Installation Guide for JunosV Wireless LAN Controller

Installation Guide for JunosV Wireless LAN Controller Published: 2014-05-16 Revision 2

Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net All rights reserved. Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. [Insert Series Title] Installation Guide for JunosV Wireless LAN Controller All rights reserved. Revision History May 2014 Revision 2 March 2014 Revision 1 The information in this document is current as of the date on the title page. YEAR 2000 NOTICE Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related limitations through the year 2038. However, the NTP application is known to have some difficulty in the year 2036. END USER LICENSE AGREEMENT The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement ( EULA ) posted at http://www.juniper.net/support/eula.html. By downloading, installing or using such software, you agree to the terms and conditions of that EULA. ii

Table of Contents Part 1 Installation Guide for JunosV Wireless LAN Controller Chapter 1 JunosV Wireless LAN Controller Overview............................. 3 Understanding JunosV Wireless LAN Controllers........................... 3 Chapter 2 Installing JunosV Wireless LAN Controller............................. 7 Installing the JunosV Wireless LAN Controller on the ESXi 5.x Hypervisor........ 7 Configuring a JunosV Wireless LAN Controller............................ 14 Example: Configuring a Virtual Port..................................... 17 JunosV WLC License................................................ 23 JunosV WLC 9.1 License.......................................... 23 JunosV WLC 9.0 License.......................................... 23 Upgrading Mobility System Software on a JunosV Wireless LAN Controller..... 24 Upgrading Within the Same Release................................ 24 Upgrading from Mobility System Software 9.0.1 to the Next Release....... 24 iii

Installation Guide for JunosV Wireless LAN Controller iv

PART 1 Installation Guide for JunosV Wireless LAN Controller This document describes the requirements and procedures to install a Juniper Networks JunosV Wireless LAN Controller (JunosV WLC) Release 9.0 and Release 9.1 and later on a VMware ESX Server. NOTE: You must have an understanding of Virtual Machine (VM) environments and installing VMs. Information about VM environments and the procedures for installing VMs is beyond the scope of this guide. JunosV Wireless LAN Controller Overview on page 3 Installing JunosV Wireless LAN Controller on page 7 1

Installation Guide for JunosV Wireless LAN Controller 2

CHAPTER 1 JunosV Wireless LAN Controller Overview Understanding JunosV Wireless LAN Controllers on page 3 Understanding JunosV Wireless LAN Controllers JunosV Wireless LAN Controller (JunosV WLC) is a virtual controller that uses a cloud-based architecture that includes physical access points. The functionalities available in a physical wireless LAN controller are available on the JunosV WLC. JunosV WLC Release 9.1 and later support up to 500 Juniper Networks Wireless LAN Access Points (WLAs). JunosV WLC Release 9.0 supports up to 256 WLAs. The JunosV WLC runs on a virtual machine (VM) environment, which runs the operating systems and applications installed on VM. If you are not running any VM environments and do not already have VMware ESXi deployed, you can download it at http://www.vmware.com/products/vsphere/esxi-and-esx/overview.html. You must register and create a free account, and then register separately for each download. Table 1 on page 3 summarizes the requirements for deploying one instance of JunosV WLC Release 9.1 and later in four deployment scenarios. Table 1: Requirements for JunosV WLC Release 9.1 and Later for Different Deployment Scenarios Requirments Small Branch Small Campus Medium Campus Large Campus Type of VM environment (single VM or cluster mode) Single VM Single VM Single VM Single VM Number of concurrent clients 250 750 6250 12500 Number of WLAs required 10 30 250 500 Minimum hardware requirements CPU: 1 virtual CPU Memory: 320 MB Disk space: 16 GB CPU: 1 virtual CPU Memory: 320 MB Disk space: 16 GB CPU: 1 virtual CPU Memory: 1 GB Disk space: 16 GB CPU: 1 virtual CPU Memory: 1 GB Disk space: 16 GB Number of VLANs supported 16 64 128 256 3

Installation Guide for JunosV Wireless LAN Controller Table 1: Requirements for JunosV WLC Release 9.1 and Later for Different Deployment Scenarios (continued) Requirments Small Branch Small Campus Medium Campus Large Campus Number of service profiles available 8 64 128 256 Tunnel throughput available (per controller VM) in Mbps 200 320 960 1536 Table 2 on page 4 summarizes the requirements for deploying JunosV WLC Release 9.0 in four deployment scenarios. Table 2: Requirements for JunosV WLC Release 9.0 for Different Deployment Scenarios Requirements Small Branch Small Campus Medium Campus Large Campus Type of VM environment (single VM or cluster mode) Single VM Single VM Single VM Single VM Number of concurrent clients supported 100 800 3200 6400 Number of WLAs supported 4 32 128 256 Minimum hardware requirements CPU: 1 virtual CPU Memory: 320 MB Disk space: 16 GB CPU: 1 virtual CPU Memory: 320 MB Disk space: 16 GB CPU: 1 virtual CPU Memory: 1 GB Disk space: 16 GB CPU: 1 virtual CPU Memory: 1 GB Disk space: 16 GB Number of VLANs supported 16 64 128 256 Number of service profiles available 8 64 128 256 Tunnel throughput available (per controller VM) in Mbps 100 800 3200 6400 JunosV WLC supports the following features: Auto-tune Bandwidth control (Identity based) Admission control (CAC)/Wi-Fi Multimedia (WMM) Guest services (wireless) Wired authentication Access Control Lists (ACLs) JunosV WLC high availability WLC Controller Clustering JunosV WLC does not support the following features: 4

Chapter 1: JunosV Wireless LAN Controller Overview Changing the OS (supports only Linux OS) Extra management options Configurable ports Autonegotiation of port speed WebView Related Documentation Installing the JunosV Wireless LAN Controller on the ESXi 5.x Hypervisor on page 7 Configuring a JunosV Wireless LAN Controller on page 14 Upgrading Mobility System Software on a JunosV Wireless LAN Controller on page 24 5

Installation Guide for JunosV Wireless LAN Controller 6

CHAPTER 2 Installing JunosV Wireless LAN Controller Installing the JunosV Wireless LAN Controller on the ESXi 5.x Hypervisor on page 7 Configuring a JunosV Wireless LAN Controller on page 14 Example: Configuring a Virtual Port on page 17 JunosV WLC License on page 23 Upgrading Mobility System Software on a JunosV Wireless LAN Controller on page 24 Installing the JunosV Wireless LAN Controller on the ESXi 5.x Hypervisor JunosV WLC is a 32-bit application, which runs on Linux Operating System and requires ESXi Hypervisor hardware with 64-bit capability. Before installing JunosV WLC on ESXi 5.x Hypervisor: You must have an understanding of virtual machine (VM) environments and installing VMs. You must enable the virtualization feature in the BIOS of each host device that deploys the VM environment. Each virtualization host has the following requirements: Intel(R) Xeon(R) CPU X5660 @ 2.80-GHz processor or equivalent 2 GB of memory dedicated to JunosV WLC 1 GB for the host computer Minimum 16 GB of the disk space Up to 4 Network Interface Cards (NICs) Use DHCP to obtain network settings dynamically or assign static IP address. VMware ESXi 5.x installed on the server machine. For a list of supported platforms and minimum hardware requirements, see the VMware Compatibility Guide from the VMware documentation site at http://www.vmware.com/resources/compatibility. VMware vsphere Client 5.x installed in a client machine (Microsoft Windows XP or Microsoft Windows 7). 7

Installation Guide for JunosV Wireless LAN Controller For the complete list of supported operating systems and minimum requirements of client machine, see the VMware vsphere documentation at http://www.vmware.com/support/pubs/vsphere-esxi-vcenter-server-pubs.html. JunosV WLC OVA file from the Juniper Networks support page https://www.juniper.net/customers/support/ for installation. After you install ESXi 5.x Hypervisor and the VMware vsphere Client, you can log in to the hypervisor and deploy JunosV WLC. The JunosV WLC image is an OVA file that you can upload to the vsphere Client as a template file. Once you have uploaded and installed the image, you must review the virtual port settings for JunosV WLC. To install JunosV WLC: 1. Install VMware vsphere Client on the client machine. The vsphere client machine must be reachable by the ESXi server. 2. Copy the OVA file to the local disk on the client machine where vsphere Client is installed. Alternatively, the OVA file can be on a mapped network share. Preferably, the OVA file and the ESXi running blade must be at locations close to each other. 3. Launch the vsphere Client installed on the client machine. Type the IP address, user name and password of the ESXi server and click Login. 8

Chapter 2: Installing JunosV Wireless LAN Controller 4. Click File > Deploy OVF Template. 9

Installation Guide for JunosV Wireless LAN Controller 5. Browse and select the OVA file from the local disk and click Next. 10

Chapter 2: Installing JunosV Wireless LAN Controller 6. Enter the hostname for JunosV WLC (for example, WLCV) and click Next. 7. Select Thin Provision and click Next. NOTE: We recommend that you select Thin Provisioning as it optimizes the installation of JunosV WLC by using on-demand allocation of blocks of data and thereby improves utilization rates. For details, see the ESXi and vcenter Server 5 documentation from the VMware documentation site at http://www.vmware.com/support/pubs/ and 11

Installation Guide for JunosV Wireless LAN Controller http://pubs.vmware.com/vsphere-50/index.jsp?topic=%2fcom.vmware.vsphere.vm_admin.doc _50%2FGUID-4C0F4D73-82F2-4B81-8AA7-1DD752A8A5AC.html. 8. Select Power on after deployment and click Finish to start the installation process. The time taken to install the JunosV WLC depends on the speed of the network connection between the vsphere client and the ESXi server. 12

Chapter 2: Installing JunosV Wireless LAN Controller Related Documentation Configuring a JunosV Wireless LAN Controller on page 14 13

Installation Guide for JunosV Wireless LAN Controller Configuring a JunosV Wireless LAN Controller After you have deployed JunosV Wireless LAN Controller (JunosV WLC), you can log in to JunosV WLC and configure it in the same manner as you configure Mobility System Software (MSS) on a physical controller. JunosV WLC Networking Ensure that the configuration of JunosV WLC virtual port mapping with the virtual switch (vswitch) and physical port complies with the guidelines in the VM Ware Deployment Guide. NOTE: To avoid spanning-tree loops, do the following: Configure each virtual port on a unique VLAN. Connect two or more virtual ports to the same vswitch only if the virtual ports are on different VLANs. To configure JunosV WLC: 14

Chapter 2: Installing JunosV Wireless LAN Controller 1. Map the network adaptors of the installed JunosV WLC to the correct VM physical interface. 15

Installation Guide for JunosV Wireless LAN Controller 2. Using the vsphere Client, power on the installed JunosV WLC and open the console for JunosV WLC. 3. Configure JunosV WLC: Type admin as the username and press Enter. Password is not required. Type enable to view the enable prompt. Type quickstart to configure the controller. WLCV# quickstart This will erase any existing config. Continue? [n]: y Answer the following questions. Enter '?' for help. ^C to break out System Name [WLC-V]: WLCV Country Code [US]: US System IP address []: 10.90.5.40 System IP address netmask []: 255.255.0.0 Default route []: 10.90.0.1 Do you need to use 802.1Q tagged ports for connectivity on the default VLAN? [n]: n Enable Webview [y]: Y Admin username [admin]: admin Admin password [mandatory]: Enable password [optional]: Do you wish to set the time? [y]: y Enter the date (dd/mm/yy) []: 13/05/2013 Enter the time (hh:mm:ss) []: 21:07:30 Enter the timezone []: IST Enter the offset (without DST) from GMT for 'IST' in hh:mm [0:0]: 5:30 Do you wish to configure wireless? [y]: n success: created keypair for ssh success: Type "save config" to save the configuration success: change accepted. *WLCV# save configuration success: configuration saved. 16

Chapter 2: Installing JunosV Wireless LAN Controller Related Documentation Installing the JunosV Wireless LAN Controller on the ESXi 5.x Hypervisor on page 7 Upgrading Mobility System Software on a JunosV Wireless LAN Controller on page 24 Example: Configuring a Virtual Port JunosV WLC allows you to configure virtual ports. This example describes how to configure Virtual Port settings: Requirements on page 17 Overview on page 17 Configuration on page 17 Requirements This example uses the following hardware: Interfaces or network - I/O, 1 Gigabit Ethernet CPU 1 virtual CPU Memory 320 MB Disk space 16 GB Overview This section provides an example of configuring one virtual port configuration to one vswitch, which is then configured to one physical NIC. Configuration Step-by-Step Procedure 1. Open the vsphere Client and log in to the hypervisor. 2. Click Configuration > Networking. 17

Installation Guide for JunosV Wireless LAN Controller 3. Select the vswitch from the list of virtual machines and click Properties to view information. 4. To view information about the specified VM port group, select the port group and click Edit. 5. On the General tab, enter the VLAN ID and click OK. 18

Chapter 2: Installing JunosV Wireless LAN Controller The VLAN ID range is from 0 through 4095. 19

Installation Guide for JunosV Wireless LAN Controller 6. Click the Security tab to view additional options. 7. Be sure to select Accept for Promiscuous Mode; otherwise, the communication on the virtual ports does not work. JunosV WLC uses the MAC address assigned by VMware if this option is not set to Accept; otherwise it, uses the system MAC address. Promiscuous mode is a security policy that can be defined at the vswitch or Port Group level in vsphere ESXi. A VM, Service Console, or VMkernal network interface in a port group allows the use of promiscuous mode to monitor all network traffic through the vswitch. By default, the virtual network adapter of a guest OS receives frames that are meant for it only. Placing the guest network adapter in promiscuous mode allows all frames passed on the virtual switch to be received if the VLAN policy for the associated group permits it. This can be useful for monitoring intrusion detection or a sniffer, if one is used to analyze all traffic on the network segment. 20

Chapter 2: Installing JunosV Wireless LAN Controller 8. To view the hardware NIC associated with a specified vswitch, return to the vswitch properties and select the Network Adapters tab. Click Edit, and then ensure that the correct status is selected. 9. Set the NIC status to Auto negotiate and click OK to close the dialog box. 10. To configure another vswitch connected to JunosV WLC repeat the steps 1 through 9. 11. After you have configured the vswitch, you can map the JunosV WLC virtual NICs to VM Port Groups from a specified vswitch. 1. Select the JunosV WLC from the Inventory list, and click Edit Virtual Machine Settings. 21

Installation Guide for JunosV Wireless LAN Controller 2. For each virtual NIC (vnic), select the Network Connection from the list to apply to the vnic. Logging into the JunosV WLC Console Click the Console tab, and then enter MSS commands in the same manner as in the CLI on a physical hardware platform. You can ping your gateway to ensure that you have connectivity to the rest of the network. CLI Commands Specific to the JunosV WLC 22

Chapter 2: Installing JunosV Wireless LAN Controller Two commands are available in the JunosV software that apply only to the virtual software: show port virtual Enables you to display virtual port information with the mac address. set system mac Enables you to set the system MAC address. Related Documentation Installing the JunosV Wireless LAN Controller on the ESXi 5.x Hypervisor on page 7 Configuring a JunosV Wireless LAN Controller on page 14 Upgrading Mobility System Software on a JunosV Wireless LAN Controller on page 24 JunosV WLC License From the software downloads page at http://www.juniper.net/support/products/mss/#sw, you can download the software files JunosV WLC Release 9.0 and Release 9.1 and later; labelled WCXXXXXX.V.tgz (for ova JunosV WLC deployment) and WCXXXXXX.INA.V.tgz (for upgrade only). To upgrade/deploy JunosV WLC, you do not have to procure license coupons from Juniper Networks or your reseller. JunosV WLC 9.1 License on page 23 JunosV WLC 9.0 License on page 23 JunosV WLC 9.1 License The default license, which is the base license SKU (JUNOSVWLC-BASE), supports up to 10 WLAs. You can purchase Juniper Software Advantage (JSA) based JunosV WLC 9.1 license to support upto maximum of 500 WLAs. You can enable the support for the additional licenses by using the following command: set license ap anykey where anykey can be any text or special character. CAUTION: You must purchase the required number of JSA-based JunosV WLC licenses to be legally entitled to support the number of WLAs in your deployment environment. JunosV WLC 9.0 License The default license, which is the base license supports up to 10 WLAs. You can purchase JunosV WLC 9.0 license to support upto maximum of 256 WLAs. You can enable the support for the additional licenses by using the following command: set license ap anykey where anykey can be any text or special character. 23

Installation Guide for JunosV Wireless LAN Controller Upgrading Mobility System Software on a JunosV Wireless LAN Controller You can upgrade JunosV Wireless LAN Controller (JunosV WLC) within the same release and from JunosV WLC 9.0.1 to the next release. This topic describes: Upgrading Within the Same Release on page 24 Upgrading from Mobility System Software 9.0.1 to the Next Release on page 24 Upgrading Within the Same Release To upgrade from JunosV WLC 9.0.1 to a 9.0 Release: 1. Unpack the release_img.tar.gz file to a location from where it can be copied to JunosV WLC by using tftp or scp copy protocols. 2. Copy the.ina file (/release_img/public/wlcv0xx.ina) to the boot partition on JunosV WLC by using Trivial File Transfer Protocol (TFTP) or Secure Copy Protocol (SCP) copy protocols. For example, copy scp://<ip>///<path to.ina file>/<.ina file> boot<x>: 3. Then, follow the same procedure used for upgrading a physical wireless LAN controller. NOTE: Using SCP is faster than using TFTP; but SCP can be used only if the station where the.ina file is located a Linux station. Also, copying the.ina file from a location closer to the blade that hosts JunosV WLC results in faster file transfer rates. Upgrading from Mobility System Software 9.0.1 to the Next Release To upgrade from MSS 9.0.1 to the next release: 1. Create a new virtual machine (VM) for JunosV WLC by using the new OVA file for the next major release and copy the earlier configuration to the new VM. NOTE: Power down the earlier VM before copying the earlier configuration to avoid network issues. 2. Delete the earlier VM after testing to ensure that the new JunosV WLC has been created successfully. 24