Managing an Enterprise WLAN with Cisco Prime Infrastructure Rashmi Ramesh Technical Marketing Engineer BRKEWN-2011

Transcription

1

2 Managing an Enterprise WLAN with Cisco Prime Infrastructure Rashmi Ramesh Technical Marketing Engineer BRKEWN-2011

3 Agenda Cisco Prime Infrastructure for Wireless Management Configuring a Wireless Network Planning with Maps Monitoring & Troubleshooting Use Cases Reports Key Takeaways

4 Cisco Prime Infrastructure for Wireless Management

5 Cisco Prime Infrastructure Realizing the Vision of One Management Lifecycle Converged management with integrated best practices Data Center Bridging Network and Compute Assurance End-to-end application experience and visibility Campus Branch to DC Day 0 to Day N Application-Centric

6 Wireless Management Get Comprehensive Configuration and Operational Productivity Network Configuration Network Health Troubleshooting Discovery, inventory, SWIM, compliance PSIRT Controller and access point deployment, configuration audit Network configuration, guest access, RRM Integration with Cisco MSE and ISE Maps-based planning for access point placement Sites and virtual domains Rogue, security, voice audit, mesh Performance reporting and fault management End-user troubleshooting authentication and access Users and devices, and applications Client tracking Visualization of users, rogues, interferers through maps

7 Prepare Prime Infrastructure Create Sites and Location Groups Create Sites to mimic the physical topology of your network.

8 Sites & Location Groups Sites can be organized into a hierarchy of Campuses and Buildings Sites allows for Devices, Traffic, End-users and Alarms/Events to be organized based on the physical structure of the network Users of Prime Infrastructure can be assigned to manage specific groups of Sites, called Virtual Domains based on their responsibilities The Monitoring Dashboards allows all the data collected by Prime Infrastructure/Prime Assurance to be viewed based on Sites

9 Assigning Devices to Sites Based on pre-defined criteria, dynamically add devices to their respective sites Manually assign devices to their sites AP s can now be assigned to Sites!!

10 Users Setup Create Users of Prime Infrastructure and assign roles for user level visibility and control

11 Virtual Domains Hierarchical Domains Selected users have access to individual domains Top (root) user has complete access to all domains Standard Prime Infrastructure features for all domains Distributed Router Deployment Dedicated Router per virtual domain Configuration and monitoring of Router allowed at individual domain level Centralized Router Deployment Shared Controller (e.g.: ISR,) across multiple virtual domains Only monitoring views for particular domain; configuration of shared ISR at topmost domain Marketing SW 1 ASR 1 SW 3 SW 2 SW 4 Campus A Virtual Domains - Organization Name ASR 2 ISR 5 ISR 6 Remote Site #1 Bldg 4 Bldg 1 Bldg 3 Engineering Purchasing ASR 3 ISR 10 ISR 11 ISR 12 Virtual Domains - Geographic Regions Bldg 2 Campus B Bldg 6 ISR 7 ISR 8 ISR 9 Bldg 5 Bldg 7 Root Domain Campus C Remote Site #2 Bldg 8 Blgd10 Root Domain Bldg 9

12 Virtual Domain Setup Cisco ACS Attributes Each virtual Domain can be associated with Site Maps, Wired and Wireless devices, AP s & Virtual Elements (DC, Cluster, Host)

13 Associating Users to Virtual Domains

14 Configuring a Wireless Network - WLC Configuration

15 Adding your current WLC s into PI Use the Discovery Settings or the Bulk Import capability to discover the WLC s SNMP R/W Community Strings & CLI are required to completely manage the WLC s

16 Configuring WLC s Configuration Templates Learning from an existing Controller CLI Templates

17 Configuration Templates

18 WLC Configuration Workflow Prepare the templates corresponding to the desired features Group one or more WLC s to deploy the configurations/templates Schedule the deployment Verify the status of the job to confirm that the deployment is successful

19 Controller Configuration Templates Overview Template Categories in the Converged View Expand for easier navigation

20 Controller Configuration New Wireless Network HA Configuration for the WLC Browse to the Device Details Page and select the WLC Provide the input to configure the Redundancy Option Click on Save to push this configuration to the WLC The HA configuration is done on a per WLC basis

21 Controller Configuration New Wireless Network Interface Configuration (Corporate, Guest, Clients etc) The Interface details are to be provided in a file format

22 Controller Configuration New Wireless Network Interface Configuration Select one or more WLC s to deploy this template Deploy now or schedule for a later point in time

23 Controller Configuration New Wireless Network AAA Servers Configuration To configure the Radius and the TACACS servers on the WLC s browse to Security AAA

24 Controller Configuration New Wireless Network WLAN Configuration - General Provide the SSID and the Interface configuration details

25 Controller Configuration New Wireless Network WLAN Configuration - Security Security Information for Authentication

26 Controller Configuration New Wireless Network WLAN Configuration QoS Select the QOS policies for this WLAN : Eg : Guest WLAN would be Silver Corporate WLAN would be Platinum

27 Controller Configuration New Wireless Network WLAN Configuration - Advanced FlexConnect, Client DHCP for Guests etc

28 Controller Configuration New Wireless Network WLAN Configuration - Advanced Turn on Http Local Profiling This is to populate the Client s Endpoint Type Info

29 Controller Configuration New Wireless Network WLAN Configuration Create your own folders for easier maintenance of your templates Save your configuration template

30 Controller Configuration New Wireless Network AVC Configuration Netflow Monitor and Exporter Configuration Associate the Netflow Monitor to the WLAN Config Enable AVC

31 Controller Configuration New Wireless Network AP Groups Specify the WLAN, Interface and the RF Profiles Save and Deploy campus-student campus--staff

32 Controller Configuration New Wireless Network AP Groups Deploy Associate the AP s to the AP Groups and can choose to run now or at a later point in time to deploy this config on the WLC

33 Controller Configuration New Wireless Network RRM Disable the lowest data rates for RRM as a best practice for both b/g/n and a/n/ac

34 Controller Configuration New Wireless Network TPC Adjust the Min/Max power level for the AP to perform in that range

35 Controller Configuration New Wireless Network DCA Ability to change the Channel Width

36 Controller Configuration New Wireless Network CleanAir Enable Clean Air Choose parameters for Alarm Configuration

37 Controller Configuration Deployment using Configuration-Groups What Are Config-Groups? An easy way to group controllers logically Provides a way to manage controllers with similar configurations Extract templates from existing controller to provision Schedule configuration sets Cascade Reboot Manage Mobility Groups, DCA, and Configuration Auditing When Are Config-Groups Used? Group sites together for easier management for: Mobility Groups DCA and Regulatory Domain Settings Schedule remote configuration changes Groups sites to ensure compliance with configuration policies

38 Controller Configuration Configuration-Groups Setup Option 1 : Create the Group. Add the Controllers and the templates later Option 2 : Copy the templates from one of the Controllers managed by PI and apply them to the controllers that will belong to this group

39 Controller Configuration Configuration-Groups Detail Controllers : Choose the list of WLC s on which you would like to configure the selected features Country/DCA : Enable/Update/Disable DCA Templates : Select the list of templates that you would like to apply to multiple controllers

40 Controller Configuration Configuration-Groups Detail Select the templates to be deployed

41 Controller Configuration Configuration-Groups Execution Schedule the deployment

42 Inventory & Configuration Enhancements Wireless Controller Inventory Background job is enabled by default and runs every 24 hrs The above job also automatically archives the device config if there is a change Basic Audit is removed which means we now audit against the Templates only

43 Learning from an existing Controller

44 Controller Configuration Learning from an existing Controller Choose 1 or many WLC s

45 Controller Configuration Learning from an existing Controller The discovered templates are automatically grouped under the different categories Use the Controller Configuration Groups to deploy the templates on one or more WLC s

46 CLI Templates

47 Controller Configuration CLI Templates CLI Template option can be used to configure features for situations where PI does not provide an Out-of-the-box template. Ex: SNMPv3 A single CLI template can be deployed on multiple controllers

48 Controller Configuration CLI Templates Configuring SNMPv3 Enter the CLI commands Choose the post deploy options Save the Template in a custom folder for better organization

49 Controller Configuration CLI Templates Configuring SNMPv3 Select the Deploy Option Choose one or many WLC s to deploy Deploy now or Schedule

50 Controller Configuration CLI Templates Configuring SNMPv3 Browse to the Jobs Page to view the status of deployment In case of failure, view the details

51 Configuring a Wireless Network - AP Configuration

52 AP Configuration Templates Select the Parameters

53 AP Configuration Templates AP Selection, Scheduling and Deployment Status Select the AP s Schedule the Deployment and view the status

54 Planning with Maps

55 Create Maps New Map For a given site, start by adding a New Campus followed by adding New Building and adding floors to the Building and importing the Floor maps Launch the Wireless Maps Page

56 Create Maps Import/Export Option Provides ability to export maps from the previous versions of PI Can select a subset or all the maps Export/Import of map includes both maps(site Hierarchy) and AP s placed on the maps

57 AP Placement on the Maps Manual On the Floor Map, Choose the option to Add AP s

58 AP Placement on the Maps Manual Manually select the AP s and place them on the Floor Map With this method, you have to manually navigate to every floor area and choose the AP s that belong to that floor

59 AP Placement on the Maps Dynamic using Automatic Hierarchy Creating Start with an sample AP name. The AP s that match the regular expression will automatically added to the particular Campus/Building/Floor If the AP names have a naming convention, then this process automates adding AP s with a specific naming pattern to a specific Campus/Building/Floor

60 Maps Layout Hierarchical layout for Site/Campus, Buildings and Floors Ability to add new buildings and floors using the drop down menu Floor Statistics at a glance for a building

61 Maps Layout Zoom Settings Active Rogue AP s Filters Interferers Yellow AP s with non-critical alarm Clients tracked via MSE

62 Maps Real Time Heat Maps List of neighboring AP s and their RSSI value that hear the selected AP

63 Maps Rogue AP s on the floor Use the Filters to drill down to specific Rogue AP s based on MAC, Type and State

64 Maps Clean Air Use the Filters to drill down to Interferes on the floor based on Status, Severity, Type and Zone of Impact

65 Maps Planning Mode Launch the Planning Mode Enables you to calculate the number of AP s required to cover an area Considers throughput for each protocol ( a/n or b/g/n), traffic type, AP Type etc First create a new floor area for a building for which you intend to plan and import the floor map

66 Maps Planning Mode Add AP s Choose the AP & Antenna Type, Throughput etc for AP count calculation

67 Maps Planning Mode Generate the plan AP count is calculated and the fictitious AP s are placed on the maps.

68 Maps Planning Mode Edit AP parameters Option to change the AP parameters on a per AP basis

69 Maps Planning Mode Conversion to a real floor map Deploy the real AP s and add them to the network Refresh the WLC from PI to reflect the new AP s Use the Import AP from CVS File option to replace in bulk the fictitious AP s with the Real AP s as per the Radio MAC defined in the CSV Use the Add AP Association option to replace AP s one by one

70 Maps Enhancements & Best Practices Enhancements Faster of loading of Floor Maps AP Radio attributes are updated every minute to provide near real time heat maps Default Zoom is maintained for every floor map Best Practices The number of AP s that can be placed on the floor should not exceed 100 Refrain from using the Refresh from Network Option Manage your alarms to not have many outstanding ones to load maps faster

71 Monitoring & Troubleshooting

72 Dashboards Welcome Tag your favorite dashboard Same Menu structure as 2.2 Launch Menu Tablet Friendly

73 Dashboards Metrics Widgets Export the entire Dashboard as CSV or PDF Customize the metric charts

74 Dashboards Correlated Charts Alarms Configuration Change By Correlating the CPU And Memory for the devices one can check if a configuration change or an alarm resulted in the increase in the CPU

75 Dashboards What can we monitor? Site WLC AP Clients Devices Reachability, Busiest AP s, Top Applications, Top Talkers, Client Traffic, Top Events CPU & Memory Utilization Trend, Busiest AP s, Top Applications, Top Talkers, Client Traffic, Top Events AP Details, Channel Utilization, Client Count, Top Talkers, Top Applications Malicious, Friendly and Unclassified Rogues Rogues Malicious, Friendly and Unclassified Rogues Clean Air Worst Interferers, Min & Avg Air Quality

76 Dashboards Monitoring Overall Network Health Network Wide Alarm Types Network Devices Summary Top N CPU & Memory Devices Devices that are unreachable

77 Dashboards Monitoring - Site View the overall site status wrt Device Reachability Status, Alarms, Top Applications, Top Talkers, Clients and Busiest AP s Use the Filters to zoom into different aspects of time, Applications and SSID s

78 Dashboards Monitoring WLC s View the WLC status wrt its Health (CPU & Memory), Alarms, Top Applications, Top Talkers, Busiest AP s etc

79 Monitoring WLC s HA Monitoring Performance statistics of both controllers View Primary and Secondary controllers & their status View the Alarms/Events for the HA controller failure

80 Dashboards Monitoring AP s View the AP status wrt its Channel Utilization, Top Applications, Top Talkers, Client Count etc

81 Dashboards Monitoring Clients View Client Distribution, Client Association/Authenti cated count, Top SSIDs, Client Traffic etc

82 Monitoring Rogue AP s View the Alarms page for details regarding the rogues Use the Alarm Summary Panel to view the Rogue Alarms

83 Monitoring Managing Rogue AP s Use the Rogue AP s Templates to automatically classify the Rogues based on SSID, Min RSSI etc Filter the Rogue AP s based on SSID, Radio Type, Vendor etc and Bulk edit their status

84 Monitoring Alarms & Events Alarm Summary Persistent Alarm Summary at any dashboard Shows the alarms count against different Alarm Categories & Severities Ability to edit the categories that should be displayed by default Ability to cross launch to the details using the hyper links

85 Monitoring Alarms & Events Alarm Browser Event : An occurrence or a change in a condition of the network (Device, Thresholds etc ) managed by PI Alarm : Correlated events result in an alarm Alarms/Events can be filtered based on Locations, Device Types

86 Monitoring Alarms & Events Alarm Details Expand the Alarm to view all details including individual Events leading to the alarm

87 Monitoring Northbound Event Notification Network Management System (NMS) Northbound SNMP Receiver SNMP Cisco Prime Infrastructure SNMP Agent (sends no fica ons only) SNMP Manager (does GET/SET, receives traps) SNMP Cisco Wireless LAN Controller SNMP Agent

88 Use Cases

89 User is unable to access Business Critical Application within his Enterprise

90 Workflow Lookup a client: MAC Address, Username, IP Address, Client type, Client state, From AP Details Page (example below) Where is the client now (and how is their RF profile) Where has this client been (Location playback, session and AP history) Active troubleshooting (DB vs Real Time) ISE Posture Status Application Information

91 Search for the Client Multiple search options Search for the username/ip/mac of the client using the Application Search option Search for the username/ip/mac of the client in the Clients and Users Page

92 User 360 View View all clients for a user Quick list of the all the clients (wired & wireless) associated with this user Endpoint & Location Info for each of the clients Access & Session Information Alarms and Applications associated with each of the clients

93 Client Details Easy Navigation to next steps Client connection status visualization Ability to Refresh the client info from the WLC Basic Client Information

94 ISE Policies for the Client ISE Server Info and Authorization Profile Ability to fetch the Authentication records from ISE in case of an authentication failure Quick checks to see if the client is successfully authenticated and connected to the network

95 RF Profile for the Client Client-AP Association History Signal Statistics with default thresholds Data Rate for the Client

96 Client s Current Location Current Location as detected by MSE

97 Client s Location History Ability to play back client s location history

98 Client s Application Information View the Client Application Information

99 Ability to Block or Mark Applications Drop Youtube Traffic across a WLAN Create an AVC Profile to block Youtube traffic and apply it to the WLAN

100 How can monitor Microsoft Lync calls across my network

101 MS Lync Configuration Register PI as a receiver on your SDN server Edit the LyncDialogListener.exe file (usually located at C:\Program Files\Microsoft Lync Server\Microsoft Lync SDN API) to add the below lines : where PI_server_name is the name of your PI as specified in the Trusted Root Certification Authorities certificate where value is the value of your PI Server as specified in the Trusted Root Certification Authorities certificate

102 Monitoring MS Lync Traffic Launch the Lync Monitoring Page

103 Monitoring MS Lync Traffic Monitor : Site to site traffic Wired vs Wireless calls Point to Point vs Multi point calls Voice, Video and file sharing stats User specific metrics and troubleshooting

104 Monitoring MS Lync Traffic Statistics Call Volume over a period of time % of wired vs wireless calls Call Quality Metrics: > 3.5 = Good = Fair < 2 = Poor % of Audio vs Video vs ApplicationSharing

105 Monitoring MS Lync Traffic Conversations Caller and Callee Information including the Site and Connection Type Call Metrics including Jitter, Packet loss and MOS scores

106 Reports

107 Report Launch Pad Quick help to understand the reports Reports categories

108 Reports Customization & Properties Customize the reports to include additional fields Export as PDF/CSV Schedule Reports Get reports ed automatically

109 Composite Reports Combine Multiple Reports into a single Report

110 Reports Examples Wireless Executive Summary Report

111 Reports Examples Wireless Executive Summary Report.. Continued

112 Reports Examples Client Summary Report

113 Reports Examples Client Summary Report

114 Reports Examples Client Summary Report

115 Reports Examples Busiest Clients Report

116 Reports Examples Top Applications Per Site

117 Reports Examples Top Talkers Per Site

118 Prime Infrastructure Operations Center

119 Cisco Prime Infrastructure Op Center Centralized Visualization Across Multiple PI Instances Prime Infrastructure Console Single Pane Monitoring Aggregation Static Data Unified Assets View Unified Alarms View Unified Clients views Consolidated Reports Consolidated Dashlets Consolidated Search Fan Out Queries Device Affinity Network Data Network Data Network Data Network Data Prime Infrastructure Instances

120 Prime Infrastructure Op Center Roadmap Centralized Management across Multiple PI Instances Phase 1: Prime Infra 2.2 Release Same look and feel Phased functionalities Turned on by licensing Monitoring Unified Assets, Alarms, Clients Views Consolidated Reports / Dashlets (Part1) Consolidated Search Virtual Domain aware SSO

121 Prime Infrastructure - UCS-Based Physical Appliance (Gen 2) FCS April 3, 2015 Downloadable ISO Image, Install Guide Supports PI 2.2 or higher ISO Image Available Today ISO Image Available Today Generation 1 PRIME-NCS-APL-K9 2.4 GHz, Intel E cores 16 GB 4 x 300 GB CPU MEM HDD 10 cores 64 GB 4 x 900 GB Generation 2 PI-UCS-APL-K9 UCSC-C220-M4S 2.30 GHz E v3/105 W 10C/25 MB Cache/DDR MHz 1 RU, dual power supply, hot-swappable HDD EoS/EoL May 2015 PI 2.2 or lower Niihau Maint Rel. Gen1 Appliance Scale RAID 5 RAID RAID 10 Gen 2Appliance Scale 5000 Max unified Aps 20, Max autonomous APs Max WLAN controllers Max wired (switches, routers) 13, Max MSE NAMs ,000 Max number of devices (Combination of wired, wireless) 20,000 1 RU, dual power supply, hot-swappable HDD

122 Conclusion

123 Key Takeaways PI 3.0 is the ONE assurance solution for Wired & Wireless Management Next gen converged UI simplifies the monitoring and troubleshooting experience for wireless network infrastructure Provides an easy way to configure features on one or more Wireless Controllers Enhancements to the Maps framework, Job management and Background tasks enhances the overall user experience to quickly navigate through the product

124 Complete Your Online Session Evaluation Give us your feedback to be entered into a Daily Survey Drawing. A daily winner will receive a $750 Amazon gift card. Complete your session surveys though the Cisco Live mobile app or your computer on Cisco Live Connect. Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at CiscoLive.com/Online

125 Continue Your Education Demos in the Cisco campus Walk-in Self-Paced Labs Table Topics Meet the Engineer 1:1 meetings Related sessions

126 Resources

127 Cisco Prime Demo Series Americas Edition APJC Edition EMEAR Edition Every Week* Prime Demo Series Topic Same Time Same Place Every Monday Every Tuesday Every Wednesday Every Thursday Cisco Prime IP Express Cisco Prime Collaboration Cisco Prime NAM and NGA Cisco Prime Infrastructure 11 a.m. Pacific (San Jose time) (90 mins) bit.ly/primedemo No registration required Every Week* Prime Demo Series Topic Same Time Same Place Every Thursday Cisco Prime Infrastructure 12 p.m. Singapore time (90 mins) bit.ly/primedemo_apjc No registration required Every Week* Prime Demo Series Topic Same Time Same Place Every Tuesday Cisco Prime Collaboration 10:30 a.m. CET (Paris, Berlin) Every Thursday Cisco Prime Infrastructure (90 mins) * Exceptions: No sessions on major public holidays for a given region or during the Cisco shutdown Evaluations VoDs Product Info Etc. bit.ly/primedemo-emear No registration required Open to Customers, Partners and Cisco People C Cisco and/or its affiliates. All rights reserved. Cisco Confidential 128

128 Resources on Cisco.com Cisco Prime Cisco Prime Infrastructure Cisco Prime for Partners Free Trial and NFR Software Downloads Cisco Prime Demo Series

129 Learning Resources Fee-Based and Free Resources Are Available Instructor-led training (fee) Three days of training available from learning partner under Learn More Electronic-led training (free) More than three hours of training available on Cisco.com under Learn More 18-segment Prime Infrastructure Quick Start videos on demand (free) More than two hours - How to series Available on the Cisco YouTube channel and PEC Cisco Prime demo series (free) Weekly 90-minute customer facing webinars

130 Thank you

131