86

Technology to improve Enterprise Spectrum Managementd2zmdbbm9feqrf.cloudfront.net/2012/usa/pdf/BRKEWN … ·  · 2012-06-15Technology to improve Enterprise Spectrum Management BRKEWN-3010

Embed Size (px)

Citation preview

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

Understanding and Deploying CleanAir Technology to improve Enterprise Spectrum Management BRKEWN-3010 Jim Florwick – WNBU-TME

2

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

Session Objectives

At the end of the session, the participants should be able to:

‒ Articulate why interference matters

‒ Understand the importance of CCA, and Duty cycle as it pertains to cell capacity

‒ Understand the various CleanAir modes of operation as design components

‒ Articulate technical Details of the Cisco Solution regarding

Interference Detection

Interference Mitigation

CleanAir Monitoring

Spectrum Expert mode – what, why, when, and how

‒ Configuration essentials and Design Guidance

3

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

Housekeeping

We value your feedback- don't forget to complete your online session evaluations after each session & the Overall Conference Evaluation which will be available online from Thursday

Visit the World of Solutions and Meet the Engineer

Visit the Cisco Store to purchase your recommended readings

Please switch off your mobile phones

After the event don’t forget to visit Cisco Live Virtual: www.ciscolivevirtual.com

4

Why Does Interference Matter

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

The Impact of a Crowded Spectrum Performance at Risk in Unprotected Networks

6

Throughput Reduction

Interference Type Near (25 ft)

Far (75 ft)

2.4 or 5 GHz Cordless Phones 100% 100%

Video Camera 100% 57%

Wi-Fi (busy neighbor)

90% 75%

Microwave Oven 63% 53%

Bluetooth Headset 20% 17%

DECT Phone 18% 10%

Source: FarPoint Group

End User Impact

Reduced network capacity and coverage

Poor quality voice and video

Potential complete link failure

IT Manager Impact

Potential security breaches

Support calls

Increased cost of operation

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

How Does Interference Impact Wi-Fi? 802.11a/b/g/n - CSMA/CA or LBT (listen Before Talk)

Collision Avoidance – 802.11 very very polite – by design

‒ CCA

‒ Collisions

‒ SNR

CCA – Clear Channel Assessment

‒ ED – quick – low power - prone to false positives

‒ Preamble – takes time – power – less prone to false

CCA threshold for 802.11b/g is -65 dBm

CCA for 802.11a is different -65 dBm ED, if true then 20 dB lower for Preamble interrogation = -85 dBm

Quite common to use -85 dBm for all CCA now

Separating the FUD from the Fact’s

7

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

CCA Blocked or High

802.11n traffic

Video Signal

Video Camera Duty Cycle 90-100%

8

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

How Does Interference Impact Wi-Fi? Collisions - Non Wi-Fi devices do not participate in our CA mechanism – they have their own

No respect/understanding for Wi-Fi – results in:

‒ Corrupted packets

‒ Increased retransmissions

‒ Increased Duty Cycle

‒ Less available bandwidth

SNR – Signal to Noise ratio

Separating the FUD from the Fact’s

High SNR Low SNR

9

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

802.11 and Duty Cycle – Channel Utilization

802.11 can only do two things in response to congestion

‒ Retransmit a packet

‒ Rate shift

Duty Cycle of interference is disproportionate to channel time available – duty cycle + responding retries = total impact

Busy network – less interference tolerance

Less busy – might not even notice low levels of interference

Bandwidth is like Money – the more you get the more you spend

Nobody cares about spectrum, until they run out….

10

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

Spectrum is a Shared Finite Resource

CCK DSSS OFDM

0

2000

4000

6000

8000

10000

12000

14000

16000

18000

20000

1 2 5.5 11 6 12 24 36 48 54 130 300

64 Byte

128 Byte

256 Byte

512 Byte

1024 Byte

2048 Bytes

Time/µS

Mbps

Frame Size/Bytes

Spectrum is a Shared Finite Resource

Understand Protocol Selection 802.11 b/g/a/n and Duty Cycle—Important? Why?

11

Cisco CleanAir – and Non Wi-Fi Interference Detection

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

Any Cisco Access Point Already Sees and Reports Noise and Interference Per Channel

In Wi-Fi Speak – •Noise is anything that is not Wi-Fi •Interference is Wi-Fi that is not ours

13

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

Wi-Fi and Spectrum Knowledge – Why is Silicon Important?

A Wi-Fi chip is a communications processor – a MODEM

It only knows

‒ Energy that can be demodulated = Wi-Fi

‒ Energy that can not be demodulated = Noise

Noise is complicated –

‒ Collisions, fragments, corruption

‒ Wi-Fi that is below sensitivity threshold of the receiver

‒ As well as Non Wi-Fi sources

Peaks in Wi-Fi activity can cause all of the above to occur and Wi-Fi is bursty

14

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

Accuracy Counts – Starts at the Sensor Everybody claiming they have SI (Spectrum Intelligence) these days Claim Parity with Cisco CleanAir (the mark to beat I guess) All Access points supported! (not really) Good Enough! CleanAir is baked into the chip – on Purpose

Cognio Acquisition Oct. 2007

Cognio in the market for 3 years – 5 Million cards sold

Accuracy in tough environments the cornerstone of value

Well aware of the problem, and the solution

15

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

The CleanAir AP - SAgE Built into the silicon of the Wi-Fi chip is an additional 500K logic gates that house

the SAgE logic.

SAgE is the spectrum analyzer that was used on the Spectrum Expert Cards (Spectrum Analysis Engine)

Controlling the SAgE hardware is SensorD – where all measurements are performed and gathered

SensorD does all classification of devices and calculations required to populate upstream information stores and handles interfacing to CAPWAP

Information passed from the AP to controllers is minimal. No off platform calculations are performed: it all happens on the AP

16

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

100

35

30

40

65

20

Step1– CleanAir and SAgE Employs a 2 step process

‒ Identify “interesting Spectrum”

‒ Classify and measure “Unique” transmitters

Step 1 - Identifying Interesting Spectrum ‒ Need to be able to examine every wiggle and wave crossing the antenna’s

Parallel operation – SAgE must be implemented Parallel with the modem behind the Radio

‒ Must not interfere with Client Traffic – No performance impact allowed Wi-Fi Arbitration – accurately detect if energy is Wi-Fi packet and drop from SAgE processing

‒ All Spectrum that is not traffic bearing is passed to SAgE in 2 MB chunks for examination

‒ SAgE quickly indexes waveforms – and lists what it thinks for further processing in DAvE

17

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

Step 2 – DAvE

CCB

Memory Arbitration (6)

RegI/F

Pulse Detect

TimerRadio Events

DMA(4 chan)

DAvE

DAvE clk

SAgE

STATS

FFT Stats (256)

Channel Stats (32)

Window

I/Q correction

FFT

I 2 + Q2

DC/Spur correction

10log()

Spectrum Analyzer (SA)

DC(tim

e domain)

Packing

Snapshot Buffer (SB)

...

triggers

IRQ Ctrl

...

irq

FE

FE

FE

FE

Radio

FilterFilter

FilterFilter

AGC

Cal

Select

CRIM

TDPD

GBUS

DDR

Debug

POST

Other Radio Tx (to 3rd Monitor Radio)

ADC

Once indexed samples are collected – they are passed for post processing in the DAvE

Index from SAgE is instruction to DAvE on what we think is there

DAvE (DSP accelerator Vector Engine) builds soft modems to interrogate the sample and positively classify the devices

The output from DAvE allows isolation of each individual interferer

Isolating each interferer allows Duty Cycle for each to be calculated individually – and makes a Severity metric possible as well as collecting logical information like MAC addresses for BT or DECT, or even Video Sync frames

DAvE – gives us PMAC – (covered later)

18

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public 19

Troubleshooting Workflow Response A: CleanAir Technology

Response B: Software-only Solution

Event: Pair of BlueTooth headsets, DECT Cordless Phone

Detect presence of interference Three unique sources detected by all APs

Possibly one – perhaps two device types detected – FH general tag

Classify source of interference Bluetooth 1 and 2, and DECT phone 1 all uniquely identified

Inability to differentiate between multiple sources of interference

Correlate interference events across APs

Interference correlated across all APs into a single locatable event for each

None – seen as unique event by each AP –and reported as such to system

Assess impact to AP and network Severity and impact of each interferer measured

Total Interference measured only

Alert to IT Intelligent alert on sources and impact One alert per AP on “interference detect”

Physically locate devices Interferers precisely located on floor map Attempting to locate varies with complexity – nearest AP common

Mitigate impact of interference Intelligent and automatic channel change – integrated with RRM

Manual changes based on limited data – or reliance on Noise only

Air Quality Report System-wide view of Wi-Fi health by AP None

CleanAir Technical Details – How’s This Work?

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

CleanAir System Map CleanAir information

can be viewed at the AP level

A CleanAir AP and a WLC form the base system – AQ and Interference data displayed in real time

NCS/WCS and MSE add context and actionable information

AP

Radio x 2

sensord

SHIM

WLC

Measurements

ConfigSAgE

Key:

IOS

MSEWCS

NSI

CAPWAP

NMSP

SOAP + SNMP (traps)

SNMP

Protocols

SE

AQ IDR

IDR AQ

System Wide Integration allows for useful information to be shared and acted upon

NCS History

21

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

CleanAir Specific Acronyms

AQI – Air Quality Index – also seen as AQ

IDR – Interference Device Report

PMAC – Pseudo MAC

Merge – Correlation of IDR’s based on PMAC

ZOI – Zone of Impact

LMAP – Local Mode AP – AP serving clients

MMAP – Monitor Mode AP – AP scanning all bands

22

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

Key Components Interaction

Information is driven in two ways

‒AQI – Air Quality index reporting

‒IDR – Interference device report

Air Quality – Is derived by the AP’s, Stored on WLC, and polled by WCS

Interference Device Reports – are reported to WLC

‒WLC will consolidate/merge multiple IDR’s from attached AP’s

‒Keep a limited Database (single reporting period)

‒Forward NMSP notification message with IDR payload to MSE

23

AirQuality – in Depth

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

AirQuality Index - AQI

Air Quality is a measurement of non-wifi and adjacent channel interference

All Individual devices when Classified are assigned a Severity Value

Air Quality is a measure of all Devices/Severities within a Radio, Floor, Building, or Campus

Good

Bad

25

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public 26

AirQuality – System Wide

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

Air Quality and Severity

For each unique Classified Device – a Severity Value is calculated per Radio

Severity of 0 is not Severe – a Severity of 100 is very severe.

Severity is a local opinion of the reporting AP

The type of device, Duty Cycle (persistence) and Power as measured by the AP.

For the same device – severity will differ on each reporting AP because of the AP’s RF relationship to that device.

100

63

35

97

90

20

27

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

Supported Interferers Cisco Unified Wireless Network 7.0 Release

2.4 GHz only

‒Bluetooth Link

‒Bluetooth Discovery

‒802.11FH

‒Microwave Oven

‒Industrial wireless/802.15.4

‒Xbox

5 GHz only

‒Radar

‒WiMAX Mobile

‒WiMAX Fixed

2.4 or 5 GHz

‒Jammer

‒WiFi Inverted

‒WiFi Invalid Channel

‒Continuous Transmitter

‒Video Camera

‒SuperAG

‒Canopy

‒Other (i.e. unclassified devices)

‒TDD Transmitter

‒DECT-like Phone

Definite Security Threat Devices Potential Security Threat Devices Performance Impacting Devices

1. Classifiers are expandable over time with software upgrade. 2. All third party trademarks are the property of their respective owners.

28

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

AirQuality and Severity

Severity is used to understand the potential impact to a Wi-Fi network

The RSSI at the AP for this interferer (-78) is well below CCA threshold (Clear Channel Assessment)

Even with duty cycle of 100% - the severity here is 17 – if it was closer to us, the severity would be much higher

29

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

AirQuality and Severity Severity is calculated for a single unique device

All devices affecting a radio/channel are added together and subtracted from Air Quality for that radio/ served channel

Separate AQ metrics exist for each band (2.4 and 5 GHz)

AirQuality is observable at the Radio/channel level, or averaged together for a Floor, Building, Campus in a hierarchical fashion.

2 8 4 + + = 14 =

AirQuality Index : 86

30

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

AQ Detail AP manages AQI data Averaging period is decided by

WCS/NCS/WLC Configured on AP by WLC Default AQ Averaging periods

are ‒ 15 min. default (up to 1 hour) ‒ Rapid Update Mode – 30 seconds

AP-SensorD reports AQ information every 15 seconds to IOS

SensorD

IOS

WLC

WCS

CleanAir AP 15 sec.

Normal -15 min. Rapid – 30 sec.

Normal -15 min. Rapid – 30 sec.

CleanAir AQI

31

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

AQI In-Depth Each AQ report contains the average, and the minimum

observed AQ during the period

Each CleanAir Radio sends AQ reports independently to the WLC for the channel it is serving (15 Minutes by default) or all channels if in Monitor Mode (MMAP)

WLC Maintains last normal AQ report for each radio until update is received

WCS polls each WLC at predetermined (normal or rapid) intervals (Normal 15 minutes, Rapid 30 second)

32

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

AQI Summary

AQ reports drive the AQI

AQ is good at 100 and bad at 0

ED-RRM feature is driven by AQ directly on the AP – the controller and RRM are aware, and updated accordingly

Air Quality is a measure of NON Wi-Fi interference and Adjacent Channel Wi-Fi only

All on channel Wi-Fi is monitored by the Wi-Fi chip, CleanAir/SAgE is locked out.

33

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

Mitigation - ED-RRM Use Case

The AP reacts almost instantly (within 30 seconds) Clients that have decent roaming capabilities will reconnect ED-RRM AQI thresholds are:

‒ Low – 35

‒ Medium (default) – 50

‒ High – 60

‒ Custom- like it says (but be careful here)

Video camera produces 100% DC If seen at an AP above CCA threshold the AP will stop beaconing, clients will not attempt to associate

34

IDR – Interference Device Reports The Other Stuff We Care About

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

Interference Device Report IDR and the AP

IDR’s are reports of devices classified by SAgE Top 10, by severity are reported

to WLC A Security IDR will always be

reported regardless of severity If multiple Security IDR’s then

ordered by severity IDR up/down reporting is near

real time AP tracks all IDR’s not reported

to WLC

TYPE SEV WLC SEC 1 * INT 20 * INT 9 * INT 2 * INT 2 * INT 1 * INT 1 * INT 1 * INT 1 * INT 1 * INT 1 INT 1 INT 1

SensorD

IOS

WLC

CleanAir AP

36

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

Parameter Unit Notes

Device ID The number uniquely identifies interference device for the specific radio.

Class Type device class type

Event Type Up, Down, Update

Radio Band ID 1 = 2.4 GHz, 2 = 5 GHz, 4 = 4.9 GHz

Timestamp initial device detection time

Severity Index % 1 – 100, 0x0 is reserved for undefined/hidden severity

Detected Chanls Bitmap support for detection on multiple channels within the same radio band

Duty Cycle 1-100%

Tx Power (RSSI) dBm

Device Signature Parameter represents either unique device MAC address or device PMAC signature

Interference Device Report Message Format

37

Merging and PMAC The Secret Sauce – and the Key Differentiator

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

Multiple AP’s = Multiple Sensors

We see multiple AP tags showing the detection of DECT and the corresponding RSSI. But which ones are really the same device?

39

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

IDR In-Depth – The AP - PMAC

Pseudo – MAC applied to analog device signatures

PMAC will never calculate exactly the same on all AP’s detecting the same device – but rather similar

‒ At a minimum – RSSI will be different

PMAC will change overtime for a given device

‒Battery operated devices – voltage drop – temp variations

‒Measurement accuracy – or inaccuracy

40

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

WLC Merging – and PMAC “The Cluster”

IDR-DECT – ap1

IDR-DECT – ap2

IDR-DECT – ap3

Merged IDR = DECT – AP1 (cluster center), AP2, AP3

RF Channel “6” RF Channel “1”

RF Channel “11”

AP-1

AP-2

2.4 GHz Cordless

41

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

PMAC Merge

•Once the PMAC Signatures are merged – we can identify which AP’s are hearing the same device •Notice the Cluster Center – this is the closest AP to the device

42

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

WLC and PMAC Merging

WLC performs comparison function on received IDR’s PMAC

WLC can merge devices ONLY for AP’s physically connected to it

No Location is performed on WLC merged interferers

The result of a WLC merge is forwarded to the MSE (If present) along with all of the supporting IDR’s

43

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

Location – How’s that Work? Radio Location at the simplest level is done by measuring the signal strength

of a single transmitter from enough locations to get a fix Need to know a couple of things though –

‒ Initial power of the transmitter

‒ Obstacles, introducing path loss in-between sender and receiver

‒ Accuracy/calibration of receivers being used

In Wi-Fi, Clients probe – and AP’s hear them and log their MAC address and RSSI

Non-Wi-Fi interference may or may not have a unique ID ‒ If It does – it is not a Wi-Fi MAC (DECT, BT examples)

‒ So, How do you know if it’s the same device on all reporting AP’s?

PMAC – a product of the DAvE

44

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

Location – Why Do I Care? An Interference source with a high Duty Cycle (80%) and an RSSI of

-90 dBm = I could care less Move that closer to my AP though – and I start to care a lot Understanding the impact of interference then requires “Context”

45

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

PMAC Summary

PMAC is calculated on all individual IDR’s at the receiving AP

Allows us to positively identify a single source interference seen by multiple sensors

Basis for Convergence – 1 device, 1 report

Location – positively identify a single transmitter, and collect multiple samples for location

46

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

The MSE

All IDR’s received by a WLC are sent to MSE via NMSP notify with IDR payload

NMSP message includes the merged IDR and the individual IDR’s used for that conclusion

IDR’s are re-merged at the MSE, this accommodates multiple WLC systems

A tracked Interferer is equal to a client for CAS license purpose – each active merged interferer will consume 1 seat

47

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

MSE Merging – LMAP X-WLC IDR-DECT – ap1

IDR-DECT – ap2

IDR-DECT – ap3

Merged IDR = DECT – AP3 (cluster center), AP2, AP3

RF Channel “6” RF Channel “1”

RF Channel “11” 2.4 GHz Cordless

AP-1

AP-2

AP-1

AP-2

IDR-DECT – ap4

IDR-DECT – ap5

IDR-DECT – ap6

Merged IDR = DECT – AP4 (cluster center), AP5, AP6

48

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

MSE – WLC Merging and Location

MSE and the WLC rely 1st on RF Neighbor lists to establish spatial probability in a merge

WLC only see’s associated AP’s, has no network map

MSE has view of entire network – and location/Context engine

LMAP AP’s are active and send neighbor messages as part of normal RRM operation

Changing Neighbor message defaults will affect merging

MMAP AP’s are passive devices and do not send neighbor messages

49

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

PDA – Use Case

50

Microwave Oven detected Channel 11 – highest Impact. PDA logs the device for this AP.

A CM bias is added to this AP’s channel 11 only

The bias works in normal DCA operations to steer the AP away from channel 11 – it does not prevent the AP from re-selecting this channel

AP remembers this bias for 7 days, which is re-set if the device is seen again within that period

If DCA determines that the affected AP is best on channel 11 it will be assigned

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

WLC GUI - Wireless=>802.11a/b=>RRM=>DCA

WCS – Configure=>controllers=>802.11a/b=>RRM=>DCA

Enabled Per Band Same on NCS or WLC

PDA - Configuration

51

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

NEW! - for Release 7.2

PDA information can be propagated through RRM to legacy AP’s!

Selecting PD Propagation, allows sharing of information with Non-CleanAir AP’s through the neighbor list

52

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

PDA Operation If channel change is caused by PDA event – it will be logged in WCS/NCS – Monitor=>RRM

PDA event is viewable on

WLC=>wireless=>Access Points=>Radios=>802.11a/b=>CleanAir RRM

Only available with full LMAP deployment

Microwave Oven, Video Camera, Canopy, Fixed Wi-Fi are all persistent devices

53

Spectrum Monitoring

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

WCS - Home

WCS version 7.0.x includes the CleanAir information Tab

The Alarm Summary Panel will display both AQ alerts under Performance and Security Alerts under Security

Advanced Search function includes Interference – rich interface for searches

55

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

WCS – CleanAir TAB

802.11a average AQ

802.11b average AQ

802.11b Minimum AQ

802.11a Minimum AQ

Total 802.11a Interferers

Total 802.11b Interferers

Requires MSE to display Worst 802.11a/b interferers

Recent Security IDR’s

56

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

NCS – Alarm Summary

Performance alarms report AQ threshold violations

Security Alarms Report security IDR instances

CleanAir Alarms and Traps configured from Configure=>Controllers=>802.11a/b=>CleanAir

57

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

CleanAir SNMP Trap Settings/Controls

Select trap configurations per band

Select which interference

Enable/Disable AQ threshold alert

Select Interference types for Security alert trap

Granular control over trap messages for performance thresholds as well as

security concerns

58

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

NCS CleanAir Reports

CleanAir reports allow configuration by floor-controller-AP and radio

Air Quality and Security Risk Reports are all functional without MSE

Worst Interference report requires MSE

59

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

NCS CleanAir Maps

•CleanAir Air Quality reports per radio and is averaged up: •By AP, By Floor, By Building, and by Campus •Select Edit View to add CleanAir Average and Minimum readings to the Maps View

60

DEMO

CleanAir, NCS

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

NCS CleanAir Maps

62

Interferers displayed in this way do not require MSE – However they are Raw and not coordinated to eliminate duplicates

Selecting a map for a given floor provides detail relevant to the selected floor. You can change the AP tags to display CleanAir information such as CleanAir Status (shows which AP’s are capable), Min or average AQ values, or Average and Minimum values. The values are relevant to the band selected.

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

NCS CleanAir Maps You can also view interference information being seen on any radio interface by drilling down on the AP Icon and selecting the radio

63

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

NCS CleanAir Maps

Air Quality heatmaps can be selected to represent average or minimum AQ and Provide a visualization of the Air Quality over a mapped area.

64

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

NCS – RRM Dashboard

RRM Dashboard has been modified to capture CleanAir metrics

Persistent device (PDA)

Major Air Quality (ED-RRM)

Noise

65

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

NCS CleanAir Enabled Security Dashboard CleanAir Designated Security Devices are Integrated with the Security Dashboard

66

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

NCS CleanAir Security

There are three devices enabled by Default for security – And not a single WIDs/WIPs solution on the market can see them

The customer can also add any other device that they deem appropriate ‒ Jammer ‒ Wi-Fi Inverted ‒ Wi-Fi Invalid channel

Jammers – are self explanatory – and readily available online Wi-Fi inverted is simply inverting the I and the Q of the RF signal –

very effective Off Channel is a fairly easy hack with DD-WRT – simply moving the

center frequency by a few KHz will render it invisible.

67

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

NCS CleanAir Client Troubleshooting Integration CleanAir information is also

coordinated into the client troubleshooting dashboard

Selecting a client – and launching the client TS dashboard now adds a CleanAir tab

The TAB displays any interference source that is currently being detected by the AP the client is attached to

68

Cisco Spectrum Expert - AnyConnect

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

Version 4.0 required that the AP be placed in Spectrum Monitor mode

Spectrum Monitor mode was available for CleanAir AP’s beginning with version 7.0 of WLC code.

A spectrum Monitor mode AP did not serve clients – perform any other monitor mode functions (aWIPS, Location enhancement, Rogue detection) it was strictly waiting to send spectrum information.

With SE version 4.1 and WLC version 7.0.116 and beyond , the AnyConnect feature allows for viewing spectrum information on an AP that is in Monitor, or local mode retaining all normal functions of those modes.

SE AnyConnect Feature

70

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

All versions/modes of Spectrum Expert connect rely on the NSI protocol for connection

Network Spectrum Interface (NSI) is a proprietary protocol using the TCP transport directly between the AP and the Spectrum Expert console.

The AP becomes the server, and the client (Spectrum Expert) initiates the connection.

A security key is exchanged at session establishment

Spectrum Connect to CleanAir

The AP listens on ports: 37540 for 2.4 GHz 37550 for 5 GHz

Control Plane User Data Plane

NSI/TCP Connection

71

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

Getting the NSI Key for SE Connect on the WLC

Wireless=>All AP’s=> [AP] General

72

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

Beginning with version 4.0 of SE the opening splash screen adds the remote sensor option

You will need the IP address of the AP

You will need the NSI Key

You will need to select which radio you wish to view

Spectrum Expert Version 4.x Configuration

You can get the IP Address for the AP from Either the WLC or WCS at: Monitor=>AP’s=>802.11b/a

73

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

Launching SE Connect from NCS Monitor=>Access Points=> Select the Spectrum expert Icon

NOTE: CleanAir Sensor is NOT a default column, user must edit the view to add

This option downloads the .ccf file And launches Spectrum Expert with the correct address and NSI key for the target AP!

74

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

Spectrum Expert Version 4.x Configuration

IP Address Of AP

75

CleanAir Configurations

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

CleanAir WLC Enable (WCS identical under Configure=>Controllers)

CleanAir is enabled by Default on the AP Interface it is disabled Globally by default on the controller.

Wireless=>802.11a/b=>CleanAir

WLC CLI (Cisco Controller) >config 802.11a/b cleanair enable

77

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

Per AP CleanAir Feature Enable Enabled by default – but the first place to check -

78

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

NCS CleanAir Status

Monitor=>Access Points

Edit View – add CleanAir Status and CleanAir Capable

CleanAir sensor status –

79

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

MSE – Context Aware WCS=>Services=>MSE=>Context Aware Service=>Administration=>tracking parameters

Disabled by Default

80

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

MSE – Context Aware - History

WCS=>Services=>MSE=>Context Aware Service=>Administration=>History Parameters

Disabled by Default

81

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

BRKEWN-3010 Recommended Reading

82

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

BRKEWN-3010

Cisco CleanAir design Guide

Cisco CleanAir – White Papers

CleanAir TechWise TV episode 67 Broadcast

Cisco AP3500 – CleanAir

Cisco AP3600 - CleanAir

Online Resources

83

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

Complete Your Online Session Evaluation

Give us your feedback and you could win fabulous prizes. Winners announced daily.

Receive 20 Passport points for each session evaluation you complete.

Complete your session evaluation online now (open a browser through our wireless network to access our portal) or visit one of the Internet stations throughout the Convention Center.

Don’t forget to activate your Cisco Live Virtual account for access to all session material, communities, and on-demand and live activities throughout the year. Activate your account at the Cisco booth in the World of Solutions or visit www.ciscolive.com.

84

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public

Final Thoughts

Get hands-on experience with the Walk-in Labs located in World of Solutions, booth 1042

Come see demos of many key solutions and products in the main Cisco booth 2924

Visit www.ciscoLive365.com after the event for updated PDFs, on-demand session videos, networking, and more!

Follow Cisco Live! using social media:

‒ Facebook: https://www.facebook.com/ciscoliveus

‒ Twitter: https://twitter.com/#!/CiscoLive

‒ LinkedIn Group: http://linkd.in/CiscoLI

85

© 2012 Cisco and/or its affiliates. All rights reserved. BRKEWN-3010 Cisco Public