AirTight Wi-Fi Quick Setup Guide

Transcription

1 AirTight Wi-Fi Quick Setup Guide

2 Welcome! Thank you for choosing AirTight! This guide will show you how to connect your AirTight wireless access point (AP) and perform basic setup and operations using the AirTight Management Console. For detailed instructions, refer to the online help or to the AirTight Wi-Fi User Guide. Key System Features Carrier-grade Wi-Fi Dual-band, intelligent-edge, Wi-Fi APs for massively scalable and highly distributed WLANs. Easy setup Just plug the AirTight AP into your network and it starts up automatically right out of the box. Software-defined radios AirTight APs use software configurable radios that allow users to change frequency bands and primary device functions. True cloud management All network configuration, monitoring, reports, and analytics, are managed centrally from the AirTight Management Console. Stand-alone mode AirTight APs can operate in a stand-alone mode, without loss in functionality, if connectivity to the management server is lost. Top-ranked WIPS Patented wireless intrusion prevention (WIPS) built in for automated protection against wireless threats.

3 Part 1 Initial Setup 1. Before you begin Here are a few things you ll need before installing your AirTight AP. For connecting your AirTight AP to the network An Ethernet network with a DHCP server and Internet* connection. An AC power outlet or network port with Power over Ethernet (IEEE 802.3af PoE). *IMPORTANT! Ensure that Internet connectivity is available from the VLAN/subnet where your AirTight AP will connect. Be sure the required ports for your AirTight device and server communication outbound UDP 3851 and default HTTP (TCP port 80) are open on the firewall. If you are using a proxy, web accelerator, or URL content filtering, make sure the settings allow communication between the AirTight AP and cloud management server. For managing your network Browser-equipped computer with Internet connection. URL and login information for the cloud Management Console. This is provided by AirTight Customer Support via . If you did not receive the , contact support@airtightnetworks.com. Note: You can manage your AirTight network from any location that has Internet access. This does not have to be in the same physical location or on the same wired network as the AirTight AP. 1

4 2. Installation Installation is fast and easy right out of the box. If using AC power Connect the included AC adapter into a wall outlet and to the 12V DC power connector on the AirTight AP. Connect one end of the supplied Ethernet cable into the LAN 1 connector on the AP. Connect the other end of the Ethernet cable to your network. If using Power over Ethernet (IEEE 802.3af) Connect one end of the supplied Ethernet cable into the LAN 1 connector on the AirTight AP. Connect the other end of the cable into a PoE enabled port on your network switch or to a PoE injector. If using a PoE injector, be sure the injector has a power source and that it is connected to your network. Wait for the green LEDs Wait for the power up diagnostics to finish and for the green LEDs on the AirTight device to illuminate steadily. This indicates the device has successfully connected to the network. If the green LEDS do not illuminate, refer to the troubleshooting section on the next page. You can now connect to your AirTight AP using the default SSIDs indicated in your , or you can create your own SSIDs as indicated in Part 3 of this setup guide. 2

5 Troubleshooting After your AP is connected to the Ethernet network and powered ON, if the status of LED 1 remains solid orange, this indicates that the device will not be able to function normally. The following guidelines may help you diagnose and fix the problem. Power LED LAN LED Radio LED(s) Orange Green Green 1. No active Ethernet link What does it mean? Orange Fast Blink Green 2. Did not receive a valid IP address via DHCP Orange Slow Blink Green 3. Unable to connect to the AirTight Cloud or Server Orange (any) Orange 4. Radio interface error 1. Make sure the Ethernet cable is plugged into the correct port (LAN 1) on your AirTight device and the other end of the cable is plugged into a working Ethernet port. 2. Make sure the DHCP server is ON and available on the VLAN/subnet connected to the AP. You may need to reboot your AP after correcting this condition. 3. If you are using AirTight Cloud Services, make sure that Internet connectivity is available from the VLAN subnet connected to the AP as described on page Reboot the AP. If this error persists, there may be a problem with a Wi-Fi radio in your AP. If you are unable to resolve the problem after following the above guidelines, please contact AirTight Customer Support at support@airtightnetworks.com. 3

6 Part 2 AirTight Management Console The AirTight Management Console is a secure, cloud-based HTML5 user interface that allows you to manage all of your AirTight devices and wireless networks remotely from a Web browser. Location Tree The Location Tree shows the hierarchical structure of your AirTight deployment and allows you to add, edit, and remove location folders and nodes. Main Menu The Main Menu provides links to the primary functions of the Management Console. Current Location This is the path and name of the current location selected on the Location Tree. Main Display The main area of the screen displays information for the Current Location based on the Main Menu selection. Account Name Click on your account name to view and manage your current Management Console account settings such as your address, time zone, and password. Refresh Screen Click on this icon to refresh the Main Display with current information. Messages Click on this icon for system-related messages. Online Help Click on the? icon to open the Online Help screen. Note that your browser must allow popups for the Help screen to open. Logout Click on this icon to end your Management Console session or to log in as another user. 4

7 AirTight Management Console 5

8 Location tree The left side of the AirTight Management Console has a hierarchical location tree similar to the file folder system on a computer. The location tree makes it very easy to organize and manage tens and even tens of thousands of wireless devices and their locations on a single screen. The Management Console also uses the folders in the location tree to store and apply device settings and security policies throughout the network. It is important to understand the basics of this hierarchical system since the AP settings are determined by its location. Location folders Location folders can represent logical groups and/or geographical locations. For example you can have a series of folders representing different divisions in your company and inside those folders you can have more folders representing the different branch office locations for each division. You can nest folders within folders to create as many levels as you need. Each folder is a child of the parent folder in the level immediately above it. By default, a child folder automatically inherits the configurations and policies of its parent folder unless you manually apply changes to the child folder to customize it. Location nodes Location nodes represent the actual physical location of your APs for example: a floor or room inside a branch office building. Location nodes are also nested inside a parent folder. Unlike folders however, a node cannot have child folders or additional nodes below it. 6

9 Example parent/child relationships Parent My Company Child Headquarters Parent Headquarters Child Eastern Region Child Central Region Child Western Region Parent California Child Los Angeles Child San Diego Child Node Floor 1 Child Node Floor 2 Configuration inheritance examples If every location on the network is set up to inherit its parent s template, then every AirTight AP in the network will have the same configuration. If each region has a different default template, then the configurations for AirTight devices in the Eastern region would be different from the configurations in the Central and Western regions. 7

10 Part 3 Setting Up Your AirTight AP In this section we will provide examples for setting up your AirTight AP for secure Wi-Fi and open guest Wi-Fi access using the AirTight Management Console. For detailed information and instructions, please refer to the AirTight Wi-Fi User Guide. 1. Log into the Management Console Using the Web browser on your computer or smart device, open the Management Console URL provided in the you received from AirTight Networks. Log into the Management Console using the username and password provided in the . After you log in, the Management Console and dashboard will appear on your screen. 8

11 2. Set account information and create a new password To protect your network, please change your user password before continuing with the AP setup. CAUTION! If you forget your password there is no way to retrieve or reset it yourself. You will need to request a password reset from support@airtightnetworks.com. Click on your name in the upper right corner of the screen. Then click on Manage Account. If the field is blank or incorrect, enter your address. This is the default address for receiving reports and updates. Enter your old and new passwords in the spaces provided. Confirm your new password and click OK. 9

12 3. Create a location folder and node for your AP Location folder Click on your top level folder (one level below the home icon). Click on + to open the Add New Location dialog box and select Folder. Enter a folder name (e.g. My City ) and click OK. Location node Click on the new folder you just created to highlight it. Click on + to open the Add New Location dialog box and select Node. Enter a node name (e.g. My Office ) and click OK. 10

13 4. Associate your AP with your new location node Click on Devices on the Main Menu (1). From the AirTight Devices list, check your AP in the box provided (2). Click on the Change Location icon (3). Select your location node and click OK (4). 11

14 5. Create your SSID profiles The Management Console uses SSID profiles for setting and saving each SSID configuration. You can create as many SSID profiles as you need and use up to eight of them for a single radio AP and up to 16 SSID profiles for a dual-radio AP. The following examples will show you how to create SSID profiles for a secure encrypted SSID for your own use and an open non-encrypted SSID for guest access. There are many more SSID profile options in addition to the ones used in these two examples. For more information, refer to the AirTight Wi-Fi User Guide or the Online Help within the Management Console. To create a secure encrypted SSID 1. In the location tree, click on the top level folder. 2. Click on Configuration on the Main Menu. 3. Click on Wi-Fi Access. 4. Click on Add New SSID Profile. 5. Enter a new profile name and SSID (e.g. My Secure Wi-Fi and Secure Wi-Fi ). 6. Click on Security. 7. Select WPA2 as the security mode. 8. Check PSK.* 9. Enter a passphrase (e.g. ATsecurity13! ). 10. Click Save. To create an open guest SSID 1. In the location tree, click on the top level folder. 2. Click on Configuration on the Main Menu. 3. Click on Wi-Fi Access. 4. Click on Add New SSID Profile. 5. Enter a new profile name and SSID (e.g. Guest Network and Guest ). 6. Click on Security. 7. Select Open as the security mode. 8. To protect guests from other guest clients, check Client Isolation. 9. Click Save. *Note: Use the 802.1x option for networks with enterprise RADIUS servers. 12

15 Example SSID Profile Settings 13

16 6. Create and apply a new device template Device templates make it easy to create, save, and update detailed configurations for multiple AirTight devices that may be spread across multiple locations. You can also create multiple templates to support different configurations and apply these templates to any group of AirTight devices on your network. This example will show you how to configure a new template using the two SSID profiles you created and how to apply this template to your AirTight AP. CAUTION! Your AirTight AP radios can also be configured to operate as automated wireless intrusion prevention system (WIPS) sensors. The WIPS features are very powerful and their settings must be clearly understood to prevent unintentional blocking of wireless devices. Refer to the AirTight WIPS User Guide or to the Online Help within the Management Console for detailed information. How are device templates applied? Device templates are usually applied to location folders. When a template is applied as the default for a folder, it will also be inherited as the default template for all of the nested child folders that follow. This automatic inheritance allows rapid updating of thousands of devices across the network with a single template change. If you apply a different device template for any child folder, that template will be inherited by all of the folders below that child folder creating a separate group of AirTight devices that share the same configuration. 14

17 Create the new device template 1. In the location tree, select the top level location folder just below the Home icon. 2. Click on Configuration on the Main Menu and click on Device Templates. 3. Click on Add Device Template and enter a template name (e.g. My Access Point ). Note: If the Add Device Template link is inactive, click the Customize at this location? link at the bottom of the Device Templates screen and then click Yes. 15

18 4. Click on Device Settings and enter and confirm a new device password (e.g. MyAPpass! ). 5. Click Radio Settings and then click on Define settings for model 6. Select your device model from the drop down list. Note: If you do not select the correct model of your AirTight AP from the drop down list, the new template will not be applied to your AP. If you have multiple models of AirTight APs, all of them can be defined and configured from within the same device template. 7. Select Access Point as the operation mode for each radio. 8. For a single-radio AP, select the 2.4 GHz frequency band. For a dual-radio AP, select 5 GHz for Radio 1 and 2.4 GHz for Radio 2 (See Which radio band should I use? below for more information on band selection). 9. Click on Add SSID Profile. 10. Select the two SSID profiles you created earlier and click OK. If you have a dual radio AP, add both SSID profiles to both Radio 1 and Radio The other radio settings are optional but not required for this example. 12. Click Save when finished. Your new template will appear in the list with the other system templates. 13. Click on the Make default link to the left of your new template s name and then click Yes. This will apply your new template to the folder and your AirTight AP. Your AP is now operational and ready for use. Which frequency band should I use? Most AirTight AP models feature software-configurable dual-band radios that can operate in both the 2.4 GHz (802.11bgn) and 5 GHz (802.11an) bands. For example, the AirTight C-60 device features a 3x3 MIMO radio (Radio 1) and a 2x2 MIMO radio (Radio 2). If running both radios as APs, configure Radio 1 in 5 GHz with 20/40 MHz channel width for maximum performance, and Radio 2 in 2.4 GHz with 20 MHz channel width. 16

19 Example Template Settings for AirTight C-60 Dual Radio AP 17

20 7. Optional step Create authorized WLAN policy templates for your SSIDs WLAN policy templates allow you to specify which SSIDs are authorized for operation within the AirTight wireless intrusion prevention system (WIPS). This is required only if you need WIPS protection. Refer to the AirTight WIPS User Guide or to the Online Help within the Management Console for additional information. Select Configuration from the main menu (1). Select WIPS followed by Authorized WLAN Policy (2). Check Wi-Fi is deployed at this location (3). Select Add New Policy Template (4). Select your SSID from the list or type it in. Configure the settings to match those of your authorized AP (5). Repeat these steps for each SSID you want to authorize. Your Authorized AP will appear in orange under the Devices tab rather than green if the Authorized WLAN Policy does not match the actual SSID settings on your AP. 18

21 Secure Cloud-Managed Wi-Fi AirTight Networks, Inc. 339 N. Bernardo Avenue #200, Mountain View, CA USA Tel: Toll Free: Fax: AirTight Networks, Inc. All rights reserved. AirTight is a registered trademark and the AirTight Networks logo is a trademark of AirTight Networks, Inc. All other trademarks are the property of their respective owners. Specifications are subject to change without notice.