309
Resetting Cisco (VxWorks) Access Points	309
Connecting to the AP	309
Determining the Boot-Block Version	310
Resetting the AP (for Boot-Block Versions from 1.02 to 11.06)	310
Resetting the AP (for Boot-Block Versions 11.07 and Higher)	310
Cisco IOS Dual Radio Template	311
Speed Issues Related to Cisco IOS Firmware Upgrades	312
AWMS Firmware Upgrade Process	312
Initiating a Support Connection	315
Network Requirements	315
Procedure	315
Cisco Clean Access Integration (Perfigo)	317
Prerequisites for Integrating AWMS with Cisco Clean Access	317
Adding AWMS as RADIUS Accounting Server	317
Configuring Data in Accounting Packets	317
HP Insight Install Instructions for AWMS Servers	319
Installing AWMS on VMware ESX (3i v. 3.5)	321
Creating a New Virtual Machine to Run AWMS	321
Installing AWMS on the Virtual Machine	321
AWMS Post-Installation Issues on VMware	322
Third-Party Copyright Information	323
Packages	323
Net::IP:	323
Net-SNMP:	323
Crypt::DES perl module (used by Net::SNMP):	326
Perl-Net-IP:	327
Berkeley DB 1.85:	327
SWFObject v. 1.5:	328
mod_auth_tacacs - TACACS+ authentication module:	328

Dell PowerConnect W-Airwave W-Airwave 7.1 User Guide - Page 7

Performing Daily Administration in AWMS

Page 7 highlights