Users Guide

835| Management Access Dell Networking W-Series ArubaOS 6.5.x| User Guide
Inline Monitoring
This feature helps diagnose client connectivity issues. It provides the network administrator or engineers with
more information regarding the exact stage at which the client connectivity fails or provides data where the
dhcp or radius server is slow.
The controller collects all information related to user transitions like association, authentication, and dhcp.
Then, the controller sends these records to a management server like Airwave. The management server
analyzes the data and concludes which dhcp or radius server was not working efficiently causing user
connectivity issues. This enhancement allows the management server to isolate WLAN issues caused by
external servers such as dhcp or radius.
Following are the advantages of inline monitoring:
l Improves user serviceability.
l Provides network administrator and engineers information on the client connectivity failures.
l Easier DHCP debugging.
In the CLI
(host)(config)#mgmt-server profile mgmt-prof-1
(host) (Mgmt Config profile "mgmt-prof-1")
inline-ap-stats-disable Disable inline monitoring stats from the AP
inline-auth-disable Disable inline monitoring stats related to authentication
inline-dhcp-disable Disable inline monitoring stats of DHCP
inline-dns-disable Disable inline monitoring stats of DNS
Clarity Synthetic
Starting from ArubaOS 6.5, the controllers provide support for Clarity Synthetic, which helps in detecting
network health by using synthetic transaction from a WiFi client. This feature converts the radios of a W-AP200
Series access point to switch from AP mode to station mode. The controller converts one or both of the radios
of the AP to station mode based on the instruction from a network management server. When the radio of the
AP is in station mode, it starts synthetic data transaction within the network.
This feature is supported only on W-AP200 Series access points.
The network health is determined based on the response from the network and the time taken for the
synthetic data transaction. The results captured as part of these transactions are used for the following
purposes:
l Troubleshoot a live network
l Provide whole network overview (WLAN and Wired)
l Support WiFi and Internet protocol service level agreement (IP SLA)
l Troubleshoot Remote network using client traffic (Synthetic)
Custom Certificate Support for RAP
As Suite-B mandates using the AES-GCM encryption and ECDSA certificates for security, this feature allows you
to upload custom RSA and ECDSA certificates to a RAP. This allows custom certificates to be used for IKEv2
negotiation which establishes a tunnel between the RAP and the controller. Feature support includes the ability
to:
l Upload a single CA certificate and RAP certificate which have either elliptical crypto key parameters with
ECDSA or RSA parameters for signing and verification.