Aruba Mobility Controller VRD v9: 无线管理与设计指南

需积分: 9 141 浏览量更新于2024-07-23 收藏 3.38MB PDF 举报

"Aruba Mobility Controller VRD v9是Aruba Networks公司提供的一个经过验证的参考设计，专注于无线局域网（WLAN）解决方案。该文档详细介绍了版本9的Aruba Mobility Controllers，这些控制器是Aruba Networks无线网络基础设施的核心组成部分，用于管理和优化企业级的无线网络性能。" Aruba Mobility Controllers在无线网络环境中扮演着至关重要的角色，它们是Aruba Networks解决方案的心脏，负责处理接入点（Access Points, APs）的数据流、用户认证、安全策略实施以及网络策略管理。这些控制器确保了无线网络的稳定性和高性能，尤其是在大型企业或教育机构等高密度用户环境中。版本9的更新可能包括了性能提升、新功能引入、安全增强和对最新无线标准的支持，如802.11ac或802.11ax（Wi-Fi 6）。例如，它可能支持更高的数据传输速率、更智能的无线资源管理，以及对物联网（IoT）设备更好的兼容性。 Aruba Networks强调的Mobile Edge Architecture是一种网络设计概念，它将移动用户置于网络边缘的中心，确保无论用户在何处，都能获得一致的网络体验。这涉及到动态的射频管理（RF protect）和移动设备管理，以适应不断移动的网络用户。此外，文档中提到的Open Source Code表明，Aruba的产品可能包含了来自第三方的开源软件代码，遵循像GNU General Public License (GPL)或GNU Lesser General Public License (LGPL)这样的许可协议。这意味着用户或开发者可以根据这些许可条款自由地使用、修改和分发相关的源代码。虽然Aruba Networks在提供此文档时尽了商业上合理的努力确保规格的准确性，但他们不承担任何错误或遗漏的责任。用户应根据实际产品规格和最新的更新信息来规划和部署网络。 Aruba Mobility Controller VRD v9是Aruba Networks提供的一个详尽的无线网络解决方案，它结合了先进的控制器技术和开放源码策略，旨在为企业和组织构建高效、安全且适应性强的无线网络环境。

Aruba Networks, Inc. Understanding the Aruba Mobility Controller | 13

Aruba Mobility Controllers Validated Reference Design

Aruba 3000 Series Mobility Controller

Figure 5 Aruba 3000 Series Mobility Controllers

Feature 3600 3400 3200XM

Maximum Campus APs 128 64 32

Maximum RAPs 512 256 128

Maximum Device Count 8,192 4,096 2,048

Concurrent IPsec Tunnels 4,096 4,096 2,048

Aruba Networks, Inc. Understanding the Aruba Mobility Controller | 16

Aruba Mobility Controllers Validated Reference Design

Masters are responsible for the following functions in the WLAN:

 Policy configuration: Configuration in the Aruba solution is split between policy and local

configurations. Local configuration relates to physical interfaces, IP networking, and VLANs,

which are different for each mobility controller. Policy configuration is centered on the operation

of APs and users, including AP settings such as the SSID name, encryption, regulatory domain,

channel, power, and ARM settings. Policy configuration extends beyond APs and also covers

user authentication, firewall policy, mobility domains (IP mobility), IPsec, and system

management. The policy is pushed to all locals in the form of profiles, and profiles combine to

create the configuration for the dependent APs.

 AP white lists: Two types of white lists exist in the system, one for RAPs and one for CAPs that

use CPsec. These lists determine which APs can connect to the mobility controllers.

Unauthorized devices are prevented from connecting to the network.

 Wireless security coordination: Wireless intrusion prevention activities involve looking for

rogue (unauthorized) APs and monitoring for attacks on the WLAN infrastructure or clients. The

master processes all data collected by Aruba APs and AMs. Instructions to disable a rogue AP

or blacklist a client from the network are issued through the master.

 Valid AP list: All mobility controllers in the network must also know all legitimate APs that

operate on the WLAN. These APs must be added to the valid AP list. This list prevents valid APs

from being falsely flagged as rogue APs. This is important when APs that are attached to two

different locals are close enough to hear each other’s transmissions. The valid AP list helps

ARM to differentiate between APs that belong to the network and those that are neighbors.

Unlike traditional wireless intrusion detection system (WIDS) solutions, the master controller

automatically generates the valid AP list without network administrator intervention. All Aruba

APs are automatically learned and added to the list, but valid third-party APs must be added

manually. If more than one master/local cluster exists, AirWave should be deployed to

coordinate APs between clusters.

 RF visualization: The Aruba RF visualization tools provide a real-time view of the network

coverage. This information is based on the AP channel and power settings and the data

collected from AMs and APs listening to transmissions during their scanning periods. This

information provides a real-time picture of the RF coverage as heard by the APs.

 Location: Locating users in the WLAN is more difficult with mobile clients and IP mobility. The

IP address of the client is no longer synonymous with location. The Aruba WLAN scans off of the

configured channel, so it is possible to hear clients operating on other channels. This information

can then be used to triangulate users and rogue devices to within a small area. This information

is displayed on the master and allows for devices to be located quickly. This speed is critically

important for physical security and advanced services such as E911 calling.

 Initial AP configuration: When an AP first boots up, it contacts its master to receive the

configuration generated by the master. The master compares the AP information and

determines its group assignment, and then redirects that AP to the proper local.

 Control plane security: When CPsec is enabled, the master generates the self-signed

certificate and acts as the certificate authority (CA) for the network. The master issues

certificates to all locals in the network, which in turn certify APs. If more than one master exists in

the network, the network administrator assigns a single master as the trust anchor for that

network. The trust anchor issues certificates to the other master controllers in the network.

剩余76页未读，继续阅读

kongcp

粉丝: 0
资源: 2

Aruba Mobility Controller VRD v9: 无线管理与设计指南

ARUBA 无线控制器配置及日常维护故障处理(V8.0).pdf

ARUBA无线控制器配置及日常维护故障处理

ARUBA产品手册

Aruba Mobility Controller 配置和部署指南：VIEW 认证配置

如何在Aruba Mobility Controller上设置VIEW认证以增强WLAN安全性？

如何在 Aruba Mobility Controller 上配置VIEW认证，并确保WLAN的安全性？

如何在Aruba Mobility Controller上实施VIEW认证，并确保无线局域网(WLAN)的安全性？

Aruba Controller 命令列基本設定

Aruba Certified Mobility-edr实验-认证.zip

Aruba AP配置Aruba

最新资源