Control-plane-Threshold

(Aruba3600) #configure t
Enter Configuration commands, one per line. End with CNTL/Z

(Aruba3600) (config) #threshold ?
controlpath-cpu         Alert threshold for ControlPath CPU
controlpath-memory      Alert threshold for ControlPath Memory consumption
datapath-cpu            Alert threshold for Datapath CPU
no-of-APs               Alert threshold for No of APs connected
no-of-locals            Alert threshold for No of locals
total-tunnel-capacity   Alert threshold for Total Tunnel capacity
user-capacity           Alert threshold for USER capacity

(Aruba3600) (config) #threshold user-capacity?
user-capacity           Alert threshold for USER capacity

(Aruba3600) (config) #threshold user-capacity ?
<value>                 Threshold value in percentage, exceeding this will
                        send snmp trap and syslog alert

(Aruba3600) (config) #threshold user-capacity

If this threshold is exceeded then subsequently drops below the 90% threshold, the controller would send the
following two syslog error messages.
May 14 13:13:58 nanny[1393]: <399816> <ERRS> |nanny| Resource 'Control-Path Memory' has gone
above 90% threshold, value : 93
May 14 13:16:58 nanny[1393]: <399816> <ERRS> |nanny| Resource 'Control-Path Memory' has come
below 90% threshold, value : 87

AOS: MC setup 初期セットアップ1

1. Consoleにアクセスする。初期セットアップ

a. Console port経由でアクセス
b. もしくはケーブルで接続して、自動でDHCPが払い出される。Controllerに172.16.0.254にアクセスする。

2. 時間セット
=================================================================================
1. Consoleにアクセスする。初期セットアップ
=================================================================================
***************** Welcome to the Aruba3600 setup dialog *****************
This dialog will help you to set the basic configuration for the switch.
These settings, except for the Country Code, can later be changed from the
Command Line Interface or Graphical User Interface.


Commands: <Enter> Submit input or use [default value], <ctrl-I> Help
<ctrl-B> Back, <ctrl-F> Forward, <ctrl-A> Line begin, <ctrl-E> Line end
<ctrl-D> Delete, <BackSpace> Delete back, <ctrl-K> Delete to end of line
<ctrl-P> Previous question <ctrl-X> Restart beginning


Enter System name [Aruba3600]:
Enter Switch Role (master|local|standalone|remote-node) [master]:
Enter VLAN 1 interface IP address [172.16.0.254]:
Enter VLAN 1 interface subnet mask [255.255.255.0]:
Enter IP Default gateway [none]: 10.215.200.1
Enter IP Default gateway [none]:
Enter Country code (ISO-3166), <ctrl-I> for supported list: JP3
You have chosen Country code JP3 for Japan (yes|no)?: yes
Enter Time Zone [PST-8:0]: JST+9
Enter Time Zone [PST-8:0]: JST+9:0
Enter Time in UTC [03:57:59]: 12:58:00
Enter Date (MM/DD/YYYY) [6/17/2013]:
Enter Password for admin login (up to 32 chars): ********
Re-type Password for admin login: ********
Enter Password for enable mode (up to 15 chars): ******
Re-type Password for enable mode: ******
Do you wish to shutdown all the ports (yes|no)? [no]:

Current choices are:

System name: Aruba3600
Switch Role: master
VLAN 1 interface IP address: 172.16.0.254
VLAN 1 interface subnet mask: 255.255.255.0
Country code: JP3
Time Zone: JST+9:0
Ports shutdown: no

If you accept the changes the switch will restart!
Type <ctrl-P> to go back and change answer for any question
Do you wish to accept the changes (yes|no)yes
Creating configuration... Done.

System will now restart!


Shutdown processing started
Syncing data...done.
Sending SIGKILL to all processes.
Please stand by while rebooting the system.
0:<7>ide-disk 0.0: shutdown
0:<0>Restarting system.
=================================================================================
step0. 時間セット
=================================================================================
clock timezone JST 9
!
-----------------------------------------------------------
step0. AP設定 コンソールポート
-----------------------------------------------------------
setenv ipaddr 172.16.0.104
setenv netmask 255.255.255.0
setenv gatewayip 172.16.0.254
set serverip 172.16.0.30
set master 172.16.0.30
-----------------------------------------------------------
step0. ControllerのCLIでのAP設定
-----------------------------------------------------------
provision-ap copy-provisioning-params ap-name "RAP-1"
provision-ap installation default
provision-ap ipaddr 172.16.0.104
provision-ap netmask 255.255.255.0
provision-ap gateway 172.16.0.254
provision-ap no external-antenna
provision-ap no usb-dev
provision-ap no usb-dial
provision-ap no usb-init
provision-ap no usb-modeswitch
provision-ap no usb-passwd
provision-ap no usb-tty
provision-ap no usb-type
provision-ap no usb-user
provision-ap no usb-csr
provision-ap master 172.16.0.30
provision-ap server-ip 172.16.0.30
provision-ap ap-group "docomotest"
provision-ap ap-name "RAP-1"
provision-ap no syslocation
provision-ap remote-ap
provision-ap reprovision ap-name "RAP-1"

--------------------------------------------------------------------
Step1: Interface-Setting
--------------------------------------------------------------------
interfaceinterface gigabitethernet 1/3
  switchport mode trunk
!
vlan 1e
interface vlan 1
  ip address 172.16.0.104 255.255.255.0
!
no ip default-gateway
!
ip default-gateway 172.16.0.254
!
interface vlan 1
  no ip address
!Switch IP Address is Modified. Switch should be rebooted now
write memory
relaod
--------------------------------------------------------------------
Step2. Basic Configuration
--------------------------------------------------------------------
control-plane-security
   no cpsec-enable
!
ap-group "default"
 dot11a-radio-profile rp-monitor-a
 dot11g-radio-profile rp-monitor-g
!
web-server profile
   session-timeout 3600
telnet cli
   loginsession timeout 0
!

--------------------------------------------------------------------
Step3. PSK-Configuration
--------------------------------------------------------------------
aaa profile "docomotest"
  initial-role authenticated
  authentication-dot1x "default-psk"
!
wlan ssid-profile "docomotest"
 essid "docomotest"
 wpa-passphrase "1234567890"
 opmode wpa2-psk-aes
!
wlan virtual-ap "docomotest"
 vlan 1
 aaa-profile "docomotest"
 ssid-profile "docomotest"
!
ap-group docomotest
 virtual-ap "docomotest"

----------------------------------
Step4. AP Setup (Campus AP mode)
----------------------------------
!(console)
set master 10.215.200.197
set serverip 10.215.200.197
save
!(MC's CLI)
provision-ap copy-provisioning-params ap-name "6c:f3:7f:c6:ca:d8"
provision-ap master 172.16.0.30
provision-ap server-ip 172.16.0.30
provision-ap ap-group "docomotest"
provision-ap ap-name "RAP-1"
provision-ap reprovision ap-name "6c:f3:7f:c6:ca:d8"
--------------------------------------------------------------------
Step5. AP Setup (Remote AP mode)
--------------------------------------------------------------------
whitelist-db rap add mac-address 6c:f3:7f:c6:ca:d8 ap-group docomotest  ap-name "RAP-1" remote-ip 1.1.1.1
ip local pool VPN 192.168.1.1 192.168.1.100

provision-ap copy-provisioning-params ap-name "6c:f3:7f:c6:ca:d8"
provision-ap master 172.16.0.30
provision-ap server-ip 172.16.0.30
provision-ap ap-group "docomotest"
provision-ap ap-name "RAP-1"
provision-ap remote-ap
provision-ap reprovision ap-name "6c:f3:7f:c6:ca:d8"
----------------------------------
Step6. AP Setup verification
----------------------------------
show ap bss-table
show ap database
show user
!
----------------------------------
Step7. Additional Tuning (GRE mtu setting)
----------------------------------
ap system-profile "RAP"
!   mtu 1400 (RAPの場合はrap-gre-mtu 1400のみでOK）
   telnet
   rap-gre-mtu 1400
!
ap-group docomotest
 ap-system-profile "RAP"
!
----------------------------------
Step8. Additional Tuning (Fair-access or Preferred-access)
----------------------------------
wlan traffic-management-profile "preferred-access"
   shaping-policy preferred-access
!
wlan traffic-management-profile "fair-access"
   shaping-policy fair-access
!
ap-group docomotest
   dot11a-traffic-mgmt-profile "fair-access"
   dot11g-traffic-mgmt-profile "fair-access"
!
ap-group docomotest
   dot11a-traffic-mgmt-profile "preferred-access"
!

--------------------------------------------------------------------
Step9. RF Setting
--------------------------------------------------------------------
rf arm-profile "arm-disable"
   assignment disable
   no scanning
!
rf dot11a-radio-profile "disable"
   no radio-enable
!
rf dot11a-radio-profile "36Ech"
   channel 36E
   tx-power 127
   arm-profile "arm-disable"
!
rf dot11a-radio-profile "52Ech"
   channel 52E
   tx-power 127
   arm-profile "arm-disable"
!
rf dot11a-radio-profile "100Ech"
   channel 52E
   tx-power 127
   arm-profile "arm-disable"
!
rf dot11a-radio-profile "116Ech"
   channel 52E
   tx-power 127
   arm-profile "arm-disable"
!
rf dot11g-radio-profile "disable"
   no radio-enable
!
ap-group docomotest
    dot11a-radio-profile "36Ech"
    dot11g-radio-profile "disable"
!
ap-name "AP-xx"
!   virtual-ap "xxx"
!   dot11a-radio-profile "36Ech"
!   dot11g-radio-profile "11ch"
!   dot11a-radio-profile "disable"
!
-----------------------------------------------------------
Step10. Beamformingのオン・オフ
-----------------------------------------------------------
wlan ht-ssid-profile "default"
!
wlan ht-ssid-profile "BF-off"
   no vht-txbf-explicit-enable
!以下はオフ
wlan ssid-profile "docomotest"
  ht-ssid-profile "BF-off"
!以下はオン
wlan ssid-profile "docomotest"
  ht-ssid-profile "default"
-----------------------------------------------------------
Step11. その他、40MHz、80MHz、802.11acをオフ
-----------------------------------------------------------
wlan ht-ssid-profile "profile-name"
  no 40MHz-enable
  no very-high-throughput-enable
  no 80MHz-enable
  no vht-txbf-explicit-enable

-----------------------------------------------------------
80MHz オフの注意点
-----------------------------------------------------------
＊以下のARM profileでオフにすべき。
＊ht-ssid-profile はあくまで SSID(VAP) ごとの設定を変えるもの。ある SSID だけ no 80MHz にしても、AP としては 80MHz すべてでレーダー検出。
＊その他、RF Domain profileから80MHzを全部削除すると、全部利用できるようになってしまう。
＊show ap bss-table では各 BSSID が 40MHz channel として表示されるが、show ap active でみると、 80MHz channel として表示される(Eがつく)。

 rf arm-profile "arm-disable"
 no 80MHz-support <<<<<<<<<<<<<<<<<<<<<<<<<

show command step by step

============
1. Test1-HW
============
show switches
show master-redundancy
show ip int brie
show license
show vlan mapping
============
control-plane-security no cpsec-enable
---
vlan 10
vlan 20

============
2. WLAN
============
show ap database
show ap config ap-name (AM/AP1/2/3)
show ap config ap-name AP-105 | include LMS
* On each local controllers
show ap essid
show ap bss-table ap-name (AM/AP1/2/3)

============
3. Role
============
show aaa profile
show aaa profile AAA-PSK-VOICE

show aaa derivation-rules
show aaa derivation-rules server-group
============
4. Connections
============
show wlan virtual-ap
show wlan virtual-ap employee-kuro
show vlan mapping  <----- employeeNamedPool

============
5. Roaming
============
aaa user delete all
show user          <----- check for visitor and away
show ip mobility trail

============
6. Guest
============
show mgmt-user <----- guest-provisioning
show ip dhcp database

show wlan virtual <guest vap> <----- Check it's disabled

============
7. RAP
============
show ap database <----- flag with "RC"
show wlan virtual-ap employee-kuro-2 | include Forward  <--- Check-Split-tunnel

============
8. SA
============
show ap ap-group
show ap ap-group ap-name AP-105 | include AP  <-----ap-group Should be AP1

============
9. Default/AP-group
============
show ap ap-group default   <----- check the RF radio profile
show rf dot11a-radio-profile
show rf dot11a-radio-profile rp-monitor-a | include Mode

============
10. MasterRedudancy
============
show vrrp
show switches
show master-redundancy

============
Others
============

logging level debugging
logging level debugging security process authmgr
show logging level verbose
show log errors 50

show ap bss-table
show ap debug system-status ap-name AP105
show ap config ap-name XXXX

show datapath tunnel table
show datapath session table 10.215.1.210

show acl hits
show rights "ROLE"

show vrrp statistics 1
show port status
show aaa authentication-server all

apをap-dataseから消す(how to delete AP from ap-database)

APをDBから消すコマンド---clear gap-db
gap-db                  Clear entries from the global AP database

(Aruba650) #show ap database-summary

AP Database Summary
-------------------
AP Mode              Total Up  Total Down  Total Upgrading*  Total Rebooting*  RAP Up  RAP Down  RAP Upgrading*  RAP Rebooting*
-------              --------  ----------  ----------------  ----------------  ------  --------  --------------  --------------
Access Points        0         0           0                 0                 0       0         0               0
Air Monitors         0         1           0                 0                 0       0         0               0
Wired Access Points  0         0           0                 0                 0       0         0               0
Mesh Portals         0         0           0                 0                 0       0         0               0
Mesh Points          0         0           0                 0                 0       0         0               0
Spectrum Monitors    0         0           0                 0                 0       0         0               0

*Upgrading and Rebooting counts only reflect APs registered on this controller.

Unprovisioned Access Points:0
Duplicated AP Name:0                            

(Aruba650) #show ap database

AP Database
-----------
Name               Group    AP Type  IP Address   Status  Flags  Switch IP
----               -----    -------  ----------   ------  -----  ---------
6c:f3:7f:c5:13:1a  default  RAP-109  172.16.0.11  Down           172.16.0.254

Flags: U = Unprovisioned; N = Duplicate name; G = No such group; L = Unlicensed
       I = Inactive; D = Dirty or no config; E = Regulatory Domain Mismatch
       X = Maintenance Mode; P = PPPoE AP; B = Built-in AP
       R = Remote AP; R- = Remote AP requires Auth; C = Cellular RAP;
       c = CERT-based RAP; 1 = 802.1x authenticated AP; 2 = Using IKE version 2
       u = Custom-Cert RAP
       M = Mesh node; Y = Mesh Recovery

Total APs:1

(Aruba650) # clear gap-db ?
ap-name                 AP name
lms                     Clear all APs associated with an LMS
wired-mac               AP wired MAC address

(Aruba650) # clear gap-db ap-name 6c:f3:7f:c5:13:1a

Aruba 7200 CLI

Aruba 7200 hardware related CLI output
It shows 8 CPU for datapath while 1-7 should be controll-plane

(7210-1) #show datapath  utilization

Datapath Network Processor Utilization
------+---------+---------+----------+
      | Cpu utilization during past  |
  Cpu |  1 Sec     4 Secs    64 Secs |
------+---------+---------+----------+
    8 |      0% |      0% |       0% |
    9 |      0% |      0% |       0% |
   10 |      0% |      0% |       0% |
   11 |      0% |      0% |       0% |
   12 |      0% |      0% |       0% |
   13 |      0% |      0% |       0% |
   14 |      0% |      0% |       0% |
   15 |      0% |      0% |       0% |

(7210-1) #show cpuload current

top2 - 20:13:15 up 70 days, 21:07,  0 users,  load average: 0.01, 0.01, 0.00
Tasks: 150 total,   1 running, 149 sleeping,   0 stopped,   0 zombie
Cpu(s):  0.2%us,  0.3%sy,  0.0%ni, 99.5%id,  0.0%wa,  0.0%hi,  0.0%si,  0.0%st
Mem:   5716160k total,  1055040k used,  4661120k free,     4288k buffers
Swap:        0k total,        0k used,        0k free,   374848k cached

  PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND
 3349 root      20   0  314m 151m 7616 S    4  2.7 839:31.00 fpapps
17479 root      20   0  4288 2880 1856 R    4  0.1   0:00.03 top2
 3259 root      20   0  7488 4736 2624 S    2  0.1  26:31.49 nanny
 3385 root      20   0 12480 7744 4288 S    2  0.1  86:46.00 profmgr
 3474 root      20   0 25152  14m 7616 S    2  0.3 213:54.29 auth
    1 root      20   0  5440 2432 1856 S    0  0.0   0:09.99 init
    2 root      20   0     0    0    0 S    0  0.0   0:00.00 kthreadd
    3 root      RT   0     0    0    0 S    0  0.0   0:00.91 migration/0

(7210-1) # show version
Aruba Operating System Software.
ArubaOS (MODEL: Aruba7210), Version 6.2.1.3
Website: http://www.arubanetworks.com
Copyright (c) 2002-2013, Aruba Networks, Inc.
Compiled on 2013-07-24 at 08:56:36 PDT (build 39155) by p4build

ROM: System Bootstrap, Version CPBoot 1.2.0.9 (build 35873)
Built: 2012-10-24 13:51:09
Built by: p4build@re_client_35873


Switch uptime is 70 days 21 hours 12 minutes 1 seconds
Reboot Cause: User reboot.
Supervisor Card
Processor (XLP416 Rev B1 (Secure Boot) , 800 MHz) with 7382M bytes of memory.
32K bytes of non-volatile configuration memory.
7920M bytes of Supervisor Card system flash.

(7210-1) #show inventory

Supervisor Card slot            : 0
System Serial#                  : BA0001150 (Date:12/16/12)
CPU Card Serial#                : AC49072950 (Date:12/10/12)
CPU Card Assembly#              : 2010151G
CPU Card Revision               : (Rev:03.00)
Interface Card Serial#          : AC500205 (Date:12/15/12)
Interface Card Assembly#        : 2010085E
Interface Card Revision         : (Rev:02.00)
SC Model#                       : Aruba7210
HW MAC Addr                     : 00:1a:1e:00:16:f8 to 00:1a:1e:00:16:100
CPLD Version                    : (Rev: 1.3)
Power Supply 0                  : Present               : No
Power Supply 1                  : Present               : Yes
                                : 12V OK                : Yes
                                : Fan OK                : Yes
                                : Aruba Model No        : 2510057
                                : Vendor &amp; Model No     : QCS DCJ3501-01P
                                : Serial No             : QCS113822PV
                                : MFG Date              : 9/24/11
                                : Output 1 Config       : 12V 350W
                                : Input Min             : 90V AC
                                : Input Max             : 264V AC
Main Board Temperatures         :
                                : U24 - Local Temp      33 C (shadow of XLP heatsink)
                                : Q1  - Remote 1 Temp   38 C (shadow of VRM, VDD_CPU)
                                : Q2  - Remote 2 Temp   37 C (shadow of VRM, VDD_SOC)
                                : U44 - Local Temp      28 C (shadow of DPI connector)
                                : U29  - Remote 1 Temp  34 C (XLP die temperature)
                                : Q36  - Remote 2 Temp  31 C (shadow of 98X1422)
                                : J2  - DDR A Temp      28 C (DDR3 A temp)
                                : J4  - DDR B Temp      30 C (DDR3 B temp)
                                : J1  - DDR C Temp      28 C (DDR3 C temp)
                                : J3  - DDR D Temp      31 C (DDR3 D temp)
                                : Port 0 Temp           41 C (1G PHY temp)
                                : Port 1 Temp           41 C (1G PHY temp)
Interface Board Temperatures    :
                                : U21 - Local Temp      31 C (shadow of port 1 RJ45)
                                : Q4 - Remote 1 Temp    31 C (shadow of 88E1543)
                                : Q3 - Remote 2 Temp    38 C (shadow of 88X2140)
Fan  0                          : 8926 rpm (5.473 V),Speed Low
Fan  1                          : 8977 rpm (5.428 V),Speed Low
Fan  2                          : 9029 rpm (5.405 V),Speed Low
Fan  3                          : 8926 rpm (5.585 V),Speed Low
Main Board Voltages             :
ispPAC_POWR1014A_A              :
                                : 1V2                  1.20V sense 1.194 V
                                : VDD SOC              1.05V sense 0.906 V
                                : VCC IOBD 1V5         1.50V sense 1.492 V
                                : DDR3BD_VTT           0.75V sense 0.732 V
                                : VCC 1A               1.00V sense 1.006 V
                                : IV8_DIGITAL          1.80V sense 1.812 V
                                : 3V3_MAIN             3.30V sense 3.270 V
                                : VCC1                 1.00V sense 1.002 V
                                : VCC25                2.50V sense 2.538 V
                                : 3V3 SB               3.30V sense 3.276 V
ispPAC_POWR1014A_B              :
                                : VDD                  1.04V sense 0.780 V
                                : VCC IOAC 1V5         1.50V sense 1.506 V
                                : DDR3AC_VTT           0.75V sense 0.740 V
                                : VDD_SRAM             1.00V sense 1.006 V
                                : VCC1B                1.00V sense 1.016 V
                                : 1V8_ANALOG           1.80V sense 1.824 V
                                : 1V8                  1.80V sense 1.804 V
                                : VDDIO12_XAUI         1.20V sense 1.200 V
                                : 5V                   5.00V sense 4.986 V
Interface Board Voltages        :
ispPAC_POWR6AT6                 :
                                : VCC33                3.30V sense 3.372 V
                                : VCC 18               1.80V sense 1.792 V
                                : VCC1                 1.00V sense 1.008 V
                                : VCC12                1.20V sense 1.218 V
                                : VCC12-DVDD           1.20V sense 1.222 V
                                : VCC9                 0.90V sense 0.928 V