Aruba 无线校园网络实践与验证参考设计

需积分: 10 151 浏览量更新于2024-07-23 收藏 7.3MB PDF 举报

"Aruba Campus Wireless Networks - 无线园区网络实践" Aruba Campus Wireless Networks是Aruba Networks公司提供的一种先进的无线网络解决方案，专为校园环境设计，包括企业和教育机构等。这个解决方案旨在创建一个稳定、安全且高效能的无线网络基础设施，以支持现代校园中的移动设备和应用程序的需求。在Version 8中，Aruba对无线网络的设计和实施进行了优化，以满足不断变化的技术和用户需求。其主要特性包括： 1. **Mobile Edge Architecture**：这是一种创新的网络架构，将网络边缘靠近用户，提供低延迟和高带宽服务，确保移动设备用户的优质体验。 2. **Aruba Mobility Management System (MMSS)**：这是一套综合的管理工具，用于监控、配置和控制整个无线网络，帮助管理员轻松管理网络性能和安全。 3. **RFprotect**：这是Aruba的射频（RF）管理技术，通过智能检测和自动调整，确保无线信号的质量和安全性，防止干扰和潜在的安全威胁。 4. **AirWave**：这是Aruba的网络管理平台，提供全面的有线和无线网络设备管理，包括配置、故障排除和报告功能。 5. **Validated Reference Design**：Aruba提供的验证参考设计，确保了无线网络部署的一致性和可靠性，减少了实施风险。 6. **Open Source Code Integration**：Aruba的产品包含部分开放源代码软件，遵循如GNU General Public License (GPL)等开源许可证，体现了Aruba对开放标准和社区贡献的支持。此外，Aruba Networks强调对知识产权的尊重，所有的商标和版权都受法律保护。尽管Aruba会尽商业上合理的努力确保文档的准确性，但不承担任何因错误或遗漏带来的责任。用户应了解，产品规格可能会在未经通知的情况下更改。 Aruba Campus Wireless Networks是面向未来的无线网络解决方案，旨在构建一个适应移动性、安全性和效率要求的智能校园环境。通过集成的管理工具和先进的技术，它能够为用户提供无缝、高性能的无线连接体验，同时保证网络的稳定性和安全性。

Aruba Networks, Inc. Campus Deployments | 16

Aruba Campus Wireless Networks Validated Reference Design

to configure each MMC-3600 controller in a full mesh with redundant links to separate data

center distribution switches. The MMC-3600 does not have redundant power supplies, so it is

recommended that you connect each appliance to discrete power sources in the data center.

Figure 7 Master controllers deployed in full mesh topology

 Local controllers: Use the M3 Controller Module for local controllers. In a pair of M3 controller

modules configured for local controller redundancy, each controller should have its own MMC-

6000 chassis. So two MMC-6000 chassis can accommodate four pairs of redundant local

controllers. Connect each blade to its own distribution layer switch with two 10 Gigabit Ethernet

connections with link aggregation. For configuration of link aggregation, see Appendix A: Link

Aggregation on page 149. The MMC-6000 chassis should contain redundant power supplies

connected to discrete power sources. See the mobility controller product line matrix to choose the

most appropriate mobility controller for your deployment.

Figure 8 Link Aggregation

 Access points: Aruba offers a wide range of 802.11n APs. The spectrum capability and the

capacity of the APs vary. See the Aruba AP product line matrix to choose the most appropriate

AP for your deployment.

 Air monitors: Deploy AMs at a ratio of approximately one AM for every four APs deployed, and

around the building perimeter for increased security and location accuracy. AMs perform many

CAUTION

Controllers that are redundant should not be placed in the same chassis,

because a chassis failure will cause the redundancy architecture to fail.

arun_0410

Master

standby

Master

active

arun_052

Local

mobility

controller

Distribution layer

switch

Two 10 Gigabit Ethernet links

Distribution

Aruba Networks, Inc. Master/Local Operation | 19

Aruba Campus Wireless Networks Validated Reference Design

Chapter 3: Master/Local Operation

Large campus deployments normally involve more than two controllers. When you have more than a

single pair of controllers, change control and network consistency can become an issue. To solve this

management scalability issue, Aruba Mobility Controllers can be deployed in clusters that consist of a

master and one or more local controllers. This design is the recommended model when two or more

controllers exist in the same network. This design is depicted in this VRD.

In an Aruba network that uses a master/local design, configuration is performed only on the master

and it is pushed down to the locals.

Local controllers reside at the aggregation layer of the Aruba overlay architecture. They handle AP

termination, user authentication, and policy enforcement. When you configure any local controller, you

must know the IP address of the master and the pre-shared key (PSK) that was used to encrypt

communication between the controllers. The control channel between all Aruba controllers is protected

by an IP Security (IPsec) connection. For more details on the functions and responsibilities of master

and local mobility controllers in Aruba architecture, see the Aruba Mobility Controllers and Deployment

Models Validated Reference Design.

Controller Licenses

The ArubaOS™ base operating system contains many features and extensive functionality for the

enterprise WLAN network. Aruba uses a licensing mechanism to enable the additional features and to

enable AP capacity on controllers. The controller licensing depends on the user density and the

features needed to operate and secure your network. For more details about Aruba licenses, see

Aruba Mobility Controllers and Deployment Models Validated Reference Design.

NOTE

In a large campus WLAN that has separate network services and aggregation

layers, APs and AMs should never terminate on the master controller. APs and

AMs should terminate only on the local controller. With this configuration, if the

master becomes unreachable or unavailable and no standby master has been

configured, the network continues to operate as expected, except for certain

operations. You cannot perform configuration, RF visualization, or location

services until connection to the master controller is restored. The master

controller is needed to perform configuration and reporting, but it is not a single

point of failure in the network.

NOTE

The controllers have a preconfigured key at first boot. Change this key after the

first boot so that the operation of the master/local cluster is secure.

Aruba Networks, Inc. Master/Local Operation | 20

Aruba Campus Wireless Networks Validated Reference Design

Licensing Master Mobility Controllers

The master mobility controller must manage the functionality for all other platforms, so the master must

have the same license types as the local mobility controllers. Licensing unlocks the configuration

capabilities on the system. However, the master does not terminate APs or devices, so the master can

be licensed at a much lower level than the local mobility controller.

Table 2 lists the licenses that are used by the active and the standby master controllers in the example

network.

Licensing Local Mobility Controllers

Local controllers must be licensed according to the number of devices that consume licenses. Mobility

controllers should be licensed at the maximum expected capacity for that mobility controller. For

instance, in a failover scenario, the backup controller must be licensed to accept all the APs that it

could potentially host if a failure occurs, even if that is not the normal operating level.

In the example network, the two local mobility controllers are designed for active-active redundancy.

Each terminates a 40% load of APs and acts as the backup for the APs on the other controller. Each

controller is licensed to 80% of maximum capacity. If one mobility controller fails, the other controller

can add the additional APs from the failed controller.

Table 3 lists the licenses used by the local controllers in the example network.

Certificates

The Aruba controller comes with a default server certificate. This certificate demonstrates the secure

This certificate is not recommended for use in a production network. Aruba strongly recommends that

NOTE

Only the functionality that is being enabled needs to be licensed. For example,

xSec is deployed primarily only in Federal Government and military

installations, and it is not required unless it will be in use at the organization.

Table 2 Master Controller Licensing in the Example Network

License Capacity

AP Capacity 0

PEF-NG 1

RFProtect 1

Table 3 Local Controller Licensing in the Example Network

License Capacity

AP Capacity 416

PEF-NG 416

RFProtect 416

剩余155页未读，继续阅读

waynemolly

粉丝: 0
资源: 1

Aruba 无线校园网络实践与验证参考设计

Aruba wireless

Aruba,Networks,推出,下一代无线局域网控制平台.docx

Aruba 500 Series Campus Access Points

PaloAlto+Networks和Aruba整合解决方案+-2013-11.docx

Aruba AP配置Aruba

radius Aruba

aruba-ansible-modules：Aruba Ansible模块

Aruba ClientMatch技术

Aruba基础课程

aruba无线配置

最新资源