Technology Solution Guide Deploying Entuity s Eye of the Storm with Aruba Networks Secure Mobility Solution S/W Version: Eye of the Storm Enterprise 2011
WARRANTY DISCLAIMER THE FOLLOWING DOCUMENT, AND THE INFORMATION CONTAINED HEREIN IS PROVIDED ON AN "AS IS" BASIS. ARUBA MAKES NO REPRESENTATIONS, WARRANTIES, CONDITIONS OR GUARANTEES AS TO THE USEFULNESS, QUALITY, SUITABILITY, TRUTH, ACCURACY OR COMPLETENESS OF THISDOCUMENT AND THE INFORMATION CONTAINED IN THIS DOCUMENT. DISCLAIMER OF LIABILITY Aruba Networks, Inc. disclaims liability for any personal injury, property or other damages of any nature whatsoever, whether special, indirect, consequential or compensatory, directly or indirectly resulting from the certification program or the acts or omissions of any company or technology that has been certified by Aruba Networks. Certification does not mean that the company is a subcontractor or under the technical control or direction of Aruba Networks. In conducting the certification program Aruba Networks is not undertaking to render professional or other services for or on behalf of any person or entity. 1
Table of Contents Introduction... 3 Solution Components... 3 Aruba Campus WLAN Solution... 3 Entuity Solution... 3 ArubaEdge Solution Qualification... 4 Qualification Objective... 4 Network Topology... 4 Test Methodology... 9 Summary Test Results... 9 Conclusion... 9 Appendix 1... 10 Eye of the Storm 2011 management of Aruba WLANs... 10 About Aruba... 19 About Entuity... 19 Product Support Information... 19 2
Introduction This document describes the steps and guidelines necessary to configure Aruba s wireless LAN infrastructure to work interoperably with Entuity s EYE network management suite. The guide is intended to be used in conjunction with Aruba and Entuity EYE configuration guides. Please contact the respective company s sales engineering or support groups should additional information be required. Solution Verified: Aruba Product: Entuity EYE Aruba Campus WLAN Solution OS version 6.0.1.x Partner Solution Tested: Eye of the Storm Enterprise 2011 Solution Components Aruba Campus WLAN Solution Secure and reliable mobility is the responsibility of the enterprise network, which must support a wide range of converged clients over wireless, wired, and remote access networks. Laptops and smartphones are capable of simultaneously running voice, data, and now video applications, an operating model that breaks traditional dedicated VLAN and SSID architectures. Delivering the quality of service (QoS), bandwidth, and management tools necessary to accommodate these devices on a grand scale within a campus environment, to users on the road, and in branch offices requires a specially tailored system design. Aruba s unique application and device fingerprinting enable the system to detect the types of traffic flows, and the devices from which they originate. The network can then be dynamically conditioned to deliver QoS - on an application-by-application, device-by-device basis - as needed to ensure highly reliable application delivery. Aruba s integrated policy enforcement firewall isolates applications from one another to essentially create multiple dedicated virtual networks, and then allocates the necessary bandwidth for each user and application. To ensure reliable application delivery in changing RF environments, Aruba s Adaptive Radio Management (ARM) technology forces client devices to shift away from the noisy 2.4GHz band to the quieter 5GHz band, adjusts radio power levels to blanket coverage areas, load balance by shifting clients between access points, and even allocates airtime based on the capabilities of each client device. The result is a superb user experience without any user involvement. These services are complemented by security systems that ensure the integrity of the network. Rogue detection, wireless intrusion and prevention, access control, remote site VPN, content security scanning, end-to-end data encryption, and other services protect the network and users at all times. 3
Aruba s extensive portfolio of campus, branch/teleworker, and mobile solutions simplify operations and secure access to unified communications applications and services - regardless of the user's device, location, or network. This dramatically improves productivity, lowering capital and operational costs while providing a superior uninterrupted user experience. Entuity Solution Eye of the Storm (EYE) is a network management suite that combines performance, fault, and inventory management through a single user interface. EYE provides service providers, systems integrators, network specialists, planners, application owners and business managers with the information they need to manage complex and dynamic networks. EYE automatically discovers network layers 2 and 3 and layer 4 application services, thoroughly analyzes the data, and delivers actionable information to users via a Web browser and extensive reporting capabilities. EYE discovers and monitors a wide range of enterprise networking technologies from many vendors including, but not limited to, routers, Ethernet switches, wireless LANs (both controller based and autonomous), load balancers, firewalls and servers (physical and virtual). ArubaEdge Solution Qualification Qualification Objective Validate the interoperability of the Entuity EYE with the Aruba s wireless LAN infrastructure. 4
Network Topology Settings on the Aruba WLAN Enable SNMP v2 on the Aruba Mobility Controller, and configure the community string as follows: configure terminal snmp-server community <community string>! Entuity Settings The Wireless Controller module must be licensed and enabled. This can be confirmed through the Web UI Administration > EYE Health > License Health page as follows: 5
6
One or more Aruba Mobility Controllers can be added to the EYE inventory using the Administration > Inventory page as follows: To add a device click the Add button, then enter either its IP address or resolvable hostname into the Device Name field. The read-only community string should also be entered before clicking the Add and Close buttons: 7
The Inventory page will then show the newly added device with an animated icon in the Managed column indicating that it is being taken under management: Either wait for the screen to auto-update or click the browser s refresh button to show the new status: The Reachable icon will take a few minutes to update, however, the device is now under management and further configuration, status, and other information will be gathered. The device will become fully instantiated in the system over the next hour. 8
Test Methodology Summary Test Results A screen shot of EYE successfully monitoring the Mobility Controller is are shown below: See Appendix A for additional screen shots. Conclusion This application note summarizes the results of interoperability tests that were successfully run at Aruba Networks, and which validate the interoperability of the Entuity Management Solution operating on Aruba s WLAN infrastructure. 2011 Aruba Networks, Inc. Aruba Networks trademarks include, Aruba Networks, Aruba Wireless Networks, the registered Aruba the Mobile Edge Company logo, Aruba Mobility Management System, Mobile Edge Architecture, People Move. Networks Must Follow, RFProtect, and Green Island. All rights reserved. All other trademarks are the property of their respective owners. Specifications are subject to change without notice. 9
Appendix 1 Eye of the Storm 2011 management of Aruba WLANs A model 3600-US Aruba Mobility Controller was successfully remotely managed by Eye of the Storm (EYE) during this exercise. The screenshots below show the Web browser UI and different aspects views of the Mobility Controller and its associated access points. The EYE Explorer allows the user to navigate through devices under management using the tree structured pane on the left hand of the screen. Below is the main Mobility Controller summary screen: The network interfaces and their operating status are represented by icons on the Ports section in the right pane. A tooltip is available to show the name of the port. Clicking one of the icons changes the context to be that of the port that is shown in the navigation pane: 10
11
The four most recent hours of history and port metrics are shown in the thumbnail charts. In the case below the utilization level was sufficiently low that it is not visible in the thumbnail charts. However, clicking on such a chart will drill down into an interactive chart that auto-sizes the Y axis so it s viewable. The screen shot below lists additional detail about the ports. 12
An Advanced Details option allows all available aspects of the selected component to be listed. 13
A selection button on the top right of the device details pane allows the device level monitoring thresholds to be visualized and adjusted. Mobility Controller-specific threshold settings allow various access point conditions to be detected and corresponding real-time event generated. Examples include power level and channel change frequency. These settings are auto-adjusted by the Mobility Controller - frequent changes may indicate RF environmental problems in the area proximate to the access point. Real-time events can be displayed in the UI and forwarded to external systems if required. Details about each associated access point are available. 14
Each antenna on every access point is individually modeled, monitored, and displayed. 15
WLAN details can also be displayed. The Component Viewer provides an alternative method of accessing all available information about the Mobility Controllers and their associated access points: One of the many included reports focuses specifically at Wireless Controller based WLANs. It catalogs the controllers and their associated APs and provides a collection of inventory, asset and behavioral details. This is especially useful for capacity planning exercises in the WLAN: 16
17
18
About Aruba Aruba is a global leader in distributed enterprise networks. Its award-winning portfolio of campus, branch/teleworker, and mobile solutions simplify operations and secure access to all corporate applications and services regardless of the user s device, location, or network. This dramatically improves productivity and lowers capital and operational costs. Listed on the NASDAQ and Russell 2000 Index, Aruba is based in Sunnyvale, California, and has operations throughout the Americas, Europe, Middle East, and Asia Pacific regions. To learn more, visit Aruba at http://www.arubanetworks.com. For real-time news updates follow Aruba on Twitter and Facebook. About Entuity Entuity is a leading independent provider of network management and service delivery solutions to heterogeneous enterprises worldwide. Entuity Eye of the Storm (EYE) network management automatically discovers and captures unrivaled network data and analytics, and provides real time topology, integrated fault, device and flow-based performance management capabilities that help businesses reduce network downtime, lower operational and capital costs, and achieve sustainability goals. Although Eye of the Storm has been highly valued for extreme ease of operation, scalability and granularity, its ultimate value is not in the volume, depth, or timeliness of the data collected, but in the analysis that shows how the network pieces come together to support the business Product Support Information Aruba Support: http://www.arubanetworks.com/support.php Entuity Support: http://www.support.entuity.com/login.php. 19