This guide provides a description of the various bandwidth reservation and quality of service (QoS) options for supporting voice traffic in an Aruba remote access point (RAP) telecommuter deployment scenario. The RAP solution is a key component of the Aruba virtual branch network (VBN) architecture. The Aruba RAP deployment model meets the needs of fixed telecommuter and small branch office deployments while maintaining simplicity and ease of deployment. Aruba RAPs extend the corporate LAN to any remote location by enabling seamless wired or wireless data and voice wherever a user finds an Internet-enabled Ethernet port or 3G cellular connection. RAPs are ideally suited for small remote offices, home offices, telecommuters, mobile executives, and for business continuity applications.
To learn more, visit us at http://www.arubanetworks.com/wlan. Join the discussion at https://community.arubanetworks.com
This guide covers Aruba Mobility Controllers and is considered part of the foundation guides within the VRD core technologies series. This guide will help you understand the capabilities and options you have when deploying an Aruba Mobility Controller. This guide describes operating modes for the mobility controller, licensing, forwarding modes, logical and physical deployment, redundancy, and how to select the appropriate mobility controller based on scalability requirements. Version 9 includes information on the 7200 series controller.
This guide covers indoor 802.11n WLANs and is considered part of the foundation guides within the VRD core technologies series. This guide describes 802.11n, differences in 802.11n vs. 802.11a/b/g functionality, and Aruba-specific technologies and access points (APs) that make 802.11n-based WLANs a viable replacement for wired Ethernet in the majority of deployments.
To learn more, visit us at http://www.arubanetworks.com/wlan. Join the discussion at https://community.arubanetworks.com
This presentation will show how ArubaOS architecture has evolved and been modernized towards the ever growing Virtual Machine world to give mobile workers the best possible experience that is evolving into a key component of the Aruba Mobile First platform. Check out the webinar recording where this presentation was used. https://community.arubanetworks.com/t5/Wireless-Access/Airheads-Technical-Webinar-Recording-Slides-ArubaOS-8-0/m-p/278668
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
In this presentation, we will be debugging Aruba RAP commands, run through troubleshooting and logs and tackle RAP clusters.
Check out the webinar recording where this presentation was used: http://community.arubanetworks.com/t5/Wireless-Access/Technical-Webinar-Recording-Slides-Aruba-Remote-Access-Point-RAP/td-p/310448
For WLANs to be able to reliably support mission-critical, high-throughput, or time-sensitive applications, RF interference must be continuously monitored. The WLAN must automatically and dynamically adapt to mitigate the effects of any interference in the environment. WLAN infrastructure has to provide the administrators with real-time, historical, and proactive visibility into the air to diagnose and mitigate interference. In this application note we will look at some of the tools that Aruba offers as a part of its WLAN solution that enable administrators to ensure reliable, high performing RF.
To learn more, visit us at http://www.arubanetworks.com/wlan. Join the discussion at https://community.arubanetworks.com
In this presentation, we will cover the Central platform which provides a standard Web-based interface that allows you to configure and monitor multiple Aruba Instant networks / Switches from anywhere with a connection to the Internet. Check out the webinar recording where this presentation was used: http://community.arubanetworks.com/t5/Cloud-Managed-Networks/Technical-Webinar-Aruba-Central-with-Instant-AP/td-p/429366
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
Aruba Central user may need a centralized web-server to host captive portal page for their distributed networks across the globe like coffee shops, restaurant or hotels. Aruba central 2.0 has a new feature called Cloud Guest or Guest Management that allows administrator to create a splash page for guest users using Web server and radius server running in the cloud.
Check out the webinar recording where this presentation was used:
https://community.arubanetworks.com/t5/Cloud-Managed-Networks/Airheads-Tech-Talks-Cloud-Guest-SSID-on-Aruba-Central/td-p/524320
In centralized Aruba WLAN deployments, the mobility controller is the heart of the network. The controller operates as a stand-alone master, or in a master-local cluster. Aruba provides several redundancy models for deploying mobility controllers. Each of these options, including the choice to forgo redundancy, must be understood so that the correct choice can be made for each deployment model.
To learn more, visit us at http://www.arubanetworks.com/wlan. Join the discussion at https://community.arubanetworks.com
This guide covers Aruba Mobility Controllers and is considered part of the foundation guides within the VRD core technologies series. This guide will help you understand the capabilities and options you have when deploying an Aruba Mobility Controller. This guide describes operating modes for the mobility controller, licensing, forwarding modes, logical and physical deployment, redundancy, and how to select the appropriate mobility controller based on scalability requirements. Version 9 includes information on the 7200 series controller.
This guide covers indoor 802.11n WLANs and is considered part of the foundation guides within the VRD core technologies series. This guide describes 802.11n, differences in 802.11n vs. 802.11a/b/g functionality, and Aruba-specific technologies and access points (APs) that make 802.11n-based WLANs a viable replacement for wired Ethernet in the majority of deployments.
To learn more, visit us at http://www.arubanetworks.com/wlan. Join the discussion at https://community.arubanetworks.com
This presentation will show how ArubaOS architecture has evolved and been modernized towards the ever growing Virtual Machine world to give mobile workers the best possible experience that is evolving into a key component of the Aruba Mobile First platform. Check out the webinar recording where this presentation was used. https://community.arubanetworks.com/t5/Wireless-Access/Airheads-Technical-Webinar-Recording-Slides-ArubaOS-8-0/m-p/278668
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
In this presentation, we will be debugging Aruba RAP commands, run through troubleshooting and logs and tackle RAP clusters.
Check out the webinar recording where this presentation was used: http://community.arubanetworks.com/t5/Wireless-Access/Technical-Webinar-Recording-Slides-Aruba-Remote-Access-Point-RAP/td-p/310448
For WLANs to be able to reliably support mission-critical, high-throughput, or time-sensitive applications, RF interference must be continuously monitored. The WLAN must automatically and dynamically adapt to mitigate the effects of any interference in the environment. WLAN infrastructure has to provide the administrators with real-time, historical, and proactive visibility into the air to diagnose and mitigate interference. In this application note we will look at some of the tools that Aruba offers as a part of its WLAN solution that enable administrators to ensure reliable, high performing RF.
To learn more, visit us at http://www.arubanetworks.com/wlan. Join the discussion at https://community.arubanetworks.com
In this presentation, we will cover the Central platform which provides a standard Web-based interface that allows you to configure and monitor multiple Aruba Instant networks / Switches from anywhere with a connection to the Internet. Check out the webinar recording where this presentation was used: http://community.arubanetworks.com/t5/Cloud-Managed-Networks/Technical-Webinar-Aruba-Central-with-Instant-AP/td-p/429366
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
Aruba Central user may need a centralized web-server to host captive portal page for their distributed networks across the globe like coffee shops, restaurant or hotels. Aruba central 2.0 has a new feature called Cloud Guest or Guest Management that allows administrator to create a splash page for guest users using Web server and radius server running in the cloud.
Check out the webinar recording where this presentation was used:
https://community.arubanetworks.com/t5/Cloud-Managed-Networks/Airheads-Tech-Talks-Cloud-Guest-SSID-on-Aruba-Central/td-p/524320
In centralized Aruba WLAN deployments, the mobility controller is the heart of the network. The controller operates as a stand-alone master, or in a master-local cluster. Aruba provides several redundancy models for deploying mobility controllers. Each of these options, including the choice to forgo redundancy, must be understood so that the correct choice can be made for each deployment model.
To learn more, visit us at http://www.arubanetworks.com/wlan. Join the discussion at https://community.arubanetworks.com
This guide details the advanced guest access features available to organizations through the combination of Aruba’s Amigopod and Mobility Controller solutions. This includes details of workflow management, RADIUS configuration, AAA configuration, and testing of the solution. This guide builds on the network defined in the Campus VRD.
To learn more, visit us at http://www.arubanetworks.com/wlan. Join the discussion at https://community.arubanetworks.com
This lab setup document emulates the recommended campus and remote access point networks discussed in the Aruba Campus Networks Validated Reference Design and the Aruba Remote Access Point (RAP) Networks Validated Reference Design. All the screenshots and command-line interface (CLI) configurations in the Aruba Campus Networks Validated Reference Design and the Aruba Remote Access Point (RAP) Networks Validated Reference Design are from this setup.
In this presentation, we will cover the IAP-VPN architecture which includes the following two components: IAPs at branch sites and controller at the data center. Check out the webinar recording where this presentation was used: https://community.arubanetworks.com/t5/Wireless-Access/Technical-Webinar-Recording-Slides-Aruba-Instant-AP-VPN/m-p/300742
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
In this presentation, we will cover an overview of ArubaOS 8.x Licensing from Supported/ Unsupported Topology to Server Failover behaviour and license generation and transfer.
Check out the webinar recording where this presentation was used: http://community.arubanetworks.com/t5/Wireless-Access/Technical-Webinar-Recording-Slides-How-Licensing-works-in/td-p/306162
Clustering is a new feature introduced in AOS 8.0 that enables seamless roaming of clients between APs, hitless client failover and load balancing of users across Mobility Controllers in the cluster. This solution provides the configuration required to create a cluster of Mobility Controllers that are managed by the same Mobility Master.
Check out the webinar recording where this presentation was used:
https://community.arubanetworks.com/t5/Wired-Intelligent-Edge-Campus/Airheads-Tech-Talks-Advanced-Clustering-in-AOS-8-x/td-p/506441
The Aruba Network Rightsizing Best Practices Guide provides an overview of network rightsizing. Network rightsizing is a network capacity planning and cost optimization strategy based on the principle that wired and wireless LANs should be sized and structured to meet current and future demand. After explaining the principles of network rightsizing and how it can benefit your organization, the methodology for analyzing and planning a rightsized network will be discussed. Finally, you will learn how to implement a rightsized yet scalable Aruba 802.11n network.
To learn more, visit us at http://www.arubanetworks.com/wlan. Join the discussion at https://community.arubanetworks.com
This presentation will show you how to right size customer networks, take advantage of ARM, Band steering and Client Match. Check out the webinar recording where this presentation was used. https://attendee.gotowebinar.com/recording/4688596131469180162
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
During this presentation, we will cover a deep dive into Aruba Central and its features. Check out the webinar recording where this presentation was used:
https://community.arubanetworks.com/t5/Cloud-Managed-Networks/Technical-Webinar-Advance-Aruba-Central/m-p/496064
These slides were used during our Airheads Meetup Event at Jaarbeurs Utrecht on October 27th 2017.
If you have ideas, new speaker topics and recommendations for the events, please help us to improve for next year’s event by commenting on the community page: http://community.arubanetworks.com/t5/Wireless-Access/Airheads-Technical-Event-The-Netherlands-October-27th-2017/m-p/313566#M75870
Running or planning on deploying a large ClearPass cluster? See what others are doing in larger environments to improve their deployments This session is designed to help customers that run the largest and most demanding networks learn how to deal with multiple locations, 100k+ endpoints, and strict SLA’s. Come to this session to discuss architecture for distributed deployments and how to better design your install for high performance, high availability needs. This is the one session where we’ll include the most experienced ClearPass team members for what will be a highly interactive session.
During this webinar, we will discuss how starting from ArubaOS 8.2.0.0, selected APs can run in both controller-based mode and controller-less mode and the implications tied to that. Check out the webinar recording where this presentation was used: http://community.arubanetworks.com/t5/Wireless-Access/Technical-Webinar-AP-Discovery-amp-Deployment-Policy-ArubaOS-8-x/m-p/394540/
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
This webinar will cover how to bring up Aruba Mobility Master, Managed Device & Access Point and also go through some basic troubleshooting commands.Check out the webinar recording where this presentation was used: http://community.arubanetworks.com/t5/Wireless-Access/Technical-Webinar-Recording-Slides-Bringing-up-Aruba-Mobility/td-p/307599
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
In this presentation, we will run through some Rogue AP troubleshooting scenarios and best practices. The agenda covers Rogue AP Detection, classification techniques and containment, wired containment and wireless containment without Tarpit. Check out the webinar recording where this presentation was used:
http://community.arubanetworks.com/t5/Aruba-Instant-Cloud-Wi-Fi/Technical-Webinar-Recording-Slides-ArubaOS-Rogue-AP/m-p/289230
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
The existing channel and power assignment functions in ARM support channel scanning, channel assignment and power adjustments, locally. Decisions are made locally at the AP without looking at the entire network. Thanks to the dynamic machine learning techniques, AirMatch centralises this function in the Mobility Master while dynamically learning the network and adapting the RF planning for the entire network. Check out the webinar recording where this presentation was used: http://community.arubanetworks.com/t5/Wireless-Access/Technical-Webinar-Recording-Slides-What-does-AirMatch-do/td-p/314413
In this presentation, we will discuss the L3 Redundancy Requirement which primarily comes from customers who want to handle the complete Data Center Failure during natural disasters or other catastrophic events. Check out the webinar recording where this presentation was used: http://community.arubanetworks.com/t5/Wireless-Access/Technical-Webinar-Layer-3-Redundancy-for-Mobility-Master-ArubaOS/td-p/382029
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
The Aruba Mobility Access Switch family of products provides various features including voice VLAN, Link Layer Discovery Protocol – Media Endpoint Discovery (LLDP-MED), and Quality of Service (QoS) to enable successful deployment of VoIP in enterprise networks. This application note addresses traditional techniques and introduces new device-aware support to deploy VoIP phones. This document is intended for all system engineers and network administrators who are deploying a VoIP solution in an enterprise network.
To learn more, visit us at http://www.arubanetworks.com/wlan. Join the discussion at https://community.arubanetworks.com
Point-to-point (PTP) wireless connections have many use cases including linking buildings on university campus, creating connections between offshore oil rigs, and eliminating the need to pull fiber cable between buildings on opposite sides of a busy road. This guide will help you select the right hardware platform (including both the AOS-based AP-175 and Aruba¹s new AirMesh products; Choose appropriate antennas and accessories; Identify and overcome some of the most common outdoor installation challenges; Set up and configure the Aruba solution.
To learn more, visit us at http://www.arubanetworks.com/wlan. Join the discussion at https://community.arubanetworks.com
This guide focuses on configuration of DHCP fingerprinting, which is used in conjunction with user roles on the Aruba Mobility Controller. When a user authenticates, their device type is taken into account. Based on that device type, a new role can be assigned to the device, such as restricting access to certain protocols or completely blocking access.
To learn more, visit us at http://www.arubanetworks.com/wlan. Join the discussion at https://community.arubanetworks.com
This guide details the advanced guest access features available to organizations through the combination of Aruba’s Amigopod and Mobility Controller solutions. This includes details of workflow management, RADIUS configuration, AAA configuration, and testing of the solution. This guide builds on the network defined in the Campus VRD.
To learn more, visit us at http://www.arubanetworks.com/wlan. Join the discussion at https://community.arubanetworks.com
This lab setup document emulates the recommended campus and remote access point networks discussed in the Aruba Campus Networks Validated Reference Design and the Aruba Remote Access Point (RAP) Networks Validated Reference Design. All the screenshots and command-line interface (CLI) configurations in the Aruba Campus Networks Validated Reference Design and the Aruba Remote Access Point (RAP) Networks Validated Reference Design are from this setup.
In this presentation, we will cover the IAP-VPN architecture which includes the following two components: IAPs at branch sites and controller at the data center. Check out the webinar recording where this presentation was used: https://community.arubanetworks.com/t5/Wireless-Access/Technical-Webinar-Recording-Slides-Aruba-Instant-AP-VPN/m-p/300742
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
In this presentation, we will cover an overview of ArubaOS 8.x Licensing from Supported/ Unsupported Topology to Server Failover behaviour and license generation and transfer.
Check out the webinar recording where this presentation was used: http://community.arubanetworks.com/t5/Wireless-Access/Technical-Webinar-Recording-Slides-How-Licensing-works-in/td-p/306162
Clustering is a new feature introduced in AOS 8.0 that enables seamless roaming of clients between APs, hitless client failover and load balancing of users across Mobility Controllers in the cluster. This solution provides the configuration required to create a cluster of Mobility Controllers that are managed by the same Mobility Master.
Check out the webinar recording where this presentation was used:
https://community.arubanetworks.com/t5/Wired-Intelligent-Edge-Campus/Airheads-Tech-Talks-Advanced-Clustering-in-AOS-8-x/td-p/506441
The Aruba Network Rightsizing Best Practices Guide provides an overview of network rightsizing. Network rightsizing is a network capacity planning and cost optimization strategy based on the principle that wired and wireless LANs should be sized and structured to meet current and future demand. After explaining the principles of network rightsizing and how it can benefit your organization, the methodology for analyzing and planning a rightsized network will be discussed. Finally, you will learn how to implement a rightsized yet scalable Aruba 802.11n network.
To learn more, visit us at http://www.arubanetworks.com/wlan. Join the discussion at https://community.arubanetworks.com
This presentation will show you how to right size customer networks, take advantage of ARM, Band steering and Client Match. Check out the webinar recording where this presentation was used. https://attendee.gotowebinar.com/recording/4688596131469180162
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
During this presentation, we will cover a deep dive into Aruba Central and its features. Check out the webinar recording where this presentation was used:
https://community.arubanetworks.com/t5/Cloud-Managed-Networks/Technical-Webinar-Advance-Aruba-Central/m-p/496064
These slides were used during our Airheads Meetup Event at Jaarbeurs Utrecht on October 27th 2017.
If you have ideas, new speaker topics and recommendations for the events, please help us to improve for next year’s event by commenting on the community page: http://community.arubanetworks.com/t5/Wireless-Access/Airheads-Technical-Event-The-Netherlands-October-27th-2017/m-p/313566#M75870
Running or planning on deploying a large ClearPass cluster? See what others are doing in larger environments to improve their deployments This session is designed to help customers that run the largest and most demanding networks learn how to deal with multiple locations, 100k+ endpoints, and strict SLA’s. Come to this session to discuss architecture for distributed deployments and how to better design your install for high performance, high availability needs. This is the one session where we’ll include the most experienced ClearPass team members for what will be a highly interactive session.
During this webinar, we will discuss how starting from ArubaOS 8.2.0.0, selected APs can run in both controller-based mode and controller-less mode and the implications tied to that. Check out the webinar recording where this presentation was used: http://community.arubanetworks.com/t5/Wireless-Access/Technical-Webinar-AP-Discovery-amp-Deployment-Policy-ArubaOS-8-x/m-p/394540/
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
This webinar will cover how to bring up Aruba Mobility Master, Managed Device & Access Point and also go through some basic troubleshooting commands.Check out the webinar recording where this presentation was used: http://community.arubanetworks.com/t5/Wireless-Access/Technical-Webinar-Recording-Slides-Bringing-up-Aruba-Mobility/td-p/307599
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
In this presentation, we will run through some Rogue AP troubleshooting scenarios and best practices. The agenda covers Rogue AP Detection, classification techniques and containment, wired containment and wireless containment without Tarpit. Check out the webinar recording where this presentation was used:
http://community.arubanetworks.com/t5/Aruba-Instant-Cloud-Wi-Fi/Technical-Webinar-Recording-Slides-ArubaOS-Rogue-AP/m-p/289230
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
The existing channel and power assignment functions in ARM support channel scanning, channel assignment and power adjustments, locally. Decisions are made locally at the AP without looking at the entire network. Thanks to the dynamic machine learning techniques, AirMatch centralises this function in the Mobility Master while dynamically learning the network and adapting the RF planning for the entire network. Check out the webinar recording where this presentation was used: http://community.arubanetworks.com/t5/Wireless-Access/Technical-Webinar-Recording-Slides-What-does-AirMatch-do/td-p/314413
In this presentation, we will discuss the L3 Redundancy Requirement which primarily comes from customers who want to handle the complete Data Center Failure during natural disasters or other catastrophic events. Check out the webinar recording where this presentation was used: http://community.arubanetworks.com/t5/Wireless-Access/Technical-Webinar-Layer-3-Redundancy-for-Mobility-Master-ArubaOS/td-p/382029
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
The Aruba Mobility Access Switch family of products provides various features including voice VLAN, Link Layer Discovery Protocol – Media Endpoint Discovery (LLDP-MED), and Quality of Service (QoS) to enable successful deployment of VoIP in enterprise networks. This application note addresses traditional techniques and introduces new device-aware support to deploy VoIP phones. This document is intended for all system engineers and network administrators who are deploying a VoIP solution in an enterprise network.
To learn more, visit us at http://www.arubanetworks.com/wlan. Join the discussion at https://community.arubanetworks.com
Point-to-point (PTP) wireless connections have many use cases including linking buildings on university campus, creating connections between offshore oil rigs, and eliminating the need to pull fiber cable between buildings on opposite sides of a busy road. This guide will help you select the right hardware platform (including both the AOS-based AP-175 and Aruba¹s new AirMesh products; Choose appropriate antennas and accessories; Identify and overcome some of the most common outdoor installation challenges; Set up and configure the Aruba solution.
To learn more, visit us at http://www.arubanetworks.com/wlan. Join the discussion at https://community.arubanetworks.com
This guide focuses on configuration of DHCP fingerprinting, which is used in conjunction with user roles on the Aruba Mobility Controller. When a user authenticates, their device type is taken into account. Based on that device type, a new role can be assigned to the device, such as restricting access to certain protocols or completely blocking access.
To learn more, visit us at http://www.arubanetworks.com/wlan. Join the discussion at https://community.arubanetworks.com
The Indoor 802.11n Site Survey and Planning guide covers the design and installation of an Aruba WLAN. It includes information on choosing the right AP, performing a virtual survey, and performing a physical survey. The guide also covers using the Aruba Instant AP for physical site surveys.
This guide covers the deployment of Aruba remote access points (RAP) in fixed telecommuter and micro branch office sites, and it is considered part of the base designs guides within the VRD core technologies series. This guide covers the design recommendations for remote network deployment and it explains the various configurations needed to implement a secure, high-performance virtual branch office (VBN) solution with Aruba RAPs.
This guide covers the deployment of Aruba remote access points (RAP) in fixed telecommuter and micro branch office sites, and it is considered part of the base designs guides within the VRD core technologies series. This guide covers the design recommendations for remote network deployment and it explains the various configurations needed to implement a secure, high-performance virtual branch office (VBN) solution with Aruba RAPs.
This guide covers the deployment of Aruba WLAN in a typical campus network, and it is considered part of the base designs guides within the VRD core technologies series. This guide covers the design recommendations for a campus deployment and it explains the various configurations needed to implement the Aruba secure, high-performance, multimedia grade WLAN solution in large campuses.
This Solution Guide describes best practices for implementing an Aruba 802.11 wireless network that supports thousands of highly mobile devices (HMDs) such as Wi-Fi phones, handheld scanning terminals, voice badges, and computers mounted to vehicles. It describes the design principles particular to keeping devices that are in constant motion connected to the network as well as best practices for configuring Aruba Networks controllers and the mobile devices. The comprehensive guide addresses six areas of network planning to ensure a high quality of service for roaming data and voice sessions: device configuration, airtime optimization, roaming optimization, IP mobility configuration, IP multicast configuration, and interference resistance. A detailed troubleshooting section covers common issues that arise with these types of WLANs.
To learn more, visit us at http://www.arubanetworks.com/wlan. Join the discussion at https://community.arubanetworks.com
Infinian Technology Dealer, Distributor and Reseller of Aruba Switches, Wireless Access Points, Enterprise Networking Devices in India for Price/Cost Call Us:
This guide explains how to implement an Aruba 802.11n wireless network that must provide high-speed access to an auditorium-style room with 500 or more seats. Aruba Networks refers to such networks as high-density wireless LANs (HD WLANs). Lecture halls, hotel ballrooms, and convention centers are common examples of spaces with this requirement. Because the number of concurrent users on an AP is limited, to serve such a large number of devices requires access point (AP) densities well in excess of the usual AP per 2,500 – 5,000 ft2 (225 – 450 m2). Such coverage areas therefore have many special technical design challenges. This validated reference design provides the design principles, capacity planning methods, and physical installation knowledge needed to successfully deploy HD WLANs.
The purpose of this guide is to explain the enhancements in 802.11ac standard and provide guidance towards
migrating to 802.11ac with respect to network design, deployment, and configuration best practices for campus environments like offices, university campus, and dorm environments.
This guide covers the following topics in detail:
- Summary of Recommendations
- 802.11ac Features and Benefits
- 802.11ac Planning and Deployment Guidelines
- Best Practice Recommendations for Deploying 802.11ac WLANs
This guide is intended for those who are willing to learn about the 802.11ac standards and understand the best practices in deploying a high-performing 802.11ac
Virtual Intranet Access (VIA) is part of the Aruba remote access solution that includes remote access points(RAPs), Aruba Instant (IAP),and the Remote Node solution. To address the demands of the current mobile workforce, which requires corporate access from hotspots such as those in airport, hotels, and coffee shops . The Aruba VIA solution is designed to provide secure corporate access to employee laptops and smartphones. This guide will walk through planning and deployment of the VIA solution.
This document describes the process for leveraging the ClearPass Guest captive portal to bypass the Captive Network Assistant (web sheet) that is displayed on iOS devices such as iPhone, iPad, and more recently, OS X machines running Lion (10.7) and above.
To learn more, visit us at http://www.arubanetworks.com/wlan. Join the discussion at https://community.arubanetworks.com
Similar to Voice Support for Fixed Telecommuter Deployments (20)
ClearPass OnGuard agents perform endpoint posture assessment and ensure that compliance is met before granting access to the network. This session will cover the ClearPass OnGuard Agent components and work-flow in detail.
Check out the webinar recording where this presentation was used:
https://community.arubanetworks.com/t5/Security/Airheads-Tech-Talks-Understanding-ClearPass-OnGuard-Agents/td-p/524288
During this webinar, we will cover AppRF - a suite of application visibility and control features that are part of Aruba's Policy Enforcement Firewall. AppRF is a PEF feature that is designed to give network administrators insight into the applications that are running on their network, and who is using them. Check out the webinar recording where this presentation was used:
https://community.arubanetworks.com/t5/Wireless-Access/Technical-Webinar-Aruba-AppRF-AOS-6-x-amp-8-x/td-p/490800
In this presentation, we will cover how the ArubaOS switch virtualization technologies can deliver high-performance and highly available switching while simplifying management and lowering costs. Check out the webinar recording where this presentation was used: https://community.arubanetworks.com/t5/Wired-Intelligent-Edge-Campus/Technical-Webinar-Switch-Stacking-ArubaOS-Switch/td-p/471348
In this presentation, we will discuss how IEEE standard 802.3ad and its implications allow third-party devices such as switches, servers, or any other networking device that supports trunking to interoperate with the distributed trunking switches (DTSs) seamlessly. Check out the webinar recording where this presentation was used: http://community.arubanetworks.com/t5/Wired-Intelligent-Edge-Campus/Technical-Webinar-LACP-and-distributed-LACP-ArubaOS-Switch/td-p/458170
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
In this presentation, e will discuss AirWave 10, a new software build that lets us streamline code, add performance, clustering. Check out the webinar recording where this presentation was used: http://community.arubanetworks.com/t5/Network-Management/Technical-Webinar-Introduction-to-AirWave-10/td-p/454762
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
In this presentation, we will discuss how Virtual Switching Framework (VSF) allows supported switches connected to each other through Ethernet connections (copper or fibre) to behave like a single chassis switch. Check out the webinar recording where this presentation was used: http://community.arubanetworks.com/t5/Controllerless-Networks/Technical-Webinar-Virtual-Switching-Framework-ArubaOS-Switch/td-p/445696
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
In this presentation, we will discuss how AirGroup configurations have changed to support hierarchical configuration in release 8.2. AirGroup configs will now be profile based and can be applied at any node. Check out the webinar recording where this presentation was used: http://community.arubanetworks.com/t5/Wireless-Access/Technical-Webinar-AirGroup-profiling-changes-across-8-1-amp-8-2/td-p/417153
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
In this presentation, we will explore the RESTApi as the ClearPass API integrations and further developments are more focused to RESTApi than the other existing API services like xml-rpc, SOAP, etc.Check out the webinar recording where this presentation was used: http://community.arubanetworks.com/t5/Security/Technical-Webinar-Getting-Started-with-the-ClearPass-REST-API/td-p/410214
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
In this presentation, we will discuss how branch controllers work and run through different deployments examples in 6.x and 8.x.
Check out the webinar recording where this presentation was used: http://community.arubanetworks.com/t5/Wireless-Access/Technical-Webinar-Recording-Slides-Manage-Devices-at-Branch/td-p/351983
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
These slides were used during our Airheads Meetup Event at Jaarbeurs Utrecht on October 27th 2017.
If you have ideas, new speaker topics and recommendations for the events, please help us to improve for next year’s event by commenting on the community page: http://community.arubanetworks.com/t5/Wireless-Access/Airheads-Technical-Event-The-Netherlands-October-27th-2017/m-p/313566#M75870
These slides were used during our Airheads Meetup Event at Jaarbeurs Utrecht on October 27th 2017.
If you have ideas, new speaker topics and recommendations for the events, please help us to improve for next year’s event by commenting on the community page: http://community.arubanetworks.com/t5/Wireless-Access/Airheads-Technical-Event-The-Netherlands-October-27th-2017/m-p/313566#M75870
These slides were used during our Airheads Meetup Event at Jaarbeurs Utrecht on October 27th 2017.
If you have ideas, new speaker topics and recommendations for the events, please help us to improve for next year’s event by commenting on the community page: http://community.arubanetworks.com/t5/Wireless-Access/Airheads-Technical-Event-The-Netherlands-October-27th-2017/m-p/313566#M75870
In this presentation, we will run through different API types and cases: configuration APIs (REST API), context APIs (NBAPIs), SDN APIs and explain how to make API calls via CLI. Check out the webinar recording where this presentation was used: http://community.arubanetworks.com/t5/Wireless-Access/Technical-Webinar-Recording-Slides-Configuring-different-APIs-in/td-p/312011
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
In this presentation, we will cover basic requirements and supported topologies for Multizone AP, how to bring up APs in multi version and how the AP's image upgrade differs in 8.x
Check out the webinar recording where this presentation was used: http://community.arubanetworks.com/t5/Wireless-Access/Technical-Webinar-Recording-Slides-Multi-zone-AP-and-Centralized/td-p/308499
In this presentation, we will run through the 8.x Architecture configuration model and share some UI navigation features such as managed controllers and spectrum monitoring, geolocation and maps.
Check out the webinar recording where this presentation was used: http://community.arubanetworks.com/t5/Wireless-Access/Technical-Webinar-Recording-Slides-Aruba-8-x-Architecture/td-p/302349
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
In this presentation, we will cover ArubaOS' Cluster Manager, a combination of multiple managed devices working together to provide high availability to all the clients and ensure service continuity when a failover occurs. Check out the webinar recording where this presentation was used:
http://community.arubanetworks.com/t5/Wireless-Access/Technical-Webinar-Recording-Slides-ArubaOS-Cluster-Manager/td-p/297761
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
Today, most mobile connectivity issues are quickly attributed to “bad Wi-Fi”. Very often it may not be a wireless or RF related issue at all. With Aruba Clarity, IT organisations now have visibility into non-RF metrics not only giving them end-to-end visibility into a wireless user experience, but also the ability to foresee connectivity issues before users are even impacted. Check out the webinar recording where this presentation was used. https://attendee.gotowebinar.com/register/224478872155652612
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
ClearPass Extensions allow ClearPass to integrate with multiple enterprise services to cover dynamic real-time requirements like automatic guest registration and MDM integration. Microsoft Intune, McAfee ePolicy Orchestrator are some examples of integrations achieved using ClearPass Extensions. Check out the webinar recording where this presentation was used: https://community.arubanetworks.com/t5/Security/Technical-Webinar-Recording-Slides-ClearPass-Extensions-and-how/td-p/292221
Register for the upcoming webinars: https://community.arubanetworks.com/t5/Training-Certification-Career/EMEA-Airheads-Webinars-Jul-Dec-2017/td-p/271908
More from Aruba, a Hewlett Packard Enterprise company (18)
UiPath Test Automation using UiPath Test Suite series, part 5DianaGray10
Welcome to UiPath Test Automation using UiPath Test Suite series part 5. In this session, we will cover CI/CD with devops.
Topics covered:
CI/CD with in UiPath
End-to-end overview of CI/CD pipeline with Azure devops
Speaker:
Lyndsey Byblow, Test Suite Sales Engineer @ UiPath, Inc.
Essentials of Automations: The Art of Triggers and Actions in FMESafe Software
In this second installment of our Essentials of Automations webinar series, we’ll explore the landscape of triggers and actions, guiding you through the nuances of authoring and adapting workspaces for seamless automations. Gain an understanding of the full spectrum of triggers and actions available in FME, empowering you to enhance your workspaces for efficient automation.
We’ll kick things off by showcasing the most commonly used event-based triggers, introducing you to various automation workflows like manual triggers, schedules, directory watchers, and more. Plus, see how these elements play out in real scenarios.
Whether you’re tweaking your current setup or building from the ground up, this session will arm you with the tools and insights needed to transform your FME usage into a powerhouse of productivity. Join us to discover effective strategies that simplify complex processes, enhancing your productivity and transforming your data management practices with FME. Let’s turn complexity into clarity and make your workspaces work wonders!
Epistemic Interaction - tuning interfaces to provide information for AI supportAlan Dix
Paper presented at SYNERGY workshop at AVI 2024, Genoa, Italy. 3rd June 2024
https://alandix.com/academic/papers/synergy2024-epistemic/
As machine learning integrates deeper into human-computer interactions, the concept of epistemic interaction emerges, aiming to refine these interactions to enhance system adaptability. This approach encourages minor, intentional adjustments in user behaviour to enrich the data available for system learning. This paper introduces epistemic interaction within the context of human-system communication, illustrating how deliberate interaction design can improve system understanding and adaptation. Through concrete examples, we demonstrate the potential of epistemic interaction to significantly advance human-computer interaction by leveraging intuitive human communication strategies to inform system design and functionality, offering a novel pathway for enriching user-system engagements.
Enchancing adoption of Open Source Libraries. A case study on Albumentations.AIVladimir Iglovikov, Ph.D.
Presented by Vladimir Iglovikov:
- https://www.linkedin.com/in/iglovikov/
- https://x.com/viglovikov
- https://www.instagram.com/ternaus/
This presentation delves into the journey of Albumentations.ai, a highly successful open-source library for data augmentation.
Created out of a necessity for superior performance in Kaggle competitions, Albumentations has grown to become a widely used tool among data scientists and machine learning practitioners.
This case study covers various aspects, including:
People: The contributors and community that have supported Albumentations.
Metrics: The success indicators such as downloads, daily active users, GitHub stars, and financial contributions.
Challenges: The hurdles in monetizing open-source projects and measuring user engagement.
Development Practices: Best practices for creating, maintaining, and scaling open-source libraries, including code hygiene, CI/CD, and fast iteration.
Community Building: Strategies for making adoption easy, iterating quickly, and fostering a vibrant, engaged community.
Marketing: Both online and offline marketing tactics, focusing on real, impactful interactions and collaborations.
Mental Health: Maintaining balance and not feeling pressured by user demands.
Key insights include the importance of automation, making the adoption process seamless, and leveraging offline interactions for marketing. The presentation also emphasizes the need for continuous small improvements and building a friendly, inclusive community that contributes to the project's growth.
Vladimir Iglovikov brings his extensive experience as a Kaggle Grandmaster, ex-Staff ML Engineer at Lyft, sharing valuable lessons and practical advice for anyone looking to enhance the adoption of their open-source projects.
Explore more about Albumentations and join the community at:
GitHub: https://github.com/albumentations-team/albumentations
Website: https://albumentations.ai/
LinkedIn: https://www.linkedin.com/company/100504475
Twitter: https://x.com/albumentations
Threats to mobile devices are more prevalent and increasing in scope and complexity. Users of mobile devices desire to take full advantage of the features
available on those devices, but many of the features provide convenience and capability but sacrifice security. This best practices guide outlines steps the users can take to better protect personal devices and information.
Communications Mining Series - Zero to Hero - Session 1DianaGray10
This session provides introduction to UiPath Communication Mining, importance and platform overview. You will acquire a good understand of the phases in Communication Mining as we go over the platform with you. Topics covered:
• Communication Mining Overview
• Why is it important?
• How can it help today’s business and the benefits
• Phases in Communication Mining
• Demo on Platform overview
• Q/A
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdfMalak Abu Hammad
Discover how MongoDB Atlas and vector search technology can revolutionize your application's search capabilities. This comprehensive presentation covers:
* What is Vector Search?
* Importance and benefits of vector search
* Practical use cases across various industries
* Step-by-step implementation guide
* Live demos with code snippets
* Enhancing LLM capabilities with vector search
* Best practices and optimization strategies
Perfect for developers, AI enthusiasts, and tech leaders. Learn how to leverage MongoDB Atlas to deliver highly relevant, context-aware search results, transforming your data retrieval process. Stay ahead in tech innovation and maximize the potential of your applications.
#MongoDB #VectorSearch #AI #SemanticSearch #TechInnovation #DataScience #LLM #MachineLearning #SearchTechnology
Sudheer Mechineni, Head of Application Frameworks, Standard Chartered Bank
Discover how Standard Chartered Bank harnessed the power of Neo4j to transform complex data access challenges into a dynamic, scalable graph database solution. This keynote will cover their journey from initial adoption to deploying a fully automated, enterprise-grade causal cluster, highlighting key strategies for modelling organisational changes and ensuring robust disaster recovery. Learn how these innovations have not only enhanced Standard Chartered Bank’s data infrastructure but also positioned them as pioneers in the banking sector’s adoption of graph technology.
How to Get CNIC Information System with Paksim Ga.pptxdanishmna97
Pakdata Cf is a groundbreaking system designed to streamline and facilitate access to CNIC information. This innovative platform leverages advanced technology to provide users with efficient and secure access to their CNIC details.
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024Albert Hoitingh
In this session I delve into the encryption technology used in Microsoft 365 and Microsoft Purview. Including the concepts of Customer Key and Double Key Encryption.
GraphSummit Singapore | The Future of Agility: Supercharging Digital Transfor...Neo4j
Leonard Jayamohan, Partner & Generative AI Lead, Deloitte
This keynote will reveal how Deloitte leverages Neo4j’s graph power for groundbreaking digital twin solutions, achieving a staggering 100x performance boost. Discover the essential role knowledge graphs play in successful generative AI implementations. Plus, get an exclusive look at an innovative Neo4j + Generative AI solution Deloitte is developing in-house.
GridMate - End to end testing is a critical piece to ensure quality and avoid...ThomasParaiso2
End to end testing is a critical piece to ensure quality and avoid regressions. In this session, we share our journey building an E2E testing pipeline for GridMate components (LWC and Aura) using Cypress, JSForce, FakerJS…
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...James Anderson
Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM
The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management.
The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM).
Speakers:
Bob Boule
Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle.
Gopinath Rebala
Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.
Climate Impact of Software Testing at Nordic Testing DaysKari Kakkonen
My slides at Nordic Testing Days 6.6.2024
Climate impact / sustainability of software testing discussed on the talk. ICT and testing must carry their part of global responsibility to help with the climat warming. We can minimize the carbon footprint but we can also have a carbon handprint, a positive impact on the climate. Quality characteristics can be added with sustainability, and then measured continuously. Test environments can be used less, and in smaller scale and on demand. Test techniques can be used in optimizing or minimizing number of tests. Test automation can be used to speed up testing.
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...James Anderson
Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM
The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management.
The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM).
Speakers:
Bob Boule
Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle.
Gopinath Rebala
Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.
3. Aruba Networks, Inc. Table of Contents | 3
Voice Support on Aruba Controllers and Remote Access Points for Fixed Telecommuter Deployments Application Note
Table of Contents
Chapter 1: Introduction 5
Reference Material 6
Chapter 2: Best Practices for Voice Deployment at Remote Sites 7
Remote Access Point Forwarding Modes 7
Tunnel Forwarding Mode 7
Decrypt Tunnel Forwarding Mode 7
Split-Tunnel Forwarding Mode 8
Bridge Forwarding Mode 8
Voice Support in Different Forwarding Modes 8
Aruba Voice Manager 9
Codecs 9
Aruba ALG-Lite 10
Call Admission Control for Voice 10
RAP Uplink Bandwidth Reservation 11
WMM 12
Per-User Bandwidth Contracts 14
Airtime Fairness 14
Summary 15
Appendix A: VoIP Per-Call Bandwidth Calculations 17
Bandwidth Calculation Formulas 17
Sample Bandwidth Calculation for G.711 and for G.729 17
Appendix B: Contacting Aruba Networks 19
Contacting Aruba Networks 19
4. Aruba Networks, Inc. Table of Contents | 4
Voice Support on Aruba Controllers and Remote Access Points for Fixed Telecommuter Deployments Application Note
5. Aruba Networks, Inc. Introduction | 5
Voice Support on Aruba Controllers and Remote Access Points for Fixed Telecommuter Deployments Application Note
Chapter 1: Introduction
This guide provides a brief description of the various bandwidth reservation and quality of service
(QoS) options for supporting voice traffic in an Aruba remote access point (RAP) telecommuter
deployment scenario. The Aruba remote access point (RAP) solution is a key component of the Aruba
virtual branch network (VBN) architecture. The Aruba RAP deployment model meets the needs of
fixed telecommuter and small branch office deployments while maintaining simplicity and ease of
deployment. Aruba RAPs extend the corporate LAN to any remote location by enabling seamless
wired or wireless data and voice wherever a user finds an Internet-enabled Ethernet port or 3G cellular
connection. RAPs are ideally suited for small remote offices, home offices, telecommuters, mobile
executives, and for business continuity applications.
Organizations with many fixed telecommuters typically have a requirement to extend a fully functional
secure wired or wireless footprint (or both) into the employee home. One of the main requirements is
to deliver full voice services to off-premises wired phones. Aruba RAPs provide secure access for
VoIP phones (wired and wireless) to securely connect to the corporate voice server with dynamic,
integrated QoS and voice prioritization features.
Aruba RAPs can be deployed in different forwarding modes (tunnel, split-tunnel, and decrypt-tunnel) to
support voice. These forwarding modes in combination with user-defined policies significantly impact
the call quality and call characteristics for a given data flow. This guide provides a general
recommendation with an overview of the options that are available for voice deployments with different
the forwarding modes. These recommendations should always be used in combination with the
Validated Reference Design Guides.
6. Aruba Networks, Inc. Introduction | 6
Voice Support on Aruba Controllers and Remote Access Points for Fixed Telecommuter Deployments Application Note
Table 1 lists the current software versions for this guide.
Reference Material
This guide assumes a working knowledge of Aruba products. A more in-depth discussion for this
topic can be found in the Aruba Virtual Branch Networks VRD and the Base Designs Lab Setup
for Validated Reference Design. These guides are available for free at
http://www.arubanetworks.com/vrd.
The complete suite of Aruba technical documentation is available for download from the Aruba
support site. These documents present complete, detailed feature and functionality explanations
outside the scope of the VRD series. The Aruba support site is located at:
https://support.arubanetworks.com/. This site requires a user login and is for current Aruba
customers with support contracts.
Table 1 Aruba Software Versions
Product Version
ArubaOS™ (mobility controllers) 6.1
ArubaOS (mobility access switch) 7.0
Aruba Instant™ 1.1
MeshOS 4.2
AirWave® 7.3
AmigopodOS 3.3
7. Aruba Networks, Inc. Best Practices for Voice Deployment at Remote Sites | 7
Voice Support on Aruba Controllers and Remote Access Points for Fixed Telecommuter Deployments Application Note
Chapter 2: Best Practices for Voice Deployment at
Remote Sites
Aruba remote access points (RAPs) can be deployed with tunnel, decrypt tunnel (decrypt-tunnel), split-
tunnel, or bridge mode SSIDs. Refer to the Aruba Virtual Branch Networks Validated Reference
Design for a more detailed discussion of these forwarding modes.
This section provides a high level description of the different forwarding modes and helps to clarify why
a specific forwarding mode is recommended for voice deployments with RAP.
Tunnel or split-Tunnel are the recommended modes for deploying RAPs where voice is a requirement.
The description for bridge forwarding mode is provided below for sake of completeness.
Remote Access Point Forwarding Modes
Tunnel Forwarding Mode
In tunnel forwarding mode, all the 802.11 wireless traffic is Layer 2 encrypted from the client to the
RAP. Then that traffic is forwarded through the IPsec tunnel to the controller. (No Layer 3 IPsec
encryption is needed for these packets because they are already Layer 2 encrypted). Traffic from the
wired ports is Layer 3 encrypted because it is forwarded into the IPsec tunnel in tunnel forwarding
mode.
Figure 1 RAP in tunnel mode
Decrypt Tunnel Forwarding Mode
A decrypt tunnel mode SSID is similar to tunnel mode SSID where all the traffic is forwarded through a
GRE tunnel to the controller. In decrypt tunnel mode, the wireless traffic is decrypted at the RAP, and
then both wired and wireless traffic is forwarded to the controller with no encryption. The IPsec tunnel
is configured such that the packets are AH encapsulated but are ‘null’ encrypted. This should only be
considered when the RAP will connect over an existing VPN that provides QoS based queuing. In
general, you should use either tunnel or split tunnel.
Figure 2 RAP in decrypt-tunnel mode
arun_0472
Internet or
private WAN Servers/datacenter
arun_0471
Private WAN
or existing VPN Servers/datacenter
8. Aruba Networks, Inc. Best Practices for Voice Deployment at Remote Sites | 8
Voice Support on Aruba Controllers and Remote Access Points for Fixed Telecommuter Deployments Application Note
Decrypt tunnel mode is used when a VPN solution is already in place and if QoS is configured on the
WAN facing router.
Split-Tunnel Forwarding Mode
In split-tunnel forwarding mode, the wireless traffic from the client to the AP is Layer 2 encrypted and
decrypted on the RAP. Depending on the destination of the traffic (data center versus Internet) the
traffic is then either Layer 3 re-encrypted and injected into the IPsec tunnel to forward to the controller
or it is bridged locally. Traffic from wired phones is also Layer 3 encrypted on the RAP and injected into
the IPsec tunnel. The Layer 3 encryption is done in hardware on the AP. Any other traffic is forwarded
to the Internet or is locally switched according to the configured policies.
Figure 3 RAP in split-tunnel mode
Bridge Forwarding Mode
In bridge mode SSID, all the user traffic is locally bridged and only the control traffic is IPsec encrypted
and forwarded inside the tunnel to the controller.
Figure 4 RAP in bridge mode
Voice Support in Different Forwarding Modes
The recommended deployment options for voice are split-tunnel, decrypt-tunnel, or tunnel mode.
Bridge mode SSID is not a supported option because VoIP application-layer gateways (ALGs) are not
supported in bridge mode. Additionally, in bridge mode, the user traffic is not tunneled back to the
corporate headquarters or data center, so this topology will not work if the PBX is centralized.
A single SSID is generally recommended for both voice and data. However, a separate voice SSID in
tunnel or decrypt-tunnel mode can also be created if mandated by the customer’s security
requirements.
N O T E
Decrypt tunnel mode SSID should be used only when a VPN solution is already
in place, otherwise all the traffic will be forwarded in the clear.
arun_0473
Internet or
private WAN Servers/datacenter
arun_0474
Internet or
private WAN Servers/datacenter
Encrypted
control
channel
9. Aruba Networks, Inc. Best Practices for Voice Deployment at Remote Sites | 9
Voice Support on Aruba Controllers and Remote Access Points for Fixed Telecommuter Deployments Application Note
The call voice quality is affected by loss, latency, and jitter. Loss causes dropped conversations and
clipping. Latency causes delays in packet delivery and jitter is a variation of packet delay and occurs
when voice packets are sent and received with timing variations. The section below describes Aruba’s
ALGs and the different settings that can be used to maintain the voice call quality in a RAP
deployment.
Aruba Voice Manager
Aruba controllers have a built-in voice manager module that manages the voice ALG functions and the
ALG functions. These ALGs are stateful (bi-directional). All ALGs operate in the control path and
provide for deep packet inspection capability. For example, the voice ALG detects Session Initiation
Protocol (SIP) packets and opens up the necessary ports (such as 5060) for voice traffic. The deep
packet inspection and the dynamic port selections are a secure way of allowing only traffic that is
intended to pass through.
ArubaOS on the Aruba controller supports ALGs for SIP, H323, Skinny Call Control Protocol (SCCP)
or Skinny, Alcatel New Office Environment (NOE), Vocera, and Polycom SpectraLink Voice Protocol
(SVP). The Aruba controller requires slightly different configurations for SIP and SVP (Polycom
phones).
In addition to deep packet inspection, the voice manager on the controller also performs these tasks:
Performs voice prioritization without any ACLs. (No manual creation of ACLs is performed and
manual setting TOS values in the ACLs is not required).
Automatically collects call statistics such as MOS, delay, latency, and CDR records for the voice
calls.
Codecs
Codecs are used to convert an analog voice signal to a digitally encoded version and can also affect
the quality of the voice call. Codecs vary in things like the sound quality, the bandwidth required, and
the computational requirements. Each service, program, phone, or gateway typically supports several
different codecs, and when they talk to each other, they negotiate which codec they will use.
Using G.711 for VoIP provides the best voice quality and has the lowest latency. The downside
is that G.711 takes more bandwidth then other codecs - approximately 87.2 Kb/s. However, with
increasing broadband bandwidth, this may not be a major issue. G.711 is supported by most
VoIP providers.
G729 offers toll-quality speech at a reasonably low bit rate of 8 Kb/s and utilizes a bandwidth of
31.2 Kb/s. However, it is a more complex codec in terms of CPU processing time.
N O T E
Bandwidth calculations for these codecs are described in Appendix A: VoIP
Per-Call Bandwidth Calculations on page 17.
10. Aruba Networks, Inc. Best Practices for Voice Deployment at Remote Sites | 10
Voice Support on Aruba Controllers and Remote Access Points for Fixed Telecommuter Deployments Application Note
Aruba ALG-Lite
ALG-Lite is a module on the RAP that sends session add, session delete, and client identity messages
from the RAP to the controller. ALG-Lite is a mechanism by which the signaling frames are forwarded
to the main ALG module implemented on the controller. ALG-Lite is supported in split-tunnel mode but
not in tunnel mode, and it does not need any configuration. All message processing happens in the
main ALG on the controller.
ALG-Lite on the RAP does not do deep inspection of signaling messages because in most
deployments the PBX sits in corporate network. Instead, this inspection happens on controller. For
remote devices, signaling traffic reaches the controller and controller forwards this traffic to the control
plane for deep inspection. The voice manager on the controller keeps track of local and remote
devices.
Real Time Transport Protocol (RTP) defines a standard packet format for delivering audio and video
over the Internet. RTP is defined in RFC 1889. Real Time Transport Control Protocol (RTCP) is
defined in RFC 3550. RTP delivers the actual data and RTCP sends control packets to participants in
a call to provide feedback on the quality of service being provided by RTP. For local devices, ALG-Lite
opens ports for RTP/RTCP traffic in the controller data path. For remote devices, ALG-Lite opens ports
in the controller data path and the AP data path. ALG-Lite is used to send these messages from the
controller to the RAP.
Call Admission Control for Voice
Call Admission Control (CAC) can be configured on the controller. In general, CAC ensures good call
quality for existing calls by not accepting any new calls if the system is overloaded. CAC is also useful
in load balancing the calls between RAPs in a multi-RAP deployment. The controller has an overall
view of all the voice sessions on the RAPs that are connected to it. If a RAP is overloaded with
devices, it will not respond to the probes of the new device and the device moves to another RAP. The
bandwidth calculator wizard on the controller helps the administrator to calculate the bandwidth
requirements for different voice codecs and help in configuring CAC. CAC can be configured on the
controller with the VoIP Call Admission Control profile and attached to an AP group. (Advanced
Services > All Profile Management > QoS Profile > VoIP Call Admission Control profile)
Figure 5 Configuring VoIP CAC
11. Aruba Networks, Inc. Best Practices for Voice Deployment at Remote Sites | 11
Voice Support on Aruba Controllers and Remote Access Points for Fixed Telecommuter Deployments Application Note
RAP Uplink Bandwidth Reservation
RAP uplink bandwidth reservation (UBR) configured in the AP system profile, allows an administrator
to reserve a part of total uplink bandwidth on a RAP for a specific application, protocol, or port number.
The UBR configured in the AP system profile of an AP group will apply to all RAPs that belong to this
AP group. RAP uplink bandwidth reservation is supported in the split-tunnel mode and bridge mode
SSIDs for wired and wireless traffic.
Bandwidth allocation requires the access control list (ACL) mechanism where session ACLs are used
to identify the traffic. With the configuration of an ACL that prioritizes a voice subnet, the bandwidth
allocation can reserve a portion on the uplink (to WAN) bandwidth for the traffic from the voice subnet.
Before configuring any class of traffic for reservation to limit the traffic leaving RAP uplink, the
administrator must know the available Internet uplink bandwidth. The uplink bandwidth reservation
module is independent of the ALG.
Figure 6 Configuring RAP uplink bandwidth reservation
12. Aruba Networks, Inc. Best Practices for Voice Deployment at Remote Sites | 12
Voice Support on Aruba Controllers and Remote Access Points for Fixed Telecommuter Deployments Application Note
WMM
Wi-Fi Multimedia™ (WMM®), also known as Wireless Multimedia Extensions (WME), is a Wi-Fi
Alliance® interoperability certification based on the IEEE 802.11e standard. WMM provides basic QoS
features to IEEE 802.11 networks. WMM prioritizes traffic according to four access categories: voice,
video, best effort, and background. However, WMM does not provide guaranteed throughput. WMM is
suitable for simple applications that require QoS such as VoIP on Wi-Fi phones (VoWLAN).
Type of service (ToS) and Diff-Serve Code Points (DSCP) are fields that the IP layer uses for QoS.
These fields are used to mark types of traffic, for example, DSCP 46 for RTP (VoIP) or DSCP 26 for
SIP (VoIP signaling). Marked packets are put into queues to apply QoS and prioritization over other
kind of traffic, like email or web traffic.
Figure 7 IP packet – TOS and DSCP bits
arun_0498
Differentiated Services Code Point
Data
Destination IP Address
Source IP Address
Header ChecksumProtocol
Total LengthType of Service
8 bits
IHLengthVersion
Time to Live
Identification Flags Fragment Offset
Unused
6 bits 2 bits
MBZCostReliabilityThroughputDelayPrecedence
Options Padding
1 bit1 bit1 bit1 bit1 bit
DSCP bits
Precedence
and TOS bits
3 bits
13. Aruba Networks, Inc. Best Practices for Voice Deployment at Remote Sites | 13
Voice Support on Aruba Controllers and Remote Access Points for Fixed Telecommuter Deployments Application Note
The 802.1p protocol is a subset of 802.1Q and operates at Layer 2. The .1p tag is used by .1Q
(VLANs) to prioritize traffic according to the kind of VLANs. For example, if VLAN 100 is used for VoIP
telephones, the 802.1p tag can be set to category number 4 (voice), so that intermediate devices
(routers, switches, controllers) use the 802.1p field to select which VLAN traffic should be prioritized.
Most VoIP phones automatically tag their traffic, for example, 802.1p=5 for voice at Layer 2 and
DSCP=46 for RTP VoIP at Layer 3.
Figure 8 Ethernet data frame and 802.1p tagging
The Aruba WMM implementation is according to the standards, where 802.1p markings are converted
to DSCP markings upstream and downstream on the RAP. 802.1p markings are also placed in the
802.1Q VLAN tag. It is important to ensure that all tags, .1p, DSCP, and WMM access categories,
match in the upstream and downstream directions, and also across wired and wireless networks.
Figure 9 End-to-End QoS Support
arun_0499
4 bytes (32 bits)
FCSDataType/Length
Ethernet Header Ethernet Payload
802.1Q TagDA
Tag
Protocol
Identifier
Priority
(802.1p)
Canonical
Format
Indicator
VLAN ID
2 bytes 3 bits
Tag Control Information (2 bytes)
1 bit 12 bits
SA
arun_0543LAN CoreLAN EdgeWireless
Bandwidth Management
Queuing
Bandwidth Management
Call Admission Control
QoS Aware RF Management
Downstream traffic
Upstream traffic
Tagged DSCP
Tagged DSCP Tagged DSCP, 802.1p
Tagged DSCP, 802.1p
WMM / Strict Queuing
WMM / SVP
14. Aruba Networks, Inc. Best Practices for Voice Deployment at Remote Sites | 14
Voice Support on Aruba Controllers and Remote Access Points for Fixed Telecommuter Deployments Application Note
Per-User Bandwidth Contracts
Bandwidth management is another QoS mechanism that helps ensure adequate bandwidth for user
traffic. The per-user bandwidth contract ensures that no single user can access more than the
bandwidth defined by the contract.
Per-user bandwidth contracts can be configured on a per-user basis or on a per-role basis. When
configured on a per-role basis, the total configured bandwidth is shared among all devices that inherit
that role. A bandwidth contract that is configured per-role is shared among all devices in that role.
When configured on a per-user basis, the configured bandwidth is available for each user in that role.
For example, a 2 Mb/s bandwidth contract per-user means that 2 Mb/s is available for each user in that
role. The bandwidth contracts are effective only for traffic from RAP to controller or controller to RAP.
In addition to these configurations, any voice deployment also depends on the location of the PBX or
SIP server. In split-tunnel mode, when the “Remote-AP Local Network Access” parameter is checked
in the AP system profile, calls between voice devices on the same RAP are switched locally. The call
statistics for these calls continue to be sent to the controller over the control channel (secure tunnel).
Airtime Fairness
Airtime fairness for traffic from the RAP to the client (downstream direction) does not apply to voice
traffic because voice traffic has the highest priority. The voice session bypasses the airtime fairness
algorithm completely because voice frames have strict priority into the hardware queue.
Airtime fairness has the added benefit in most cases that the channel is less busy when fair access is
enabled, which should facilitate smoother or better quality voice deployments. Airtime Fairness works
for tunnel mode SSID and the general recommendation is to enable fair access for such deployments.
Airtime fairness is configured in the QOS profile. (Advanced Services > All Profile Management > QoS
Profile > Traffic management Profile > Station Shaping Policy)
Figure 10 Configuring Airtime Fairness
15. Aruba Networks, Inc. Best Practices for Voice Deployment at Remote Sites | 15
Voice Support on Aruba Controllers and Remote Access Points for Fixed Telecommuter Deployments Application Note
Summary
Other parameters are not under the control of the wireless network, such as the WAN latency. The
scale and performance of the routing and switching of the core network are also not under the control
of the wireless network. Table 2 summarizes the points that have been discussed in the earlier
sections.
Table 2 RAP Forwarding Modes and Voice QoS Support
Feature RAP Forwarding Modes
Tunnel Mode Split-Tunnel Mode Decrypt-Tunnel Mode
Call Admission Control Yes Yes Yes
WMM Yes Yes Yes
Per User Bandwidth Contracts Yes Yes Yes
RAP Uplink Bandwidth
Reservation
No Yes No
Voice ALGs on Controller Yes Yes Yes
ALG-Lite on RAP No Yes No
Voice call statistics
(MOS, latency)
Yes Yes Yes
Airtime Fairness Yes No Yes
Mobility (Layer 2 Roaming) Yes No Yes
16. Aruba Networks, Inc. Best Practices for Voice Deployment at Remote Sites | 16
Voice Support on Aruba Controllers and Remote Access Points for Fixed Telecommuter Deployments Application Note
Figure 11 summarizes the design recommendations based on general requirements for deployment.
Figure 11 Deployment options for RAP and Voice
arun_0532
Voice Deployment on RAPs
Bridge Mode SSID
D-Tunnel Mode SSIDSplit Tunnel SSID Tunnel Mode SSID
Is the PBX server
at corporate?
Existing
VPN/QoS
solution?
• ALG-Lite on RAP
• Optimized-single IPsec + GRE tunnel
• All traffic to controller
• All Call Statistics on Controller
• ALGs on controller
• RAP Uplink Bandwidth Reservation
• Not a recommended mode
• PBX local is not a cost effective solution
• No ALGs available unless manually configured
• No Voice Call Statistics
• RAP Uplink Bandwidth Reservation
L2
Roaming ?
L2
Roaming
Single
RAP
Single Voice
and Data SSID
Separate
Voice SSID
Yes
Yes
Yes
No
No
No
17. Aruba Networks, Inc. VoIP Per-Call Bandwidth Calculations | 17
Voice Support on Aruba Controllers and Remote Access Points for Fixed Telecommuter Deployments Application Note
Appendix A: VoIP Per-Call Bandwidth Calculations
This appendix explains voice codec bandwidth calculations and shows the different protocol header
sizes that are used for the calculations:
Bandwidth Calculation Formulas
total packet size = (Layer 2 header) + (IP/UDP/RTP header) + (voice payload size)
packets per second (PPS) = (codec bit rate) ÷ (voice payload size)
bandwidth = total packet size * PPS
Sample Bandwidth Calculation for G.711 and for G.729
The required bandwidth for a G.711 call (64 Kb/s codec bit rate) with Ethernet L2 header and the
default 160 bytes of voice payload is:
total packet size (bytes) = (18 bytes Ethernet Layer 2 header) + (40 bytes IP) + (voice payload of
160 bytes) = 218 bytes
total packet size (bits) = (218 bytes) * 8 bits per byte = 1744 bits
voice payload size = (160 bytes default voice payload) * 8 bits per byte = 1280 bits
packets per second (PPS) = (64 Kb/s codec bit rate) ÷ (1280 bits) = 50 pps
bandwidth per call = (1744 bits voice packet size) * 50 pps = 87.2 Kb/s
N O T E
Layer 2 header can be Multilink Point-to-Point Protocol (MP), Frame Relay
Forum (FRF), or Ethernet.
N O T E
The approximate protocol header sizes used in these calculations are as
follows:
40 bytes for IP (20 bytes) / User Datagram Protocol (UDP) (8 bytes) / Real-
Time Transport Protocol (RTP) (12 bytes)
Compressed Real-Time Transport Protocol (cRTP) reduces the IP/UDP/RTP
headers to 2 or 4 bytes (cRTP is not available over Ethernet).
6 bytes Layer 2 Header for MP or FRF
1 byte for the end-of-frame flag on MP and Frame Relay frames
18 bytes for Ethernet Layer 2 headers, including 4 bytes of Frame Check
Sequence (FCS) or Cyclic Redundancy Check (CRC)
18. Aruba Networks, Inc. VoIP Per-Call Bandwidth Calculations | 18
Voice Support on Aruba Controllers and Remote Access Points for Fixed Telecommuter Deployments Application Note
The required bandwidth for a G.729 call (8 Kb/s codec bit rate) with cRTP, MP and the default 20 bytes
of voice payload is:
total packet size (bytes) = (18 bytes Ethernet Layer 2 header) + (40 bytes IP) + (voice payload of
20 bytes) = 78 bytes
total packet size (bits) = (78 bytes) * 8 bits per byte = 624 bits
voice payload size = (20 bytes default voice payload) * 8 bits per byte = 160 bits
PPS = (8 Kb/s Codec bit rate) ÷ (160 bits) = 50 pps
bandwidth per call = (624 bits voice packet size) * 50 pps = 31.2 Kb/s
19. Aruba Networks, Inc. Contacting Aruba Networks | 19
Voice Support on Aruba Controllers and Remote Access Points for Fixed Telecommuter Deployments Application Note
Appendix B: Contacting Aruba Networks
Contacting Aruba Networks
Web Site Support
Main Site http://www.arubanetworks.com
Support Site https://support.arubanetworks.com
Software Licensing Site https://licensing.arubanetworks.com/login.php
Wireless Security Incident
Response Team (WSIRT)
http://www.arubanetworks.com/support/wsirt.php
Support Emails
Americas and APAC support@arubanetworks.com
EMEA emea_support@arubanetworks.com
WSIRT Email
Please email details of any security
problem found in an Aruba product.
wsirt@arubanetworks.com
Validated Reference Design Contact and User Forum
Validated Reference Designs http://www.arubanetworks.com/vrd
VRD Contact Email referencedesign@arubanetworks.com
AirHeads Online User Forum http://airheads.arubanetworks.com
Telephone Support
Aruba Corporate +1 (408) 227-4500
FAX +1 (408) 227-4550
Support
United States +1-800-WI-FI-LAN (800-943-4526)
Universal Free Phone Service Numbers (UIFN):
Australia Reach: 1300 4 ARUBA (27822)
United States 1 800 9434526
1 650 3856589
Canada 1 800 9434526
1 650 3856589
United Kingdom BT: 0 825 494 34526
MCL: 0 825 494 34526
20. Aruba Networks, Inc. Contacting Aruba Networks | 20
Voice Support on Aruba Controllers and Remote Access Points for Fixed Telecommuter Deployments Application Note
Universal Free Phone Service Numbers (UIFN):
Japan IDC: 10 810 494 34526 * Select fixed phones
IDC: 0061 010 812 494 34526 * Any fixed, mobile & payphone
KDD: 10 813 494 34526 * Select fixed phones
JT: 10 815 494 34526 * Select fixed phones
JT: 0041 010 816 494 34526 * Any fixed, mobile & payphone
Korea DACOM: 2 819 494 34526
KT: 1 820 494 34526
ONSE: 8 821 494 34526
Singapore Singapore Telecom: 1 822 494 34526
Taiwan (U) CHT-I: 0 824 494 34526
Belgium Belgacom: 0 827 494 34526
Israel Bezeq: 14 807 494 34526
Barack ITC: 13 808 494 34526
Ireland EIRCOM: 0 806 494 34526
Hong Kong HKTI: 1 805 494 34526
Germany Deutsche Telkom: 0 804 494 34526
France France Telecom: 0 803 494 34526
China (P) China Telecom South: 0 801 494 34526
China Netcom Group: 0 802 494 34526
Saudi Arabia 800 8445708
UAE 800 04416077
Egypt 2510-0200 8885177267 * within Cairo
02-2510-0200 8885177267 * outside Cairo
India 91 044 66768150
Telephone Support