greeting

Written by: Makatsu Maeda Macnica

In the past, I wrote 11 "wireless LAN columns" for our company LANchBOXonline from autumn 2004 to spring 2007. This is the first appearance in a long time. Since then, wireless LAN has become an indispensable technology in our lives due to the recent spread of smart devices such as smartphones and tablets. This column will provide information related to wireless LAN, focusing on Aruba Networks products that we handle. I hope that the content of this column will be of some help to those who are considering or are proposing to introduce wireless LAN in their companies.

By the way, Aruba Networks products are overwhelmingly thought of as a combination of wireless LAN controllers and access points (hereafter referred to as APs) to operate large-scale APs. There is a solution called 'Instant AP' that is suitable for environments with many branch offices.

Instant AP, as the name suggests, is an out-of-the-box, hassle-free AP. Its feature is that the AP has a built-in "virtual controller", so it is possible to realize cooperation between APs without a controller. In addition, a network group of Instant APs is called a cluster, and within a cluster, there are roles for a "master" machine that controls and operates multiple APs, and a "slave" machine that operates under the control of the master machine. is shared.

Instant OS version 3.4 and later supports up to 2,000 users per cluster. (up to 256 users if the cluster includes IAP-9x)

Benefits of Instant APs

• ●Small start is possible at low cost
• Instant AP is a system that does not require a physical controller, so it is very cheap. You can start with just one. From the GUI screen, the setting is completed in a few minutes. Also, no AP license is required.

• ●Collective management of APs and users with a virtual controller
• The "virtual controller" of the process running on the Instant AP centrally manages the AP status, including AP settings, software management, communication status on the AP, and CPU usage. In addition, the wireless LAN client connection processing is distributed by each Instant AP, so it is a unique form of cooperative distribution that other companies do not have.
   
  For example, connecting an Instant AP to the same segment automatically copies and synchronizes the settings from the "virtual controller". Also, if the running Instant OS version is different, the OS will be synchronized. However, since the "virtual controller" manages all client information and AP information, we recommend limiting the number of Instant APs connected to one VLAN to 16 or less.
   
  If the Master Instant AP of the “Virtual Controller” goes down, the Slave Instant AP will be promoted to Master to keep the system running.

• ●Ideal for multipoint wireless LAN construction
• If there are 50 bases with 2 or 3 APs, it is possible to construct each base with Instant AP wireless LAN. So far, we have a lot of experience in centrally managed configurations with wireless LAN controllers, but multi-point configurations can be built cheaply considering the equipment and licenses for wireless LAN controllers. By adding the optional AirWave, it is possible to collectively manage settings and monitoring. I will introduce AirWave in the next column.

• ●Migration to controller type AP is also OK
• By changing the setting of Instant AP, it can be converted to controller type AP. If the number of APs increases, it can be shifted to a wireless LAN controller type system, and the system can be expanded by "starting small and growing big".

Also provides authentication server function

Instant AP is a very multi-functional product that cannot be said in a word compared to general autonomous AP called “FAT”. Equipped with major wireless control (ex. Client Match) functions, firewall functions, and IDS/IDP functions provided by Aruba's wireless LAN controllers, it also provides web authentication for guest access.

As a function that autonomous AP does not (cannot), it is possible not only to cooperate with authentication server but also to terminate with local DB in IEEE802.1x authentication, which has become a security standard for corporate wireless LAN systems. . This makes it possible to achieve IEEE802.1x authentication with Instant AP alone without requiring an authentication server.

SSID provided by each AP in the cluster can be set

From the latest Instant OS 4.1 (as of July 1, 2014), a function called AP Zone (hereafter referred to as zone) has been added. This "zone" function is a cluster of Instant APs that could only be set with the same SSID within one cluster so far, but it is possible to set a specific Instant AP by specifying the SSID.

As a usage scene, you can use the SSID to be used properly depending on the AP installation location. For example, when trying to provide a service for guests, set the SSID for guest access: guest only to the AP installed in the "lobby" and limit the use of guest access to "lobby only". becomes possible. In office areas that are usually used for business, it is possible to use SSIDs only for employees.

Although it is a multi-functional AP even if it is called instant, it has a built-in "virtual controller",

Instant AP is a product that is easy to install and operate. It is an optimal solution that balances cost and operation for small and medium-sized sites and multi-site deployments where there are no local IT specialists.

Finally, Instant Training (content in English) is available free of charge on the manufacturer's site. If you are interested, please visit and experience the world of Instant AP. (As of March 1, 2015)

http://www.arubanetworks.com/products/sme/training/instant-training/