Aruba Bootcamp – Mesh
y l n O l Use
a n r e t In
y l n O e s U l a n r e t In
CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved
19-1
Aruba Bootcamp – Mesh
y l n O l Use
a n r e t In
y l n O e s U l a n r e t In
CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved
19-2
Aruba Bootcamp – Mesh
y l n O l Use
a n r e t In
y l n O e s U l a n r e t In
Mesh solutions can be used indoors or outdoors to provide connectivity where there may not be a wired infrastructure deployed in a facility.
CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved
19-3
Aruba Bootcamp – Mesh
y l n O l Use
a n r e t In
y l n O e s U l a n r e t In
A group of APs constructing a mesh environment is called a Mesh Cluster. Two basic components comprise a mesh cluster. A Mesh Portal (MPP) is a cluster component located on the controller of the cluster. It has wired connectivity to the controller. All of the traffic in the cluster will pass through the MPP. Mesh Points (MP) are distributed throughout the environment where an infrastructure is needed. Many MPs may associate with the MPP, but they all send there traffic through the MPP to reach the controller.
CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved
19-4
Aruba Bootcamp – Mesh
y l n O l Use
a n r e t In
y l n O e s U l a n r e t In
The Mesh Point and Mesh Portal may serve clients, either wired or wireless, depending upon your AP model. Generally, the Mesh link is configured on the 5GHz radio and client access is on the 2.4GHz radio as the 5GHz spectrum has more channels and, generally, cleaner air. While clients can run on the same radio as the Mesh link, Best Practive states that this NOT be done. The Mesh link should be reserved for Mesh communication only.
CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved
19-5
Aruba Bootcamp – Mesh
y l n O l Use
a n r e t In
y l n O e s U l a n r e t In
Mesh Points may daisy chain to extend the reach of the wireless environment. You can specify that each hop must encrypt the data through the mesh profiles described later in this chapter. This of course helps to maintain user traffic confidentiality as it is transmitted through the air.
CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved
19-6
Aruba Bootcamp – Mesh
y l n O l Use
a n r e t In
y l n O e s U l a n r e t In
Because all of the APs within the Mesh Cluster must by definition operate on the same radio frequency, the question arises as to “What channel” The Mesh Portal will select a channel based upon its ARM measurements. The selected channel will then be used by all of the Mesh Points in the cluster.
CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved
19-7
Aruba Bootcamp – Mesh
y l n O l Use
a n r e t In
y l n O e s U l a n r e t In
You can see through the CLI and the WebUI what the topology looks like. This shows the APs within the cluster and their relationship to each other using the CLI. A WebUI example is shown later in this chapter.
CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved
19-8
Aruba Bootcamp – Mesh
y l n O l Use
a n r e t In
y l n O e s U l a n r e t In
There are many things to consider when constructing a Mesh Network including factors such as how many hops will be required from the Mesh Portal to the farthest Mesh Point. Please reference the Aruba OS User Guide for details on these and other factors.
CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved
19-9
Aruba Bootcamp – Mesh
y l n O l Use
a n r e t In
y l n O e s U l a n r e t In
Multiple clusters may be desired to service geographically disperse areas. But they might be needed to segment the cluster to improve the overall performance of the cluster. The more APs contained in a cluster translates to less overall bandwidth. Therefore multiple clusters might help reduce the number of APs in a cluster and improve performance.
CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved
19-10
Aruba Bootcamp – Mesh
y l n O l Use
a n r e t In
y l n O e s U l a n r e t In
Here is a simple cluster with one portal and two mesh points. This is a valid configuration.
CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved
19-11
Aruba Bootcamp – Mesh
y l n O l Use
a n r e t In
y l n O e s U l a n r e t In
You can provision more than one cluster as discussed earlier in this chapter. Note that Cluster1 has two Mesh Portals to provide redundancy in the cluster.
CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved
19-12
Aruba Bootcamp – Mesh
y l n O l Use
a n r e t In
y l n O e s U l a n r e t In
A useful feature of clusters is their ability to improve reliability. If a node in a cluster should fail and break connectivity to the portal, the remaining nodes in the cluster could switch to another cluster if this is provisioned. Another requirement is of course that the two clusters are within RF range of each other.
CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved
19-13
Aruba Bootcamp – Mesh
y l n O l Use
a n r e t In
y l n O e s U l a n r e t In
You can verify your mesh recovery capabilities using the command shown on this slide.
CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved
19-14
Aruba Bootcamp – Mesh
y l n O l Use
a n r e t In
y l n O e s U l a n r e t In
Up to this point, the mesh clusters assume that the Mesh Portal is located on the Enterprise Campus. However, you might need to create a cluster where the Portal to controller connection is over a Wide Area Network. This is normally done with a Remote Access Point as discussed earlier in this course. The RAP can serve as a Remote Mesh Portal allowing you to create a cluster that is distant from the campus.
CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved
19-15
Aruba Bootcamp – Mesh
y l n O l Use
a n r e t In
Components of RMP
y l n O e s U l a n r e t In
Remote Mesh Portal (RMP)
Mesh Point (MP) RMP functions both as a RAP and a mesh portal (MPP). As a RAP, an RMP creates a secure IPSec tunnel back to the controller. As an MPP, the RMP forms the root of a mesh cluster and other mesh nodes in the branch office create mesh links to the MPP. Control traffic from the MPs reach the RMP via the mesh link and the RMP bridges this to the controller over the VPN link. MPs register with the controller and download their configuration for the mesh radio as well as access radio (if any).
CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved
19-16
Aruba Bootcamp – Mesh
y l n O l Use
a n r e t In
y l n O e s U l a n r e t In
Many options exist to specify the RF behavior of the cluster. Please reference the User Guide for More details on this.
CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved
19-17
Aruba Bootcamp – Mesh
y l n O l Use
a n r e t In
y l n O e s U l a n r e t In
You can create a new cluster under the AP Group as shown here.
CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved
19-18
Aruba Bootcamp – Mesh
y l n O l Use
a n r e t In
y l n O e s U l a n r e t In
The cluster defines the Cluster Name, RF band, encryption options and keys. If you have more than one cluster in your network, be sure to provide each with a unique Cluster Name. Otherwise the Mesh Point could accidently join the wrong cluster.
CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved
19-19
Aruba Bootcamp – Mesh
y l n O l Use
a n r e t In
y l n O e s U l a n r e t In
The access point needs to be assigned its mesh AP Group and its Mesh Role. This can be done in the WebUI as illustrated here.
CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved
19-20
Aruba Bootcamp – Mesh
y l n O l Use
a n r e t In
y l n O e s U l a n r e t In
Note the Flags column in this slide. Two of these nodes are in Recovery Mode and joined the cluster because their primary cluster didn’t provide Portal connectivity.
CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved
19-21
Aruba Bootcamp – Mesh
y l n O l Use
a n r e t In
y l n O e s U l a n r e t In
Logs are generated to troubleshoot the Mesh environment.
CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved
19-22
Aruba Bootcamp – Mesh
y l n O l Use
a n r e t In
y l n O e s U l a n r e t In
CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved
19-23
Aruba Bootcamp – Mesh
y l n O l Use
a n r e t In
y l n O e s U l a n r e t In
CONFIDENTIAL © Copyright 2014. Aruba Networks, Inc. All rights reserved
19-24