Download as pdf or txt
Download as pdf or txt
You are on page 1of 207

#CLUS

Design & Deployment


of Outdoor Wireless
Network

Kshitij Mahant, Technical Marketing Engineer


BRKEWN-2027

#CLUS
Agenda • Why Outdoor Wireless is
important?
• Outdoor Wireless Components
• Cisco Outdoor Products and
Deployment Modes
• Important Outdoor Wireless
LAN Features
• Design Recommendations and
Best Practices for Cisco
Outdoor Wireless LAN
Deployments

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 3
Cisco Webex Teams
Questions?
Use Cisco Webex Teams (formerly Cisco Spark)
to chat with the speaker after the session

How
1 Find this session in the Cisco Events App
2 Click “Join the Discussion”
3 Install Webex Teams or go directly to the team space
4 Enter messages/questions in the team space

Webex Teams will be moderated cs.co/ciscolivebot#BRKEWN-2027


by the speaker until June 18, 2018.

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 4
How mobile growth could affect your network?
High volumes of mobile video can clog
the airwaves

Mobile applications are more prevalent


in the workplace, generating more traffic

Bring-your-own-device (BYOD) policies


and mobile initiatives are increasing
traffic and straining WLAN performance

Faster 802.11ac Wave 2–capable end-


user devices are becoming pervasive

Customers, users, guests, visitors will


still expect high-performance Wi-Fi
access

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 5
Why use Cisco Wireless?
Cisco Innovation
Wireless is Cost effective 802.11a/b/g/n/ac
 Unlicensed spectrum  Attention from the industry (ex. Security)
 Availability of client devices ClientLink
 Zero on-going communication costs CleanAir
HDX (High Density Experience)
Cisco Manageability
Wireless is Standardized
IEEE 802.11
Cisco Scalability & Ease of use
Can deliver throughput where you want it
 Just keep on adding nodes
It’s global. Same Frequencies
everywhere  Low impact for new sites
 Outdoor extension of the indoor Wireless LAN

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 6
Outdoor Market in Growth Mode
• Outdoor market is growing 15-20% Q/Q! WW Outdoor AP Market – Dell’Oro
• Still plenty of greenfield deployments $100.0

$80.0

$60.0

$M
$40.0
Retail Higher Ed $20.0
Open-air malls, Parking lots Campus Coverage
$0.0
4Q141Q152Q153Q154Q151Q162Q163Q16

Manufacturing Hotels/Resorts
Distribution centers Pools & Open spaces

Hospitals
Recovery gardens, Inter-building coverage
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 7
It's an 802.11ac Wi-Fi World!
• 802.11ac was introduced in 2 flavors – Wave-1 &
Wave-2
• More than 90% of all new Wi-Fi devices in 2017 were
802.11ac capable
• Upwards of 50% of enterprise traffic will originate on Wi-
Fi by 2017
• 802.11ac Wave-1 can fulfill smartphone and tablet
bandwidth requirements for next 5 years
• All current and future outdoor deployment upgrades
should look at 802.11ac standard to meet the
demands

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 8
802.11 Technology Comparison

802.11n 802.11ac Wave 1 802.11ac Wave 2


2.4 and 5.0 GHz band 5.0 GHz band only 5.0 GHz band only

3X3 or 4X4 MIMO 3X3 or 4X4 MIMO 4X4 MIMO

Single User MIMO (one to one) Single User MIMO (one to one) Multi User MIMO (one to many)

20/40 MHz Channel Width 40/80 MHz Channel 40/80 MHz Channel Width up to 160
MHz

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 9
Extend 802.11ac Wave 2 Wi-Fi Access to the
Outdoors

Ideal for Outdoor Enterprise and Extend access to Truck stops Higher Ed customers demand
Carrier Wi-Fi Deployments and shopping malls ubiquitous Wi-Fi coverage

Low profile, low cost outdoor Access Cost effective enabler for improved Provide More Bandwidth and Better
Point provides high performance productivity and revenue coverage for High Density Networks
802.11ac Wave 2

Cisco Continues its leadership with the most complete Outdoor portfolio
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 10
What’s next? 802.11ax (6th Gen of Wi-Fi)
Goals
• Overall goals of standard: 4x average throughput in dense
environments
• Improving average per-station throughput and aggregate area/AP
capacity/throughput
• Support for 4K/8K video; augmented and virtual reality (AR/VR)
• Outdoor range and robustness improvements
• Increase capacity by reducing overhead.
• IoT for the enterprise customers.

When to Expect it?


• Expect early 802.11ax APs late 2018 or early 2019.
• IEEE ratification in end of 2019. Wi-Fi alliance certification in mid 2019
• Clients will come after APs.

Check out Cisco’s White Paper on 802.11ax


#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 11
Elements of 802.11ax
• We can finally see 8x8 access points

• Unlike 802.11ac, 802.11ax is a dual-band 2.4GHz


and 5GHz technology.

• OFDMA. Per-user simultaneous sub-channel


frequency allocations
• Downlink/ Uplink
• Reduces channel access overhead (CSMA backoff)
by aggregating multiple user transmissions in one
“packet”
• Access scheduled by AP
• Per-station power boost from using narrower
frequency sub-channels

• Flexible low-power device scheduling with Target


Wakeup Time (TWT)

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 12
Elements of 802.11ax (Cont’d)
• 1024 QAM
• Two new Modulation and Coding Schemes (MCS)
10 and 11
• The coverage area of 1024 QAM (MCS 10-11) is
less than that of 256 QAM (MCS 8-9)
• Dual Downlink/Uplink MU-MIMO
• Gain by parallelizing stations in spatial domain, and
reducing channel access overhead
• Range boost
• Greater range compared to 802.11ac.
• Use lower effective data rates to get up to 8dB link
budget boost)
• Spatial Reuse
• For better density: spectral re-use among neighbor
APs supporting concurrent transmissions
• PHY preamble has BSSID info to identify “ours”
(BSS) vs. “neighbor” AP (Other BSS/OBSS)

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 13
What to expect from 802.11ax?
• 802.11ac is still the most widely used Wi-Fi standard.
• 802.11ax is designed to be forward and backward compatible with
802.11a/g/n/ac devices
• Expect early 802.11ax APs to come in the market late 2018/ early
2019.
• Expect Best in class / fully standard APs through 2019.
• Expect 802.11ax clients to come out early mid 2019

Check out Cisco’s White Paper on 802.11ax

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 14
Let’s get started..

1 2 3 4

Choose right
Design & Planning Deployment Day 1 & 2
products

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 15
Step 1: Choose the right products

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 16
Building Blocks of
Outdoor Wireless
Cisco Digital Network Architecture

DNA Center & Prime Infrastructure

Connected Mobile
DNA Center
Experience (CMX)

Access Points Wireless Controllers

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 18
Cisco Wireless: Transforming the way we connect
BEST BEST BEST
WIRELESS AUTOMATION EXPERIENCE

Flexible Radio Cisco Apple Sensor on AP


Cisco Umbrella IoT Ready Flexible Network SD-Access Client Insights Machine Learning Operational
Assignment Partnership In-Line Monitoring TrustSec (iPSK) Segmentation Wireless and Analytics for Proactive issue Insights
detection

DNA Center CMX

DESIGN PROVISION POLICY ASSURANCE

Next Gen Wave 2 AP


Wireless Controllers
1800, 2800 3800 & 4800 Series
3504, 5520 & 8540
1540, 1560 Series
Secure / Always-On / Delightful Wireless Experience – no compromise in Branches

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 19
Wireless Access Points
Cisco Aironet 802.11ac Outdoor Access Point Portfolio
DNA Ready | RF Excellence | CMX

1570
1560 • 802.11ac Wave 1
• 4x4:3 80 MHz; 1.3 Gbps
• 802.11ac Wave 2, MU-MIMO • External antenna model (EAC)
• 3x3:3, 80MHz, 1.3Gbps (I) • Cable Modem model (IC/EC)
1540 • 2x2:2, 80MHz, 867Mbps (E/D) • SFP
• 802.11ac Wave 2, MU-MIMO • Internal or External antenna model (I/E) • GPS
• 2x2:2, 80MHz, 867 Mbps • Internal directional antenna model (D) • PoE Out 802.3at (Ext Ant. only)
• Ultra low profile • SFP • Flexible Antenna Ports
• Internal antenna model (I) • Flexible Antenna Ports • CleanAir and ClientLink
• Internal directional antenna model (D) • CleanAir and ClientLink • Modularity (Ext Ant. only)
• PoE (802.3af) power • Centralized, FlexConnect, Mesh and • Centralized, FlexConnect and Mesh
• Centralized, FlexConnect, Mesh* and Mobility Express Cable Modem Version Only (IC/EC)
Mobility Express • DOCSIS 3.0, 24x8
802.11ac Wave 2 • Internal or External antenna

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 21
Access Point 1542I 1542D 1562I 1562D 1562E 1572EAC 1572IC/EC

List Price $995 $995 $1695 $1795 $1795 $4495 $5295 / $6695

Type 802.11ac W2 802.11ac W2 802.11ac W2 802.11ac W2 802.11ac W2 802.11ac W1 802.11ac W1


2.4G: 2x2:2 2.4G: 2x2:2 2.4G: 3x3:3 2.4G: 2x2:2 2.4G: 2x2:2 2.4G: 4x4:3 2.4G: 4x4:3
Radios
5G: 2x2:2 5G: 2x2:2 5G: 3x3:3 5G: 2x2:2 5G: 2x2:2 5G: 4x4:3 5G: 4x4:3
Tx Power / port 21 dBm 21 dBm 24 dBm 24 dBm 24 dBm 24 dBm 24 dBm
Flexible Antenna Flexible Antenna
Internal - Port Port IC: Internal
Antennas Internal (wide) Internal (narrow) Internal
Directional (dual or single (dual or single EC: External
band) band)
SPF Port n n n n n
PoE out n n (EC)
Cable modem n
UPoE/802.3at PoE+ (802.3at) PoE+ (802.3at) 40-90V cable plant
Power options 802.3af 802.3af AC, 12 VDC, PoE
48 VDC 48 VDC 48 VDC 12VDC

Data rate (2.4/5G) Mbps 144 /867 144 / 867 216 / 1300 144 / 867 144 / 867 216 / 1300 216 / 1300

Clients per radio 100 100 200 200 200 200 200
CleanAir n n n n n
ClientLink n n n n n
Wireless mesh n n n n n n n
Mobility Express n n n n n
Environment IP-65 IP-65 IP-67 IP-67 IP-67 IP-67 IP-67
Temp Range °C -40 to 65 -40 to 65 -40 to 65 -40 to 65 -40 to 65 -40 to 65 -40 to 65

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 22
Industrial Wireless IW3700 Series Access Point
Optimized for Rail, Mining, Manufacturing, Oil & Gas
N-type antenna ports for 4x4 MIMO with
three spatial streams and support for up to
13 dBi gain antennas

Diecast aluminum Integrated


chassis with mounting ears
integrated heatsink
and heaters

10/100/1000Base-T, PoE and PoE+ in (M12) 10 to 60 VDC in (M12)


10/100/1000Base-T, PoE out (M12) Management console port (RJ-45
serial)
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 23
Indoor Access Points in a Outdoor Enclosure
• Outdoor rated NEMA enclosure
(NEMA-National Electrical Manufacturing Association)
• Professional rated APs deployed outdoors, it must be
enclosed
• Protects the AP against water, dust, extreme
temperatures

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 24
Industry’s most comprehensive and innovative AP portfolio
Enterprise Class Mission Critical Best in Class
DNA Ready | RF Excellence | CMX | Centralized, FlexConnect or Mobility Express
Dual 5 GHz | Flexible Radio | HDX
Future Proof
Hyperlocation | Security

4800
3800 • 4 embedded radios
(3 Wi-Fi and 1 BLE)
1830/1850 2800 • 4x4:3SS 160 MHz
1815 • 5 Gbps Performance
• 4x4:3 SS 160 MHz
Indoor / High-powered Indoor • 4x4:3SS 160 MHz • 5 Gbps performance
Wall Plate / Teleworker • 3x3:2 SS 80 MHz/4x4:3 • 2.4 and 5GHz or • 2.4 and 5 GHz or
• 5 Gbps Performance Dual 5GHz
• 2x2:2SS 80 MHz SS 80 MHz dual 5 GHz
• 2.4 and 5GHz or • 2 GE Ports Uplink or
• 867 Mbps Performance • 867 Mbps or 1.7 Gbps • 2 GE ports uplink or
Dual 5GHz 1 GE + 1 mGig (5G)
performance
• Tx Beam Forming • 2 GE Ports Uplink
1 GE + 1 Multigigabit (5G)
• 1 or 2 GE ports uplink • CleanAir and ClientLink
• Integrated BLE Gateway • Embedded Hyperlocation
• CleanAir and ClientLink • StadiumVision
• Internal or external • Real-time analytics and
• Max Transmit Power (dBm) • Internal or External
antenna (1850) • Internal or External packet capture
per local regulations1 Antenna
• Tx beamforming Antenna
• 3 GE Local Ports, including • Smart Antenna • Cisco CleanAir and
1 PoE out2 • USB 2.0 • Smart Antenna ClientLink
Connector Connector
• Local ports 802.1x ready2 • USB 2.0 • Internal antenna
• USB 2.0
• Centralized, FlexConnect and Mobility Express
• USB 2.03
1 Available for High-powered only 2 Available for wall-plate and teleworker only 3 Available#CLUS
• Investment Proof
for teleworker only BRKEWN-2027 © 2018
ModularityCisco and/or its affiliates. All
• USB 2.0
• reserved.
rights Integrated BLE
Cisco Public 25
HDX AP Model Comparison
802.11ac Wave 1 802.11ac Wave 2

1570 3702E IW3700 1560 2800E


AP Model

4x4:3 4x4:3 4x4:3 3x3:3 4x4:3


Radio Design 802.11ac W1 802.11ac W1 802.11ac W1 802.11ac W2 802.11ac W2
External External External External External
Antenna Configuration Single or dual band Dual band Dual band Dual band Dual band
AC, DC, PoE
Power Options PoE out = 802.3at
PoE PoE, DC (M12) PoE+/UPoE PoE+

-20 to 43 °C -20 to 43 °C
Environment -40 to 65 °C NEMA enclosure -50 to +75°C -40 to 65 °C NEMA enclosure
required required

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 26
Cisco Wireless
Controllers
Cisco Wireless Controller Portfolio
Large Enterprise, Branch
Control at Central Site
Mid-size Enterprise, Branch
Control at Central Site
Cisco 8540
Small Network Cisco vWLC 6000 APs
3000 APs 64,000 clients
32000 Clients 40 Gbps
Flexconnect mode

Mobility Express Cisco 3504 Cisco 5520


50 APs/1000 Clients AP 150 APs
18xx 1500 APs
3000 Clients 20,000 Clients
100 AP/2000 Clients: 4 Gbps
AP2/3K 20 Gbps
Flexconnect mode

1-100 APs 1-1500 APs


#CLUS BRKEWN-2027 1-6000 APs
© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 28
Cisco Network
Management
Prime Infrastructure and DNA Center

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 30
Location & Analytics
Connected Mobile Experience (CMX)

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 32
Integration
Integrating everything together

Router Router

Aggregation/ Core DC

Switches Switches

Access
Switch

Wireless Wireless Network Location & Policy


Controller Management Analytics Platform
Access Point
Platform Platform
ISE
Prime CMX
Infrastructure/
DNA Center

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 34
Resiliency at every level
For optimum high availability

RF Coverage Network Infrastructure Wireless Controller


Services Redundancy
Redundancy Redundancy Redundancy

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 35
Step 2: Designing & Planning

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 36
Design for These 3 Key RF Relationships

AP to Client  How clients hear AP’s

Client to AP  How AP’s hear clients

AP to AP  How AP’s hear each other

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 37
Environment

Remote mining site Enterprise extension City Wi-Fi Cargo Dock

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 38
User Requirement

High Density Client Types Project • Type of Service


Experience • Phones budget • Coverage
• Tablets CAPEX & • System
OPEX resiliency
• Laptops
• IoT Devices

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 39
Regulatory Considerations

• 802.11 Standard
• Radio Emissions
• Transmit Power
• Dynamic Frequency Selection
(DFS) Certifications
• All this varies per country

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 40
2.4GHz vs. 5 GHz

Number of non-overlapping channels RF Spectrum

2.4 GHz 5 GHz (FCC) 2.4 GHz 5 GHz

3 23 Very
Crowded
Empty
Spectrum

5 GHz Advantage: 5 GHz Advantage:


• Over 6 times more channels • Less utilized spectrum
• Channel bonding 20/40/80/160 • Very few non-Wi Fi interfering devices
• More bandwidth for higher throughput • More channels will be available in future

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 41
Coverage Difference in 2.4GHz vs. 5GHz
Example of urban coverage

2.4 GHz Interferers


#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 42
Omni vs. Directional Antennas
Omni Antennas

Directional Antennas

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 43
Dual Band vs. Single Band

5 GHz
 Antennas

2.4GHz + 5GHz
 Antennas 
2.4 GHz
 Antennas

Single Band/ Uni-band Dual Band


Separate 2.4GHz and 5GHz antennas Allow the radio to share the same physical
antennas
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 44
Flexible Antenna Ports
Support for Uniband or Dualband Antennas
Top Ports: 5 GHz
• FlexPort can support either dual-band or
Top Ports: Not 30x30 30x30
Used º º single band antennas on the same
platform
SW Switch
• Configurable via a software command
• Dual-band ports, use the bottom 2
30x120º 30x30º

antenna ports to connect to dual-band


omni or directional antennas
Bottom Ports: 2 & 5 Bottom Ports: 2.4 GHz
GHz • Single-band ports, use two separate 2.4
GHz and two 5 GHz antenna ports

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 45
Channel Utilization is KEY!

Using Spectrum Analyzers

Monitoring via Cisco APs

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 46
Maximizing the Spectrum
RSSI vs. SNR
Check your noise floor in
each band during peak
usage
– Packet captures with a NIC that
you trust (MacBook Pro, etc.)
– Fluke AirCheck
– Spectrum Expert
– Metageek Chanalyzer for Clean
Air

Sources of Noise:
• Non Wi-Fi Interferers
• Probing Clients, Rogue APs
• High Co-Channel Interference
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 47
Design and Planning
General consideration
Distance = 1 km
 In real world scenario you need to take in
MAP consideration obstacles  Add more APs to have
RAP Line of Sight (LOS)
 Client type (smart phones, tablets, etc): weakest link
typically would be the Uplink on a smart phone
 For backhaul set the data rate to auto
 The number of MAPs per RAP should be less than
32 but really depends on the application and
bandwidth you want
 Max hop count is 8. Less than Four hops
recommended
 Use the range and capacity calculator

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 48
MAP

Range Estimates, RAP to MAPRAP


MAP

Reg Frequency Ant. Max Distance High Throughput Distance (2.4GHz:


Domain Gain (MCS0 LOS) MCS23, 5GHz: 80 MHz MCS8-3 LOS)
-A 2.4GHz 6 3.3km 200m

5GHz 8 2.7km 30m

-E 2.4GHz 6 1km 30m

5GHz 8 1km 20m

-A 2.4GHz 13 10km 335m

5GHz 13 3km 60m

-E 2.4GHz 13 2.5km 70m

5GHz 13 1.5km 30m


#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 49
Range Estimates, AP to Client
Reg Frequency Ant Max Distance (MCS0 High Throughput Distance (2.4GHz:
Domain Gain LOS) MCS23, 5GHz: 80 MHz MCS9-3 LOS) to
iPhone

-A 2.4GHz 6 800m 140m

5GHz 8 160m 15m

-E 2.4GHz 6 280m 45m

5GHz 8 160m 15m

-A 2.4GHz 13 1.5km 250m

5GHz 13 275m 25m

-E 2.4GHz 13 320m 60m

5GHz 13 180m 20m

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 50
Coverage and Capacity Calculator

Online now!

Click here to access capacity calculator

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 51
Typical Throughput

 Typical Throughput loss: 30%-40% per


hop
 Latency: 10 ms per Hop, 0.3-1
milliseconds typical
 Hops: Software supports 8 Hops but 3–4
Hops are recommended
 Daisy-Chaining increased the supported
Source: http://miercom.com/pdf/reports/20141212.pdf
hop count
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 52
Design and Planning
For Your
Reference
At what distance shall I place the MAPs?
• It all depends on the bandwidth you need. Need to consider Data rate vs SNR
• Need to find a compromise between coverage and throughput
MCS index Spatial Stream Media capacity (Mbps) ** Minimum LinkSNR * (dB)
MCS 0 1 15 9.3
MCS 1 1 30 11.3
MCS 2 1 45 13.3
MCS 3 1 60 17.3
MCS 4 1 90 21.3
MCS 5 1 120 24.3
MCS 6 1 135 26.3
MCS 7 1 157.5 27.3
MCS 8 2 30 12.3
MCS 9 2 60 14.3
MCS 10 2 90 16.3
MCS 11 2 120 20.3
MCS 12 2 180 24.3
MCS 13 2 240 27.3
MCS 14 2 270 29.3
MCS 15 2 300 30.3
#CLUS
(**) Max data rate considering © 2018 Cisco and/or its affiliates. All rights reserved.
5Ghz, 40 Mhz channel, 40ns GI Cisco Public 53
Design and Planning
How to check backhaul connected data rate?
• How do you see the actual backhaul rate? Is it 802.11n rate?

• (Cisco Controller) >show mesh neigh summary MAP_8c40


• AP Name/Radio Channel Rate Link-Snr Flags State
• ----------------- ------- ---- -------- ------- -----
• RAP_e380 136 m15 33 0x0 UPDATED NEIGH PARENT BEACON
• Or:
• Cisco Controller) >show mesh neigh detail MAP_8c40
• AP MAC : 1C:AA:07:5F:E3:80 AP Name: RAP_e380
• backhaul rate m15
• FLAGS : 86F UPDATED NEIGH PARENT BEACON
• Neighbor reported by slot: 1
• worstDv 0, Ant 0, channel 136, biters 0, ppiters 10
• Numroutes 1, snr 0, snrUp 40, snrDown 43, linkSnr 39
• adjustedEase 8648576, unadjustedEase 8648576
• […snip]
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 54
Site Survey
The importance of site surveys
• Given the nature of the outdoor environment and the lightly licensed spectrum being
used for Wi-Fi based outdoor MESH
• Site Survey’s are important
• Spectrum scans are equally important
• You may not be able to remove the interference source
• But you can design around it

• Remember to also survey at street level where clients will be operating


• If possible survey with either the client or “worst” client you expect to support
• Time based surveys may also be required n months after deployment
• Check for power availability
• Do you have the permits?

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 56
Tools
For Active & Predictive Site Survey

Ekahau Site Survey: https://www.ekahau.com/products/ekahau-site-survey/overview/


AirMagnet Site Survey: http://enterprise.netscout.com/products/airmagnet-survey

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 57
Which APs to use for site survey?

AP 1540
AP 1530
AP 1560
AP 1550
& Future Access
AP 1570
Points

Autonomous Mode Mobility Express Mode

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 58
Site Survey and Deployment
Get creative use different tools

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 59
Site Survey and Deployment
Get creative use different tools

Backhaul on
Cable

Full Hanging
rights Power from
Stand

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 60
Mounting the APs
• Mount the Root AP to have a good view of the area to be covered
• Understand RAP coverage. Use Directional Antennas for the RAPs on the Roof Tops.
• Max recommended height for MAPs is 30 feet/10 meters
• Recommend placing the APs at the same height
• Minimum recommendation is 20~25 dB of SNR, RSSI of -67 dBm for all data rates, 15% cell overlap
• Do not install the MAPs in an area where structures, trees, or hills obstruct radio signals to and from the access
point

Beyond RF Coverage Area;


Poor SNR

RF “Shadow” Close to Building; Poor SNR


#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 61
Architecture to Deploy
Outdoor Wireless
There are multiple ways to achieve a robust outdoor wireless solution

• Deploying an outdoor network without proper planning can get


expensive and time consuming
• This part of the session will help provide information so you can:
• Plan networks around your end users needs
• Select the correct operating mode for your network
• Meet your business needs

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 63
Supported Outdoor Modes
FlexConnect/
Autonomous Mobility Express Centralized
Flex+Bridge

C
WAN Intranet

Independent Traffic Centralized


Controller running on AP Traffic Distributed at AP
Access Points at Controller

Best suited for Small Small-Medium Branch Outdoors SP/Enterprise

• Simple and cost- • Simple and cost-effective for • Highly scalable for large • Simplified operations with
effective for small small-Medium networks number of remote branches centralized control for
networks • Simple wireless operations Wireless
Benefits with DC hosted controller • Wireless Traffic visibility at
the controller
• Bridge/Local modes
• Low scale • Moderate Scale • L2 roaming only • System throughput
Key Considerations • P2P • L2 roaming only • WAN BW and latency
requirements

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 64
Outdoor Deployment
Autonomous APs
Outdoor Autonomous

Root Bridge Non-Root Bridge Workgroup Bridge

The root in a point to point (P2P) or Designed to connect to Root Designed to connect as a client to
point to multipoint (P2MP) deployment. Bridge mode autonomous the unified wireless architecture.
Designed to take on non-root bridges, access points. Allows wired Can bridge up to 20 wired clients.
but can also accept associations from and wireless clients on non- Recommended for mobile units.
clients on non-backhaul radio backhaul radio

Install Mode - Uses a series of LED flashes to measure link RSSI between bridges.
Allows installers to align access points
http://www.cisco.com/c/en/us/td/docs/wireless/access_point/15_2_4_JA/configuration/guide/scg15-2-4_book.html

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 66
Cisco Autonomous Deployment Overview
Bridging
L3/L2 switch
Root Bridge 5GHz/2.4 GHz Non Root Bridge L2 switch

Point To Point

L2 switch

Internet

Point To Multipoint

Bridging: basic LAN to LAN wireless connectivity

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 67
Cisco Prime Management of Autonomous APs

Autonomous Management Capabilities:


• Access Point Heat maps
• Monitoring AP Status
• Monitoring Client Status
• Configuration Templates
• Reporting

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 68
Use Case: Bridging Buildings using Autonomous
• 1572/ 1532 Access Points
• Directional Antennas
• Autonomous Mode
• No need for a WLC

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 69
Autonomous – Additional Information
• Quick Start Configuration Template:
• https://supportforums.cisco.com/document/61936/autonomous-ap-and-
bridge-basic-configuration-template
• Autonomous Configuration Guide
• http://www.cisco.com/c/en/us/td/docs/wireless/access_point/15_2_4_J
A/configuration/guide/scg15-2-4_book.html

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 70
Outdoor Deployment
Cisco Mobility Express
Cisco Mobility Express: Simple by Design
Controller Function embedded into the access point

Runs WLAN Controller on


access point

Investment Protection - Add


controller without changing Mobile app/WebUI/PnP to
Access Point configure up to 100 access
points

Best Practices activated Simple UI monitors, manages and


by default troubleshoots your network

Simple, Fast IT Flexible


#CLUS BRKEWN-2027
Enterprise Class
© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 72
Mobility Express WLAN Deployment
Mobile App or WebUI DNA Center

Policy Automation Assurance Security ISE CMX

Single Office Distributed Office Distributed Enterprise

Mobility Express Controller Based


Mobility Express Mobility Express in Branch in campus
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 73
Mobility Express Interoperability

DNA Center 1.2 EFT CMX Presence & Analytics


AireOS 8.7 ISE CMX Location
DNA Center 1.2.x GA
CMX Engage

DNA Ready for Small to Medium Size, Single or Multi site Deployments

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 74
Which Access Points can run Mobility Express?
50 1000 50 1000 100 2000
AIR-AP1815I-x-K9C AIR-AP1852-x-K9C AIR-AP3800-x-K9C

AIR-AP1815w-x-K9C AIR-AP1832-x-K9C AIR-AP2800-x-K9C AIR-AP1562-x-K9C

50 1000 50 1000 100 2000 50 1000

The C suffix in the Part Number denotes the Mobility Express image

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 75
Mobility Express: Best dashboard for Wi-Fi
New software notification
icon
Troubleshooting alert

Make-a-wish to send email


feedback directly to Product
Rogues (Access
Management team:
points and
MobilityExpress@cisco.com
clients)

Switch between Standard


View and Expert View

Interferers
Higher scalability already
built-in the dashboard

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 76
Expert View
Introduces a wealth of options for wireless experts
Enable 2.4 GHz Band

Enable 5.0 GHz Band

Enable Auto FRA

Enable Optimized Roaming

Enable EDRRM

Enable CleanAir

Select Channel Width

Slider for enabling 2.4 and


5 GHz Data rates

Select DCA channels for


2.4 and 5 GHz

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 77
Outdoor Deployment
Centralized & FlexConnect
Controller Based Access Point Modes Overvie
Cisco Access Points Support:
• Local mode
• Monitor mode W2 Indoor APs do not yet
• Flexconnect Mode support bridge mode
• Bridge Mode
(18xx, 28xx, 38xx)
• Flex + Bridge Mode (from 8.0 release)
• Sniffer Mode
• Rogue Detector Mode

Why use a outdoor AP15xx, not an indoor AP?


 Ruggedized AP (IP67 rated)
 Transmits at higher power levels (depending on Regulatory Domain)
 Meets outdoor regulatory constrains
 No expensive NEMA enclosure

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 79
Local Mode vs. Bridge Mode
Local Mode Bridge Mode
+ 100% Client Access on both 2.4 - 5GHz for Backhaul, can be
and 5GHz shared for 5GHz client access

- Requires wired Ethernet drop per + Does not require wired Ethernet
AP including cabling and installation drop, only power
costs
Should be used for High Density Should be used to cover large
Deployments areas
Use Case: Large City deployment Use Case: Open Mining Facility
(Extension to indoor enterprise (Temporary deployments)
deployment outdoors)

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 80
Use Case: High Density City Deployment

WLC 8540
with HA

• At a distance of approx. 1 AP roughly every 250 SqMeters (2700 Sqft)


• Depending on client density APs can be spaced closer/farther
• Directional antennas / HDX features allow more additional APs
• APs should be in Local/Flexconnect mode
• RRM should be enabled with full HDX feature set
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 81
Bridge/ Mesh Mode
Cisco Outdoor Mesh architecture overview
From Bridging to Mesh 2.4 GHz Access
L3/L2 switch RAP MAP
(Root AP) Backhaul 5GHz (Mesh AP) L2 switch

WLC Backhaul 5GHz 5 GHz Access


CPI
WGB
Wired access MAP
MSE
5 GHz Access

Mesh Deployment Flexibility:


 LAN-to-LAN connectivity
 Multiple hop backhaul
 2.4 GHz and 5GHz wireless client access
 Ethernet Access to wired clients
 LAN-to-LAN in motion with Work Group Bridge (WGB)
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 83
How does the Mesh converge?
Self-configuring, Self-healing Mesh
 Optimal parent selection selects the path
RAP Controller
“ease” across each available backhaul Neighbor
 Ease based on number of hops and link SNR Parent
(Signal Noise Ratio) MAP
 AWPP uses a “Parent Stickiness” value to
mitigate Route Flaps
 AWPP integrates 802.11h DFS (Dynamic
Frequency Selection) for radar detection and
avoidance
 Preferred parent can be manually configured if
needed

Adaptive Wireless Path Protocol (AWPP)


establishes the best path to the Root

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 84
Adaptive Wireless Path Protocol (AWPP)
establishes the best path to the Root

How does AWPP Port-control flow work?

Blocked AWPP packets (Adj req, resp, beacon) – Parent not associated yet

parent selection

Authentication AWPP security packets (Encrypted Tunnel is established)

Authorized

Control DHCP, ARP, CAPWAP control (AP gets IP Address)

CAPWAP Authorized
Open ALL packets

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 85
Security with Cisco Mesh
AP X.509 Certificate Authentication

802.1x WPA/WPA2 Mutual AP Auth

Controller
Dynamic VLAN
Assignment EAP for Encrypted
IPSec VPN
Links Si

• 802.11i WPA/WPA2 security + Dynamic VLAN assignment


Robust embedded security
• AP to AP and AP to Controller mutual authentication MAC Authentication
• EAP authenticated and AES-based encrypted backhaul mesh links Certificate Authentication

• Encrypted control traffic between AP and Controller PSK based authentication


(Introduced in 8.2)
• Rogue AP detection and blacklisting
EAP Encryption between hops
• Integrated Wireless IDS and Attack correlation software
Secured WLAN
• Mobile L3 VPNs for ‘confidential’ client traffic (802.1X, WPA/WPA2)
Cisco’s AnyConnectVPN Client uninterrupted L3 roaming between Wi-Fi, cellular, etc. networks
Client VPN
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 86
Cisco Outdoor Mesh architecture scaling
Scalability at different layers
Management
Access Point Prime manages up to 20,000 APs, 200K
32 MAPs per RAP (<20 recommended) wireless Clients
8 Hops (4 recommended)
16 SSIDs per AP (512 at WLC)

Intranet

Controller
Up to 72 Controllers can be
part of an 1:1, N+1 or N+N+1 cluster

Mobility Groups allow clients to maintain


layer 3 IP stack for seamless roaming
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 87
Bridge Group Names
(BGN)
Determining how the mesh forms
General Mesh Deployment
recommendations include: Monitoring Mesh Links on Prime
• Placing Access Points where the
desired parent will have the
highest link SNR
• Setting Bridge Group Names
(BGN)
• Configuring a Preferred Parent

Mesh Links show color based on SNR

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 89
Bridge Groups
Sectorization (Bridge Group)
3 Hops 2 Hops
 Logically groups APs and controls the
association of the radios
1 Hop  For adding capacity we recommend that you
have more than one RAP in the same sector,
with the same BGN, but on different channels
 Having multiple RAPs with same BGN in an
area is good for redundancy: when a RAP goes
down its MAPs will join a different sector with
same name
RAP
 A factory default BGN is empty (NULL VALUE).
It allows the MAP to do the first association
MAP
MAP

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 90
How to Configure Bridge Groups
Setting Bridge Group Name (BGN)
• config ap bridgegroupname set MESH-BGN AP_NAME

• Use bridge group names to logically group the mesh access points to avoid two networks on the same channel from
communicating with each other

• If BGN is mismatched, the AP will join a mesh network of another BGN, but after 15 mins, the AP will drop AWPP and
scan for its own BGN

• BGN misconfigurations will cause network instability

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 91
Preferred Parent
Preferred Parent will be selected for the following conditions:
• P.P parent is the best parent
• P.P link SNR is at least 20dB (In this case, other parents,
however good, are ignored)
• P.P has link SNR between 12 and 20 dB, but no other
parent is significantly better (SNR more than 20% better).
For lower than 12dB SNR, P.P configuration is ignored
• P.P is not blacklisted
• P.P is not in silent mode due to DFS.
• P.P is in the same Bridge Group Name (BGN). If no other
parent available in the same BGN, the child will join the
P.P using the default BGN

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 92
Strict BGN Matching
• Scan 10 times for finding the matched BGN
parent WLC GUI:
Wireless->AP_NAME->Mesh
• After 10 scans, if no parent with matched BGN,
connect to the non-matched BGN
• After 15 mins, break connection and scan again
• Adds a higher AWPP priority on BGN but does
not strand AP with mis-configured BGNs

Available from 8.0 Release

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 93
Mesh Traffic and
Convergence
How does Traffic pass in a Bridge Mode
Deployment?
Deployment flexibility

WLAN
Controller

Intranet

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 95
How does Traffic pass in a Bridge Mode
Deployment?
Deployment flexibility

WLAN
RAP
Controller

Intranet

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 96
How does Traffic pass in a Bridge Mode
Deployment?
Deployment flexibility MAP

WLAN
RAP
Controller

Intranet

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 97
How does Traffic pass in a Bridge Mode
Deployment?
Deployment flexibility MAP

WLAN
RAP
Controller

Intranet

MAPs dynamically build


a tree with the best path
to the RAP

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 98
How does Traffic pass in a Bridge Mode
Deployment?
Deployment flexibility MAP

WLAN
RAP
Controller

Intranet

Mesh carries two types of traffic:

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 99
How does Traffic pass in a Bridge Mode
Deployment?
Deployment flexibility MAP

WLAN
RAP
Controller

Intranet

Mesh carries two types of traffic:


Wired client traffic

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 100
How does Traffic pass in a Bridge Mode
Deployment?
Deployment flexibility MAP
Ethernet in
mesh header

WLAN
RAP
Controller

Intranet

Mesh carries two types of traffic:


Wired client traffic

Mesh header
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 101
How does Traffic pass in a Bridge Mode
Deployment?
Deployment flexibility MAP
Ethernet in
mesh header

WLAN
RAP
Controller

Intranet

Mesh carries two types of traffic:


Wired client traffic

Mesh header
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 102
How does Traffic pass in a Bridge Mode
Deployment?
Deployment flexibility MAP
Ethernet in
mesh header

WLAN
RAP
Controller

Intranet

Mesh carries two types of traffic:


CAPWAP in
Wired client traffic
mesh header
Mesh header
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 103
How does Traffic pass in a Bridge Mode
Deployment?
Deployment flexibility MAP
Ethernet in
mesh header

WLAN
RAP
Controller

Intranet

Mesh carries two types of traffic:


CAPWAP in
Wired client traffic
mesh header
Mesh header
#CLUS 104
CAPWAP traffic BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public
How does Traffic pass in a Bridge Mode
Deployment?
Deployment flexibility MAP
Ethernet in
mesh header

WLAN
RAP
Controller

Intranet

Mesh carries two types of traffic:


CAPWAP in
Wired client traffic
mesh header
Wireless client traffic
Mesh header
#CLUS 105
CAPWAP traffic BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public
Mesh APs scanning - Before joining a RAP

Listens to Beacons on each domain channel

Identifies channels where neighbors are heard

MESH AP

Post initial scan, MAP goes to seek state to


identify the best RAP and initiate a connection

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 106
Evolution of Wi-Fi Mesh –
Background Scanning for Fast Convergence

RAPs and RAP and


MAPs run
MAPs support MAPs support
convergence
802.11ac - MAPs run
802.1x and Fast with Back
More speed > RAPs and
MAC Faster MAPs run Convergence Ground Scan
authentication Convergence RRM 20 sec/hop 4-10 sec/hop

RAPs and MAPs MAP run MAPs run


MAPs support Authenticate Standard Very Fast
AWPP to WLC Convergence Convergence

WPA-PSK 50 sec/Hop 15 sec/hop

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 107
Mesh Fast Convergence
Parent Loss Detection / DHCP / CAPWAP
Channel Scan/Seek Time per hop (sec)
Keep Alive Timers Information

Scan/Seek all 2.4 & 5GHz Renew / Restart


Standard 21 / 3 sec 48.6*
channels CAPWAP

Scan/Seek only channels Maintain DHCP and


Fast 7 / 3 sec 20.5*
found in same bridge group CAPWAP

Maintain DHCP and


Scan/Seek only channels
Very Fast 4 / 1.5 sec CAPWAP 15.9*
found in same bridge group

4 sec / Off-Channel
CCN/BG Scan Scan/Seek only channels Maintain DHCP and
scan every 3 sec and 8-10sec
Fast/VF found in same bridge group CAPWAP
stay for 50ms
*Number are shown for same WLC, same channel, and same subnet. Times are longer if these variables are changed

WLC CLI Configuration only (Warning: Decreasing convergence time may lead to more parents changes)
Mesh convergence configuration - (Cisco Controller) > config mesh convergence { standard | fast | very-fast } all
Background scanning configuration - (Cisco Controller) > config mesh background-scanning {enable | disable}

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 108
How Mesh APs scan DFS and non-DFS bands?
AP first scans the serving on-channel
(DFS or Non-DFS) to find any neighbors

Off-Channel Scanning

If Non-DFS Channels (UNII-1, UNII-3) If DFS Channels (UNII-2, UNII-2 extended)

AP actively scans AP first checks if the channel is


(transmitting packets) declared safe, then passively scans
non-DFS channels (no transmitting) DFS channels
periodically
If Radar is detected, channel is
completely avoided

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 109
Mesh Convergence - Building the Off-Channel
List

RAP1 – Ch 36 MAP1
WLC
Switch

RAP2 – Ch 44,48

RAP3 – Ch 40 MAP3 – Ch 40

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 110
Mesh Convergence - Building the Off-Channel
List

1. MAP1 Scan for parents

RAP1 – Ch 36 MAP1
WLC
Switch

RAP2 – Ch 44,48

RAP3 – Ch 40 MAP3 – Ch 40

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 111
Mesh Convergence - Building the Off-Channel
List

1. MAP1 Scan for parents


2. Finds and joins Best Parent

RAP1 – Ch 36 MAP1
WLC
Switch

RAP2 – Ch 44,48

RAP3 – Ch 40 MAP3 – Ch 40

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 112
Mesh Convergence - Building the Off-Channel
List

1. MAP1 Scan for parents


2. Finds and joins Best Parent
3. Background scans all neighbors
RAP1 – Ch 36 MAP1
WLC
Switch

RAP2 – Ch 44,48

RAP3 – Ch 40 MAP3 – Ch 40

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 113
Mesh Convergence - Building the Off-Channel
List

1. MAP1 Scan for parents


2. Finds and joins Best Parent
3. Background scans all neighbors
RAP1 – Ch 36 MAP1 4. Creates an Off-Channel Scanning List
WLC using channels with neighbors present

Switch Off-Channel Scanning List


Standard Fast/Very Fast

RAP2 – Ch 44,48 Scan channels heard


Scan channels heard
during initial full scan
during initial full scan
 then scan Off-
 then scan Off-
Channels found with
Channels found with
neighbors (44,40) 
neighbors (44,40) 
then scan all remaining
then scan just the
MAP3 – Ch 40 channels on domain
RAP3 – Ch 40 subset of the channels
(In US there are 25
(44,48,40)
channels)

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 114
Mesh Convergence – Background Scan &
Messaging
RAP1
Ch 60
1. MAP1 Scan for parents

MAP1 MAP2
RAP2
Ch 100

RAP3
Ch 140

Available from 8.1 Release

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 115
Mesh Convergence – Background Scan &
Messaging
RAP1
Ch 60
1. MAP1 Scan for parents
2. Finds Best Parent

MAP1 MAP2
RAP2
Ch 100

BGN RAP Channels


RAP3
BGN_1 60, 100, 140 Ch 140 Off-Channel Neighbor list (Example)
Channel AP Link SNR Ease
RAP1 35 3500
60
MAP2 30 1200
Available from 8.1 Release
100 RAP2 25 2500
140 RAP3 10 1000

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 116
Mesh Convergence – Background Scan &
Messaging
RAP1
Ch 60
1. MAP1 Scan for parents
2. Finds Best Parent
3. Background Scans all parents
MAP1 MAP2
RAP2
Ch 100

BGN RAP Channels


RAP3
BGN_1 60, 100, 140 Ch 140 Off-Channel Neighbor list (Example)
Channel AP Link SNR Ease
RAP1 35 3500
60
Available from 8.1 Release MAP2 30 1200
100 RAP2 25 2500
140 RAP3 10 1000
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 117
Mesh Convergence – Background Scan &
Messaging
RAP1
Ch 60
1. MAP1 Scan for parents
2. Finds Best Parent
3. Background Scans all parents
4. Parent Fails
MAP1 MAP2
RAP2
Ch 100

BGN RAP Channels


RAP3
BGN_1 60, 100, 140 Ch 140 Off-Channel Neighbor list (Example)
Channel AP Link SNR Ease
RAP1 35 3500
60
Available from 8.1 Release MAP2 30 1200
100 RAP2 25 2500
140 RAP3 10 1000
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 118
Mesh Convergence – Background Scan &
Messaging
RAP1
Ch 60
1. MAP1 Scan for parents
2. Finds Best Parent
3. Background Scans all parents
4. Parent Fails
MAP1 MAP2
RAP2 5. Send CCN_WAIT to children
Ch 100

BGN RAP Channels CCN_WAIT


RAP3
BGN_1 60, 100, 140 Ch 140 Off-Channel Neighbor list (Example)
Channel AP Link SNR Ease
RAP1 35 3500
60
Available from 8.1 Release MAP2 30 1200
100 RAP2 25 2500
140 RAP3 10 1000
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 119
Mesh Convergence – Background Scan &
Messaging
RAP1
Ch 60
1. MAP1 Scan for parents
2. Finds Best Parent
3. Background Scans all parents
4. Parent Fails
MAP1 MAP2
RAP2 5. Send CCN_WAIT to children
Ch 100 6. Join New Parent from list

BGN RAP Channels


RAP3
BGN_1 60, 100, 140 Ch 140 Off-Channel Neighbor list (Example)
Channel AP Link SNR Ease
RAP1 35 3500
60
Available from 8.1 Release MAP2 30 1200
100 RAP2 25 2500
140 RAP3 10 1000
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 120
Mesh Convergence – Background Scan &
Messaging
RAP1
Ch 60
1. MAP1 Scan for parents
2. Finds Best Parent
3. Background Scans all parents
4. Parent Fails
MAP1 MAP2
RAP2 5. Send CCN_WAIT to children
Ch 100 6. Join New Parent from list
7. Notifies child of channel change

BGN RAP Channels CCN_CINFO


RAP3
BGN_1 60, 100, 140 Ch 140 Off-Channel Neighbor list (Example)
Channel AP Link SNR Ease
RAP1 35 3500
60
Available from 8.1 Release MAP2 30 1200
100 RAP2 25 2500
140 RAP3 10 1000
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 121
Daisy Chaining
Daisy-chaining: Serial Backhaul Deployments
WLAN MAP AP
Controller RAP (Master) (Slave) MAP2

80MHz 80MHz

• Both 1532s and 1572s in Bridge Mode can utilize this configuration

• Master MAP & Slave MAP are operating on different 5GHz channels to maximize throughput across the
mesh link
• BGN configuration and the Preferred Parent command are recommended to maintain the mesh tree

• Slave MAP must be configured in RAP Mode

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 123
Daisy-Chaining: Mixing Access Points
WLAN MAP AP
Controller RAP (Master) (Slave)

80MHz

• Slave Access Point can be:


• 1530 / 1550 / 3700P
• With 1572, PoE-Out is 802.11at (25.5w), 1532E / 3702P can be powered directly!

• For PoE-Out, the 1572 power source must be AC / DC / or PoC

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 124
Daisy-chaining: Dedicated Client Access Device
Deployments

WLAN MAP
Controller RAP (Master) Local AP

5GHz

• Local AP is dedicated for Client Access, while Master MAP will provide 2.4/5GHz
the mesh backhaul link
• In this configuration, LocalAP should be in local mode or flex-connect
mode
• The Master MAP must have Ethernet bridging enabled

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 125
Configuring Daisy-chaining

• (Cisco Controller) >config ap daisy-chaining [enable/disable] <ap_name>

• AP#capwap ap daisy-chaining <enable/disable>

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 126
Use Case: Roadside Video Surveillance
High Throughput over
RAP
Multiple Mesh Hops
Daisy-Chain Daisy-Chain Daisy-Chain

WLC 8540 with HA

• WLC8500 to support high number of access points

• Daisy-Chaining allows 5GHz backhaul to operate on different channels maximizing throughput over distance

• High throughput applications such as HD video can span up to 8 mesh hops

• 5GHz radios should use directional antennas to maximize distance

• 2.4GHz radios can serve clients


#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 127
Outdoor Deployment
FlexConnect (Flex+Bridge)
Flex + Bridge (Flex on Mesh) Central Site
WLCs

Centralized
• New AP mode that allows Flexconnect behavior Traffic
across mesh-enabled AP
• Control plane supports:
• Connected (WLC is reachable)
• Standalone (WLC not reachable)
• Data Plane supports:
• Centralized (split MAC) WAN
• Local (local MAC) Remote
Local
• Flexconnect Groups Traffic
Office
• Max 8 Mesh hops, Max 32 MAPs per RAP
• Local AAA support

• A WLC have a mix of Bridge and Flex + Bridge


• RAPs inherent VLANs from its connected MAP
Local Data WLAN
Central Data WLAN

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 129
How does Traffic pass in a Flex + Bridge Mode
Deployment?

WLAN
Controller

WAN

Local
Intranet

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 130
How does Traffic pass in a Flex + Bridge Mode
Deployment?
MAP

WLAN
RAP
Controller

WAN

Local
Intranet

Flex+Bridge carries the following traffic:

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 131
How does Traffic pass in a Flex + Bridge Mode
Deployment?
MAP

WLAN
RAP
Controller

WAN

Local
Intranet

Flex+Bridge carries the following traffic:


Wired client traffic

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 132
How does Traffic pass in a Flex + Bridge Mode
Deployment?
MAP
Ethernet in
mesh header

WLAN
RAP
Controller

WAN

Local
Intranet

Flex+Bridge carries the following traffic:


Wired client traffic Mesh header

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 133
How does Traffic pass in a Flex + Bridge Mode
Deployment?
MAP
Ethernet in
mesh header

WLAN
RAP
Controller

WAN

Local
Intranet
Flexconnect WLAN

Flex+Bridge carries the following traffic:


Wired client traffic Mesh header

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 134
How does Traffic pass in a Flex + Bridge Mode
Deployment?
MAP
Ethernet in
mesh header

WLAN
RAP
Controller

WAN

Local
Intranet
Flexconnect WLAN
Ethernet in
Flex+Bridge carries the following traffic: mesh header
Wired client traffic Mesh header
Local Wireless client traffic
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 135
How does Traffic pass in a Flex + Bridge Mode
Deployment?
MAP
Ethernet in
mesh header

WLAN
RAP
Controller Central WLAN

WAN

Local
Intranet
Flexconnect WLAN
Ethernet in
Flex+Bridge carries the following traffic: mesh header
Wired client traffic Mesh header Central Wireless
Local Wireless client traffic CAPWAP client traffic
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 136
How does Traffic pass in a Flex + Bridge Mode
Deployment?
MAP
Ethernet in
mesh header

WLAN
RAP
Controller Central WLAN

WAN

Local
Intranet
Flexconnect WLAN
Ethernet in
Flex+Bridge carries the following traffic: mesh header
Wired client traffic Mesh header Central Wireless
Local Wireless client traffic CAPWAP client traffic
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 137
How does Traffic pass in a Flex + Bridge Mode
Deployment?
MAP
Ethernet in
mesh header

WLAN
RAP
Controller Central WLAN

WAN

Local
Intranet
Flexconnect WLAN
Ethernet in
Flex+Bridge carries the following traffic: mesh header
Wired client traffic Mesh header Central Wireless
Local Wireless client traffic CAPWAP client traffic
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 138
How does Traffic pass in a Flex + Bridge Mode
Deployment?
MAP
Ethernet in
mesh header

WLAN
RAP
Controller Central WLAN

WAN

Local
Intranet
Flexconnect WLAN
Ethernet in
Flex+Bridge carries the following traffic: mesh header
Wired client traffic Mesh header Central Wireless
Local Wireless client traffic CAPWAP client traffic
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 139
Use Case: Open Mining Facility
Flex + Bridge to increase Reliability

Mobile WGB in Open Mine


RAP MAP

WAN

Flex WLC with HA

Local Applications
• Remote Mining Site:
• Flex WLC at the Corporate Data Center
• RAP/MAPs operating in Flex+Bridge Mode around mine
• WGB controlling vehicle connects via mesh network
• Local Applications continue to operate, even if the WAN link is down
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 140
Additional New Features
for Outdoor Mesh
Native VLAN Support
• Pre 8.0, VLAN 1 assigned on all
backhaul links
• Now the native VLAN can be
assigned to match switchport

interface GigabitEthernet0/1
RAP MAP
switchport trunk encapsulation dot1q
switchport trunk native vlan 161
switchport mode trunk

Available from 8.0 Release

Note: Start configuration with your last Mesh hop


#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 142
Multi-country Domain Support on a WLC
• 8.1 Code allows multiple Country Codes
to be configured
• A Single WLC can now manage multiple
regions
• Best Practices: APs of different
regulatory domains should be deployed
if:
• Different Physical locations
-A Channel 165 -A Channel 165
• Different Bridge Group Names (BGNs) BGN_US BGN_US
• This will avoid stranding MAPs

Available from 8.1 Release


-E Channel 140 -E Channel 140
BGN_AT BGN_AT
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 143
RRM on 5GHz when in Bridge Mode
• RRM Consists of:
• Transmit Power Control (TPC)
• Dynamic Channel Assignment (DCA)
• Coverage Hole Detection and Mitigation (CHDM)

• Bridge / Flex+Bridge Mode


• RRM on 2.4GHz already existed
• Now RRM on 5GHz if:
• AP is a RAP
• and RAP has a wired link (Ethernet/Fiber/Co-ax) to WLC
• and RAP is without Child MAP

• Local / Flex Mode


5GHz RRM is an optional feature. Enable manually if desired
• RRM on both bands

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 144
RRM on 5GHz when in Bridge Mode
RAP MAP

Channel 149

Power Level 3

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 145
RRM on 5GHz when in Bridge Mode
RAP

Channel 149
Power Level 3

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 146
RRM on 5GHz when in Bridge Mode
RAP

Channel 149
Power Level 3

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 147
RRM on 5GHz when in Bridge Mode
RAP

Channel 149
Power Level 1 (TPC)

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 148
RRM on 5GHz when in Bridge Mode
RAP

Channel 149
Power Level 1 (TPC)

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 149
RRM on 5GHz when in Bridge Mode
RAP

Channel 157 (DCA)


Power Level 1

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 150
Mesh 2.4 GHz Backhaul
• MAPs Backhaul issue prior to version 8.2
• In some countries 5 GHz backhaul is not permitted

• Under certain conditions 2.4 GHz backhaul is preferred

• Some customers may prefer both 5 GHz and 2.4 GHz backhauls

• MAPs 2.4 GHz backhaul solution in version 8.2


• Mesh backhauls can be configured globally or per Parent RAP

• RAPs can be configured for either 5 or 2.4 GHz backhauls

• Backhaul selection from Parent RAP propagates to all MAP children in a tree

• Extra precaution should be used when using different versions controller software

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 151
Cisco Outdoor Mesh 2.4 GHz and 5GHz Backhauls
Root AP Mesh AP
Backhaul 5 GHz
2.4 GHz Access
L3/L2 switch
Root AP Mesh AP
Backhaul 2.4GHz L2 switch

5 GHz Access
WLC Backhaul 2.4GHz
CPI
WGB
Wired access MAP
MSE
5 GHz Access

Mesh Deployment Flexibility:


LAN-to-LAN connectivity Backhaul 2.4GHz
 Multiple hop backhaul at 5 or 2.4 GHz
 2.4 GHz and 5GHz wireless client access Mesh AP
 Ethernet Access to wired clients
 LAN-to-LAN in motion with Work Group Bridge (WGB)

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 152
High Availability anti-stranded features
Stranded: a MAP that is not able to associate and find a path to WLC
• DEFAULT BGN (Bridge Group Name): Mesh APs with incorrect BGN, can still
join a running network using BGN named “DEFAULT”. With “DEFAULT”
BGN:
• MAP associates clients, and forms mesh relationships
• After 15 minutes APs will go to SCAN state rather than rebooting
• Do not confuse an unassigned BGN (null value) with DEFAULT, which is a
mode that the access point uses to connect when it cannot find its own
BGN
• DHCP fall back: this features allow a MAP configured with a wrong static IP
address to fall back to DHCP and find a WLC. If even this fails, AP then
attempts to discover a controller in Layer 2 mode
• FULL SECTOR DFS: DFS functionality allows a MAP that detects a radar
signal to transmit that up to the RAP, which then acts as if it has
experienced radar and moves the sector

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 153
Enable/disable mesh AP as leaf node
Mesh Leaf Node Support WLC CLI
(Cisco Controller) >config mesh block-child <ap_name>
{enable|disable}
• Mesh AP relationships
• Parent access point - Offers the best route back
to the RAP
• Child access point - Selects the parent access
point as its best route back to the RAP

• When APs in the mesh network have


different radio performance (i.e. 802.11n
and 802.11ac mixed), lower radio
performance mesh AP can be configured to
work only as leaf node, so that the wireless
backhaul performance will not be
downgraded.
• Mesh leaf node - Cannot be selected as
parent access point by other MAPs, only
work as a child MAP

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 154
Workgroup Bridge
(WGB)
Mesh: Stationary Network
WGB: Roaming/Nomadic Network
• HSR aka Fast WGB Roaming
• WGB Roaming Coordination (8.4)
• 802.11r on WGB (8.6)
• Ethernet daisy chain
Workgroup Bridge • Wireless Bridge Auto-
/ Autonomous Negotiation (8.5)

Features • DLEP client (8.5)


• SSID prioritization in WGB
• Broadcast support for multiple
VLANs

BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 156
IoT Wireless WGB Roaming Evolution

Basic WGB roaming Fast WGB roaming PRP enhanced roaming

Low to moderate speed High speed (Tested up to Highest speed (Tested up to


• Limited Scanning of 100Km/h) 160Km/h)
channels • 802.11v BSS Fast Transition • PRP (Parallel Redundancy
on WGB Protocol) over wireless
• RSSI smoothing filter • Dual radios approach enables
always-best-connected at
• Optimized rate-shifting
speeds
algorithm
 Dual WGBs, dual radios
(parallel 5GHz) roaming
 Single WGB, dual radios
(parallel 2.4GHz and
5GHz) roaming
• Roaming coordination
prevents two radios from
roaming at the same time
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 157
Seamless, Resilient Connectivity for Mobile
Assets
1. Fast WGB Roaming enables consistent throughput and stable rate-shifting at high speeds

• WGB support for 802.11v Fast


BSS Transition
• Enhanced RSSI filter algorithm

2. Roaming Coordination decouples roaming events on the 2.4 and 5 GHz interfaces

• WLAN interfaces coordinate roaming


sequence and utilize delay timer
Channel 11 Channel 48
• Single or Dual-WGB configurations

3. Traffic distribution using PRP over Wi-Fi effectively overcomes single channel handover or failure

• PRP stack integrated in WGB or


Bandwidth profile after discard of PRP duplicates using external PRP switch
• Also reduces packet delay variation

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 158
WGB Roaming Coordination
• When two radios that work under WGB mode are connected to each other, there is a
roaming coordination mechanism between the two radios to prevent them from
roaming at the same time
• Roaming coordination mechanism can be applied to two scenarios
• Two connected radios on two separate IW3702s in WGB mode
• Two radios on the single IW3702, both configured as WGB

• When a WGB, needs to roam, it sends an indication to the other WGB indicating it
wants to start roam, the other WGB shall wait for 100ms (configurable) by default if it
also needs to roam , once the roam event on the WGB is complete or if the timeout
expires, the other WGB is free to roam
• Roaming Coordination mechanism facilitates seamless connectivity when multiple RF
paths are involved such as in case of PRP or DLEP

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 159
PRP over Wireless Redundancy Options
Dual WGB, Dual Radio - WLC 8.4 Single WGB, Dual Radio - WLC 8.5

5GHz 5GHz

2.4GHz 5GHz
WGB WGB

PRP Switch as RedBox WGB as RedBox

• External PRP switch as RedBox (redundancy box) • WGB as RedBox (redundancy box) performs packet
performs packet duplication/duplication discard duplication/duplication discard function
function
• Redundant path available via 2.4GHz and 5GHz
• Redundant path available via two 5GHz radios on two radios on single WGB
WGBs
• Network infrastructure side PRP switch as RedBox
• Network infrastructure side PRP switch as RedBox
• Application examples: Autonomous vehicles and
• Application examples: Train to track side, industrial straddle carriers and mission critical application etc.
automation and amusement ride applications

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 160
Guidelines for Dual WGB PRP Configuration
• Redundant path in the network
• Duplicated traffic is mapped to two SSID A and SSID B, each within specified VLAN
• Each WGB is configured to associate to either SSID A or SSID B
• Redundant 5GHz wireless paths are provided for wired clients behind the WGB, traffic from/to the client
are duplicated, MGMT frames and other traffic are not duplicated
• It is recommended that wired clients behind WGB use different VLAN from the VLANs assigned to
SSID A or SSID B
• Traffic between aggregate switch and APs are in QinQ format to identify which path they come from
• QinQ function on AP is enabled by PRP feature
• QinQ function on Aggregate switch is enabled by switch configuration

• Pair of WGBs support roaming coordination function by connection between their second Gigabit
Ethernet interface
• Currently only FlexConnect mode (central authentication, local switching) is supported
• Supported platforms - Infrastructure side AP: IW3702, AP1572 series, WGB: IW3702

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 161
Guidelines for Single WGB PRP Configuration
• Redundant wireless path in the network
• Duplicated traffic is mapped to two SSID A and SSID B, each within specified VLAN
• Each radio on single WGB is configured to associate to either SSID A or SSID B
• Redundant 2.4GHz and 5GHz wireless paths are provided for wired clients behind the WGB, traffic
from/to the client are duplicated, MGMT frames and other traffic are not duplicated
• It is recommended that wired clients behind WGB use different VLAN from the VLANs assigned to
SSID A or SSID B
• Traffic between aggregate switch and APs are in QinQ format to identify which path they come from
• QinQ function on AP is enabled by PRP feature
• QinQ function on Aggregate switch is enabled by switch configuration

• Currently only FlexConnect mode (central authentication, local switching) is supported


• Supported platforms - Infrastructure side AP: IW3702, AP3700, AP2700, AP1572 series, WGB:
IW3702

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 162
Sample Configuration – Network Infrastructure
Side
• WLC configuration • Aggregate Switch - QinQ configuration • PRP Switch - PRP configuration
interface FastEthernet1/0/1 interface PRP-channel1
• Create WLAN with SSID (PRP1/PRP2) description *** Port to AP *** switchport mode trunk
switchport trunk encapsulation dot1q
• Enable local switching for each WLAN switchport trunk native vlan 201 !
switchport trunk allowed vlan 201,801,802 interface GigabitEthernet0/1
switchport mode trunk
• Configure AP to flexconnect mode, enable VLAN switchport mode trunk
no ptp enable
mapping
no cdp enable
interface FastEthernet1/0/3
prp-channel-group 1
Enable WGB multiple vlan support description ***Port to AP***

!
switchport trunk encapsulation dot1q
(WLC) >config wgb vlan enable interface GigabitEthernet0/2
switchport trunk native vlan 201
switchport mode trunk
switchport trunk allowed vlan 201,801,802
• Enable PRP under WLAN (CLI) - GUI available switchport mode trunk no ptp enable
starting WLC 8.5 no cdp enable
(WLC) >config wlan wgb prp enable ? prp-channel-group 1
interface FastEthernet1/0/7
<WLAN id> Enter WLAN Identifier between 1 and 512 description ***Port to PRP SW***
switchport access vlan 801
switchport mode dot1q-tunnel To create PRP channel and group, follow the PRP
configuration guide at
interface FastEthernet1/0/8 http://www.cisco.com/c/en/us/td/docs/switches/la
description *** Port to PRP SW *** n/industrial/software/configuration/guide/b_prp_ie
switchport access vlan 802 4k_5k.html#task_1055346
switchport mode dot1q-tunnel

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 163
Sample Configuration – Dual WGB PRP
Configuration
• WGB1 Configuration – Client VLAN 800, SSID VLAN 801 • WGB2 Configuration – Client VLAN 800, SSID VLAN 802
hostname WGB1 hostname WGB2
dot11 ssid PRP1 dot11 ssid PRP2
vlan 801 vlan 802
authentication open authentication open
interface Dot11Radio1 interface Dot11Radio1
no ip address no ip address
ssid PRP1 ssid PRP2
station-role workgroup-bridge station-role workgroup-bridge
! !
interface Dot11Radio1.800 interface Dot11Radio1.800
encapsulation dot1Q 800 encapsulation dot1Q 800
bridge-group 2 bridge-group 2
bridge-group 2 spanning-disabled bridge-group 2 spanning-disabled
! !
interface Dot11Radio1.801 interface Dot11Radio1.802
encapsulation dot1Q 801 native encapsulation dot1Q 802 native
bridge-group 1 bridge-group 1
bridge-group 1 spanning-disabled bridge-group 1 spanning-disabled
! !
interface GigabitEthernet0.800 interface GigabitEthernet0.800
encapsulation dot1Q 800 encapsulation dot1Q 800
bridge-group 2 bridge-group 2
! !
interface GigabitEthernet0.801 interface GigabitEthernet0.802
encapsulation dot1Q 801 native encapsulation dot1Q 802 native
bridge-group 1 bridge-group 1
! !
workgroup-bridge unified-vlan-client
workgroup-bridge unified-vlan-client

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 164
Sample Configuration – Single WGB PRP
Configuration
• Client Vlan 800, SSID PRP1 VLAN 801, SSID PRP2 bridge-group 50 spanning-disabled speed auto
VLAN 802, BVI VLAN 900 ! bridge-group 1
interface Dot11Radio0.801 bridge-group 1 spanning-disabled
• dot11 wgb prp encapsulation dot1Q 801 !
no shutdown bridge-group 100 interface GigabitEthernet0.800
bvi-vlanid 900 bridge-group 100 spanning-disabled encapsulation dot1Q 800
! ! bridge-group 50
dot11 ssid PRP1 interface Dot11Radio1 bridge-group 50 spanning-disabled
vlan 801 ssid PRP2 !
authentication open packet retries 32 drop-packet workgroup-bridge unified-vlan-client
no ids mfp client station-role workgroup-bridge
! rts retries 32
dot11 ssid PRP2 bridge-group 1
vlan 802 bridge-group 1 spanning-disabled
authentication open !
no ids mfp client interface Dot11Radio1.800
! encapsulation dot1Q 800
interface Dot11Radio0 bridge-group 50
ssid PRP1 bridge-group 50 spanning-disabled
packet retries 32 drop-packet !
station-role workgroup-bridge interface Dot11Radio1.802
rts retries 32 encapsulation dot1Q 802
bridge-group 1 bridge-group 200
bridge-group 1 spanning-disabled bridge-group 200 spanning-disabled
! interface GigabitEthernet0
interface Dot11Radio0.800 no ip address
encapsulation dot1Q 800 load-interval 30
bridge-group 50 duplex auto

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 165
Step 3: Deployment

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 166
Making sure few things before installation…
• By default the following parameters are set
• AP Role: MAP
• Default 2.4GHz and 5GHz channels are selected
• Default Transmit Power is set: Power Level 1
• Default Mesh Distances estimation is set to 12000ft
• Default BGN
• Backhaul Client Access is enabled
• Default Mesh Encryption type is EAP

• Primary, Secondary, Tertiary Wireless LAN Controller should be set

• DCHP Sever
• Option 43 – IP addresses of Wireless LAN Controllers
• Option 60 – AP Type
• Option 82 – DHCP Relay Information

• MAC-Authentication must be performed


• At each Wireless LAN Controller
• Use an External AAA

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 167
Don’t forget the powering requirements...

1540I 1540 1560I 1560E 1570I 1570E


PoE
PoE+
UPoE
DC Power
AC Power

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 168
AP Accessories

GPS Antenna Lightning Arrestors Grounding AP

Cisco AP Hardware Installation Guide: http://www.cisco.com/c/en/us/td/docs/wireless/access_point/1570/installation/guide/1570hig/1570_chinstallaccs.html

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 169
Ensuring tight connections




#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 170
Deployment
Environmental Impact

Equipment
Inside
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 171
Deployment
Environmental Impact

Equipment
Inside
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 172
Deployment
Environmental Impact

Equipment
Inside
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 173
Deployment
Environmental Impact

Equipment
Inside
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 174
Provisioning
Network Plug-N-Play – Simple, Secure, Scalable
Today’s Process Business Challenges
Direct Costs
Central Staging Facility
Ships • Shipping after Configuring device
equipment • Travel costs for IT installer
• Install OS
• Install Config
Network • Prime device Complexity
Reseller/Partner Admin
• Config errors
• Different products / processes

Security
• 3rd party not secure

Installer

Time/Productivity
Site-1 Site-2 Site-3
• Manual process
• Shipping , Storage, Travel

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 176
Day 0 Deployment options

01 OTAP Over-the-Air-Provisioning

02 Command Line Interface Setup Wizard using CLI

03 Network Plug and Play Using


APIC/Network/Cloud
Redirect Plug and Play

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 177
Over-The-Air Provisioning Devices
Cisco Wireless App (Free Download!)
Laptop
Provision Monitor

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 178
Deploying via Over-the-Air Provisioning method
CREATE WIRELESS
CREATE ADMIN ACCOUNT SET UP YOUR CONTROLLER CONFIRM SETTINGS
NETWORK

Simple Flow Wireless Network Ready Best Practices Enabled

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 179
Network Plug-N-Play – Simple, Secure, Scalable
Today’s Process Network
Central Staging Facility
Ships
equipment 1 Pre Provision
Projects/Sites
• Install OS
• Install Config
• Prime device Network Admin
Network
Reseller/Partner Admin

2 Install & Power-on 3 Monitor device


devices installation

Installer
Installer
Network Admin

Site-1 Site-2 Site-3


Site(s)

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 180
Deploying Cisco Mobility Express
APIC-EM/Network Plug and Play Options

APIC-EM controller which can be reached by Mobility

01 Private
Cloud
Express Access Point in customer premises. Access
Point can then download the controller configuration file
from Network Plug and Play service.

Cloud based redirecting service which redirects Mobility


Cisco
02
Express Access Point to an APIC-EM controller residing
Cloud in customer premises. These APs can download the
controller configuration file from Network Plug and Play
Redirect app service.

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 181
Network Plug and Play – Private Cloud
ip dhcp pool pnp_device_pool
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1 Master AP
option 43 ascii running PnP
"5A1N;B2;K4;I192.168.1.123;J80" Agent

LAN/Internet
LAN
PnP Server uses
PnP Server
self signed SSL
certificate

DHCP Request

DHCP response with


APIC-EM IP address
in DHCP option 43
HTTP PnP work request with device serial number (UDI)
PnP Agent initiates HTTP communication
with the server and sends the device UDI

PnP Agent installs local trustpoint PnP Server receives UDI


for the server SSL certificate and sends server SSL
certificate over HTTP
HTTPS PnP work request with device serial number (UDI)
PnP Agent initiates HTTPS communication
with the server and sends the device UDI
PnP Server receives UDI
and sends ME controller
configuration over HTTPS

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 182
Network Plug and Play – Cisco Cloud Redirect
Master AP
running PnP Cisco Cloud
Agent Redirect Server

Internet PnP Server uses


PnP Server self signed SSL
certificate

DHCP Request

DHCP server Device creates pre-defined cloud redirect server


responds with device name (devicehelper.cisco.com) and resolves for IP
IP, domain name and address
DNS server* Device establishes HTTP request with device serial number (UDI)
communication with
Cloud Redirect Server Cloud redirect server
receives UDI and sends
APIC-EM IP address
PnP Agent initiates HTTP communication with HTTP PnP work request with device serial number (UDI)
the APIC-EM server and sends the device UDI
PnP Agent installs local trustpoint PnP Server receives UDI and
for the server SSL certificate sends server SSL certificate over
HTTPS PnP work request with device serial number (UDI) HTTP
PnP Agent initiates HTTPS communication
with the server and sends the device UDI
PnP Server receives UDI and
sends ME controller configuration
over HTTPS

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 183
Outdoor Deployment with Mobility Express

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 184
Step 4: Day 1 & Day 2

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 185
Best Practices
Infrastructure Apple
Enable High Availability (AP and Client SSO) FastLane
Enable AP Failover Priority
Enable AP Multicast Mode
AVC
Enable Multicast VLAN
Enable Pre-image download
Enable AVC AP
Enable NetFlow Groups
Enable Local Profiling (DHCP and HTTP)
Enable NTP
RF
Modify the AP Re-transmit Parameters
Groups
Enable Fast SSID change
Enable Per-user BW contracts
Client
Enable Multicast Mobility
SSO
Enable Client Load balancing
Disable Aironet IE
FlexConnect Groups and Smart AP Upgrade

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 187
Wireless/ RF Less than
4 SSIDs
Disable 802.11b data rates
Restrict number of WLAN below 4
RRM
Channel bonding – 40 or 80 MHz
Enable Band Select
Use RF Profiles and AP Groups CleanAir

Enable RRM (DCA & TPC) to be auto


Enable Auto-RF group leader selection RF
Groups
Enable Cisco CleanAir and EDRRM
Enable Noise &Rogue Monitoring on all channels Enable
Enable DFS channels DFS

Avoid Cisco AP Load

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 188
Mesh Set BGN

Set Bridge Group Name


Set Preferred Parent Set PP

Multiple Root APs in each BGN


Set Backhaul rate to "Auto" Multiple
RAP
Set Backhaul Channel Width to 40/80 MHz
Backhaul Link SNR > 25 dBm Backhaul
Link
Avoid DFS channels for Backhaul (FCC only) – If possible SNR>25
External RADIUS server for Mesh MAC Authentication
Backhaul
Enable IDS rate: Auto
Enable EAP Mesh Security Mode

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 189
Security dot1x
SSID
Enable 802.1x and WPA/WPA2 on WLAN
Enable 802.1x authentication for AP AP dot1x
Supplicant
Change advance EAP timers
Enable SSH and disable telnet
Disable Management Over Wireless Disable
Telnet
Disable WiFi Direct
Secure Web Access (HTTPS)
https web
Enable User Policies acces
Enable Client exclusion policies
Enable rogue policies and Rogue Detection RSSI User
Strong password Policies policies
Enable IDS
BYOD Timers

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 190
Make it Easy Make
Makeit work
it Work Make
Make itit perform
Perform
Enable High Availability (AP and Client SSO)
Enable AP Failover Priority Enable 802.1x and WPA/WPA2 on WLAN
Enable AP Multicast Mode Enable 802.1x authentication for AP
Enable Multicast VLAN Change advance EAP timers
Enable SSH and disable telnet
INFRASTRUCTURE

SECURITY
Enable Pre-image download
Enable AVC Disable Management Over Wireless
Enable NetFlow Disable WiFi Direct
Enable Local Profiling (DHCP and HTTP) Secure Web Access (HTTPS)
Enable NTP Enable User Policies
Modify the AP Re-transmit Parameters Enable Client exclusion policies
Enable Fast SSID change Enable rogue policies and Rogue Detection RSSI
Enable Per-user BW contracts Strong password Policies
Enable Multicast Mobility Enable IDS
Enable Client Load balancing BYOD Timers
Disable Aironet IE
FlexConnect Groups and Smart AP Upgrade Disable 802.11b data rates
Restrict number of WLAN below 4
Set Bridge Group Name Enable channel bonding – 40 or 80 MHz

WIRELESS / RF
Set Preferred Parent Enable Band Select
Multiple Root APs in each BGN Use RF Profiles and AP Groups
Set Backhaul rate to "Auto"
MESH

Enable RRM (DCA & TPC) to be auto


Set Backhaul Channel Width to 40/80 MHz Enable Auto-RF group leader selection
Backhaul Link SNR > 25 dBm Enable Cisco CleanAir and EDRRM
Avoid DFS channels for Backhaul (FCC only) Enable Noise &Rogue Monitoring on all channels
External RADIUS server for Mesh MAC Authentication Enable DFS channels
Enable IDS Avoid Cisco AP Load
Enable EAP Mesh Security Mode
#CLUS © 2018 Cisco and/or its affiliates. All rights reserved.
http://www.cisco.com/c/en/us/td/docs/wireless/technology/wlc/82463-wlc-config-best-practice.html Cisco Public 191
Backup –
Configurations
Mesh : Set Bridge Group Name ( BGN )
• Wireless  All APs  AP Name  Mesh  Bridge Group Name

Enables mesh APs to join pre-determined Bridge Groups using the BGN
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 193
Mesh : Set Preferred Parent
• Wireless  All APs  AP Name  Mesh  Preferred Parent

Ability to influence how the mesh network is created


#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 194
Mesh : Multiple Root APs in each BGN
• Wireless  All APs  AP Name  Mesh

Provides redundancy if a Root AP goes offline


#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 195
Mesh : Set Backhaul Rate to “auto”
• Wireless  All APs  AP Name  Mesh  Bridge Data Rate

Allow the backhaul data rate to change dynamically as the quality of the link fluctuates
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 196
Mesh : Set Backhaul Channel width to 40/80
MHz

Wireless  Access Points  Radios  802.11a/n/ac  Configure

Maximize backhaul speeds


#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 197
Mesh : Backhaul Link SNR > 25
‘show mesh path’ CLI states the Link-SNR

To avoid poor backhaul links that lead to poor overall mesh performance
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 198
Mesh : Avoid DFS channels for Backhaul
• Wireless  Access Points  Radios  802.11a/n/ac  Configure

Minimizes the number of backhaul channel changes due to radar events


Only applies to US Regulatory Domain
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 199
Mesh : External RADIUS server for Mesh MAC
Authentication
• Wireless  Mesh

Improves the ease of manageability and debugging


#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 200
Mesh : Enable Mesh IDS
• Wireless  Mesh

Additional security by monitoring the wireless network for un-wanted rogue


access points or potential wireless attackers
#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 201
Mesh : Enable EAP Mesh Security Mode
• Wireless  Mesh

More security method for encrypting wireless data


#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 202
Important Links for Outdoor WLAN
• Cisco Wireless Best Practices:
http://www.cisco.com/c/en/us/td/docs/wireless/technology/wlc/8-0/82463-wlc-config-best-
practice.html
• Mesh Deployment Guide: https://www.cisco.com/c/en/us/td/docs/wireless/technology/mesh/8-
6/b_mesh_86.html
• AP1532 Deployment Guide:
http://www.cisco.com/en/US/docs/wireless/controller/technotes/7.6/b_1532_dg.html
• AP1560 Guide: http://www.cisco.com/c/en/us/products/collateral/wireless/aironet-1560-
series/datasheet-c78-737416.html
• AP1530 Hardware Installation Guide
http://www.cisco.com/c/en/us/td/docs/wireless/access_point/1530/installation/guide/1530hig.html
• AP1570 Hardware Installation Guide
http://www.cisco.com/c/en/us/td/docs/wireless/access_point/1570/installation/guide/1570hig.html
• AP1530 Ordering Guide http://www.cisco.com/c/en/us/products/collateral/wireless/aironet-1530-
series/guide-c07-729725.html

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 203
Complete your online session evaluation

Give us your feedback to be entered


into a Daily Survey Drawing.
Complete your session surveys through
the Cisco Live mobile app or on
www.CiscoLive.com/us.
Don’t forget: Cisco Live sessions will be available for viewing
on demand after the event at www.CiscoLive.com/Online.

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 204
Continue
your Demos in
the Cisco
Walk-in
self-paced
Meet the
engineer
Related
sessions
education campus labs 1:1
meetings

#CLUS BRKEWN-2027 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 205
Thank you

#CLUS
#CLUS

You might also like