Appendix B: Product Compliance

Mexico IFETEL Approval Number

Número IFETEL: RCPMOC121-3696

La operación de este equipo está sujeta a las siguientes dos condiciones: (1) es posible que este equipo o dispositivo no cause interferencia perjudicial y (2) este equipo o dispositivo debe aceptar cualquier interferencia, incluyendo la que pueda causar su operación no deseada.

Appendix A: AP-Server Mutual Authentication

The AP-server communication begins with a mutual authentication step in which the AP and server authenticate each other using a shared secret. The AP-server communication takes place only if this authentication succeeds.

After the authentication succeeds, a session key is generated. All communication between the AP and server from this point on is encrypted using the session key.

The AP and server are shipped with the same default value of the shared secret. The CLI commands are provided on both server and AP for changing the shared secret.

Note: After the shared secret (communication key) is changed on the server, all APs connected to the server will automatically be set up to use the new communication key. APs that are not connected to the server at this time must be manually set up with the same communication key to enable communication with this server.
Note:Although the server is backward compatible, that is, older version APs can connect to a newer version server, this is not recommended.

C-130 Troubleshooting

The table below lists some of the troubleshooting guidelines for the access point (AP).
 
Problem Solution
The AP did not receive a valid IP address via the DHCP. Ensure that the DHCP server is on and available on the VLAN/subnet to which the AP is connected. If the AP still fails to get a valid IP address, you can reboot it to see if the problem is resolved.
Unable to connect to the server.
  • Ensure that the server is running and is reachable from the network to which the AP is connected. If a firewall or a router has Access Control Lists (ACLs) enabled between the AP and the server, ensure that traffic on UDP port 3851 is allowed.
  • Use the IP-based server discovery method and ensure that you have correctly entered the DNS name, wifi-security-server , on the DNS server.
  • Ensure that the DNS server IP addresses are either correctly configured, or are provided by the DHCP server.
  • The AP might fail to authenticate with the server. In this case, an 'Authentication failed ' event is raised on the server. Refer to the event for recommended action.
The AP has encountered a problem.
  • If you are using Arista Cloud Services, then open the TCP port 443 (SSL). If you have an on-premises installation, then open UDP port 3851 and port 80.
  • If you are using a Proxy, Web Accelerator, or URL Content Filter between the AP and the Internet, ensure that the settings allow communication between the AP and Arista Cloud Services.
  • If your configuration requires you to specify an exact IP address or IP range for Arista Cloud Services, please contact This email address is being protected from spambots. You need JavaScript enabled to view it..

Connect C-130 to the Network

The device can be connected to the network by connecting through a LAN cable or a POE+ injector. If you are using a PoE+ injector, make sure the data connection is plugged into a suitable switch port with proper network connectivity.

To connect C-130 to the network, you should meet the following prerequisites:

  • Ensure that a DHCP server is already available on the network to enable network configuration of the C-130.
  • DNS should be able to resolve the server discovery primary: redirector.online.spectraguard.net, secondary: wifi-security-server).
  • AP with valid IP address from DHCP server or a valid static IP address1 to communicate with Wireless Manager.
  • Check the LEDs Status on the device. If all LEDs glow green, then the device is operational and connected to the server.

If the above conditions stand true, the device should be connected and ready to go operational.

Power on the C-130

The C-130 device can be powered on by plugging one end of the Ethernet cable into the PoE+ (802.3at) switch or injector and the other end into the Ethernet/PoE+ port on the C-130. Ensure the PoE+ source you are using is turned ON.

Note: You can also use regular PoE (802.3af). However, there are certain drawbacks to it:
  • The USB is disabled.
  • The other ethernet port is disabled.
  • The 2.4 Ghz radio is downgraded to 1x1 TX/RX capability and Tx power of 15 dbm or lower, (or as set in the device template)
  • The 5 Ghz radio is downgraded to 2x2 18 dbm or lower, (or as set in the device template)

As an alternative to PoE+, you can insert a power adaptor plug into an AC power outlet and the other end into the power input port on the C-130.

Using C-130 with Power Adapter

To power up the device with power adapter, perform the following steps:

  1. Plug the power cable into the DC power receptacle at the rear of the device.
  2. Plug the other end of the power cable into an 110V~240V 50/60 Hz AC power source.
    Wait for few minutes for the device to power on. Further you can refer the LED details table to verify the functioning of the device.

Mount the C-130

Mounting Instructions using the Standard Package Contents

The mounting procedure can be divided into two parts:

  1. Affixing the bracket to the T -grid: Use the mounting bracket to install the C-130 on the ceiling. Fix the bracket to the T-grid and rotate the bracket so that it snaps on the T-grid.

    The bracket is now parallel to an arm of the T-grid. Ensure that the bracket is properly snapped to the T-grid. Refer to the images given below.

  2. Mounting C-130 on the bracket: Place the first mounting post on the rear-side of the device on to the lower notch of the bracket. Rotate the device such that the center mounting post fits in to the center notch on the bracket. Ensure that all the mounting posts on the rear-side of the device are snapped in to the respective notches on the bracket.

    The mounting posts on the rear-side of the device are now properly fit in the respective notches of the bracket and device is mounted properly.

Mounting Instructions using the Silhouette/Interlude Bracket Mount

The Silhouette/Interlude mounting bracket is not a part of the standard package and must be procured separately. The mounting instructions for the Silhouette/Interlude Bracket Mount are very similar to the Standard Package Content's mounting instructions. Refer to the instructions mentioned in Mounting Instructions using the Standard Package Contents .

Mounting Instructions using the Wall Mount Bracket

The Wall mounting bracket is not a part of the standard package and must be procured separately. Attach the wall-mounting bracket with the help of screws on to the wall. Pull the side latch to unlock the wall mount bracket. Affix the device on the wall mount bracket by placing the device stubs in the bracket's placeholder. Lock the side latch and affix the device firmly with the screw.

Install the C-130

This chapter contains the step wise procedure to install the C-130 device.

Zero-Configuration of C-130 as Access Point

Zero-configuration is supported under the following conditions:

  • The device is in AP mode with background scanning on and no SSID configured.

  • A DNS entry wifi-security-server is set up on all the DNS servers. This entry should point to the IP address of the server. By default, the AP looks for the DNS entry wifi-security-server.

  • The AP is on a subnet that is DHCP enabled.

Important:If the device is placed on a network segment that is separated from the server by a firewall, you must first open port 3851 for User Datagram Protocol (UDP) and Transport Control Protocol (TCP) bidirectional traffic on that firewall. This port number is assigned to Arista Networks. Zero-configuration cannot work if multiple devices are set up to connect to multiple servers. In this case, you must manually configure the APs. See the Access Point Configuration Guide on our website at https://www.arista.com/en/support/product-documentation .

Take a configured AP; that is, ensure that a static IP is assigned to the device or the settings have been changed for DHCP. Note down the MAC address and the IP address of the AP in a safe place before it is installed in a hard-to-reach location. The MAC address of the AP is printed on a label at the bottom of the product.

The steps to install the device are as follows:

Top Side Ports on C-130

Describes the supported AC power supplies and lists the power cables you can use to connect the supply to a power source.

 

Port

Description

Connector Type

Speed/Protocol

Ethernet

To establish 'Config Shell' terminal session via serial connection.

RJ45

  • RS 232 Serial Bits per second: 115200
  • Data Bits: 8, Stop Bits: 1
  • Parity: None
  • Flow Control: None

USB

USB 2.0 port

Not in use

Not in use

Reset Pinhole

Reset to factory default settings

Pin hole push button

Hold down and power cycle the device to reset

The Reset Pin Hole and the USB port are on the top side of the device as shown in the figure above. The Reset Pinhole resets the C-130 device to factory defaults. To reset the device, press and hold the Reset Pin Hole for 10 sec until all LEDs go off which indicates that the device has rebooted. Pressing the Reset Pin Hole while the device is booting up will not have any effect. You should perform this operation only when the device is running.

When you reset the device, the following settings are reset:

  • Config shell password is reset to config .
  • Server discovery value is erased and changed to the default, wifi-security-server .
  • All the VLAN configurations are lost.
  • If static IP is configured on the device, the IP address is erased and DHCP mode is set. If DHCP fails the factory default IP address of the device is set to 169.254.11.74.

The USB port on the C-130 is currently not in use.

Rear Panel of C-130

The rear panel of the C-130 provides an PoE+ Ethernet port that enables you to connect the device to a wired LAN through a switch or a hub and power the device by using the 802.3af/802.3at standard.

 

Port

Description

Connector Type

Speed/Protocol

DC IN

Enables you to connect to and power on device using 12V DC power with 2.0 ampere.

6.3 mm barrel

--

Ethernet (LAN1/PoE+)

Gigabit Ethernet port used to connect to the wired LAN and communicate with the Mojo Cloud or Server. This port can also be used to power the device using the 802.3af Power over Ethernet (PoE+) standard.

RJ45

  • 10/100/1000 Mbps Gigabit Ethernet
  • 802.3af/80 Class 0 PoE/PoE+
  • PoE input voltage: 48V

If using PoE (802.3af) some features will be disabled

Ethernet (LAN2)

Gigabit Ethernet port that can be used for wired extension for an SSID.

RJ45

10/100/1000 Mbps Gigabit Ethernet

Front Panel of C-130

The front panel of the C-130 has 4 functional LEDs that indicate the working of the device.

Power LED: The following table describes the Power LED states.

Table 1. Power LED States Description
  Green Orange
Solid Running at full capability Running at reduced capability
Blinking Received IP address, but not connected to the server Did not receive an IP address

Reduced capability indicates that the AP is getting lower than the required maximum power from the PoE switch, i.e., 802.3af instead of 802.3at.

LAN1 LED: ON when the corresponding interface is up.

LAN2 LED: ON when the corresponding interface is up and either wired guest or link aggregation is configured.

Radio LEDs: ON when the corresponding radio is operational.