Aruba and Ekahau Joint Design and Implementation

Size: px

Start display at page:

Download "Aruba and Ekahau Joint Design and Implementation"

Claribel Booker
6 years ago
Views:

1 Design and Implementation Guide Enterprise Aruba and Ekahau Joint Design and Implementation Revision 1.0

2 Aruba and Ekahau Design and Implementation Guide [Version 1.0] Scope ThisdocumentisajointdesignandimplementationreferenceguideforArubaandEkahauRTLS deployments Thisdocumentspecifieshigh levelrequirementsanddesignconsiderationsforsuccessfuldeployment ofthejointsolution ForanonlineintroductiontoEkahaudeploymentsforRTLS,seethislink 1 ThisdocumentcoversthemorecommonTagAssociationModeaswellastheuniqueArubaBlink Modeimplementations ThisdocumentcoversEkahauActivatorusage ThisdocumentassumesabaselevelofArubaWLANproductanddesignknowledge.Fordetails involvingconfigurationofarubaos,pleaseseethearubaosuserguidefortheversionofsoftwarein yourenvironment,locatedonthearubasupportsiteathttp://support.arubanetworks.com Solution Overview Enterpriseslosemillionsofdollarsayearbecausecriticalequipmentismisplaced,stolenornot maintainedproperly.assettrackingwithrealtimelocationsystems(rtls)overwi Fiallows continuoustrackingofvaluableequipmentorpeopleoverthewlan.theabilitytoinstantlylocatea criticaldevicecanreducenotonlyreplacementcostsforlostequipment,butalsoenablefarmore efficientuseofexistinginventory.theresultisreducedcostsaswellasimprovementsinworkflow, securityandcustomerservice. TheEkahauRTLSsolutionleveragesexisting802.11networkstoprovideaccurate,real timelocation trackingof tagged assets.anekahauassettagisasmallwi Fienableddevicethatcanbeattachedtoa criticalasset,orwornasapersonnelbadge.thetagthenusestheexistingwirelesslantocommunicate withanekahaupositioningengineserver.theepeusessignalstrengthvalues,receivedeitherfromthe tagorthearubainfrastructuretocalculateandcontinuouslytrackthetag slocation.softwareversions oftagsalsoexistforwi Fienableddevicessuchaslaptopsorhandhelds.Solutioncomponentsinclude Ekahau spositioningengineserver,theekahausitesurvey,andtheekahauapplicationlayer,consisting ofekahautrackerorekahauvision. TheArubaUser CentricNetworkprovidesEkahauRTLSuserswithtwomajoradvantagesoverother WLANinfrastructurevendors:superiorsecurityandtighterintegration. SuperiorSecurity:Arubacontroller ssecuritymodelallowsauserroletobespecificallyassignedto Ekahautraffic.Thisenablesappropriateisolationandprioritizationoftag to servercommunications fromothernetworktraffic,offeringoptimizedcommunication,andmaximizingsecurityofevenolder WEP onlytags. TighterIntegration:Aruba sintegrationwithekahaurtlsenablesassettagstooperatein Aruba BlinkMode. ArubaBlinkModereducestheamountoftimeanassettagspendstransmittingradio 1http:// username:training password:sp3d3 [Aruba & Ekahau Design & Implementation Guide] [January 22, 2009] 1

3 signalsandresultsina5xextensionoftagbatterylife.inahospitalenvironmenttrackingthousands ofdevices,thereductioninoverheadofmanagingtagsissubstantial. About the Ekahau RTLS Solution TheEkahauRTLSsolutionconsistsprimarilyoftheEkahauPositioningEngine(EPE)server,battery poweredwi Fitagsandalaptopbasedplanningandcalibrationtool,EkahauSiteSurvey(ESS).There arealsosupportingapplicationsandanopenapiforhttpandxmlaccesstothepositioningenginedata. TheEkahauRTLSinstallerfileincludesallthecomponentsofEkahauRTLS,outofwhichtheusercan selecttheappropriatecomponents.theekahauapplicationlayer,ekahauvision,isinstalledseparately. Ekahau Positioning Engine (EPE) EPEisthecenterpieceofEkahauRTLS.ItrunsonWindowsXPorWindows2003Server.TheEPE managesandconfiguresassettagsthroughthewirelessnetwork,calculateslocationsfromwi Fisignal strengthmeasurements,andprovideseventhandlingandtwowaytagcommunication. Ekahau Site Survey (ESS) EkahauSiteSurveyisaplanning/sitesurvey/troubleshootingtoolforWi Fi.ItrunsonaWindows laptop,andusesanatheros based802.11a/b/g/nwi Fiadapterforsitesurveymeasurements. ESSisalsoatoolforcreatingandcalibratingaPositioningModel(oraProject)toenableaccuratelocation tracking.apositioningmodelisasoftwarerepresentationofabuildinganditsrfenvironment.essis usedtoimportsitemaps,performsitesurveys,andperformrtlsrelatedoperationssuchasdrawing trackingrailsandzones. Fordetails,seewww.ekahau.com/ess. Ekahau Wi-Fi Asset Tags ThereareseveralmodelsofbatterypoweredWi FitagsavailableforEkahauRTLS.Thetwomost commonarethet301aandthet301b. TheT301aassettaghasamulti yearbatteryandamotionsensorandistypicallyusedfordevicessuchas IVpumps,crashcarts,etc. TheT301bisarechargeablecreditcardsizedbadgeforpersonneltracking.Ithasapullswitchthat servesasanemergencyalarm,callbuttons,andanoptionforsendingandreceivingtextmessages. Therearealsospecializedtags,suchasatemperaturesensorequippedmodel,Excertifiedintrinsically safetag,industrialtag,andsoftwarebased tags forwi Fienableddevicessuchaslaptops,PDAs, barcodesscanners,etc. Ekahau Vision and Third-Party Software Integration WhereastheEkahauPositioningEngineisusedtomanagethesystemandtagconfigurations,aseparate applicationisusefulforprovidingvalue addedservicesleveragingthelocationinformationprovided. EkahauVisionisanenterpriseasset andpeople trackingapplicationthatallowstheusertosearchand findassets,raiseandacknowledgealarms,monitortemperaturelevels,andsendandreceivemessages fromt301btags. EkahaualsoprovidesanopenAPIforthird partyapplicationdevelopment.thecompleteapiwith descriptionsisincludedintheekahaurtlsinstallerpackage. 2 [Aruba & Ekahau Design & Implementation Guide]

4 Ekahau Tag Activator EkahauActivatorisusedforactivatingEkahauT301seriestags.Activatinggivestheinitialconfiguration (SSID,encryption,etc.)forthetags,sothatthetagscanconnecttothenetworkandthustotheEkahau PositioningEngine,wherethetagscanbeconfiguredforproductionuse. Aruba and Ekahau RTLS Design Considerations Security TheArubauser centricnetworkestablishesthehighest possiblesecurityforanekahaurtls deploymentaspartofitsnormaloperation. EkahauT301seriestagssupportWPA2 PSKAESencryption(TKIP/AESmixedmodeisnotsupported) andwepencryption.olderekahaut201tagssupport64 and128 bitwep. EkahaurecommendsforadditionalsecuritythatafirewallbeusedbetweentheRTLSSSID/VLANandthe restofthenetwork.thearubacontroller spolicyenforcementfirewallandicsacertifiedstateful firewallresidentonthecontrollerisidealforthispurpose. AuserroleshouldbecreatedspecificallyfortheEkahautagsallowingonlyEkahautrafficbetweenthe tagsandtheekahaupositioningengineserver.noothertrafficshouldbeallowedfromthetagstothe restofthenetwork. Tag Operation Modes: Aruba Blink Mode and Association Mode TheEkahauRTLSsystemcanbebasedonsignalstrengthmeasurementstakenatthetags(Association Mode)or,whenusingArubainfrastructure,themeasurementscanbetakenattheAPs(ArubaBlink Mode). Tag Association Mode Inassociationmode,thetagsimplyactsasaWi Ficlientonthenetwork.ItassociatestoanAPforall communicationswiththepositioningengineserver.thetag,asaclient,measuresthesignalstrengths fromthenearbyapsandreportstheresultstothepositioningengineserveroverthewlan. Figure 1 Location Tracking in Association Mode [Aruba & Ekahau Design & Implementation Guide]

5 TheadvantageofthismodeisitworkswithanyWLAN.Thedisadvantageisthattheaccuracymay slightlysufferfromdramaticchangestotheapinfrastructure,suchasseveralapsmakingdrastic changestothetransmissionpower(1mwto50mwforexample).however,basedonlivetesting,2 4xTx powerchangesonanaphavenonoticeableimpacttotheekahaurtlslocationaccuracy,andarm powerchangescanbelimitedtoapredefinedminimumandmaximumrange. WhenusingAssociationModetotrackEkahauT301tags,therecommendedpracticeistocalibrate (survey)thenetworkwithekahausitesurveyandat301tagoperatinginsurveymode.priorto calibrating,thetagneedstobeactivatedtositesurveymodeusingekahauactivator.anatheros based networkadapter,suchastheekahaunic 300,isrequiredforthis,seewww.ekahau.com/devices. 4 [Aruba & Ekahau Design & Implementation Guide]

6 Figure 2 Site Surveys in Tag Association Mode Aruba Blink Mode InArubaBlinkmode,thetagsendsbeaconsignalsatsetintervalstoapredefinedsetofchannels.Aruba APsmeasureandreportthesignalstrengthofthebeaconingtagsandthesignalstrengthinformationgets forwardedtotheekahaupositioningengine. Figure 3 Location Tracking in Aruba Blink Mode Thisapproachhasseveraladvantages: ARMadjustmentshavenoimpactonlocationaccuracy tagsbeaconatasetpowerandonset channels,sochangesinapbehaviordonotaffectrtlsaccuracy.armmaximizestheefficiencyofthe WLAN,sotheusergetsbestofbothworlds anadaptiveandresponsiverfenvironmentand accuratertls. BatterylifeandTCO inbeaconmode,tagsextendtheirbatterylifebyafactorof5x.inahospital trackingthousandsofdevices,thereductioninoverheadtoupdateorreplaceorrechargetagscould [Aruba & Ekahau Design & Implementation Guide]

7 betremendous.notethatthelongevityofatag sbatterydependsonconfigurablefactors howoften tobeacon,etc. butinbeaconmodesitwouldbetypicalforatagbatterytolastforyears. WhencalibratingtheRTLSforoperationinArubaBlinkMode,therecommendedpracticeistoutilize EkahauSiteSurveywithaT301atagoperatinginArubaBlinkMode.Inthismode,theAPswillmeasure thetagsignalstrengthduringthesurvey,andthedatawillbeforwardedfromthearubacontrollertothe EkahauPositioningEngine,andthenbacktoEkahauSiteSurveyviatheArubaWLAN. Figure 4 Site Surveys in Aruba Blink Mode PleasenotethatforEkahautagsoperatinginArubaBlinkMode,thereisnoneedtoassociatetothe networktoperformlocationupdates.tagscanstill,however,beconfiguredtoperformmaintenance sessionsinassociationmodeinordertocommunicatetotheepeserverforfirmwareupdates, configurationchanges,andtoreceivecustomcommands.location updateintervalsareconfigured independentlyofmaintenanceintervals(two waysessions)intheekahaupositioningengine. Design Recommendations ThereareanumberofimportantplanningdecisionsthatshouldbeconsideredforaproperRTLS deployment.thisdocumentisconcernedwiththedetailsofthearubawlanportionofafullekahau deployment.itisrecommendedthatekahaudocumentationandresourcesalsobereferencedand utilizedforoptimumresults.inparticular,thedocument EkahauRTLSGuide fromekahauprofessional Servicesishighlyrecommendedforthispurpose. Aruba & Ekahau RTLS Deployment Steps 1. DeployanOptimizedArubaWLANInfrastructure:EnsureWLANqualityissufficientforaccurate RTLS, Voicecapable ifpossible,andensuringsmoothroamingthroughoutthetrackingareaforthe tag 6 [Aruba & Ekahau Design & Implementation Guide]

8 2. CreatetheWLANforRTLS:ProvidesufficientIPspaceinasinglesubnetforalltags,dedicateanSSID thatsupports802.11bclientswith1mbpsand2mbpsrates,andconfigurethefirewallrulesanduser profilesfortags 3. DeployEkahauPositioningEngine(EPE):InstalltheEPEonthenetwork,ifinArubaBlinkMode, configurearubacontroller(s)tofeeddatatotheekahauserverandconfiguretheepetoacceptthis datastreamfromthearubacontroller(s) 4. ActivateSurveyTagsandPerformEkahauSiteSurvey:Onetagmustbeconfiguredforrapid blinkingtoperformquicksitesurveys 2 Thesitesurveyprocessisdoneusingalaptopcomputerandawirelessnetworkadapter.Thesurveyor walksthroughoutthetrackingareawiththelaptop,frequentlyclickingonthecurrentlocationonthe map. WhetherinArubaBlinkModeorTagAssociationMode,anEkahauT301atagmustbeproperly configuredandcarriedbythesurveyorwhenperformingthesitesurvey. InArubaBlinkMode,thereadingswillcomeintoEkahauSiteSurveyfromPositioningEngine(aWi Fi connectionmustbemaintained) InTagAssociationMode,thetagwillsendthereadingstothelocalnetworkadapter(needstobe Atherosbased,seewww.ekahau.com/devices),andtheadapterwillforwardthereadingstoEkahau SiteSurvey Afterthesitesurvey,RailsandOpenSpacesaredrawntoindicatetypicalpathsofmovement,and optionallydefinezonesforadvancedapplicationlayerfunctionality. 5. DrawTrackingRails,OpenSpaces,andZones 6. UploadPositioningModelfromEkahauSiteSurveytoEkahauPositioningEngine 7. DeployTrackingTags:UsetheEkahauActivatortoconnectthetagstothenetworkandtotheEPE, alsousetheepewebuitoconfigurethedesiredtagparameterssuchaswakeupinterval,motion on/off,arubablinkmodevs.associationmode,etc. Step 1: Deploy an Optimized Aruba WLAN Infrastructure ForthosewithexperiencedeployingArubaproducts,Ekahau ssimplestrecommendationforwlan designbestpracticesforrtlsisthatthewlanshouldbe voice capable.accuratelocation requirementsaremorestringentthanforbasicdatacoverage.rfsignalstrength(rssi),numberof audibleaccesspointsperlocation,andaccess pointproximityarefactorsthatwillaffecttheaccuracyof thertlssystem. SignalStrengthandNumberofAPs Forreliabledatatransmission,thetagneedstohearatleastoneAPat 70dBmtobeabletocommunicate withthenetworkreliably.forhighreliabilitywerecommend VoiceGrade coverageat 65dBm minimum. Coveragerequirementsforgoodlocationaccuracycontendthatthetagwillalwaysbecapableof detectingatleastthreeaccesspoints.atleastoneofthoseapsshouldbeheardat 62dBmorhigher.The additionalapsshouldbeheardat 75dBm.Locationaccuracyisexpectedtobebetterincloseproximity toastrongaccesspoint.ifatleastoneapisaudibleat 50dBmorhigher,thenhighlocationaccuracyis stillexpected. ARM DynamicPowerAllocation 2If in Aruba Blink Mode, activate the tag and configureforrapidblinkingvia Engine.If in Association Mode, use Ekahau Activator to configure the tag to Site Survey mode. [Aruba & Ekahau Design & Implementation Guide]

9 EkahautagsoperatinginArubaBlinkModearefullycompatiblewithdynamicpoweradjustment.Tag powerremainsconsistent,sothetransmissionpowerofapsdoesnotimpactlocationaccuracyinany way.armalsominimizesinterferenceandautomaticallyprovidesthemoststableenvironmentfortag communication. InAssociationMode,ARMchangescanhaveasmallimpactonlocationaccuracy,whichcanbefurther mitigatedbysettingminimumandmaximumthresholdsforarmpoweradjustments. Inmulti vendorenvironmentsinvolvingothernon ArubaWLANinfrastructurevendors,Association ModeshouldbeusedsinceArubaBlinkModeisnotsupportedandthuswillnotworkattheentiresite. Theothervendor sautomaticchannelandpoweradjustmentalgorithms(ifapplicable)canalsoimpact thelocationaccuracyinthesameway. IneithercasewheretagAssociationModeisused,theEkahaulocationalgorithmsaredesignedto neutralizethearmimpactasmuchaspossible. Step 2: Create the WLAN for RTLS IPAddressing TagsrequireuniqueIPaddressesonasinglesubnet.Two waycommunicationwilltakeplacewiththe server,allowingtagstoreceiveprogrammingchangesovertheair,andenablingmessagingwiththe T301BDtag.AsufficientnumberofstaticorDHCPIPaddressesmustbeallocatedforthenumberof trackeddevices.tagsshouldnotrequireanewipaddressordefaultgatewayuntilthedhcpleasetime hasexpired. WLANSSID AdedicatedRTLSSSIDisrecommendedtosupportcommunicationsbetweenRTLSTrackingTagsand thelocationengine.thessidassignedtothertlssystemmustcovertheentiretrackingprojectarea. DataRates T301datatransmissionislimitedto802.11brates.1Mband2Mbdataratesshouldbeconfiguredas required. Otherdatarates(5.5,11,etc.)includingthosefor802.11gand802.11nmaybeconfiguredas supported Security EkahauT201tagscurrentlysupport128bitWEPencryption.EkahauT301tagssupportWEPandWPA2 PSK.ForWPA2 PSK,encryptionshouldbeAESonly(TKIP/AESmixedmodeisnotsupported). TagUserRoles TagtrafficshouldbeisolatedfromtherestofthenetworkbytheArubaPolicyEnforcementFirewall.A userroleshouldbecreatedforthetags.thisruleshouldallowthetagstocommunicateonlywiththe EkahauPositioningEngine,andonlyoverthecorrectprotocols. Clientdevicesandapplicationsinitiateasessiontothepositioningengineviastandardcommunication ports(seeconfigurationsectioninthisdocumentforthislistintable1). Figure 5 Common WLAN Deployment Architecture 8 [Aruba & Ekahau Design & Implementation Guide]

10 Step 3: Deploy Ekahau Positioning Engine (EPE) Atthispoint,theWLANandnetworkwouldbepreparedfortheEkahaudeployment. InstallEkahauPositioningEngine ConsultEkahaudocumentationorEkahau,Inc.fordetailedrecommendations.TheEPErunsonWindows Server2000,WindowsServer2003orunderVMWare.Hardwarerecommendationsdependonthe numberoftagclientstobeserviced. ConfigureArubaController(s)forEPEcommunication IfusingArubaBlinkMode,assignanRTLSserverinanAPconfigurationprofileintheArubaController: Configuration >Wireless >APconfiguration ><APgroup> >AP >APsystemProfile >RTLSServer Configuration IfArubaBlinkModeisnotused,youwillnotneedtoadjustRTLSserverconfigurationintheAruba system. ConfigureEPEtoAcceptArubaData IfusingArubaBlinkMode,youwillhavetoaddasharedkeytoafileinatexteditorandrestarttheEPE service. IfArubaBlinkModeisnotused,youwillnotneedtoadjustEPEserverasthedatawillbecomingin directlyfromthetags,notthearubasystem. Step 4: Activate Survey Tags and Perform Ekahau Site Survey PriortodeployinganAruba/EkahauRTLSsystemasitesurveyoftheentireprojectareamustbe performed. Priortoperformingsitesurveys,youwillneedtoactivatethetagforarapidblinkrate.Pleaseseelaterin thisdocumentfordetailsonactivatingtagsforeitherarubablinkmodeorsurveymodetooperate AssociationMode. InAssociationModeSiteSurvey,theRSSIvaluesofAPsaretakenbythetagsanddirectlysenttothesite surveylaptopinrelevantlocations. InArubaBlinkModeSiteSurvey,thesignaldatasentbythetagoperatinginArubaBlinkMode(with frequentscanning,seeekahausitesurveydocumentationforset upinstructions)willbemeasuredby theapsandsentviapositioningenginetositesurvey. [Aruba & Ekahau Design & Implementation Guide]

Step 5: Draw Tracking Rails, Open Spaces, and Zones Afterthesitesurvey,railswillbedrawnalongthesurveypathsusingESStoindicatethecommonpaths ofmovementofthetrackeddevicesinagivenenvironment.

11 Step 5: Draw Tracking Rails, Open Spaces, and Zones Afterthesitesurvey,railswillbedrawnalongthesurveypathsusingESStoindicatethecommonpaths ofmovementofthetrackeddevicesinagivenenvironment.openspacesrepresentareaswheredevices willnotfollowpre definedpathwaysofmovement.leveragingrailsandopenspacesaccuratelyincreases thelocationaccuracy. Finally,dependingonthelocation basedapplication,zonesmaybedrawnwithekahausitesurvey. Zonesareareasonthemapwhichhaveadefinedpurpose.Forexample,insomeapplicationsitmaybe moreintuitivetosay thedoctorisinthecafeteria thandisplayingadotonthemap. Step 6: Upload Positioning Model from Ekahau Site Survey to Ekahau Positioning Engine AftertheworkwithEkahauSiteSurveyiscompleted,savetheProject(PositioningModel).Itis recommendedtosavetheprojectduringthesurveyworkalso,underdifferentnames,toprevent accidentallossofdata. Tostarttracking,theprojectthenneedstobeuploadedtoEkahauPositioningEngineandactivated. Ekahaurecommendsmanuallycopyingthe.esxProjectfilefromtheSiteSurveylaptoptoEngineserver, andthenuploadingthe.esxprojectfile(positioningmodel)manuallytoekahaupositioningengineusing EkahauPositioningEngineWebGUI.WhenuploadingtheModel,activateittostarttracking. YoucanalsosavethePositioningModeldirectlyfromESStoEPE(inESS,selectFile>SavetoEngine),but forthis,awiredethernetconnectionisrecommended. Figure 6 Saving to the EPE Directly from ESS Step 7: Deploy Tracking Tags TodeployEkahautagsfortracking,theymustfirstbeactivatedtoconnecttotheWLANandcontactthe EkahauPositioningEngineserver.ThisisdonewithEkahauActivator. OncetagshavemadeaconnectiontoEPE,configurethemintheEPEviatheConfigspageanddeploy themtocriticalassetsasappropriate.pleasenotethatthelessfrequentlythetagsblink,thelongerthe batterylifewillbe.epewebguiincludesabatterylifeestimatortoseehowlongthetagswilllastwith theconfiguredsettings. Differentsettingscanbeusedfordifferentusecases.Forexample,stafftrackingmayrequire30second updates,whereaswakinguponceevery30minutesmaybeenoughforassettrackingpurposes. 10 [Aruba & Ekahau Design & Implementation Guide]

12 IfusingArubaBlinkMode,theappropriatetagconfigurationmustbeapplied(checktheArubaBlink ModecheckboxintheEPEGUI). Aruba and Ekahau Configuration for RTLS Configuring the System ThisdocumentisconcernedwiththespecificdetailsofintegratingArubaandEkahausystems.Thereis ampledocumentationspecifictoeachsystem,andthisdocumentassumesthatmoredetailed documentationisavailablefromeachvendor. Thissectiondelvesintofurtherdetailforeachoftherecommendeddesignbestpracticessteps. Configuring Step 1: Deploy an Optimized Aruba WLAN Infrastructure PleaserefertotheArubaConfigurationGuideandrelatedArubadocumentation.TheArubaWLAN shouldbebuiltoutwiththefollowingneedsinmind: Voice Capable PlantheWLANunderthesameguidelinesasforavoice capablesystem Signal Strength and Number of APs Areasrequiring excellent locationcoverage: Tagsshouldbedetectiblebyatleastthreeaccesspoints. AtleastoneofthoseAPsshouldhearthetagat 62dBmorhigher.TheothertwoAPsshouldreceive atleast 75dBm. YoucanachieveahighaccuracywithjustoneAPbeingaudible,aslongasitisaudibleat 50dBmor better theaccuracyistypicallygoodclosetoanap Areasrequiringminimallocationcoverage Aminimumsignalof 75dBm(isalwaysrequired. 65dBmminimumcoverageorbetteris recommendedforhigherreliability. EkahauSiteSurveyhastheLocationCoveragevisualizationtodisplayhowgoodthelocationcoverageis. Use LocationCoverageforMyAccessPoints. [Aruba & Ekahau Design & Implementation Guide]

Figure 7 Location Coverage Visualization in ESS ARM, Channel and Power Assignments EkahautagsarefullycompatiblewithARMwheninbeaconingmode.ARMisalwaysrecommendedand hasnoimpactonlocationaccuracy.

13 Figure 7 Location Coverage Visualization in ESS ARM, Channel and Power Assignments EkahautagsarefullycompatiblewithARMwheninbeaconingmode.ARMisalwaysrecommendedand hasnoimpactonlocationaccuracy.intagassociationmode,theremaybesomeimpactonlocation accuracy.tolimitthis,setthemaximumpoweradjustmentthresholdinarmtoalowervalue. Configuring Step 2: Create the WLAN for RTLS ThefollowingstepsarerequiredinArubaOStocreatetheWLANusedforlocationtracking: IPaddressspacesufficientforalltags,inasinglesubnet Firewallrulesanduserrolefortags DedicatedSSIDforTaguse bwithrequiredratesof1MBand2MB Channelassignment(asrequiredforenterpriseWLANcoverage) IP Addresses TagsrequireuniqueIPaddressesonasinglesubnet.Two waycommunicationwilltakeplacewiththe server,allowingtagstoreceiveprogrammingchangesovertheair,andenablingmessagingwiththe T301BDtag.AsufficientnumberofstaticorDHCPIPaddressesmustbeallocatedforthenumberof trackeddevices.tagsshouldnotrequireanewipaddressordefaultgatewayuntilthedhcpleasetime hasexpired. Howthisisstructuredwilldependonthearchitectureofthenetwork.Onepossibilityistohavea dedicatedwirelessvlanforonlytag relatedtraffic.thisvlancouldthenroutetothelocationofthe EkahauPositioningEngine.ToaddaVLANtothecontrollerforRTLStag,seenextsectiononconfiguring VLANs. 12 [Aruba & Ekahau Design & Implementation Guide]

14 Configuring the VLANs NavigatetoConfiguration>Network>VLANspageandselecttheVLANlink.Thispagewilldisplayallthe VLANsconfiguredsofar.TocreateanewVLAN,clickontheAddtabandconfiguretheVLAN.After enteringtheconfigurationinformation,clicktheapplytabtoapplythesettings.thiswillcreateanew VLAN. [Aruba & Ekahau Design & Implementation Guide]

Figure 8 ArubaOS, Configuring a VLAN NavigatetoConfiguration>Network>IPpageandselecttheIPlink.ThispagewilldisplayalltheVLANs alongwiththeiripinterfacesthathavebeenconfiguredsofar.

Figure 9 ArubaOS, Configuring an IP Interface for the VLAN Assigning ports to a VLAN YouhavetheoptionofassigningaphysicalporttotheRTLSVLAN.However,theVLANdoesnothaveto haveaphysicalportassignment.

15 Figure 8 ArubaOS, Configuring a VLAN NavigatetoConfiguration>Network>IPpageandselecttheIPlink.ThispagewilldisplayalltheVLANs alongwiththeiripinterfacesthathavebeenconfiguredsofar.toconfigureanipinterfaceforthevlan, ClickontheEditbuttonalongthenewlycreatedVLANandprovisiontheIPaddressandtheNetMask. Figure 9 ArubaOS, Configuring an IP Interface for the VLAN Assigning ports to a VLAN YouhavetheoptionofassigningaphysicalporttotheRTLSVLAN.However,theVLANdoesnothaveto haveaphysicalportassignment.thewirelesstrafficcanbecontainedonawirelessonlyvlanandthen routedtoawiredvlan.thefinaldesignwilldependonthenetwork. IfyouwishtoassignaphysicalporttotheRTLSVLAN: NavigatetotheConfiguration>Network>Portpage.Selecttheportthatneedstobeconfiguredandset upasrequired.inthisexample,theportconnectingtothel2switchisatrunkportwithothervlans (dataandvoiceforexample).forconfigurationguidelines,refertothearubaosuserguide. Figure 10 ArubaOS, Assigning a Port to the RTLS VLAN 14 [Aruba & Ekahau Design & Implementation Guide]

Firewall Rules and User Role for Ekahau Tags Ekahautagsmaynotusethesameencryptionasotherdevicesonthenetwork.Ideally,theyshouldbe restrictedbythearubapolicyenforcementfirewallformaximumsecurity.

16 Firewall Rules and User Role for Ekahau Tags Ekahautagsmaynotusethesameencryptionasotherdevicesonthenetwork.Ideally,theyshouldbe restrictedbythearubapolicyenforcementfirewallformaximumsecurity.thestandardportsfor Ekahautrafficarelistedbelow.Notethatmostoftheseportsareconfigurable,andthatyoumaynotuse alltagmodelsinyourenvironment.theepeserver(forfirewallpurposes)doesnotinitiate communicationwiththetags,butrespondstothetag,sothefirewallrulesonlyneedtobeunidirectional toaccountforthisflowoftraffic. Clientdevicesandapplicationinitiateasessiontothepositioningengineviathecommunicationportsas describedinthetablebelow. Table 1 Ekahau Communication Protocols and Ports Protocol/Port TCP/8550 TCP/8548 UDP/8549 UDP/8554 UDP/8552 UDP/8553 UDP/8545 UDP/8546 TCP/8560 Service Ekahau EPS GUI and T201 tag maintenance Ekahau T201 tags Ekahau T201 tags Ekahau T301 tags firmware update Ekahau T301 tags Ekahau T301 tags Ekahau clients (software tags) location update Ekahau clients (software tags) location update Ekahau Vision Application Toconfiguretheseaccesspolicies,navigatetotheConfiguration>Security>AccessControl>Policiespage. ClickonAddtoaddanewfirewallpolicyandconfigureitsimilarlytoasshown. Figure 11 ArubaOS, Configuring Access Control Policies [Aruba & Ekahau Design & Implementation Guide]

Thepolicyasconfiguredintheaboveexampleallowsalltagmodels.TheEkahauserverisassignedan aliastosimplifychangesiftheserver sipaddresschanges.

17 Thepolicyasconfiguredintheaboveexampleallowsalltagmodels.TheEkahauserverisassignedan aliastosimplifychangesiftheserver sipaddresschanges.likewise,thetagnetworkcouldbeassigned analiasordefinedmoreprecisely,ratherthanusing any asthesourceintheruledefinition. A Note on Blacklisting ArougedatadevicecouldattempttospoofaRTLSclient(tag)inordertogainnetworkaccess.Inorderto preventthis,policyviolatorscanbeblacklisted.forexample,auserontheekahautagrolethattriesto accessthenon RTLSserversorinfrastructureorusenon Ekahauprotocolsornon Ekahauportscanbe blacklistedanddeniedanyaccesstothenetwork. Toconfigureblacklisting,navigatetothepolicyconfigurationpageConfiguration>FirewallPolicies>Edit Policy(EkahauTags)andaddtherule: anyanyanydenyblacklist.notethatthismustbethelastrulein theacllist. Totakeactionontheblacklistedclientsandpreventthemfromaccessingthenetwork,goto Configuration>RFManagement>ProtectionandenableDoSProtection.Thiswillresultintheclient beingde authediftheytrytoaccessthenetwork. Assign Policies to the Role Oncethepoliciesarecreatedtheyneedtobeassignedtotheuserrolesthatthedeviceswillbeassigned touponsuccessfulauthentication.theroledefinedinthisexampleis EkahauTags.Navigateto Configuration>Security>AccessControl>UserRoles,andthenclickAdd.Nametherole,thenaddthe firewallpolicycreatedabove.oncecomplete,thenapplyandsaveconfiguration. Figure 12 ArubaOS, Adding User Roles 16 [Aruba & Ekahau Design & Implementation Guide]

Dedicated SSID - WLAN Configuration ConfiguringtheWLANsettingsinvolvesthefollowingsteps ConfiguringanAPgroupwhichisthelogicalcollectionofAPswiththesameRFandSecuritysettings

18 Dedicated SSID - WLAN Configuration ConfiguringtheWLANsettingsinvolvesthefollowingsteps ConfiguringanAPgroupwhichisthelogicalcollectionofAPswiththesameRFandSecuritysettings AssigningthevirtualAPsandauthenticationprofilestotheAPs AssigningtherightAPgroupstotheAPsthatconnecttothecontroller RefertotheArubaOSUserGuideforinitialconfigurationoftheAPs.OncetheAPsareconnected,theywill bootstraptothecontrollerandwillbeassignedthedefaultprofile.afterthis,theapscanbeseenonthe controlleras ArubaAccessPoints onthemonitoring>networksummarypage. InArubaOS,relatedconfigurationparametersaregroupedintoprofilesthatcanbeappliedasneededto anapgrouportoindividualaps.youcanapplythefollowingtypesofprofilestoanaporapgroup: WirelessLANProfilesconfigureWLANsintheformofVirtualAPProfiles.AVirtualAPprofilecontainsan SSIDProfilewhichdefinestheWLANandanAAAProfilewhichdefinestheauthenticationfortheWLAN. ThisistheprofileweareconcernedwithforthepurposesofEkahauintegration. Otherprofilesavailable: APProfilesconfigureAPoperationparameters,radiosettings,portoperations,regulatorydomain,and SNMPinformation QoSProfilesconfiguretrafficmanagementandVoIPfunctions RFManagementProfilesconfigureradiotuningandcalibration,APloadbalancing,coveragehole detection,andrssimetrics IDSProfiles,WirelessMeshProfiles,etc.formoreadvancedconfigurationsforWIPSandmesh deployments AP Groups, AAA Profile, Virtual AP Profile, SSID Profile Configurations EkahauRTLSwillbeincreasinglyaccurateasthedensityofdeployedAPsinthedesiredareaforlocation trackingincreases.dependingonhowtheapsaredeployedandmanagedinthenetwork,youmaywant toaddthewlanprofilefortheekahaussidtomostorallofyourapgroups. [Aruba & Ekahau Design & Implementation Guide]

NavigatetoConfiguration>Wireless>APConfiguration>APGroup Figure 13 ArubaOS, Adding AP Groups ClickontheNewbuttontocreateanewgroup,orclickonEdittoaddtheEkahauWLANprofiletoan existinggroup.

19 NavigatetoConfiguration>Wireless>APConfiguration>APGroup Figure 13 ArubaOS, Adding AP Groups ClickontheNewbuttontocreateanewgroup,orclickonEdittoaddtheEkahauWLANprofiletoan existinggroup.navigatetowirelesslanandtovirtualap.thefullpathis: Configuration>Wireless>APConfiguration>APGroup>[APgroupname]>WirelessLAN>VirtualAP Fromthedropdown,chooseNew,andthenprovidetheprofileaname(Ex. EkahauRTLS )andclickadd. NotethatiftheEkahauRTLSWLANprofilehasalreadybeencreated,itcouldbeaddedtoaVirtualAP profilefromhere.tofinishtheconfiguration: FromtheAAAdropdown,choose default dot1x psk clickapplyintheresultingscreen.alternately, choosenewfromthedropdownandcreateaspecificaaaprofile. FromtheSSIDProfiledropdown,chooseNew.Intheresultingscreen: Give the profile a name Ex. EkahauRTLS Type an SSID for the profile - Ex. ekahau Choose the radio button for WPA2-PSK (thisisassumingt301badges;choosewep oropenifotherwiserequiredbasedonbadgecapabilities) Choose AES encryption (default) Under Keys choose Hex orpassphraseandtypethepsk(presharedkey)youhave chosenforthiswlan Click Apply In the resulting screen (the virtual AP list) click Apply and then Save Configuration ConfirmSSIDminimumdataratesaresupported Intheprofiletree,gotothenewprofile, SSIDprofile andthenclickadvancedintherighthand window.thefullpathis: Configuration > Wireless> AP Configuration > AP Group >[ AP group name] > Wireless LAN > Virtual AP > [Ekahau SSID profile] > SSID profile > Advanced 18 [Aruba & Ekahau Design & Implementation Guide]

20 Confirm that 1 Mbps and 2 Mbps data rates are supportedontheg(2.4ghz) band Figure 14 ArubaOS, AP Configuration, SSID Profile (Basic) [Aruba & Ekahau Design & Implementation Guide]

21 Figure 15 ArubaOS, AP Configuration, Virtual AP Profile Channel Assignment and ARM Asstatedearlier,EkahautagsoperatinginArubaBlinkModearefullycompatiblewithdynamicpower adjustment.tagpowerremainsconsistent,sothetransmissionpowerofapsdoesnotimpactlocation accuracyinanyway.armalsominimizesinterferenceandautomaticallyprovidesthemoststable environmentfortagcommunication. InAssociationMode,ARMchangescanhaveasmallimpactonlocationaccuracy,whichcanbefurther mitigatedbysettingminimumandmaximumthresholdsforarmpoweradjustments. OnemustensurethatthechannelsusedforARMarethesameasthosethetagsareconfiguredtouse.In short,nomajorchangestoarmarenecessary. Configuring ArubaOS to Pass Data to the EPE ThisstepisonlynecessaryforArubaBlinkModeconfiguration,andisdescribedinthenextsection. Configuring Step 3: Deploy Ekahau Positioning Engine (EPE) Atthispoint,aWLANthatsupportsEkahautagshasbeenconfigured.Itisnownecessarytocompletethe Ekahauconfiguration.Asafirststep,anEkahauPositioningEngineservermustbeaddedtothenetwork. PleaseseetheEkahaudocumentationfordetails,particularly: EkahauPositioningEngineUserGuide EkahauRTLSGuide Ekahau System Requirements TosetupinfrastructurebasedpositioningwithAruba,youwillneed,ataminimum: EkahauPositioningEnginev.4.5ornewer EkahauSiteSurvey4.5ornewer EkahauActivator4.5ornewer EkahauT301AtagFWversion EkahauAtherosWi FiAdapterdriverwhichisbundledwithEkahauActivatorandESS 20 [Aruba & Ekahau Design & Implementation Guide]

22 Note: ActivatorandmustbeinstalledfromthesameRTLSpackage,otherwisetheremaybea drivermismatchifrunonthesamelaptop N O T E EkahauT301tags LaptopcomputerrunningWindowsVistaorXP ThiswillrunEkahauSiteSurveyandEkahauActivator Atheros based802.11abgadapterforthelaptopcomputer(seewww.ekahau.com/devicesfor supportedadapters) DesktopcomputerrunningXPorWindows2003Server EkahauPositioningEnginewillrunonthiscomputer Install Ekahau Software InstallEkahauPositioningEngineonaWindowsXPorWindowsServersystem Deploythatsystemonthenetwork.TheIPaddressoftheEPEshouldmatchthealiasusedinthe ArubaFirewallPolices.Otherwise,theIPaddressofthefirewallpolicywillhavetobechanged. TherewillbeanoptiontochangetheconfigurationofTCP/UDPportsusedbytheEkahausystem. Changesherewillmeanchangesormodificationsofthefirewallpolicy. InstallEkahauSiteSurveyandEkahauActivatoronthelaptop.Alsoinstallthewirelessnetwork adapterdriversforyouratheros basedwirelessnetworkadapter.theinstallerrecommendsadriver update,andupdatesthedriversifnecessary. Thisisinanticipationofthenecessarysitesurveyandcreationofapositioningmodel Configure the Aruba Controller to pass data to the Ekahau Positioning Engine ThisstepisonlyneededwhenusingArubaBlinkMode. LogintotheArubaController IntheArubaControllerWebInterface,navigateto: Configuration > Wireless > AP Configuration > AP > AP System Profile Scroll down to RTLS Server Configuration [Aruba & Ekahau Design & Implementation Guide]

23 Figure 16 ArubaOS, AP System Profile, RTLS Server Configuration IntheRTLSserverconfiguration,setEkahauPositioningEngineIP,port,andenteranidentificationkey (youwillneedtoenterthistwice).theidentificationkeyisasharedsecretthatyoucanfreelychoose. EPEusesthekeytoauthorizetheArubasystemtofeedthesignaldataintotheEPE. Configure Ekahau Positioning Engine to Accept Data from the Aruba System ThisstepisonlyneededwhenusingArubaBlinkMode. GototheEPEserver StoptheEPEservice Start>run>services.msc Scrollto EkahauPositioningEngineService anddoubleclick Click stop leavethewindowopen 22 [Aruba & Ekahau Design & Implementation Guide]

$propertiesinatexteditor Defaultpath:C:\ProgramFiles\Ekahau\EkahauPositioningEngine\conf\system.properties Typethefollowinglineinthesystem.propertiesfile: apreceiver.aruba.hmac.$

24 Figure 17 EPE Configuration, EPE Services InthefolderyouinstalledtheEkahausoftware,openthefileconf/system.propertiesinatexteditor Defaultpath:C:\ProgramFiles\Ekahau\EkahauPositioningEngine\conf\system.properties Typethefollowinglineinthesystem.propertiesfile: apreceiver.aruba.hmac.key=kukka where kukka isthekeythatyoujusttypedinthearubacontrollerwebinterface Savethefileandclosethetexteditor Re startekahaupositioningengineservice Start>run>services.msc Scrollto EkahauPositioningEngineService anddoubleclick ClickStart Configuring Step 4: Activate Survey Tag and Perform Ekahau Site Survey EkahauSiteSurveyisalaptop basedapplicationforconductingasitesurveyanduploadingapositioning modeltotheepe.seetheappropriateekahaudocumentationformoredetailsthanareprovidedinthis document. Figure 18 Ekahau Site Survey (ESS) Example [Aruba & Ekahau Design & Implementation Guide]

AcompletesitesurveyofthefacilityisrequiredforthePositioningEnginetotrackthetags.Whenhigh locationaccuracyisdesired,ekahaurecommendssurveyingtheareawithanekahau(t301a)tag.

25 AcompletesitesurveyofthefacilityisrequiredforthePositioningEnginetotrackthetags.Whenhigh locationaccuracyisdesired,ekahaurecommendssurveyingtheareawithanekahau(t301a)tag. Beforesurveyingtheareawithatag,thetagmustbesettoSurveyMode.Thisprocedureissignificantly differentforarubablinkmodeandassociationmode. Priortositesurveys,youwillneedtoaddmapstoESSandsettheirscale. 24 [Aruba & Ekahau Design & Implementation Guide]

Figure 19 ESS, Insert Map and Set Scale Surveying with Aruba Blink Mode ShouldtherebeanyquestionsconcerningSiteSurveys,pleaseconsulttheEkahauSiteSurvey

26 Figure 19 ESS, Insert Map and Set Scale Surveying with Aruba Blink Mode ShouldtherebeanyquestionsconcerningSiteSurveys,pleaseconsulttheEkahauSiteSurvey documentation(deployingrtlswithekahausitesurvey,includedintheessinstaller).thefollowing includestheprimarydifferencesinperforminganarubainfrastructure basedsitesurveyratherthana client basedsurvey. WhenperformingsitesurveysusingArubaBlinkMode,youwillneedto: ActivatethetagtoconnecttotheEngine(EPE) UploadandupdatethetagfirmwareusingEngineGUI(ifnecessary) SetthetagtoArubaBlinkSurveyMode ConnecttotheTagfromEkahauSiteSurvey(ESS) PerformSiteSurveys TagsneedaWLANthatallowsthemtoreachtheEPEserverinordertobeconfiguredandtohavetheir firmwareupdated.youmayusethewlanwehavealreadydefined,oryoumayuseanalternatewlan forthispurpose. ThestepsinthissectionareonlyrequiredwhenusingArubaBlinkMode.SeethenextsectionforTag AssociationMode. Activate Survey Tag to Connect to Engine (EPE) EkahauActivatorisaprogramthatrunsonWi FienabledWindowsXP/2000/Vistalaptopinorderto wirelesslyassignbasicsettingstoanekahaulocationtrackingtag.activatorwillletyouconfigurethetag withtheepeserver sipaddress,andwiththewlanthetagshouldusetoaccesstheepeserver.for moredetails,pleasesee: T301ActivatorUserGuide Aftersuccessfulactivation,thetagwillshowupintheEPEGUIandtheadministratorwillthenbeableto fullymanagethetags. Figure 20 Ekahau Tag Activator, WLAN Settings [Aruba & Ekahau Design & Implementation Guide]

27 Figure 21 Ekahau Tag Activator, EPE Settings 26 [Aruba & Ekahau Design & Implementation Guide]

Figure 22 Ekahau Tag Activator, Scan Settings Upload and Update Tag Firmware AtagfirmwareupdateistypicallyonlyrequiredifArubaBlinkModeisused.

28 Figure 22 Ekahau Tag Activator, Scan Settings Upload and Update Tag Firmware AtagfirmwareupdateistypicallyonlyrequiredifArubaBlinkModeisused. GototheEPEWebUI seeekahaudocumentation Defaultsettingis: IP>:8550 Defaultloginis admin/admin Notethatdefaultlogincanbechangedunder users>admin CheckiftheFWis2.3.4ornewer.Ifnot,proceedwithfirmwareupload UploadnewfirmwaretotheEPEserver IntheEPEUI,gotoConfigs>Uploadnewtagfirmware Browsetothenewfirmware(whichneedstobeonyourmanagementsystemharddrive) SelecttagFW2.3.4ornewer [Aruba & Ekahau Design & Implementation Guide]

Figure 23 EPE UI, Upload New Tag Firmware Installfirmwareontags NavigatetotheTagspage Select(viacheckbox)thetagsyouwanttoupdatetheArubaFWto(inotherwords,thetagsthat

29 Figure 23 EPE UI, Upload New Tag Firmware Installfirmwareontags NavigatetotheTagspage Select(viacheckbox)thetagsyouwanttoupdatetheArubaFWto(inotherwords,thetagsthat needtobelocatedusingarubainfrastructure basedpositioning) Aftercheckingthetags,clickAdvanced SelectfirmwareversionfromFirmwareUpdate,clickSet Waituntilthemaintenanceintervalisdueforthetags,andwaituntilthetagFWisupdated OptionallyclickonthewhitetagbuttontoforceimmediateFWupdate Put One of the Tags in Aruba Blink Survey Mode UsersalreadyfamiliarwithAssociationModeshouldnotethatonedoesNOTuseEkahauActivatorfor settingthesurveymode.instead,amanualcommandispushedfromtheenginetoforcethearubablink SurveyMode: AfteractivatingthetagandupdatingtheFW,intheEPEGUI,gotoTagspage,selectthetagyouwant tosettosurveymode Inthe manualcommands checkbox,typethefollowing wsc1,6,11 I16:wsm1 wcs N O T E Note: IMPORTANT:Inthisexample,1,6,11arethechannelsusedintheArubaAPsoperatingat 2.4GHz.Adjustifnecessary.UseonlythechannelsthattheAPsareon,nothingmore,and nothingless. 28 [Aruba & Ekahau Design & Implementation Guide]

30 N O T E I16:wsm1setsthetagtoArubaBlinkMode.I16:wsm0setsthetagbackto traditional ELP Mode.Thewcs commandenablesthesurveymode(tagblinksrapidly(the lightdoesnot,butthetagsends blinkpackets morefrequently) Press SendCommands Pushthewhitebuttononthetagtoforcetheupdateorwaitforthemaintenanceinterval N O T E N O T E Note: InFWversion2.3.4thetaglightsdonotblinkinArubaSurveymode youwillneedto checkcorrectoperationusingess.theremaybesomeotherissueswiththelightsalso(with periodicscanning,forexample). Note: WhensurveyingwithEkahauT301tags,theSSIDwillnotbedetected. Surveying with Tag Association Mode ThestepsinthischapterareonlyrequiredwhenusingTagAssociationMode.Seethepreviouschapter forarubablinkmode. Putoneofthetagsto(TagAssociation)SurveyMode UseEkahauActivatortosetthetagtoSurveymode: SelecttheSurveyActivationtab,andconfiguretheappropriatesettings IfthelocationSSIDisnon broadcasting,ensureyouenterthelocationssidcorrectly YoucanalsoenterasecondarySSIDifsodesired Nowthetagwillconstantlyblink,meaningitisconstantlyscanningandisreadyforsurveyuse Pushthebluebuttontopausethescanning,andpushitagaintocontinue CloseEkahauActivatorApplication [Aruba & Ekahau Design & Implementation Guide]

Figure 24 Ekahau Tag Activator, Activate Tag in Tag Association Survey Mode Start Ekahau Site Survey (ESS) GodoDevice>Devices SelectConnectT301

31 Figure 24 Ekahau Tag Activator, Activate Tag in Tag Association Survey Mode Start Ekahau Site Survey (ESS) GodoDevice>Devices SelectConnectT301 Ifthetagisblinking,ESSshouldfindthetagandstartscanningwithit ExittheDevicesdialog Clickontheminiaturesignalstrengthview Youshouldseesignalstrengthvaluesupdating,anddatacominginfromdeviceT301(ifnot,repeat theproceduretore detectthetag) Performsitesurveysasyounormallywould(fordetails,seeEkahauSiteSurveyUserGuide) Afterperformingthesurveys,testreal timetrackingofthetagand/orperformadditionaltestsurveys 30 [Aruba & Ekahau Design & Implementation Guide]

Figure 25 ESS, Connecting a T301 Tag with Site Survey Associating Mode N O T E Note: WhensurveyingwithEkahauT301tags,theSSIDwillnotbedetected.

32 Figure 25 ESS, Connecting a T301 Tag with Site Survey Associating Mode N O T E Note: WhensurveyingwithEkahauT301tags,theSSIDwillnotbedetected. Performing Surveys and Selecting My Access Points Performingsitesurveysiseasy:Justselectthesurveytoolandclickyourcurrentlocationonthemapas yougo.notethatthedataisconstantlycollected,notjustwhenyouclickonthemap. [Aruba & Ekahau Design & Implementation Guide]

Figure 26 ESS, Performing Site Surveys ESSneedstoknowwhichaccesspointsareinyournetwork,andwhicharenot.OnlytheAPsinyour networkwillbeusedinpositioning.selectmyapsusingtheaplist.

33 Figure 26 ESS, Performing Site Surveys ESSneedstoknowwhichaccesspointsareinyournetwork,andwhicharenot.OnlytheAPsinyour networkwillbeusedinpositioning.selectmyapsusingtheaplist. Tohelpthisprocedureandtoseeaclearernetworkpictureoverall,youcanplacealltheaccesspointson themapafterthesurveys.usesite>automaticallyplaceaccesspointstoautomaticallyplacetheapson themap.thisplacementmaynotbespot on,butitgivesagoodideawherethestrongestaccesspoints are.youcanmovetheapstotheircorrectlocationsusingtheedittool. 32 [Aruba & Ekahau Design & Implementation Guide]

34 Figure 27 ESS, Selecting My APs Configuring Step 5: Draw Tracking Rails, Open Spaces and Zones Drawing Tracking Rails Foraccuratelocationtracking,EPEneedsthemostcommonpathsthataretakenbytheuser.Forthis, EkahauusesTrackingRails.Thetrackingrailsaredrawnonthemap,usingESS,beforeorafterthe surveys. [Aruba & Ekahau Design & Implementation Guide]

Figure 28 ESS, Drawing Tracking Rails (Orange and White Lines) Drawing Open Spaces Shouldtherebenoknownpathwaysinsomelocation(suchasinlobbyareasorcafeterias).

35 Figure 28 ESS, Drawing Tracking Rails (Orange and White Lines) Drawing Open Spaces Shouldtherebenoknownpathwaysinsomelocation(suchasinlobbyareasorcafeterias).Tracking Railsshouldnotbedrawnintheselocations.Instead,useOpenSpacestodrawarectangleorafree form polygontoindicatetheareawheretheexactpathsofmovementwillnotbeknownapriori. Note: RailsshouldalwaysconnecttoOpenSpacestoindicatethatthereisawayforthe trackeddevicetotraveltoanopenspace. N O T E N O T E Note: Therailsshouldcovertheentiretrackingarea,justaswiththesurveys.Whereveryou haverails,youshouldhavesurveysalso.pleaseusethecalibrationqualityvisualizationiness toseeifyouhavesurveyedonalltherails. 34 [Aruba & Ekahau Design & Implementation Guide]

Figure 29 ESS, Drawing Open Spaces and Tracking Rails (And Connecting Them) Drawing Zones Ifyouwanttoassociatemeaningfulnamestochosenareasofthefacility(thatareutilizedintheenduser

36 Figure 29 ESS, Drawing Open Spaces and Tracking Rails (And Connecting Them) Drawing Zones Ifyouwanttoassociatemeaningfulnamestochosenareasofthefacility(thatareutilizedintheenduser application),usezones.forexample,iftheapplicationneedstodisplaywhetherthedoctorisintheeror cafeteria,youwillneedtodefinethoseareasonthemapsas Zones inthiscase,drawazoneonthe maptocovertheer,andanothertocoverthecafeteria. TodrawZones,usetheZonetoolontheRTLStabinESS. [Aruba & Ekahau Design & Implementation Guide]

Figure 30 ESS, Drawing Zones Ensuring Location Tracking Accuracy (Precursor to Configuring Step 6) NowthatthePositioningModelisfinished,itisrecommendedthatonecheckthelocationtracking accuracy.

37 Figure 30 ESS, Drawing Zones Ensuring Location Tracking Accuracy (Precursor to Configuring Step 6) NowthatthePositioningModelisfinished,itisrecommendedthatonecheckthelocationtracking accuracy.therearetwomainmethodsfordoingthis,ekahaurecommendsimplementingbothmethods foroptimumtrackingaccuracy: LiveAccuracyTesting AccuracyTestingUsingTestSurveys Live Accuracy Testing Totesttheaccuracyrightafterthesurveys,keeptheSurveytagblinking,andkeeptheEkahauSite Surveyopen.OntheRTLSTabofESS,clicktheTrackbutton(the target iconintheupper rightcorner). ThisallowsyoursurveytagtobetrackedbyESS.Youcan,inreal time,seethelocationtrackingaccuracy whenwalkingaroundthefacility. 36 [Aruba & Ekahau Design & Implementation Guide]

Figure 31 ESS, Testing Location Tracking Accuracy in Real-Time Accuracy Testing Using Test Surveys Ekahaualsorecommendsperformingquicktestsurveysaroundthefacility.

38 Figure 31 ESS, Testing Location Tracking Accuracy in Real-Time Accuracy Testing Using Test Surveys Ekahaualsorecommendsperformingquicktestsurveysaroundthefacility.Performasecondarysetof surveyssimilarlytotheprevioussurveys.coveringabout10 25%oftheoriginalsurveyareaisagood target. GototheSurveystab(insteadofAccessPointslist),andassignthesurveysyoujustmadeasTestSurveys only.youcanhighlightmultiplesurveys,right click,andselectdeselectfromcalibrationandselectastest. [Aruba & Ekahau Design & Implementation Guide]

Location Accuracy, Accuracy Statistics LocationAccuracyHeatmapVisualization:Checkvisually,onamap,whatyourlocationaccuracylooks like.

39 Figure 32 ESS, Assigning Test Surveys Nowyoucananalyzethelocationaccuracybasedonthetestsurveysinseveralways: Accuracystatistics:GotoPositioning>AccuracyStatisticstodisplayasummarizednumericalanalysis ofthefloor,meter/feetandzoneaccuracy Figure 33 ESS, Analyzing Test Survey Location Accuracy, Accuracy Statistics LocationAccuracyHeatmapVisualization:Checkvisually,onamap,whatyourlocationaccuracylooks like.thiswilldisplaywithin flooraccuracyaswellasanyfloorerrors(floorerrorsmarkedwith circlesorrectangles,greenishighaccuracy) Figure 34 ESS, Analyzing Test Survey Location Accuracy, Location Accuracy Heatmap Visualization 38 [Aruba & Ekahau Design & Implementation Guide]

40 ErrorVectors(View>ErrorVectors):Thiswillshowyoutheactuallocationerrorsonthemap,oneby one.thebluearrowswillshowwhereyouwereoriginallyplaced(thestartingpointofthearrow) andwheretheepewouldhaveplacedyou(theendpointofthearrow). [Aruba & Ekahau Design & Implementation Guide]

Figure 35 ESS, Analyzing Test Survey Location Accuracy, Error Vectors Shouldtherebelocationswherelocationaccuracyproblemsarerepeatedlyencountered,checkthesignal

41 Figure 35 ESS, Analyzing Test Survey Location Accuracy, Error Vectors Shouldtherebelocationswherelocationaccuracyproblemsarerepeatedlyencountered,checkthesignal coverageinthoselocationsusingsignalstrengthandlocationcoverageheatmapvisualizations.ifthere isinsufficientcoveragethere,ekahausuggestsfirstperformingmore(calibration)surveysinthearea, andiftheproblempersists,addingmoreapsisrecommendedforconsideration.pleaseseetheimage belowforbasicaccuracyimprovementguidelines. 40 [Aruba & Ekahau Design & Implementation Guide]

42 Figure 36 Evaluating Location Accuracy: Accuracy Improvement Guidelines Configuring Step 6: Upload Positioning Model from Ekahau Site Survey to Ekahau Positioning Engine NowthatthePositioningModelhasbeencompletedandtested,it stimetouploadittotheekahau PositioningEngine: Savethe.esxProjectonaUSBdrive Copythe.esxtotheEnginecomputer UsingtheEngineGUI,uploadtheModeltoEngine: GotoModels>UploadaNewModel ActivatethemodelafteruploadingitbyclickingonthemodelnameandselectingSetActive YourEkahauPositioningEngineisnowreadytotrackWi Fidevices. Configuring Step 7: Deploy Tracking Tags YourTags,EPEandArubainfrastructurehavenowbeenconfiguredtouseinfrastructure basedsignal measurements.youcannowapplyprogrammingsettingsandchanget301tagconfigurationsas describedintheekahaupositioningengineuserguide Production Tag Configurations for Aruba Blink Mode UseEkahauActivatortoconnectalltheproductiontagstotheEngine(EPE) IntheEPEGUI,selectallthetagsortaggroupsyouwanttosettheconfigurationto,andsendthe configurationtothetags DoremembertochecktheArubaBlinkModecheckboxinthetagconfigurationpage ForimprovingaccuracyinArubablinkmode,Ekahaurecommendsincreasingtheblinkratewiththe multi scancommand. [Aruba & Ekahau Design & Implementation Guide]

43 N O T E Note: Pushtheproductionconfigurationstothetagsimmediatelyafteractivatingthetags,as thedefaultinitialtagactivationsetsthetagstofrequentwakeupinterval,whichmaydrainthe batteryquickly. Production Tag Configurations for Tag Association Mode UseEkahauActivatortoactivatealltheproductiontagstoconnecttoEngine. UsetheEPEWebGUItoconfiguretheproductionsettingstothetags. Forimprovingaccuracyinassociationmode,Ekahaurecommendsincreasingtheblinkratewiththe followingadvancedscansettings: InitialScan3 AftermotionScanCount3 6(dependingonbatterylifeexpectations)incaseswhere motionsensorisenabled. ButtonScanCount3ifbuttonisusedinproduction. N O T E Note: Pushtheproductionconfigurationstothetagsimmediatelyafteractivatingthetags,as thedefaultinitialtagactivationsetsthetagstofrequentwakeupinterval,whichmaydrainthe batteryquickly Tag Battery Life vs. Blink Rate Themorefrequentlythetagsblink,theshorterthebatterylifewillbe.Inassettrackingscenarios,a30 minutewakeupinterval,combinedwithmotionoraftermotiontracking,maybeacceptable(resultingin yearsofbatterylifewitht301a).personneltracking,however,mayrequire30secondwakeup(requiring frequentrecharge). TheEPEGUIincludesabatterylifecalculatorbasedonthecurrentwakeupsettings. See ActivateTagstoConnecttoEngine(EPE) sectionaboveformoredetailsrelatingtotagconfiguration andsetup. Special and Advanced Considerations Multiple Simultaneous Surveyors Inamulti floorbuilding,severalsurveyorscansurveydifferentfloorsofthebuildingsimultaneously.use File>MergeinESStocombinetheProjectsaftersurveying. Outdoor Deployments Whenworkinginoutdoorenvironments,specialconsiderationsmayneedtobetaken.Theaccuracymay notbeashighasforindoordeploymentsdependingonthemethodofcoverage,apdensity,etc. ThesurveydatainEPEisassociatedwiththerails,andneedstobecloseenoughtotherails.Thismaynot alwaysbethecaseinlargeoutdoordeployments.gotosite>setactivemaptypetoadjustthemaptype tooutdoor thisallowsthesurveydatatobeconnectedtotherailsfromafurtherdistance.usethe CalibrationQualityVisualizationtoverifythatthesurveydatahasbeenassociatedwiththerails. 42 [Aruba & Ekahau Design & Implementation Guide]

Figure 37 Calibration Quality Visualization and Rail Width PleaseconsultEkahauSiteSurveyuserdocumentationandEkahauEngineering(support@ekahau.com) fordetailsonoutdoordeploymentbestpractices.

44 Figure 37 Calibration Quality Visualization and Rail Width fordetailsonoutdoordeploymentbestpractices. Improving Accuracy Iftheaccuracyisnotsatisfactory,firstperformmoresurveysinthearea.Iftheaccuracyisstillnot acceptable,accesspointsmaybeaddedtotheproblematicareas. Achieving Very High Room Accuracy Toachieveveryhighroomaccuracy,forexampleinprocessoptimizationapplications,Ekahau recommendsusingadditionallocationbeacons.thebattery poweredlocationbeaconsaremountedin theroomstoprovideadditionalaccuracyinthoserooms.inthiscase,ekahaupositioningengineuses bothwi FiAPsandLocationBeaconstocalculatethetaglocations. UsetheLocationBeacontoolinESStoplacethelocationbeaconsonthemap.Also,eachareawhere locationbeaconisplacedneedsazone. fordetailslocationbeacons. [Aruba & Ekahau Design & Implementation Guide]

45 Contacting Aruba Networks Web Site Support Main Site Support Site Software Licensing Site Wireless Security Incident Response Team (WSIRT) Support WSIRT Telephone Support Aruba Corporate +1 (408) FAX +1 (408) Support United States France United Kingdom Germany All Other Countries 800-WI-FI-LAN ( ) +33 (0) (0) (0) (408) [Aruba & Ekahau Design & Implementation Guide]

46 1344 Crossman Ave. Sunnyvale, CA Tel Fax Aruba Networks, Inc. AirWave, Aruba Networks, Aruba Mobility Management System, Bluescanner, For Wireless That Works, Mobile Edge Architecture, People Move. Networks Must Follow, RFProtect, The All Wireless Workplace Is Now Open For Business, Green Island, and The Mobile Edge Company are trademarks of Aruba Networks, Inc. All rights reserved. All other trademarks are the property of their respective owners.

PRODUCT LINE MATRIX: Mobility Controllers

PRODUCT LINE MATRIX: Mobility Controllers : ArubaOS 5.0 ARUBA 6000 MODULAR CONTROLLER WITH ARUBAOS 5.0 Features Aruba 6000 Chassis Supervisor Card SC-48-C1 SC-128-C1 SC-256-C2 M3 Max number of LAN-connected APs per controller 2,048 48 128 128