Appendix B: Product Compliance

Número IFETEL: RCPARO121-3472

La operación de este equipo está sujeta a las siguientes dos condiciones: (1) es posible que este equipo o dispositivo no cause interferencia perjudicial y (2) este equipo o dispositivo debe aceptar cualquier interferencia, incluyendo la que pueda causar su operación no deseada.

Appendix A: AP-Server Mutual Authentication

The AP-server communication begins with a mutual authentication step in which the AP and server authenticate each other using a shared secret. The AP-server communication takes place only if this authentication succeeds.

After the authentication succeeds, a session key is generated. From this point on, all communication between the AP and server is encrypted using the session key.

The AP and server are shipped with the same default value of the shared secret. Both the server and the AP have CLI commands to change the shared secret.

Note: After the shared secret (communication key) is changed on the server, all APs connected to the server will automatically be set up to use the new communication key. You must manually configure the new communication key on an AP if it is not connected to the server when the key is changed on the server.
Note:Although the server is backward compatible—that is, older version APs can connect to a newer version server—this is not recommended.

Access Point Troubleshooting

The table below lists some of the troubleshooting guidelines for the access point (AP).
 
Problem Solution
The AP did not receive a valid IP address via the DHCP. Ensure that the DHCP server is on and available on the VLAN/subnet to which the AP is connected. If the AP still fails to get a valid IP address, you can reboot it to see if the problem is resolved.
Unable to connect to the server.
  • Ensure that the server is running and is reachable from the network to which the AP is connected. If a firewall or a router has Access Control Lists (ACLs) enabled between the AP and the server, ensure that traffic on UDP port 3851 is allowed.
  • Use the IP-based server discovery method and ensure that you have correctly entered the DNS name, wifi-security-server , on the DNS server.
  • Ensure that the DNS server IP addresses are either correctly configured, or are provided by the DHCP server.
  • The AP might fail to authenticate with the server. In this case, an 'Authentication failed ' event is raised on the server. Refer to the event for recommended action.
The AP has encountered a problem.
  • If you are using Arista Cloud Services, then open the TCP port 443 (SSL). If you have an on-premises installation, then open UDP port 3851 and port 80.
  • If you are using a Proxy, Web Accelerator, or URL Content Filter between the AP and the Internet, ensure that the settings allow communication between the AP and Arista Cloud Services.
  • If your configuration requires you to specify an exact IP address or IP range for Arista Cloud Services, please contact This email address is being protected from spambots. You need JavaScript enabled to view it..

Connect the O-105 to the Network

To connect the access point (AP) to the network, perform the following steps:
  1. Ensure that a DHCP server is available on the network to enable network configuration of the AP.
  2. Add the DNS entry wifi-security-server on all DNS servers. This entry must point to the IP address of the server.
  3. Ensure that DHCP is running on the subnet to which the AP is connected.
  4. Check the LEDs on the AP to ensure that it is connected to the server.
  5. Log on to the server using ssh and run the get sensor list command.

    You will see a list of all Arista devices that are recognized by the server. Single Sign-On users can go to the Monitor tab in CloudVision Wi-Fi and check whether the device is visible under the Monitor tab.

The AP is connected and operational.
Note:If zero configuration fails, the AP must be configured manually.
Important:If DHCP is not enabled on a subnet, the AP cannot connect to that subnet with zero-configuration. If the DNS entry is not present on the DNS servers, or if you do not have the DHCP server running on the subnet, you must manually configure the AP. For details on configuring an AP manually, see the Access Point Configuration guide on our website at https://www.arista.com/en/support/product-documentation .

Connect the O-105 using PoE

If you are using a PoE injector, make sure the data connection is plugged into a suitable switch port with proper network connectivity.

Table 1. Labels: Parts
Label Description
1 Width of the LAN cap is 29mm
2 Wrench to open the LAN cap

Power On the O-105

An O-105 device can be powered on by plugging one end of the Ethernet cable into the 802.3at Power Over Ethernet+ (PoE+) switch or injector and the other end into the Ethernet/PoE part on O-105 of nominal input voltage 48V DC.

Note: If you are not using PoE, ensure that you use only an AC power adaptor supported by the O-105 access point (AP).

Wall Mount the O-105

Mounting the access point (AP) on the wall consists of the following steps:

  1. Affix the expansion bolts on the wall such that the holes on the mounting base can be perfectly placed over them.
    Table 1. Labels: Dimensions
    Label Description
    1 Horizontal distance between holes: 50mm
    2 Vertical distance between holes: 84mm
    3 Diameter of the hole: 6.5mm, depth 30mm
  2. Attach the mounting base to the bottom cover of the O-105 device.
    Table 2. Labels: Parts
    Label Description
    1 Philips #2 screwdriver. Length >= 100mm
  3. Mount the device on the expansion bolts.

Pole Mount the O-105

Use the pole-mount bracket and pole strap to install the O-105 device on a pole. Standard accessories include two metal clamps.:

Use the mounting base to install the O-105 device on the wall. To mount the device:

  1. Attach the device to the mounting base.
  2. Attach the pole-mount bracket to the mounting base. You can position the pole-mount bracket for use on a vertical or horizontal pole. Insert the pole strap in to the pole-mount bracket.
  3. Mount the device securely to the pole by using the pole strap and a Philips #2 screwdriver.
    Table 1. Labels: Parts
    Label Description
    1 Philips #2 screwdriver.

Install the Access Point

This chapter contains the stepwise procedure to install the access point (AP).

Zero-Configuration of O-105 as Access Point

Zero-configuration is supported under the following conditions:

  • The device is in AP mode with background scanning on and no SSID configured.

  • A DNS entry wifi-security-server is set up on all the DNS servers. This entry should point to the IP address of the server. By default, the AP looks for the DNS entry wifi-security-server.

  • The AP is on a subnet that is DHCP enabled.

Important: If the AP is on a network segment that is separated from the server by a firewall, you must first open port 3851 for bidirectional User Datagram Protocol (UDP) and Transport Control Protocol (TCP) traffic on that firewall. This port number is assigned to Arista Networks. Zero-configuration cannot work if multiple APs are set up to connect to multiple servers. In this case, the APs must be configured manually. For details on how to configure an AP manually, see the Access Point Configuration Guide on our website at https://www.arista.com/en/support/product-documentation .

Take a configured AP; that is, ensure that a static IP is assigned to the AP or the settings have been changed for DHCP. Note the MAC address and the IP address of the AP in a safe place before it is installed in a hard-to-reach location. The MAC address of the AP is printed on a label at the bottom of the product.

The steps to install the AP with no configuration (zero-configuration) are as follows:

  1. Wall Mount the O-105 or Pole Mount the O-105
  2. Power On the O-105
  3. Connect the O-105 to the Network

Bottom Panel of O-105

The bottom panel of the O-105 has LAN/PoE connectors that enable you to connect the device to a wired LAN through a switch or a hub. The ports provide power for the device by using the 802.3at standard.

Figure 1. O-105 Bottom Panel
Table 1. Labels: Ports
Label Description
1 LAN2
2 LAN1 (PoE)
Table 2. O-105 Port Details
Port/Button Description Connector Type Speed/Protocol
LAN1 1 Gigabit Ethernet with 802.3at compliant PoE RJ-45 10/100/1000 Mbps Ethernet
LAN2 1 Gigabit Ethernet with 802.3at compliant PoE RJ-45 10/100/1000 Mbps Ethernet
Reset Enables you to reset the O-105 -- --

Side Panel of O-105

The side panel of the O-105 has LEDs that indicate the working of the device.

Figure 1. O-105 Side Panel
Table 1. Labels: Side Panel LEDs
Label Description
1 Power
2 2.4 GHz Radio
3 5 GHz Radio
4 LAN2
5 LAN1 (PoE)

Power LED: The following table describes the Power LED states.

Table 2. Power LED States Description
  Green Orange
Solid Running at full capability Running at reduced capability
Blinking Received IP address, but not connected to the server Did not receive an IP address

Reduced capability indicates that the AP is getting lower than the required maximum power from the PoE switch, i.e., 802.3af instead of 802.3at.

LAN1 LED: ON when the corresponding interface is up.

LAN2 LED: ON when the corresponding interface is up and either wired guest or link aggregation is configured.

Radio LEDs: ON when the corresponding radio is operational.