The AP-server communication begins with a mutual authentication step where the AP and server authenticate each other using a shared secret. If this authentication succeeds, the AP-server communication takes place.
After the authentication succeeds, the server generates a session key and encrypts all communication between the AP and server using the session key.
The AP and server ship with the same default value of the shared secret. Use CLI commands on the server and the AP to change the shared secret.
Note: After changing the shared secret on the server, all APs connected to the server automatically use the new communication key. You must manually configure the new communication key on an AP if not connected to the server when the key changes on the server.
Note: Arista Networks does not recommend installing older versions of APs on newer versions of servers.
The table below lists some of the troubleshooting guidelines for the access point (AP).
Problem
Solution
The AP did not receive a valid IP address via the DHCP.
Be sure you have an active DHCP server on the VLAN or subnet with the connected AP. If the AP fails to get a valid IP address, reboot it to see if that resolves the problem.
Unable to connect to the server.
Be sure you have an active server reachable from the network with the connected AP.. If a firewall or a router has Access Control Lists (ACLs) enabled between the AP and the server, be sure to allow traffic on UDP port 3851.
Use the IP-based server discovery method and be sure you have correctly entered the DNS name, wifi-security-server, on the DNS server.
Be sure that the DNS server has correctly configured IP addresses or the DHCP server provides the IP addresses.
The AP might fail to authenticate with the server. In this case, an 'Authentication failed ' event logs to the server. Refer to the event for recommended action.
The AP has encountered a problem.
If using Arista Cloud Services, then open the TCP port 443 (SSL). If you have an on-premises installation, then open UDP port 3851 and port 80.
If using a Proxy, Web Accelerator, or URL Content Filter between the AP and the Internet, be sure the settings allow communication between the AP and Arista Cloud Services.
To connect the AP to the network, perform the following steps:
Be sure to install the AP on a network with a DHCP-enabled server.
Add the DNS entry wifi-security-server on all DNS servers. This entry must point to the server IP address. By default, the AP looks for the DNS entry, wifi-security-server.
Verify the AP LED status as ON.
Log on to the server using SSH and run the get sensor listcommand.
The command returns a list of all Arista devices recognized by the server. Single Sign-On users can go to the Monitor tab in CloudVision WiFi and check if the device appears on the tab.
Note:If zero configuration fails, the AP must be configured manually.
Important:If the subnet does not have DHCP enabled, the AP cannot connect to that subnet with zero-configuration. If no DNS entry exists on the DNS servers, or if you do not have a DHCP server running on the subnet, you must manually configure the AP. For details on configuring an AP manually, refer to the Access Point Configuration Guide on Arista Product Documentation.
Connecting the Access Point using PoE
If using a PoE injector, plug the data connection into a suitable switch port with proper network connectivity.
Figure 1. LAN Port
The figure shows the LAN cable inserted to the LAN1 Port. Label l points to the relative position of the grounding screw on the AP.
For PoE port details, see the Bottom Panel section.
Plug one end of the Ethernet cable into the PoE++ switch or compatible PoE injector, a Single-port High Power Midspan, 802.3bt compliant, up to 5Gigabit PoE with PD54V in power output, and the other end into the LAN1 (PoE++) on the AP. Be sure to turn on the PoE++ source. Use an active wrench with a 27 mm opening to open the LAN (PoE++) port cap.
The access point (AP) package must contain the components shown in the following figure.
Figure 1. Use Active Wrench
Table 1. Labels: Measurements
Label
Description
1
The LAN port cap has a width of 27mm.
2
Use an active wrench to open the LAN port cap.
3
Insert LAN cable.
Earthing or Grounding: The AP must be properly grounded using a copper grounding wire (12 ~ 10 AWG) and a tin-plated lug as shown in the following image. The wire and the lug must be tightened at the grounding screw on the AP.
Note: Connect the power cord of the power adapter, if used, to a socket outlet with an grounding connection.
The following two images show the position of the grounding screw on the AP, displayed as 1, and the dimension of the lug that attaches to the grounding screw.
Figure 2. Position of the Grounding Screw on the AP
Figure 3. Lug Nut Dimension
Note: The O-435E APs requires a UL-listed PoE+ power source suitable for use at 65 degree Celsius with an output that meets LPS requirements or PS2, with a rating of 54V DC (0.8A or 800mA minimum).
The following table shows the dimension of the grounding screw and lug.
Item
1
2
3
4
5
6
7
8
Tolerance
W: ± 0.5
d2: ± 0.2
L: ± 0.5
F: ± 0.5
E: ± 0.5
d1: ± 0.2
D: ± 0.2
T: ± 0.5
Size
7.20
4.30
21.50
5.90
13.00
3.40
6.70
1.00
Using the Access Point with Power Adapter
Use a compatible power adapter (Arista SKU: PWR-AP-W5) to power the AP.
Warning - The O-435E AP requires a UL-listed PoE power source suitable for use at 45ºC. The power output should meet LPS requirements or PS2, with a rating of 48V DC (1A minimum). The current supplied by PoE++ should be 850mA. If not using PoE++, ensure that you use only an AC power adapter supported by the AP. The power adapter should be suitable for use at 45ºC. Use this product with a Listed Direct Plug-In Power Unit marked as Class 2, Listed Power Adapter, or DC power source marked L.P.S. (or Limited Power Source) and rated from 12 V DC, 4A minimum.
The maximum altitude of operation for the power adapter is 5000m.
To power up the device with power adapter, perform the following steps:
Plug the power cable into the DC power receptacle on the back of the AP.
Plug the other end of the power cable into an 110V~240V 50/60 Hz AC power source.
The LED lights turn on when ready. Refer to the LED status table.
This chapter contains the stepwise procedure to install the access point (AP).
Zero-Configuration of the Access Point
The AP supports zero-configuration under the following conditions:
The device must be in AP mode with background scanning on and without a configured SSID.
Set up a DNS entry fo wifi-security-server on all the DNS servers. This entry should point to the server IP address. By default, the AP looks for the DNS entry wifi-security-server.
Place the AP on a DHCP-enabled subnet..
Refer to these articles to understand how the APs communicate with the server, and the ports you need to open to enable the communication:
Important: If placing the device on a network segment separated from the server by a firewall, you must first open port 3851, the port assigned to Arista Networks, for User Datagram Protocol (UDP) and Transport Control Protocol (TCP) bidirectional traffic on the firewall. Zero-configuration does not support setting up multiple devices to connect to multiple servers. In this case, you must manually configure the APs. See the Access Point Configuration Guide at Arista Product Documentation.
Assign a static IP address to the AP or change the settings to DHCP. Make a note of the AP MAC address and the IP address in a safe place before installing it in a hard-to-reach location. Locate the AP MAC address on a label at the bottom of the product.
Use the following steps to install the AP with zero-configuration:
Use the mounting bracket and metal clamps to install the AP on a pole. Standard accessories include the mounting bracket and two metal clamps.
To mount the AP on a pole:
Insert the two metal clamps into the bracket. You can insert the clams either in the horizontal or vertical slots depending on the position the pole-mount bracket for use on a vertical or horizontal pole.
Attach the bracket to a pole. You can position the pole-mount bracket for use on a vertical or horizontal pole.
Fasten the two metal clamps into the slotted driver.
Mount the AP to the bracket.
Tighten the thumb screw using a Philips# 2 screwdriver.
Table 1. Labels: Parts
Label
Description
1
Use a Philips #2 screwdriver to fasten the screw.
Connecting External Antennas to O-435E
Connect the external antennas to the respective ports using N Type connectors.
The AP has three (3) ports on each side of the AP, six (6) ports total. The access ports support 2.4/5/6 GHz band.
The front panel of the AP has 6 LEDs indicating the status of AP functions.
Figure 1. Front Panel LED
Table 1. Labels: Front Panel LEDs
Label
Description
1
Power
2
2.4 GHz Radio
3
5 GHz Radio
4
6 GHz Radio
5
LAN1 PoE PD
6
LAN2 PoE PSE (802.3af)
Power LED
The following table describes the Power LED states:
Table 2. Power LED States Description
Green
Red
Solid
Running at full capability
Running at reduced capability.
Blinking
Received an IP address, but not connected to the server.
Did not receive an IP address.
Reduced capability indicates that the AP receives lower than the required maximum power from the PoE++ switch. It means the AP receives 802.3at instead of 802.3bt.
LAN1 LED -ON when the corresponding interface up.
LAN2 LED - ON when the corresponding interface up, and either wired guest or link aggregation configured.
Radio LEDs: ON when the corresponding radio operational.
Side Panel - Left
The side panel of the AP has a reset pinhole and console port.
Figure 2. Side Panel
Table 3. Labels: Side Panel
Label
Description
1, 2, 3
Antenna Port for 2.4/5/6 GHz. The AP has three (3) antenna ports on the left and right side of the AP.
3
Reset pin
4
Console
Port
Description
Connector Type
Speed/Protocol
Console
Establish a ‘config shell’ terminal session through a serial connection.
RJ-45
RS 232 Serial (115200 bits per second)
Data bits:8
Stop bits: 1
Parity: None
Flow Control: None
Reset
Reset to factory default settings port. Hold down and power cycle the device to reset.
Pinhole push button
N/A
When you reset the AP, the following settings also change:
The Config shell password resets to config.
Server discovery value erases and changes to the default, redirector.online.spectraguard.net (primary) and wifi-security-server (secondary).
The AP loses all the VLAN configurations.
If the AP has a static IP configured, the reset erases the IP address and the AP sets to DHCP mode with the factory default IP address of 169.254.11.74.
Bottom Panel
The bottom panel of the AP has two ports, LAN1 and LAN2. Connect a wired LAN from a switch or a hub to the LAN1/PoE++ port of the AP to power on the AP. The LAN1 port supports the 802.3bt power standard. Use an active wrench to open the LAN cap. The LAN cap has a width of27 mm. LAN2 acts as a PoE Power Sourcing Equipment (PSE) that provides power to any devices connected through LAN2. You cannot use LAN2 to provide power to the AP.
Note: The AP should be installed by a Certified Professional Installer.
The access point (AP) package must contain the components shown in the following figure.
Figure 1. Package Components
Table 1. Labels: Package Components
Label
Description
1
O-435E Access Point
2
2 metal clamps for attaching the mounting bracket to the pole
3
Mounting bracket
4
4 steel bosses for fixing AP in the bracket
5
Philips screw driver to secure the AP to the bracket
6
Grounding screw fitted at the back of AP with dimension 6.8 ±0.2 mm
7
Use Philips #2 screwdriver to tighten the screw
8
Grounding screw - 2.6 ±0.2 mm
9
Grounding screw - 5.8 ±0.2 mm
10
Grounding screw thread - M4 × 0.5 mm
Important: Locate the MAC address of the AP on a label at the bottom of the product and the packaging box. Note down the MAC address before mounting the AP on the ceiling or at a hard-to-access location.
If you don't have a complete package, please contact the Arista Networks Technical Support Team at This email address is being protected from spambots. You need JavaScript enabled to view it. or return the package to the vendor or dealer where you purchased the product.
Note:All instances of the term 'server' in this document refer to the Wireless Manager, unless the server name or type is explicitly stated.
Product and Documentation Updates
To receive important news on product updates, please visit our website at Arista Product Documentation. We continuously enhance our product documentation based on customer feedback
FCC Advisory
O-435E is prohibited for control of or communications with unmanned aircraft systems, including drones.
