Search the Community
- Global Forums
- Airheads Channel Group - UK and Ireland
- Airheads Channel Group (German speaking)
- Airheads Channel Group - France
- Airheads Channel Groep – Nederland
- Airheads Channel Group - Italy
- Airheads Channel Group - Taiwan
- Airheads Channel Group - Singapore
- Airheads Channel Group - Malaysia
- Airheads Channel Group – Norway
- Airheads Channel Group South Africa
- Airheads Channel Group Bechtle
- Airheads Channel Group - Denmark
- ClearPass Recipe Review
- ClearPass Recipe Submission
- Admin Tool - Assign Role in Bulk
- Admin Tool - User Search
- CWNP Conf 2015
- Airheads Conference Vegas 2015
- Wlan Pro Conference 2015
- Airheads Conference Shanghai 2014
- WLAN Pro Conf EU 2014
- CWNP Conference 2014 (Sep 22 - 24)
- Airheads Local 2014
- Wireless Field Day 7 (Aug 6-8, 2014)
- Black Hat 2014 Contest
- Airheads EMEA Italy 2014 (June 9 - 13)
- Americas Airheads Conference 2014
- WLAN Professionals Summit 2014
- Airheads Roadshow 2013
- EMEA Airheads Conference 2013
- APJ Airheads Conference 2013
- Americas Airheads Conference 2013
- Americas Airheads Conference 2012
- APJ Airheads Conference 2012
- EMEA Airheads Conference 2012
- Airheads EMEA 2012 Contest: How to Enter - Contest Terms & Conditions
- Airheads EMEA 2012 Contest: Create your Entry to Win Here!
- Airheads Conferences Prior to 2012
- Americas Airheads Local Events 2012
- EMEA Airheads Local Events 2012
- Wireless Field Day 3 @ Aruba Networks
- Wireless Tech Field Day 2- Silicon Valley
- Wi-Fi Mobility Symposium- San Jose, CA USA
- SDN Apps
- Connector Translation Testing area
Wireless networks operate in environments with electrical and radio frequency devices that can interfere with network communications. Microwave ovens, cordless phones, and even adjacent Wi-Fi networks are all potential sources of continuous or intermittent interference. The spectrum analysis software modules on APs that support this feature are able to examine the radio frequency (RF) environment in which the Wi-Fi network is operating, identify interference and classify its sources. An analysis of the results can then be used to quickly isolate issues with packet transmission, channel quality, and traffic congestion caused by contention with other devices operating in the same band or channel.
AP radios that gather spectrum data but do not service clients are called spectrum monitors, or SMs. Each SM scans and analyzes the spectrum band used by the SM's radio (2.4Ghz or 5Ghz). An AP radio in hybrid AP mode continues to serve clients as an access point while it analyzes spectrum analysis data for the channel the radio uses to serve clients. You can record data for both types of spectrum analysis devices, save that data, and then play it back for later analysis.
Aruba Mobility Controller 3400 running AOS 18.104.22.168 build 38660
Access Point and RF Protect
- Find more articles tagged with:
When does an AP gets to Air-Monitor mode?
In a Mobility-controller AP deployment there are just 3 conditions that an AP can go into an Air-Monitor(AM) Mode:
1. If the am-mode is configured in the "rf dot11a-radio-profile" or "rf dot11g-radio-profile"
To see if it is configured in the radio profile please use this filter in the show running-config command
(Aruba) #show running-config | begin "rf dot11a-radio-profile"
rf dot11a-radio-profile "default"
mode am-mode ------------------------------------------------------------- Indicates that the Airmonitor is Enabled
2. If Mode Aware ARM is turned on in the ARM profile then th ap turns to AM mode when it sees excess power from the neighbor AP
To see if mode aware arm is enabled in the arm profile please use this filter in the show running-config command
(Aruba) #show running-config | begin "rf arm-profile"
rf arm-profile "default"
mode-aware ------------------------------------------------- Indicates that the mode aware arm is enabled
3. During the Regulatory mismatch or un-supported
a. When there is no channel available for the AP’s operation for the country defined on the controller.
Use the following command to verify the allowed channels for an AP
(Aruba-7240) #show ap allowed-channels ap-name <name-of-ap>
b. When AP’s has a different country with the controller’s Country.
Compare the country defined on the controller "(Aruba) #show country" to the country defined in the "(Aruba) #show ap regulatory-domain-profile <profile-name>". The ap regulatory-domain-profile will be mapped in the ap-group to which the ap is provisioned to.
- Find more articles tagged with:
- arubaos 5.0
- arubaos 6.0
- arubaos 6.1
- arubaos 6.2
- arubaOS 6.3
- arubaos 6.4
- Mobility controller
Product and Software: This article applies to Aruba Air Monitor and Access Point.
The physical hardware of an Air Monitor (AM) is identical to that of an Access Point (AP). All APs can be set to operate in AM mode with a simple change of configuration.
Clients cannot connect to an AM. The function of an AM is similar to a radio scanner because it analyzes all channels and detects all wireless attacks. An AM automatically classifies clients and APs as one of the three categories: valid, interfering, or rogue. An AM provides wireless protection without any reduction in valid client performance. An AM also scans other channels while disabling rogue clients. It also provides faster update speed for triangulation and centralized management of all events and alerts. An AM also is capable of remote packet capture on ANY channel in your regulatory domain AP and band(s).
An AP is required to provide WiFi connectivity to clients: 802.11a, b/g, or latest N, depending on hardware. An Aruba AP can simultaneously support client connectivity and Wireless Intrusion Detection and Protection on the channel the AP is set to when the Adaptive Radio Management (ARM) feature and scanning is enabled.
Since rogue APs are detected by monitoring management frames in an AP or AM, a network with proper coverage design can have an excellent chance of detecting all rogues on the channels being used. When Wireless Intrusion Protection and ARM are enabled, if no clients are connected to the AP, the AP automatically allocates itself the same channel as the rogue AP and protects the network at the same time as it advertises service on the new channel. When ARM and scanning is enabled, an AP automatically classifies clients and APs as one of the three categories: valid, interfering, or rogue. It also provides triangulation of all clients and centralized management of all events and alerts. An AP also supports Remote Packet Capture on the channel that the AP is serving clients on.
Tutorial by: Srynearson
In this tutorial I want to show you how to create a dedicated Aruba Spectrum Monitor AP Group. Then we are going to place an AP into that group. After that I will show you how I like to setup the spectrum analysis interface.
Go to: Configuration -> AP Configuration
On this page click New. Name the AP Group something and click Add
Now click on the newly created group.
The only real thing to change from default will be the radio profiles.
Expand RF Management and click 802.11a radio.
Create a new radio profile and name it something.
Change the mode to spectrum-mode
Now click the 802.11g radio profile and do the same.
After Clicking Apply, click Save Configuration up at the top of the screen.
Now let’s place an AP into the SpecAn group.
Go to: Configuration -> AP Installation
Check the box next to the AP you would like to use as a dedicated Spectrum Analyzer and click Provision.
At the top of the page change the AP Group to the newly created SpecAn group. Then scroll to the bottom and click Apply.
If you are consoled into your AP you can watch it reboot.
After the AP reboots we will be able to see that we have a spectrum monitor available on the Monitor tab.
Click Spectrum Analysis on the left column. This will pop open new spectrum monitor window.
Now we need to add some monitors. Click where it says “click here”.
Then Click Add. Let’s choose the 2.4GHz radio and click connect.
Then click the chosen monitor.
This will bring us into the Spectrum analysis with 4 windows.
As you can see, I have an AP on channel 1 right next to this monitor.
Now I will show you how I like to setup these windows.
At the top right of each window you can enlarge the window or change the options of the window.
Top Left Window:
I like to keep this my Real-Time FFT but change a few setting.
In Yellow is what I change in the options.
Top Right Window:
I like to keep this my Swept Spectrogram (FFT Max)
In Yellow is what I change in the options.
Bottom Left Window:
I like to keep this my FFT Duty Cycle
In Yellow is what I change in the options.
Bottom Right Window:
I do not care. I use this window top poke around different graphs and change different settings.
Here is what my 4 windows look like after I am done changing the options.
If you go to the Spectrum Dashboard at the top left you can setup and save the windows to your liking. You can actually set up three different sets of windows.
There is also various recording option you can use and playback later.
After you are done using one of the Spectrum Monitor radios, I would advise to disconnect from it. Once I was trying to show a co-worker of mine what was happening at a remote site. I exited my spectrum analysis window and told him to open it up from his computer. I did not click the disconnect button. It would not let him connect until my session timed out or until I went back in and pressed the disconnect button.
After you have disconnected, you may want to put the AP back into the normal AP Group if you intend on using it for client connections.
Thanks for reading. Let me know if you have any questions. Also let me know if you have used this feature and if it has help you solve any problems.
|Environment||This article applies to all the IAPs running 22.214.171.124-3.1 and 126.96.36.199-3.2. Any version prior to these does not have this feature.|
This article explains about the background spectrum monitoring feature in IAPs in the release 188.8.131.52-3.1.
IAPs can run as a spectrum monitor in two modes –
a. Standalone mode
b. Hybrid mode
In standalone mode, the IAP becomes a dedicated spectrum monitor. In this mode it will not serve the wireless clients. However, in hybrid mode, the IAP keeps serving the wireless clients while it acts a spectrum monitor in the BACKGROUND. We can convert all IAPs in an Instant network into a hybrid IAP by selecting the “BACKGROUND spectrum Monitoring” option in the Aruba Instant network’s 802.11a and 802.11g radio profiles.
APs in Access Mode continue to provide normal access service to clients, while providing the additional function of monitoring RF interference. If any IAP in the Instant network does not support the spectrum monitoring feature, that AP continues to function as a standard IAP, rather than a hybrid IAP. By default, the background spectrum monitoring option is disabled. In the hybrid mode, spectrum monitoring is performed only on the home channel.
Spectrum Analysis - RF interference in WLANs is inevitable and unpredictable. It can originate from neighboring Wi-Fi networks or non-Wi-Fi sources, such as 2.4-GHz cordless phones, microwave ovens, analog video cameras, gaming consoles and wireless telemetry systems. The characteristics and severity of RF interference varies based on the type and location of the device and may have an impact on client access and performance of the WLAN.
All Aruba 802.11n APs utilize Wi-Fi chipsets with integrated high-definition spectrum analysis capabilities, enabling alwayson, simultaneous spectrum analysis and wireless security monitoring. Simultaneous scanning of the RF spectrum for interference and intrusion protection eliminates the cost and complexity of separate dedicated hardware or handheld analyzers with client software. As a result, the Aruba solution is less than half the cost of other products and reduces the time spent by IT staff to manually capture RF interference events.
The ArubaOS RFProtect module includes spectrum analysis capabilities used in conjunction with Aruba’s Adaptive Radio Management (ARM) technology. RFProtect Spectrum Analyzer identifies and classifies interference sources in up to 13 categories, then provides administrator analysis of the interference via 12 graphical charts, including FFT and spectrogram graphs. Aruba’s Adaptive Radio Management (ARM) employs infrastructure-based controls to optimize Wi-Fi client behavior and automatically ensures that APs stay clear of Wi-Fi and non-Wi-Fi interference.
Core spectrum reporting capabilities include:
- Active Devices by Device Type, Active Devices by Channel, Active Devices Trend
- Channel Quality, Channel Quality Trend, Channel Utilization, Channel Utilization Trend
- FFT Power, FFT Duty Cycle, Interference Power
- Swept Spectrogram, Channel Quality Spectrogram
Aruba 802.11n access points are based on the Atheros XSpan technology. The Wi-Fi chipset was developed from the ground-up with integrated high definition spectrum analysis capabilities as one of the key objectives and leapfrogs the architecture model currently used in competing solutions. Add to it the custom-built processor and dedicated TPM, Aruba’s 802.11n hardware platforms are capable of performing multi-purpose access point, air-monitor and spectrum monitor function without compromising security and without added costs.
As opposed to competing solutions that require three or more separate management servers or consoles, new AP hardware, or dedicated sensor deployments, Aruba adds software-based spectrum analysis to existing hardware, preserving capital investments, and leaving the network undisturbed.
- Software-based, runs with AP-92/93, AP-105, AP-135, AP-175 and AP-120 Series 802.11n Aruba APs
- Integrated into any new 802.11n APs announced by Aruba in the future
- Enabled/disabled from Mobility Controller console on a per radio basis; enabled with WIP license
- Radios continue to scan for wireless security events while in the spectrum mode
- Enables interference charts, channel quality and availability metrics
- Provides recording/playback capability for extended unattended data capture
- (Future) Enables ARM channel optimization based on interference classification
- (Future) Continues to run while the radios are serving Wi-Fi clients
- ([[AP-92/93], AP-105, AP-175, AP-134/135 only) Provides FFT displays, spectrograms, interference classification
Spectrum and AirWave
AirWave fully supports spectrum from both instant and the controller. Note, the AP needs to be in SM mode or have hybrid scanning turned on for the inforamtion to be sent to AirWave.
Where to look in AirWave:
- Radio detail page - Table that lists all current and historic interferers classified by the radio. It displays signal strength, duty cycle, affected channel and time heard. This is everything you need to determine the impact of an interferer.
- RF health report - identifies the radios that are hearing the most interferers
- VisualRF - Locate interferers with 5-10 meters of accuracy
AMON needs to be enabled so that the controller sends the spectrum data to AirWave. To enable AMON, run 'mgmt-server type amp' from the CLI or navigate to Configuration-->Management-->General and add the server in the 'airwave server section'.
Instant will send the data to the controller as part of the standard info.
Spectrum Analysis and the AP-125
AP-125 shipped in Nov 2007. That was eons ago….so it’s fortuitous that it at least supports SOME spectrum. The AP-125 is from some of the first-gen 11n chipsets, and even the AP-125s in their current form have been out for at least a two years (likely longer).
The AP-125 does not support FFT charts, swept spectrograms of interference source classification.
The AP-125 will not get classification support or the FFT charts. We will add new features to it when we can but classification, FFTs and swept spectrograms will never be added.
The 125 has a different and older radio chipset than the AP-105, AP-92/93, AP-134/135, AP-175. It does not provide the same data that the modern radios provide. We supported what we could on as much hardware as we could.
Different AP Configuration Modes
There are two modes for spectrum analysis, Hybrid AP and Spectrum Monitor.
Hybrid AP – While serving clients the AP will perform spectrum analysis on the home channel. The AP will classify interferers, display FFT charts and send summary information up to AirWave.
The AP-135 and 105 are the only APs that support spectrum analysis in the home channel during Access Point (aka. Hybrid) configuration in FCS ArubaOS 6.1.3.
- AP 105 and 135 support the same radio serving clients and processing spectrum information at the same time. The second radio can be in whatever mode it wants to be (AM,SM or AP).
- Try not to call it ‘Hybrid Scanning’. We don’t perform spectrum scanning in hybrid mode. There is no time slicing. We gather the data on the home channel while serving clients. The AP does not change channel to gather spectrum info. ARM/WIDS scanning continues as usual. That scanning doesn't give us enough info for spectrum classifications.
- Note: In our most recent testing the Cisco 3600 took a bit of a performance hit when hybrid spectrum (CleanAir) was enabled.
‘Hybrid AP’ doesn’t refer to the hardware abilities to be an AM, SM or AP. It refers to the ability of the physical radio to be in AP mode and perform ARM, WIP and Spectrum duties. Traditionally radios in AP mode just serve clients. Some of our competitors(Moto) still have limitations in this respect.
Hybrid spectrum processing (while serving clients) is enabled by checking the ‘spectrum monitoring’ checkbox in the radio profile. It only takes effect when the radio is in AP mode. This will be clear in the 6.2 UI. I wouldn’t call it ‘hybrid scanning’ when talking about the spectrum monitoring. Unlike the rogue detection and WIP functions, spectrum analysis while serving clients does not ‘scan’ channels. It processes the data that is coming into the AP while the AP is serving clients on the home channel. Scanning implies going off channel to look or interrupting client service to tune the radio specifically for spectrum. We don’t do either of those things. AP Mode:
Spectrum Monitor – This mode is dedicated to spectrum scanning and scans multiple channels. Spectrum Monitors do not serve clients as they focus on spectrum. Spectrum monitors will classify interferers, display FFT charts and send summary information up to AirWave.
AM or SM Mode Performance
There is a bit of a performance hit but it is not because the radio is time slicing. It has to do with how the data is processed. The radio does most of the FFT and preprocessing for us but the network cpu does some of the final classifications. That is the custom code we have written. The performance hit only comes in when the AP is already maxed out and the network CPU is starting to be a bottleneck. There is no performance hit on an AP that isn’t near max throughput. 10% loss is a cautious estimate. In the last round of testing that the TME team did, they saw no performance loss on a 135 in hybrid mode. That was a bit of a surprise. There is a good chance that the spectrum load is getting lost in the performance variation between test runs.
|AP Radio Config in ArubaOS 6.1 / Radio Functions Enabled||Air Monitor (aka. AM)||Spectrum Monitor (aka. SM)||Access Point (aka. Hybrid)|
|Wireless Access||No||No||Home Channel|
|Spectrum Analysis||No||All regualatory Channels||Home Channel|
|Intrusion Detection||All Channels including 4.9||All regulatory Channels||All regulatory Channels|
|Intrusion Containment||Regulatory Domain Channels||No||Home Channel|
Supported Modes and Devices in 6.1 and 6.1.1:
Support in AOS 6.1.3
Planned support in AOS 184.108.40.206 AP-93 is scheduled to get hybrid support. RAP-3 is scheduled to get Spectrum Monitor mode support. Plans are subject to change without notice.
Hybrid spectrum on the 92/93/93-h, 104, 175 was not ready for 6.1 or 6.1.3.x.
Spectrum enhancements AOS 6.2
- Can scan entire band (Today limited to viewing each UNI band)
- ARM to consider spectrum learn information in its ARM calculations (non wifi duty cycles, error rates, etc)
- Spectrum playback without being connected to controller
- 6.2 is scheduled to add hybrid support for the 92/93
Note: Originally we had hoped to get hybrid support on all spectrum capable APs in 6.2. Unfortunately we don’t have time to test all of the APs for 6.2. Because of that the 92/93 was prioritized and will be getting hybrid support in 6.2. We hope to get additional APs hybrid support in 6.2.1 but nothing is committed yet.
Spectrum and RAPs
RAP-5WN does not support spectrum, and there are no plans to add it.
Spectrum on RAP-108/109 is currently not targeted to be added in 6.4.
Not 100% sure about the plans for AP-104, but expect Hybrid Spectrum to be added in 6.3.
- Find more articles tagged with:
|Question||Why should we deploy Air monitors in our network?|
|What are the advantages of deploying AM?|
Following is the advantage of deploying Air monitors:
1. AM have more robust containment. AP will not change channel to contain off channel rogue if it has a active client associated with it. AM will hop to the channel containing rogue alternatively. If there is a rogue on channel 11 the channel scan would look roughly like 11, 6, 11, 2, 11, 1,,11, 3, 11, 6, 11..\
2. Non-802.11n AP will only scan in the regulatory domain. AM will scan all channels.
3. AP will scan a channel for less than 100ms so that a beacon is not missed in its own channel. AP will scan all channels according to the following:
all regulatory 200ms
4. Scanning will stop for AP depending upon the factors such as Voice, Video, high throughput or power save aware ( if enabled in ARM profile ). AM doesn't need to stop scanning for any of these factors.
5. AP's primary job is to service the clients. This it can take about 4 minutes to scan all channels. AM can take about 45 seconds to scan all channels.
The answer depends on a risk assessment of the benefits and limitations of hybrid-mode air monitors (AMs) for the environment being monitored. Hybrid-mode AMs save money by reducing AP and cabling counts to a degree. In exchange, the speed and effectiveness of the Wireless IDS/IPS system is reduced to a degree. By considering both factors, a decision can be made.
Benefits of Dedicated Air Monitors
All Aruba APs can be configured as either a dedicated AM that constantly scans the RF spectrum, or as a device that provides both AP and AM functions simultaneously (a hybrid mode or scanning AP).
An AP automatically provides monitoring on its configured channel. For example, an AP servicing clients on channel 1 provides full monitoring on channel 1. If set to perform off-channel scanning, the AP periodically spends limited time intervals scanning other channels in the band. The scanning period must be less than the 100ms beacon frequency. These periods occur by default every 10 seconds on an Aruba system, but can be configured to occur more often at the cost of reduced client performance.
Some performance impact is unavoidable with off-channel scanning. Multi-vendor lab testing recently found that when using scanning APs for both client service and off-channel monitoring, a throughput drop of up to 16% was possible when APs were required to spend significant time off-channel.
Are dedicated air monitors necessary? Although Aruba leaves this choice up to the customer, we highly recommend their use. Dedicated AMs provide a number of security-related enhancements over scanning APs. The following sections detail some of the benefits of monitoring with dedicated devices.
• 802.11n classification and containment: 802.11a/b/g APs cannot detect or contain 802.11n AP traffic. For this reason, customers are strongly encouraged to deploy dedicated AMs that are 802.11n compatible, even if they are purchasing APs are 802.11a/b/g only.
• Faster rogue AP classification and containment: Enhanced security monitoring enables faster response to these security breaches by performing the following functions:
o Classification. Rogue classification is the ability to determine whether a rogue AP is connected to the wired network, and, if so, where it is connected. The longer the AP or AM can spend on a channel sampling data, the more accurate the classification algorithm will be - and in turn the accuracy and timeliness of the results. Scanning APs that are servicing clients can also classify rogue APs, but they are much slower because they must dedicate time to the clients.
o Containment. When a rogue AP has been detected and classified, Aruba can automatically disable it using a low-bandwidth wired and wireless denial of service (DoS) attack. For the wireless DoS attack, the transmitting device must be on the same channel as the rogue AP and must stay on that channel to continue the containment action. While a scanning AP can go off-channel to perform rogue AP containment, throughput can be severely impacted if the rogue is on a different channel than the local. Dedicated air monitors provide a more effective way to perform rogue AP containment without negatively impacting the performance of the wireless network.
• Ad-Hoc network detection and containment. Ad-hoc networks typically generate much less traffic than rogue APs. For this reason, there is a low probability that a scanning AP will find an ad-hoc network during its brief scan interval. With dedicated AMs, ad-hoc networks are quickly detected and disabled.
RF Management and Troubleshooting Benefits
• Packet capture, or sniffing, enables network managers to troubleshoot the network. An AP can perform packet capture on its configured channel, but performing this function on another channel adversely affects client service. A dedicated AM solves this problem because it can capture traffic on any channel.
• Statistics monitoring is another valuable troubleshooting tool. Aruba devices collect a wealth of statistical information about the RF environment, such as interference levels, number of devices, top talkers, frame retry rates, RSSI, devices out of range, and frame type/size distribution. APs provide this functionality for their own channels and offer a limited view of what is happening on other channels. Dedicated AMs scan channels with a much longer dwell time and provide a more accurate picture of what is happening on each channel.
Client Performance Benefits
• Client performance is affected when APs go off channel to scan; voice clients are particularly sensitive. Aruba’s traffic-aware scanning can cancel or defer off-channel scanning. However, while this improves client performance it reduces the security monitoring time. With dedicated AMs, the network can maximize both security and performance without having to choose between the two.
How to Compute AM Counts
For planning purposes, Aruba recommends a ratio of 1 dedicated air monitor for every 4 APs. Each AM can hear traffic within a 20,000-25,000 square foot area (80-90 foot cell radius) in a typical environment. Position AMs to cover the target area without gaps. For larger facilities, Aruba recommends cover target areas with multiple sensors using a 25% cell overlap factor. Aruba’s RF Plan tool can help visualize AM coverage
How to lock an Air Monitor to scan only a specific channel?
Air monitors generally scan all the channel one by one with a specific time interval. For troubleshooting certain RF or Rogue detection related issues, collecting air packet captures for an AM on one channel, we may need to lock the AM to a specific channel so that the AM would continuously scan or operate on that particular channel.
We can lock the Air Monitor to scan only one specific channel using the below command,
#am scan <AM-IP-ADDRESS> <CHANNEL-NUMBER-TO-LOCK> bssid <BSSID-OF-THE-AIR-MONITOR>
(Rajaguru-3400) #show ap active ap-name AP-135-001 Active AP Table --------------- Name Group IP Address 11g Clients 11g Ch/EIRP/MaxEIRP 11a Clients 11a Ch/EIRP/MaxEIRP AP Type Flags Uptime Outer IP ---- ----- ---------- ----------- ------------------- ----------- ------------------- ------- ----- ------ -------- AP-135-001 meow 10.0.0.6 0 AM 0 AM 135 Aa 7m:46s N/A Flags: 1 = 802.1x authenticated AP; 2 = Using IKE version 2; A = Enet1 in active/standby mode; B = Battery Boost On; C = Cellular; D = Disconn. Extra Calls On; E = Wired AP enabled; F = AP failed 802.1x authentication; H = Hotspot Enabled; K = 802.11K Enabled; L = Client Balancing Enabled; M = Mesh; N = 802.11b protection disabled; P = PPPOE; R = Remote AP; S = AP connected as standby; X = Maintenance Mode; a = Reduce ARP packets in the air; d = Drop Mcast/Bcast On; u = Custom-Cert RAP; r = 802.11r Enabled Channel followed by "*" indicates channel selected due to unsupported configured channel. "Spectrum" followed by "^" indicates Local Spectrum Override in effect. Num APs:1 (Rajaguru-3400) #show ap bss-table ap-name AP-135-001 fm (forward mode): T-Tunnel, S-Split, D-Decrypt Tunnel, B-Bridge (s-standard, p-persistent, b-backup, a-always) Aruba AP BSS Table ------------------ bss ess port ip phy type ch/EIRP/max-EIRP cur-cl ap name in-t(s) tot-t mtu acl-state acl fm --- --- ---- -- --- ---- ---------------- ------ ------- ------- ----- --- --------- --- -- 6c:f3:7f:b9:c1:40 N/A 10.0.0.6 g-HT am ?/?/? 0 AP-135-001 0 5m:51s 1500 - 1 Bs 6c:f3:7f:b9:c1:50 N/A 10.0.0.6 a-HT am ?/?/? 0 AP-135-001 0 5m:51s 1500 - 1 Bs Port information is available only on 6xx controller. Channel followed by "*" indicates channel selected due to unsupported configured channel. "Spectrum" followed by "^" indicates Local Spectrum Override in effect. Num APs:2 Num Associations:0
LOCKING THE G RADIO ON THE AM TO CHANNEL 1:
(Rajaguru-3400) #am scan 10.0.0.6 1 bssid 6c:f3:7f:b9:c1:40
LOCKING THE A RADIO ON THE AM TO CHANNEL 116+:
(Rajaguru-3400) #am scan 10.0.0.6 116+ bssid 6c:f3:7f:b9:c1:50
To verify that the AM is locked to a specific channel,
Run "show ap monitor scan-info ap-name <AP-NAME>", multiple time to confirm that the "Current Channel" remains on the locked channel.
(Rajaguru-3400) #show ap monitor scan-info ap-name AP-135-001 WIF Scanning State: wifi0: 6c:f3:7f:b9:c1:50 --------------------------------------------- Parameter Value --------- ----- Probe Type am Phy Type 80211a-HT-40 Scan Mode all-reg-domain Scan Channel no Disable Scanning yes RegDomain Scan Completed yes DOS Channel Count 0 Current Channel 116+ Current Scan Channel 60+ Current Channel Index 10 Current Scan Start Milli Tick 468800 Current Dwell Time 500 Current Scan Type active Scan-Type-Info --------------- Info-Type Active Reg-domain All-reg-domain Rare DOS --------- ------ ---------- -------------- ---- --- Dwell Times 500 250 200 100 500 Last Scan Channel 60+ 161+ 153+ 0 0 WIF Scanning State: wifi1: 6c:f3:7f:b9:c1:40 --------------------------------------------- Parameter Value --------- ----- Probe Type am Phy Type 80211b/g-HT-40 Scan Mode all-reg-domain Scan Channel no Disable Scanning yes RegDomain Scan Completed yes DOS Channel Count 0 Current Channel 1 Current Scan Channel 9+ Current Channel Index 8 Current Scan Start Milli Tick 378800 Current Dwell Time 500 Current Scan Type active Scan-Type-Info --------------- Info-Type Active Reg-domain All-reg-domain Rare DOS --------- ------ ---------- -------------- ---- --- Dwell Times 500 250 200 100 500 Last Scan Channel 9+ 2+ 14 0 0
Run "show ap arm scan-times ap-name <AP-NAME>" multiple times to check that the "timer-tick" keeps increasing only for the locked channel.
(Rajaguru-3400) #show ap arm scan-times ap-name AP-135-001 Channel Scan Time ----------------- channel assign-time(ms) scans-attempted scans-rejected dos-scans flags timer-tick ------- --------------- --------------- -------------- --------- ----- ---------- 34 200 1 0 0 D 303 36 15400 36 0 0 DVACLFETS 529 38 400 2 0 0 D 314 40 31300 74 0 0 DVACULBPTS 530 42 400 2 0 0 D 330 44 31300 74 0 0 DVACULFBTS 531 46 400 2 0 0 D 346 48 32300 76 0 0 DVACULBPTS 532 52 29300 70 0 0 DVACULETS 534 56 5300 22 0 0 DVCULBTS 507 60 31300 73 0 0 DVACULBTS 534 64 29300 70 0 0 DVACULBTS 518 100 9900 21 0 0 DAL 517 104 19800 42 0 0 DAUL 518 108 18800 40 0 0 DAUL 519 112 17800 38 0 0 DAUL 521 116 17800 38 0 0 DAUL 1129 <<<<<<<< 120 800 4 0 0 DUL 457 124 800 4 0 0 DUL 468 128 800 4 0 0 DUL 478 132 15800 34 0 0 DAUL 523 136 800 4 0 0 DUL 499 140 800 4 0 0 DUL 510 144 800 4 0 0 DUL 520 149 15150 36 0 0 DVACLFETS 526 153 31100 73 0 0 DVCULBPTS 531 157 30900 72 0 0 DVACULFBTS 531 161 29750 69 0 0 DVACULBPTS 533 165 13700 32 0 0 DVCTS 478 1 18850 44 0 0 DVACLFTS 1129 <<<<<<<< 2 19050 45 0 0 DACLS 432 3 19300 45 0 0 DCLS 427 4 19550 46 0 0 DACLS 428 5 38100 90 0 0 DVACULPS 429 6 37100 88 0 0 DVACULTS 430 7 38100 90 0 0 DVACULFS 432 8 38100 90 0 0 DACULS 433 9 37600 89 0 0 DACULS 433 10 19050 45 0 0 DACUS 423 11 19050 45 0 0 DVACUPTS 423 12 18450 42 0 0 DACUS 425 13 19050 45 0 0 DACUS 427 14 800 4 0 0 D 429 Channel Flags: D: All-Reg-Domain Channel, C: Reg-Domain Channel, A: Activity Present L: Scan Secondary Above, U: Scan Secondary Below, Y: Scan 80MHz, Z: Rare Channel V: Valid, T: Valid 20MHZ Channel, F: Valid 40MHz Channel, P: Valid 40MHZ Channel Pair E: Valid 80MHz Channel (lower 20M), B: Belongs to valid 80MHz channel O: DOS Channel, K: DOS 40MHz Upper, H: DOS 40MHz Lower, N: Split Channel Scan R: Radar detected in last 30 min, X: DFS required, S: Transmit Allowed WIF Scanning State ------------------- Scan mode channel current-scan-channel last-dos-channel timer-milli-tick next-scan-milli-tick (jitter) scans (Tot:Rej:Eff(%):Last intvl(%)) --------- ------- -------------------- ---------------- ---------------- ----------------------------- ------------------------------------ Aggressive 116+ 60+ 0 998670 37370 (-298) 1060:0:100:100 Aggressive 1 9+ 0 998670 37370 (-339) 846:0:100:100
Product and Software: This article applies to ArubaOS 6.X and later.
Spectrum analysis provides a visualization of the interference by turning an AM or AP into a spectrum monitor (SM) to listen for and visualize interference in the RF band. When in SM mode, the AP is not serving clients or taking part in containment of rogue APs, however IDS monitoring does continue.
Instead the AP is sampling the RF band and providing data to the mobility controller. The following APs can be used in SM mode.
APs and Controllers Spectrum Support
AP-13x Full Support
AP-9X Series Full Support
RAP-5WN Partial Support
AP-12X Series Partial Support
RAP-2WG No Support
AP-6X Series No Support
600 Series Full Support
Aruba 3000 Series Full Support
M3 Mkl Full Support
Partial support on the 12X series and RAP-5WN allows for all spectrum graphs except for Real Time FFT, Duty Cycle spectrographs, and interference classification types.
Real-time FFT: This line chart shows the power level of a signal on a channel or frequency that is monitored by a spectrum monitor radio. This chart is available only for AP-105 and the AP-90 Series.
FFT Duty Cycle: Fast Fourier Transform (FFT) is an algorithm that is used to compute the frequency spectrum of a time-varying input signal. This line chart shows the FFT duty cycle, which represents the percent of time that a signal is broadcast on the specified channel or frequency. This chart is available only for AP-105 and the AP-90 and AP-130 Series.