Monitor Wi-Fi

The Monitor tab in CV-CUE is primarily used for monitoring the Clients, APs, Radios, WLANs, Applications, and Tunnels in the network. You can perform troubleshooting operations based on the information collected for each of the components in the Monitor tab.

Select MONITOR tab from the left panel to get an overall view of your network that is categorized into the following tabs:
Clients
Presents a list of clients connected to and clients that failed to connect to Arista devices.
Access Points
Lists the Arista devices that are operating in AP or in AP/Sensor mode.
Radios
Lists the radios operating on 2.4, 5, and 6 GHz frequencies.
Active SSIDs (WLANs)
Lists the SSID profiles.
Application Visibility
Lists the applications with details about their data usage for a specific SSID.
Tunnels
Lists the tunnels used by the SSIDS to traffic the data between endpoints.

The Global Counters at the top-right corner provide you the summary of Clients and Access Points.

You can use global counters to get the count of:
  • Total managed devices (access points and sensors)
  • Total active access points
  • Total inactive access points
  • Total currently online clients
  • Total switches

Clients

The Clients tab displays the clients that are connected to APs. The type of Clients differ depending on their association with the AP.

The Client grid has drop-down list at the top-right corner, with options Live and All. The clients are listed on the following criteria:
  • If you select Live: A list of clients with the following status are displayed:
    • Clients that are successfully connected to Arista APs.
    • Clients that failed to connect.
  • If you select All: A list of clients with the following status (including Live clients) are displayed:
    • Clients that are successfully connected to Arista APs.
    • Clients that failed to connect.
    • Clients that are currently visible but not connected to an Arista AP.
    • Clients that are currently not visible, but connected earlier to an Arista AP.
    • Clients that are currently not visible and failed to connect in their last attempt.

To know the status, hover the mouse over the Status icon.

When you click the name of a client, you are redirected to the Client Events widget with a Graph view.
Click Switch to Table View, and you can see the following properties of clients displayed in the tabular format:
Property Description
Status Indicates if the client is successfully associated or failed to connect.
Name Specifies the user-defined name of the client.
User Name Provides Username of the client
Role After client is connected via any SSID, it is assigned with Role configured in SSID profile.
Google Authorized It is boolean value to represent whether client is authorized using google integration.
Location Location of the client.
MAC Address Specifies the unique 48-bit IEEE format address of the client assigned to the network adapter by the manufacturer.
IP Address IP address of the client.
OS Name of Operating System running on the client.
Associated AP Specifies the AP with which a client is associated. This is the AP through which the client communicates with other clients and devices on the network.
Associated SSID Specifies the operating SSID of the AP with which the client is associated.
Avg. data rate Refers to the average amount of data transferred per unit of time
RSSI(dbm) Displays the observed RSSI (Received Signal Strength Indicator) value for the client.
Uplink Data Indicates the amount of data transferred by the client.
Downlink Data Indicates the amount of data received by the client.
Protocol Indicates the 802.11 protocol (with or without 802.11n or 802.11ac capability) used.
Up/Down Since Date and time since the client is up or down.
First Detected At Indicates the time and day when the client was first detected
Retry Rate (%) Indicates the retry rate in percentage
Sticky Denotes whether client is sticky or not. Sticky client means if client is connected to AP and while roaming it found better AP with more better signal strength, still it decides to stay connected with older AP.
The client icon also supports a context menu. Right-click the client icon to view the context menu.
Figure 1. Context menu in Client Details

Image showing the context menu when right-clicking the client image.
You can view ongoing activities of a Client using View Ongoing Activities option available to the right top corner on the Client table. The available activities are:
  • Live Client Debugging- The Live Client Debugging feature enables you to troubleshoot client activities. Selecting this feature displays the list of the clients, for those any live activities are in progress.
  • Packet Trace- Capture Packet Trace action on a client to intercept a data packet that is crossing or moving over a specific network. Selecting this activity displays the list of those clients for which packet trace is in session.
  • Prevention- Prevention activity displays the list of all quarantined clients.
  • None- Selecting None provided the list of all the clients without any filters.

You can perform the following actions on every client, these actions are available on a right click on any client:

Action Description
Rename a Client To change the name of a client.
Capture Packet Trace for a Client Responsible for intercepting a data packet that is crossing or moving over a specific computer network
View Packet Trace History for an Access Point Displays packet traces captured in the last 30 minutes
Start Live Client Debugging Displays live client logs of a client.
Disconnect Disconnects the client.

Client Explorer

Client Explorer helps you view the distribution of clients that are connected to Arista devices.

It provides a summary view of all the clients and provides an easy way for the network administrators to understand client distribution for each attribute. For example, network administrators can use the Client Explorer to understand client distribution for different versions of Wi-Fi and determine the percentage of legacy clients at a location.

To view the Client Explorer,
  1. Navigate to MONITOR > WiFi > Clients.
  2. Click Client Explorer

On the Client Explorer chart, you can filter the clients based on their association attributes such as SSID and with AP as well as a range of Client properties. You can use the client connection status drop-down menu to view graphical client distribution based on the selected attribute.

Connection Status


If you select Live, the chart shows data corresponding to clients with the following status:
  • Clients that are successfully connected to Arista APs.
  • Clients that failed to connect.
If you select ALL, data for clients with the following status is displayed in the chart:
  • Clients that are successfully connected to Arista APs.
  • Clients that failed to connect.
  • Clients that are currently visible but not connected to an Arista AP.
  • Clients that are currently not visible, but connected earlier to an Arista AP.
  • Clients that are currently not visible and failed to connect in their last attempt.

Hover over the Status icon to view the current selection for client connection status filter.

Client Attributes


You can further filter the clients by the following attributes:
  • Associated SSID
  • Vendor
  • Capability
  • Channel
  • Associated AP
  • Connection Failure Type
  • Protocol
  • Google Auth Status
  • Role Operating Status

You can select and deselect a particular bar in the bar graph to filter the tabular data in the client list.

Roaming Explorer

Roaming Explorer provides a graphical and tabular view of a client’s roaming events from one access point (AP) to another AP.

To view the Roaming Explorer,
  1. Navigate to MONITOR > WiFi > Clients.
  2. Click Roaming Explorer next to the Client Events widget.

Roaming Explorer consists of a graph view and a split view.

Graph View

The graph view appears as follows:

It is a line graph denoting the client’s roaming activities on different APs. The APs are listed based on the number of events logged for each AP, with the AP having the highest number of roaming events listed on top. The Y-axis shows the APs, and the X-axis shows the timeline of the roaming event. You can hover over any event to view more details about it.

Graph view considers the following roaming events only:

  • Association Failure
  • Fast Roaming Failure
  • Successful-Fast Roam
  • Successful-First Association

Split View

The split view consists of a graph view and tabular data that lists all the clients' events along with the event timestamp and further details such as BSSID, AP Name, Location, Frequency Band, and more.

Client Connection Logs

Selecting a client in the Clients list displays the connection logs.

Client Connection Logs shows the list of successful or failed connection attempts made by client. The list provides information about every attempt of connection made by a client. Green color represents successful connection. Red color represents failed connections. Client connection logs can be retrieved only for 802.11ac or higher APs.

You can view or fetch the connection logs for the following time intervals:
  • 2 hours
  • 4 hours
  • 8 hours
  • 12 hours
  • 1 day
  • 1 week
You can view the Client Connection Logs in one of the following views:
  • Timeline View
  • Grid View
The Timeline View appears as follows:
The Timeline View displays the list of connections logs with additional information as follows:
Field Description
Timestamp Indicates the date and time when the client connected to an AP.
Average Latencies Average latencies of various stages and their sub-stages in the Wi-Fi connection for the client.
BSSID BSSID is the MAC address of the AP to which the client attempted to connect.
AP Name Name of the AP to which the client attempted to connect.
SSID SSID of the WLAN to which the client is connected.
Channel Operating channel of the AP to which the client attempted to connect.
Disconnect Disconnects client from AP.
The Grid View appears as follows:
The Grid View contains detailed information in a tabular format:
Field Description
BSSID BSSID is the MAC address of the AP to which the client attempted to connect.
AP Name Name of the AP to which the client attempted to connect.
SSID SSID of the WLAN to which the client is connected.
Channel Operating channel of the AP to which the client attempted to connect.
Timestamp Indicates the date and time when the client connected to an AP.
Event Indicates if the client successfully connected.
A red symbol in the Event column of the connection logs denotes client connection failure. Hover on the red text to know about the failure type. The types of failures are:
Failure Categories Main Failure Type
Association Failure AP association limit exceeded
Capability mismatch
Association failure
Authentication Failures Eapol 4-way handshake failed
RADIUS authentication failure
Radius server not responding
Incorrect Pre-Shared Key
Fast roaming failed
Network Failures Captive portal - shared secret mismatch
Captive Portal authentication failed
Captive portal - client in blackout period
DHCP failed
DNS failure
You can filter connection logs data in Grid View using the Filter icon on the top right corner. Filter is applied on the following column:
Column Filtering Criteria Description
Event All Retrieves all the event logs.
Successful Retrieves only successful event logs.
Failed Retrieves only unsuccessful event logs.
Filtering Criteria Description
Enter the From and To dates. Retrieves client connection logs between the From and To dates.
Check the Long Time Ago check box and enter the To date. Retrieves all client connection logs till the To date.
Enter the From date and check the Now check box. Retrieves client connection logs between the From date and the current date.
Check the Long Time Ago and Now check boxes. Retrieves all the available client connection logs.

Client Events Logs

You can view Client Events Logs by navigating to Clients -> Client Connection Logs drop-down menu -> Client Events Logs.

Client Event Logs by default opens in a full screen mode. It lists majority of client events including connection attempts. The list provides information about client connectivity events. Green color represents successful connection events. Grey color represents intermediate events. Red color represents failed connection events.

You can view or fetch the connection logs for the following time intervals:
  • 2 hours
  • 4 hours
  • 8 hours
  • 12 hours
  • 1 day
  • 1 week
You can view the Client Connection Logs in one of the following views:
  • Graph View
  • Grid View
  • Consolidated View

Graph View

The Graph view displays the connection events of the client at a specific time. When you hover over each event, some of the information you see in the tooltip is:
Field Description
Timestamp Indicates the date and time when the client connected to an AP.
Average Latencies Average latencies of various stages and their sub-stages in the WiFi connection for the client. This is seen in case of a successful connection event.
BSSID BSSID is the MAC address of the AP radio for that SSID.
AP Name Name of the AP to which the client attempted to connect.
SSID SSID of the WLAN to which the client is connected.
Channel Operating channel of the AP to which the client attempted to connect.
Location Location of the AP to which the client is connected.
Frequency Band Frequency band of the client connected to the AP.

Graph View

The Graph view appears as follows:

If you are interested in a specific event, you can apply filters based on various criteria to view the specific event. The filter is applied on the Grid view but the filter criteria are reflected in the Graph view as well. You can remove the filter from the Grid view.

Use the range scroll to limit the time period of the graph. If you don not want to use the scroll, you can also select the desired area in the graph using a mouse pointer. To go back to the original full range time period, click Reset Zoom. The Graph view is effective in full screen mode. Click the Full Screen icon (expand icon) to enter the full screen mode.

You can click a specific event in the graph and the corresponding event detail is highlighted in the table.

Grid View

The Grid View appears as follows. The red, green and grey colored symbols in event column of the client event logs denotes unsuccessful, successful and intermediate events respectively. Hover on each text to know about type of event occurred.

Client Events are categorized into 5 major categories and further divided into various intermediate events.
Field Description
BSSID BSSID is the MAC address of the AP to which the client attempted to connect.
AP Name Name of the AP to which the client attempted to connect.
SSID SSID of the WLAN to which the client is connected.
Channel Operating channel of the AP to which the client attempted to connect. The channel is shown as Dual for sensor that operates on both 802.11a and 802.11b/g simultaneously.
Timestamp Indicates the date and time when the client connected to an AP.
Event Indicates if the client successfully connected.
Packet Capture It provides the link of the wireshark file, that contains a packet capture for all failure events. User can open the file in Arista packets or download the file.

Consolidated View

Consolidated view captures client event logs of all clients connected to Arista devices. To view all client event logs, navigate to TROUBLESHOOT > Event Logs and click the Clients tab. The consolidated view appears as follows.

Top Applications by Traffic in Client Tab

Top Applications by Traffic chart graphically represents data usage for applications. It always represents data for top five applications, with highest traffic. To view exact data usage, hover on the specific bar in the graph.


The data on the widget can be filtered using the available filters on the top right corner of the widget. To know more about the filters refer Filters on Widgets.

Client Traffic Volume

The Client Traffic Volume graph represents the data traffic sent and received by the client every 15 minutes. X-axis in the graph denotes the time period for which the Data Usage is plotted and Y-axis denotes the Traffic Volume.


This data usage includes Uplink Data as well as Downlink Data for all applications. User can choose to view the Client Traffic for:
  • 2 hours
  • 4 hours
  • 8 hours
  • 12 hours
  • 1 day
  • 1 week

Hovering the mouse on data point provides detail information about data usage.


The graph contains the following details about the data:
  • Time stamp: It includes day, date, month, year, and time of data usage.
  • Uplink Data: It states Uplink Data usage.
  • Downlink Data: It states Downlink Data usage.
  • Data Usage: It states Data Usage for all applications.

Application Session Logs

Application Session Logs provides details of the applications used by the client. Select a client from MONITOR > WiFi > Clients to view Application Session Logs.

The top left corner denotes the total number of application session logs.

Hover on the pie chart icon to view overall aggregated data. The data provides information about Total Sessions, percentage count of Affected Sessions, Total Experience Time and percentage count for Poor App Experience.

The logs on the widget can be filtered using the available filters on the top right corner of the widget. To know more about the filters refer Filters on Widgets.

Detailed information about session logs is displayed in tabular format:
Property Description
App Name Name of the application.
Start Time Session start time.
End Time Session end time.
Duration(min)x Session duration in minutes.
% of Bad Time Percentage of time for which app experience was bad for the specified clients.
Location Location at which the client connected.
Potential Cause Potential root cause for application performance to be poor.
Average Bitrate Uplink Indicates average of the number of bits sent per second by the client in that session.
Average Bitrate Downlink Indicates average of the number of bits received per second by the client in that session.
Average Bitrate Jitter Uplink Average standard deviation in uplink bitrate.
Average Bitrate Jitter Downlink Average standard deviation in downlink bitrate.
Average RSSI(dbm) Average Received Signal Strength Indicator.
Average Retry Rate Average percentage of retry packets out of the total packets sent or received by the client.
Average Data Rate Upstream Average upstream data rate.
Average Data Rate Downstream Average downstream data rate.
Roaming Count Number of APs involved during the session.
Associated AP(s) List of APs involved in the client session.

Devices Seeing This Client

Devices Seeing This Client represents list of APs currently watching the client.

The top-left corner denotes the total number of APs seeing the client and the name of the AP associated with the client.
The detailed information is as follows:
Field Description
Name Name of APs seeing the client.
RSSI (dbm) RSSI states signal strength of an AP as seen by the client.
Radio 1 Operating Channel Shows the band and channel operating on radio 1. Channel is shown in brackets.
Radio 2 Operating Channel Shows the band and channel operating on radio 2. Channel is shown in brackets.
Radio 3 Operating Channel Shows the band and channel operating on radio 3. Channel is shown in brackets.
2.4 GHz Associations It states number of clients associated with 2.4 GHz radio.
5 GHz Associations It states number of clients associated with 5 GHz radio.
6 GHz Association It states number of clients associated with 6 GHz radio.

Clicking on the name of AP takes you to the Access Points Information page.

Rename a Client

You can change the name of a client.

Perform the following tasks to rename a client:
  1. Go to MONITOR > WiFi > Clients or MONITOR > WIPS > Clients .
  2. Right-click on the name of the client you want to rename or click on the menu icon (three vertical dots) and select Rename Client.
  3. Change the name of the client and click Done to save the changes.

Access Points

Access Point tab provides detailed information of an AP such as its name, IP Address, status, and the switch it is connected to.

Note: An AP's status is set as Inactive after 10 minutes of Inactivity.
You can view ongoing activities on an AP using View Ongoing Activities option available to the right top corner on the AP table. The list of live activities that can be viewed for AP are:
  • Packet Trace: Capture Packet Trace action on an AP captures the packet and inspectes it to help diagnose and solve network problems. Selecting this activity displays the list of those devices for which packet trace is in session.
  • Prevention: Prevention activity displays the list of all quarantine devices.
  • Client Connectivity Test:Client Connectivity Test tis performed to troubleshoot an AP that has client connectivity issues. Client Connectivity Test action displays the list of such devices, for those the troubleshooting is in progress.
  • None:Selecting None provided the list of all the APs without any filters.
You can perform the following actions on every AP, these actions are available on a right click on any AP:
Action Description
Update Firmware Using this option you can update the firmware on the AP to the latest or any previously released version.
Access Point Event Logs A log table that maintains event logs of APs.
Run Client Connectivity Test Runs the Client Connectivity Test.
View RF Explorer The RF Explorer shows you information such as the channels occupied by other APs in the vicinity of the AP and the RSSI values for each of the neighboring APs as seen by the AP.
Capture Packet Trace This option helps troubleshoot Arista devices operating in AP or AP/Sensor mode.
Packet Trace History You can view the Packet Trace History for a selected AP.
View on Floor Map This option redirects you to the location on the floor map where the AP is placed.
Customize Transmit Power or Channel Transmit Power Selection enables you to control the transmission power of the AP.
Move Using Move operation you can change location of an AP.
Reboot This operation Reboot's the AP.
Rename Renames the AP.
Delete Deletes the APs from the list of available APs.
Click on an AP in the list on the MONITOR > WiFi > Access Points page to go to the AP details page . The AP details page shows the event logs of the AP, a list of clients associated with the AP and their details, a graph showing clients by average data rate, top applications by traffic, and network usage. The selected AP's name is displayed on the top-right of the page. You can select another AP from the drop-down list.
The AP details page provides the following information:
Network Usage - Traffic
The chart displays a line graph showing the number of client association and its traffic volume, for all the clients on the selected folder or floor.
Network Usage - Poor Application Experience
This chart provides overall application usage analysis.
Baseline - Clients Affected By Poor Experience
The Baseline - Clients Affected By Poor Performance graph calculates the baseline for the percentage of clients affected by poor performance, for the selected AP, over a period of time.
Baseline - Retry Rate%
The graph calculates baseline for the Retry Rate % of the clients connected to the selected AP
Baseline - Averge Data Rate
The graph calculates the data rates for 2.4 GHz, 5 GHz, or 6 GHz for the selected SSID(s) and duration.
Baseline - Clients Affected by Failure
Baseline - Clients Affected by Failure chart provides calculated baseline for the percentage of clients that failed due to connectivity issues.
Baseline - Clients Affected by Poor App Experience
Baseline - Clients Affected chart provides the calculated baseline for the percentage of clients affected by poor app experience. This data is provided for the selected AP.
Clients by Average Data Rate
Displays a bar graph of the clients and their data usage, for the selected AP.
Top Applications by Traffic
Displays a bar graph of the top 5 applications that has highest data usage, for the selected AP.
Spectrum Occupancy
Shows the number of active radios and clients across the Rf spectrum.
Channel Utilization
Shows the AP channel utilization.
Currently Associated Clients
Currently Associated Clients widget provides the list of clients that are currently associated with the AP.
Ap Health
Shows the CPU and memory utilization of an AP.
Devices Seeing this AP
The widget displays the list of managed devices observing the selected device.
Visible VLANs
The widget displays details of the VLANs visible to the managed device.
Visible Access Points
Provides the list of the APs visible to the selected AP.
Visible Clients
Provides the list of clients visible to the selected AP.
Note: Views and charts that show information about channels other than the operating channels of the AP work best when the AP has a dedicated scanning radio. APs that do not have a dedicated scanning radio use background scanning, where typically an AP goes off-channel once every 60 seconds to scan one channel for 100 ms. Because background scanning takes a long time to scan all channels in the band, an AP in background scanning mode has a snapshot of the network that is anywhere between five minutes to an hour old. During this time, the radio environment could have changed significantly.
In the AP details view, you can click on the AP name under the AP icon (when you hover, you see the View Properties tool tip) to open the AP properties right panel. The panel shows you the wired side properties and health stats for the AP.
Note: The wired properties of only the primary interface (eth0) of the AP are shown, and LLDP must be enabled on the switch for current switch properties to be shown.
The managed APs also support a context menu from the AP Details page. Right-click the managed AP icon to view the context menu. T
Figure 2. Context menu in AP Details page

Image showing the context menu when right-clicking the AP icon.
The following table shows whether, depending on the state of the AP, the wired properties are current or they reflect the last known values. For example, for active APs, the wired properties shown are the current ones but for inactive APs they are the last known values. The values are not displayed for APs 802.11ac Wave-1 or lower and for APs with firmware older than version 8.9. Some properties (e.g., Health Stats) are updated at periodic intervals; others (e.g. Switch Name) are updated if and when needed.
AP State Switch Properties VLANs Detected IPv4 or IPv6 Properties Link Speed Health Stats
Switch Name Switch Vendor Switch Port
Active Current Current Current Current Current Current Current
Inactive or Offline Last Known Last Known Last Known Last Known Last Known Last Known Last Known with a note in the right panel: "Values when AP was last active"

 

(shown "--" in the Managed Devices and AP listing)

Mesh Root Current Current Current Current Current Current Current
Mesh Non-Root (Powered by DC or PoE brick) Not Displayed ("--") Not Displayed ("--") Not Displayed ("--") Current Current Not Displayed ("--") Current
Mesh Non-Root (Used for network extension and connected to a switch) Current Current Current Current Current Current Current

Link Aggregation: eth0 Up (regardless of whether eth1 is Up or Down)

Current Current Current Current Current Current Current

Link Aggregation: eth0 Down and eth1 is Up

Last known Last known Last known Last known Current Last known Current
Failsafe Last Known Last Known Last Known Last Known Last Known Last Known Last Known with a note in the right panel: "Values before AP entered failsafe mode"

 

(shown "--" in the Managed Devices and AP listing)

LLDP Disabled on Switch Last Known Last Known Last Known Current Current Current Current
The wired properties of only the primary interface (eth0) of the AP are shown. Thus, when using link aggregation, the switch and VLAN wired properties reflect the information available on the primary interface only; their values do not depend on the state of the secondary interface (eth1). The IP and health stats, however, do not depend on a particular interface; their values are current as long as at least one of the two interfaces is up.

Access Point Explorer

AP Explorer provides a holistic view of all the APs at a location and provides an easy way for the network administrators to understand AP distribution for each attribute.

To view the AP Explorer,
  1. Navigate to MONITOR > WiFi > Access Points.
  2. Click Access Point Explorer.
Alternatively, you can also navigate to AP Explorer from MONITOR > WIPS > Managed Device Explorer.


On the AP Explorer chart, you can filter the devices based on the Device Status (All, Active, or Inactive). You can use the attribute drop-down menu to view graphical AP distribution based on the selected attribute. For example, you can the AP Explorer chart to get a summary view of AP Health by looking at the APs based on CPU Utilization or Memory Utilization.

Clients by Avg. Data Rate for an Access Point

The Clients by Avg. Data Rate graph displays clients classified based on data rate. CV-CUE has pre-defined, fixed thresholds for Average Data Rate. Since thresholds are configurable, user may select a value that falls in between a bucket on the X-axis. For instance, if a user sets the data rate threshold to 75 Mbps and RSSI threshold to -68 dBm, then these values fall in the “50 to 100 Mbps” data rate bucket and “-65 to -75 dBm” RSSI bucket, respectively.


The following logic is used to determine the color of the bar that falls in such a bucket:
  • If all values in the “50 to 100 Mbps” bucket are below 75 Mbps, then the bar in the “50 to 100 Mbps” bucket is red.
  • If all values in the “50 to 100 Mbps” bucket are above 75 Mbps, then the bar in the “50 to 100 Mbps” bucket is green.
  • If some values in the “50 to 100 Mbps” bucket are above and below 75 Mbps, then the bar in the “50 to 100 Mbps” bucket is yellow.
The chart can be observed for the following bands:
  • 2.4 GHz
  • 5 GHz
  • 6 GHz
  • All Bands

Currently Associated Clients for an Access Point

Currently Associated Clients widget provides the list of clients that are currently associated to the AP.


The graph displays the following information:
Column Description
Name Name of a device to which AP is connected.
User Name Name of a user.
MAC Address Unique 48-bit address of the AP/ 802.11 PHY modes used by the AP.
IP Address IP address of the AP
Associated SSID Name of a SSID to which client is connected.
OS Operating System running on the client.
UP/Down Since Up since time or Down since time
RSSI (dBm) Received Signal Strength Indicator.
Sticky Denotes whether client is sticky or not. Sticky client means if client is connected to AP and while roaming it found better AP with more better signal strength, still it decides to stay connected with older client.
Tx Data Rate Tx Data Rate is Transmission Data Rate of a client.
Rx Data Rate Rx Data Rate is Received Data Rate of a client.
Avg Data Rate Avg Data Rate is Average Data Rate of a client
Retry Rate (%) Retry Rate (%) is Retransmission rate of a client.

Top Applications by Traffic for an Access Point

Top Applications by Traffic chart graphically represents data usage for applications. It always represents data for top five applications that have highest data usage (transmit and receive). To view exact data usage, hover on the specific bar in the graph.


You can choose to view the top applications by traffic for the following time intervals:
  • 2 hours
  • 4 hours
  • 8 hours
  • 12 hours
  • 1 day
  • 1 week

Network Usage

You can access the Network Usage chart in two different ways from CV-CUE UI. If you access the chart from the performance dashboard, it displays a line graph showing the number of clients associated with the SSID and its traffic volume, for all the clients on the selected folder or floor. Whereas when you access the chart through AP drill down, it displays similar data, but this time for the selected AP.

If you hover over the graph, a tooltip providing quick information like timestamp, the number of clients associated and the used traffic volume appears.

You can view or retrieve data using the filters. To know more about these filters refer Filters on Widgets.

The data of the network usage chart can be filtered based on two parameters; a client's data and the amount of data used by an application.

Drill down on the data point on the graph, redirects you to the page containing client connections table. This table contains the list of all the client connections along with their detailed information for the selected timestamp. For client details refer, Filtered Network Usage Chart.

Drill down on the bar, redirects you to another page that contains:
  • Client Connections table - contains the list of all the client connections along with their detailed information for the selected timestamp.
  • Top Applications - that shows top ten applications with highest data usage. You can select an app from the drop-down list given on the top left corner of the table. Along with the selected application name it displays application specific data consumption.
  • All Application traffic - it displays the total amount of data used by the applications for a selected Access Point or a location. This information is shown at the top-right corner of the table.
  • Client Connections - selecting client connection displays the list of all the clients using the application selected from the top applications list.
  • Access Points Distribution - selecting access points distribution displays the list of all the associated APs.

Network Usage - Poor Application Experience

This chart provides overall application usage analysis. It states the time for which application quality was good and the time for which it was bad.

The graph displays poor app experience in red colour and good app experience in green colour. X-axis displays time slots and Y-axis displays amount of time app quality was good or bad.

Hover on the graph provides a tool tip with the following information:
  • Timestamp
  • No of associations
  • Aggregated value for poor app experience in percentage.


Click the data point or bar graph in the chart to view more details.

There are four filters provided on the right corner of the chart to filter the data:

Conferencing Apps Filter

The graph can be viewed for specific conferencing app using All Conferencing Apps filter. Filter can be applied on the following apps:
  • WebEx
  • Skype
  • GoToMeeting
  • Hangouts
  • Slack
  • Microsoft Teams
  • Zoom
Selecting All Conferencing Apps option provides details for all the above listed apps at once.

SSID Filter

The application quality can also be viewed for specific SSID, using All SSIDs filter. Selecting a specific SSID provides a application quality graph for the specified SSID. Selecting All SSIDs provides an aggregated data on a graph for all the SSIDs.

Frequency Filter

The data can be filtered based on frequencies. The data for applications working on the selected frequency is represented graphically. The possible values for frequency filter are:
  • 2.4 GHz
  • 5 GHz
  • 6 GHz
  • All Bands

Time Filter

You can view or fetch the Application Session Logs for the following time intervals:
  • 2 hours
  • 4 hours
  • 8 hours
  • 12 hours
  • 1 day
  • 1 week

Spectrum Occupancy

As shown in the following figure, you can filter on a band and duration to see the number of radios and clients that were active in that band in that duration. This can help you identify congested or under-utilized bands.

Channel Map

Channel Map displays the number of clients and Access Points (APs) visible to the managed device at a time on a given channel. Network administrators can use this information to identify congested or underutilized channels in a given band.

To view Channel Map, select Channel Map from the drop-down menu in Specturm Occupancy chart.

In the Channel Map chart, from the right-hand drop-down menu, select the band and use the time slider to select your time interval to view the number of visible clients and APs. You can view the Channel Map upto 12 hours in the past from the current time. Hover over the chart to view the exact count of APs and clients on a given channel.

RF Explorer

You can launch the RF Explorer from the Spectrum Occupancy chart or from the AP listing under MONITOR > WiFi > Access Points by right-clicking on an AP and selecting Troubleshoot > View RF Exlporer.

As seen in the previous figure, the RF Explorer shows you what an AP sees in its RF neighborhood. For example, it shows you the channels occupied by other APs in the vicinity of the AP and the RSSI values for each of the neighboring APs as seen by the AP.

You can use the RF Explorer to identify issues such as co-channel and adjacent channel interference, and DFS channels occupied by APs. The grey rectangle stretching across the RSSI axis represents the operating channel of the AP itself; the heights of the other channel trapezoids indicate the RSSI values of those channels as seen by the AP. You can click on an AP from the list of APs to see its channel details on the chart (as seen in the callout in the previous figure).

Interference Classifier

 

One of the reasons why Wi-Fi clients encounter RF issues is non-Wi-Fi interference. All Wi-Fi 6 and above APs can perform interference classification. CV-CUE classifies interference into four categories — Wi-Fi, Microwave Oven (MWO), Frequency Hopping Spread Spectrum (FHSS), and Continuous Wave (CW).

You can run the interference classifier for a specific band or for a specific channel. The results are shown in a separate tab as a read-only information. To launch Interference Classifier from the AP listing, click MONITOR > WiFi > Access Points . Right click an AP and select selecting Troubleshoot > Start Interference Classifier .
Figure 3. Interference classifier

The interference classification opens in a separate tab. Hover your pointer over a data point to see more details about the interference source for a specific channel.

Channel Utilization

As shown in the following figure, the channel utilization chart shows the AP channel utilization (as a percentage value) averaged over 15-minute intervals for both the 2.4 GHz and 5 GHz bands, for the selected duration.

The channel utilization chart is available for 2.4, 5, and 6 GHz bands.

Access Point Health

As shown in the following figure, the chart shows the average CPU and memory utilization of an AP for the selected duration.

Visible BSSIDs

The Visible BSSID widget provides the list of the APs visible to the selected AP. The widget provides two different views: one for Managed BSSIDs and the other for Unmanaged BSSIDs.

Visible BSSIDs - Managed

Selecting Visible BSSIDs - Managed from the drop-down list displays APs that belong to your network and are in the vicinity of the selected AP.

Visible Access Points - Un-managed

Selecting un-managed from the drop-down list displays the Access Points that do not belong to your network but are in the vicinity of the selected AP.

Radios Seeing this Access Point

This widget is available on drilling down from any Wi-Fi device. The widget displays the list of managed Wi-Fi device radios observing the selected device with the best RSSI.

Visible VLANs

The visible VLANs widget is available on drilling down from any managed Wi-Fi device. The widget displays details of the VLANs visible to the managed device. "Monitored" in the Status column indicates that the VLAN is being monitored by that managed device. "Not monitored" indicates that it is being monitored by another managed device.


The VLANs that can be seen by the selected device are populated depending on the following:
  1. If the VLAN is used by the device to communicate with the Wireless Manager (aka communication VLAN); shown marked with an asterisk.
  2. If the ID of the VLAN is added while configuring the SSID.
  3. If you enable Auto VLAN monitoring from CONFIGURE > Device > Access Points > Security, the active VLAN is monitored by the device with the highest MAC address.

    Thus the monitored VLAN's ID is added to the monitoring device's list and the VLAN's status is set to Monitored.

  4. If you choose to enable Monitor Additional VLANs , one needs to specify a comma-separated list of VLANs to be monitored. In this situation, any active VLAN from the specified list is monitored. The device with the highest MAC address monitors the VLAN. The monitored VLAN's ID is added to the monitoring device's list and VLAN's status is set to Monitored.

Visible Clients

The Visible Client widget provides the list of clients visible to the selected AP. It also provides the total number of visible clients on the top left corner of the widget.


View Access Point Event Logs

AP event logs table maintain event logs of AP. The captured events are from an AP perspective and do not include data related to clients and their connectivity information. These events are sent by the AP to Wireless Manager in real time and logged at Wireless Manager.

You can view AP Event Logs, by selecting the option Troubleshoot > View Event Longs. with a right-click on any AP.


The detailed information about the event logs is as follows:
Column Description
Category It is a category of event.
Type It is a type of event.
Description It is description of event.
Date Timestamp at which event occurred.
The AP Event Logs details can also be fetched for specified durations using Duration Filter. To know more about the duration filter refer Filters on Widgets.
The various types of events that are logged for an AP are:
  • AP Memory Status
  • AP Reboot
  • AP IP Conflict
  • AP System Service Crash
  • AP Ethernet Port Status
  • AP Upgrade Failure
  • AP Upgraded
  • AP CLI config change
  • AP DHCP lease status, etc.

View on Floor Map

View on Floor Map option redirects you to the location on the floor map where the AP is placed.

To view the AP on the Floor Map:
  1. Navigate to MONITOR > WiFi > Access Points or MONITOR > WIPS > Access Points.
  2. Right click on the AP, you wish to locate on the Floor Map.
  3. Select Locate. These option is enabled only if the selected AP is placed on any of the floor maps. Else it is disabled.

Customize Transmit Power or Channel

Transmit Power Control enables you to control the transmission power of the AP. Transmit Control Settings are configured from Radio Settings. These settings are the generic settings for all the APs.

CV-CUE facilitates AP specific Transmit Control Settings.

To know more about Transmit Power Selection refer Configure Transmit Power Selection in Radio Settings and for Channel settings refer Configure Basic Radio Settings.

For AP specific customization:
  1. Navigate to MONITOR > WiFi > Access Points.
  2. Right click on the AP, for which you wish to customize the settings.
  3. Select Customize Transmit Power or Channel.
  4. Select appropriate frequency for which you wish to customize the settings.
  5. Select Customize Transmit Power for transmit power settings. Select Auto or Manual option.
  6. Select Customize Channel Settings for channel settings. Select Operating Channelas either Auto or Manual.
  7. Click Save.

Customize VLANs to Monitor per Access Point

You can configure custom VLANs for individual APs to monitor. The steps to do so are as follows:
  1. Go to MONITOR > WiFi > Access Points or MONITOR > WIPS > Managed WiFi Devices , or go to a floor plan and select an AP on the floor plan.
  2. Right click on the AP and click Customize > VLANs. The Customize Access Point VLANs right panel appears.
  3. Add the VLANs you want the AP to monitor. Detected VLANs are VLANs that the AP has detected on the network. They might help you select VLANs to monitor.
  4. Select whether you want the VLAN to use a Static IP or DHCP. For the Static IP case, enter the IP network configuration.
  5. Select a Communication VLAN from among the monitored VLANs. The AP communicates with the Wi-Fi server over the Communication VLAN. So the Communication VLAN must be one of the VLANs that the AP monitors.
  6. Save the configuration.

Move an Access Point

CV-CUE provides the facility to change the location of an AP using the Move option.

To move an AP:
  1. Go to MONITOR > WiFi > Access Points or MONITOR > WIPS > Access Points.
  2. Right-click on the name of the AP that you want to move and select Move.
  3. Select the new location, where you wish to move the AP.
  4. Click Move.
  5. Select appropriate option to confirm. If you select Yes the selected access points will adopt the configuration applied at the destination folder. Also if the AP is currently placed on any of the floor map, then the AP will be removed from that map.

Behavior - Move Devices

When you move devices across locations, the behavior of the devices may change depending on multiple factors.

The factors to be considered are captured below.

Suppose that you select a mix of devices to move, i.e., some are part of a group and others are not.
  • For devices that are not part of any group, the behavior is exactly as expected - when moved from one folder to another, these devices start using the default configuration of the destination folder.
  • If the destination folder has no groups, devices from the source groups will be removed from their respective groups and all devices will start using the default configuration of the destination folder.
  • For devices that were part of some group in the source folder, see the table below.
Source Destination  
Is the device in a group? Does the group have a config? Is the same group available at the destination location? Behavior
Yes Yes Yes All devices become part of the destination group but retain their configuration.
Yes Yes No All devices are removed from their respective groups and start using the default configuration of the destination folder.
Yes No Yes All the devices are removed from their respective groups and become part of the destination group. They start using the configuration of the destination group.
Yes No No All devices are removed from their respective groups and start using the default configuration of the destination folder.

Reboot Access Points

You can reboot an AP, with the help of CV-CUE.

Perform the following tasks to reboot an AP:
  1. Go to MONITOR > WIPS > Access Points.
  2. Right-click on the name of the AP that you want to reboot and select Reboot.
  3. Click Yes to reboot the AP.

Rename Access Points

You can change the name of the AP.

Perform the following tasks to rename an AP:
  • Go to MONITOR > WiFi > Access Points or MONITOR > WIPS > Access Points.
  • Right-click on the name of the AP that you want to rename and select Rename.
  • Change the name of the AP and click Done to save the changes.

Delete Access Points

You can delete the APs from the list of APs available on Access Points tab.

Perform the following tasks to delete an AP:
  1. Go to MONITOR > WiFi > Access Points or MONITOR > WIPS > Access Points.
  2. Right-click on the name of the AP that you want to delete and select Delete.
  3. Click Yes to confirm the deletion.
    Important: If the AP is physically active on the network after deletion, then:
    • CV-CUE marks the AP to Unknown location.
    • The default device template of the Unknown location is applied.
    • The default SSIDs are pushed on the active AP, if the AP is configured in the Device Template.
    • No SSIDs are applied, if the AP is not configured.

View Ongoing Activities on Access Point

View Ongoing Activities is an action available on Access Points screen.

To view the ongoing activities on an AP, perform the following steps:
  1. In CV-CUE navigate to Access > Access Points.
  2. Click on View Ongoing Activities action present on the top right hand corner of the screen.
  3. From the drop-down menu, select one of the following:
    Choose From:
    • Packet Trace: It displays the list of APs with their information on which the Packet Trace Activity is in progress.
    • Prevention: It displays the list of APs in quarantined status.
    • None: It displays the list of APs on which no activity is going on.

View Access Point Uptime

Access Point (AP) Uptime indicates how long the AP has been up and running. To view AP Uptime, navigate to MONITOR > WIPS > Managed WiFi Device. The Last Booted At column shows the AP Uptime.

Assign a Device to a Group

You can assign one or more access points from a location subtree to a group. It is a method used to apply a single Wi-Fi configuration to multiple devices across different locations. If a group has no configuration, then the assigned devices will use the default Wi-Fi configuration of their respective locations. On the other hand, suppose an AP already has custom Wi-Fi configuration applied to it. Then if you assign such an AP to a group it will start using the Wi-Fi configuration of the group.

Assigning a device to a group can be performed from two different tabs:

Assign a Device to a Group from Access Points tab

One of the ways to assign access points to a group is from the access point list available on the access point page.

To assign a device to an existing group, perform the following steps:
  1. Go to MONITOR > WiFi > Access Points.
  2. Right-click on the name of a single AP, that you want to assign to a group or click on the menu icon (three vertical dots) and select Assign/Reassign to a Group.
  3. Select the group to which you want to assign the selected AP.
    Info:In case the group is not available in the list, you can add a new group from this panel. The newly added group will always be created at the top-most allowed folder of the selected locations. Adding a group option is disabled, if the user does not have access to the folder.
    Note: When assigning multiple APs, only those groups which are available to the selected access points' folders will be listed under the Select a Group panel.
  4. Click Assign.

Assign a Device to a Group from the Folders/Floors Page

In addition to assigning a device to a group from access point’s page, you can also do this from the folder/floor page.

To assign a device to an existing group, perform the following steps:
  1. Go to SYSTEM > Navigator > Folders/Floors.
  2. Right-click on the name of a single AP that you want to assign to a group or click on the menu icon (three vertical dots) and select Show Available Devices option from the list.
  3. Right-click on the name of a single AP that you want to assign to a group or click on the menu icon (three vertical dots) and select Assign/Reassign to a Group.
  4. Select the group to which you want to assign to the selected AP.

    Info:In case, the group is not available in the list, you can add a new group from this panel. You cannot add a group if you do not have access to the top-most allowed parent folder. The newly added group will always be created at the top-most allowed parent folder of the selected locations.

  5. Click Assign.

Re-assign a Device to Another Group

This operation allows you to move the access points from one group to another. Once reassigned, selected access points will start using target group's Wi-Fi configuration. If the target group does not have Wi-Fi configuration applied to it, access points will use their location's default Wi-Fi configuration. Even if the selected access points were not assigned to any group, reassigning will assign them to the target group.

Note: If the device is re-assigned to a group that does not have any configuration , then such devices will use the default Wi-Fi configuration of the respective folder.
Re-assigning a device to a group can be done from three different tabs:

The first two methods are the same as for assigning a device to a group. The third one is applicable only to re-assigning devices.

To re-assign a device to another group from one group's page, perform the following steps:
  1. Go to SYSTEM > Navigator > Groups.
  2. Right-click on a selected group and select Show Assigned Devices.
  3. Right-click on the name of the AP you want to reassign and click Assign/Reassign to a Group.
  4. Select a group from the list to re-assign that device to the selected group.

About Device Firmware Update in CV-CUE

You can configure an automatic update that includes upgrade or downgrade of Arista devices deployed at your enterprise premises. The device update can be configured or scheduled for devices that connect to the server for the first time as well as for existing devices that are already placed at various locations.

A device firmware update configuration is specific to a location and applies to all Arista devices placed at the location. An individual Arista device cannot have an independent device firmware update configuration.

A device firmware update configuration can be created for location folders only. A location floor cannot have its own device firmware update configuration; it inherits the device firmware update configuration from the parent location folder. When you do not recursively apply a device firmware update configuration to the child location folders, the configuration is applied only to the selected location folder and the location floors directly under the selected location folder.

You can choose to apply a device firmware update configuration recursively to the child location folders, when you are creating or editing the device firmware update configuration, However, a child location folder can have its own device firmware update configuration. If you define the firmware update configuration specific to the child location folder when a schedule for its parent location folder is already defined, the schedule configured to the child location applies to the child location folder

When an active schedule is deleted or modified for a location, the sensors of that location on which the update process is already started or the update command is scheduled would still be upgraded.

The device firmware update setting for a location applies to all active devices deployed at the location. The update can be applied to both existing Arista devices and new devices connecting to the Arista Server for the first time. A schedule can be configured for existing Arista devices at a location. The device firmware update configuration is not tied to release numbers. If a server is updated multiple times between the creation of the update configuration and scheduled time of device update, the devices are updated to the latest firmware release.

Update AP Firmware

You can update the firmware on the AP to the latest or any previously released version. The AP automatically reboots after the firmware update is complete.

Perform the following tasks to update the firmware of an AP:
  1. Go to MONITOR > WiFi > Access Points.
  2. Click the Options icon (three vertical dots) or right-click on the name of the AP and select Update Firmware.
  3. Select the required firmware version from the Version drop-down list.
  4. Click Update.

Update Firmware for Multiple Access Points

You can update the firmware for multiple APs at the same time.

To update the firmware for multiple APs, perform the following steps:
  1. Go to MONITOR > WiFi > Access Points.
  2. Select the required APs, click the Options icon (three vertical dots) and click Update Firmware. Update Firmware page is displayed as follows:
    • The model names of the selected APs.
    • Number of access points selected for each device model.
    • Version, drop-down list that contains the available firmware versions for each device model.
  3. Select the required version number per AP model, from the Version drop-down list.
  4. Click Update to update the firmware.

Schedule Firmware Update of a Single AP

Follow these steps to create a recurring or one-time schedule to update the AP firmare:
  1. Go to MONITOR > WiFi > Access Points.
  2. Right click the AP and select Update Firmware.
  3. Select the version from the right panel.

Schedule Firmware Update of Multiple Access Points

Follow these steps to create a recurring or one-time schedule to update the AP firmare:
  1. Go to MONITOR > WiFi > Access Points.
  2. Click the Firmware Update Settings icon.
  3. Provide the schedule for update in the Firmware Update Settings right panel.
    The following table provides additional information for some of the options the Firmware Update Settings panel:
    Table 1.
    UI Option Description
    Apply Update Settings Recursively to Subfolders Applies the update settings to the selected folder location and also to all its subfolders, if any.
    Hitless Update Updates access points with minimum impact to Wi-Fi clients. In certain situations, when the selected AP is the only AP on the floor and there are no APs around for clients to connect, then the Wi-Fi will be impacted.
    Update Window Defines the duration for the firmware update. For example, if the Start Time is 1 hour 15 minutes and the Update Window is 20 hours 30 minutes, then the update will begin at 1:15 AM and end at 9:45 PM. Firmware updates are not initiated after the expiry of the Update Window. However, ongoing updates during the Update Window can continue even after the Update Window expires.
The Scheduled state is indicated by an orange calendar icon in the Update column under Monitor > WiFi > Access Points. You can also see which APs are scheduled for a firmware update by clicking on the AP icon of the W-iFi Network Counters as shown in the following figure.

Cancel Firmware Update

You can cancel the firmware update for an AP. When an update is initiated for an Arista AP, the AP is initially in Active state and changes to Inactive state after a while. You can cancel the update only until the Arista AP is in Active state. Once the device is in Inactive state, you cannot cancel the firmware update.

Perform the following tasks to cancel firmware update:
  1. Go to MONITOR > WiFi > Access Points.
  2. Right-click the AP for which you want to cancel the firmware update and select Cancel Update.
  3. Click Yes to cancel the update.

Access Point Web Shell

Web Shell is an online interface to remotely log into an AP via SSH. An administrator or a superuser can open Web Shell for a specific Access Point (AP) from CV-CUE (CV-CUE). Web Shell is helpful to troubleshoot AP issues, especially if an AP is behind a NAT. The URL for the Web Shell is specific to an AP. You can bookmark the URL to open a shell session to the AP directly instead of opening the shell session from CV-CUE.

Depending on the limit defined in the config parameter, you can open concurrent Web Shell sessions to an AP. Web Shell is unavailable for inactive APs.
Note: If the AP is overburdened with data-heavy operations, then there could be a delay with an ongoing Web Shell session or a new Web Shell may not open. For example, if you are already performing a task in the Web Shell, and then you start some data-heavy operations such as packet capture, generate debug logs, or live client troubleshooting, you would see a latency in the Web Shell. If you are performing live client debugging (or similar other data-heavy operations), and then you try to open the Web Shell, you may receive an error and the Web Shell may not open.

For the list of APs supporting Web Shell, see the Access Point Feature Matrix article.

You can open an AP web shell from:
  • MONITOR > WiFi > Access Points
  • MONITOR > WIPS > Managed WiFi Devices
  • Floor Plan

Open Access Point Web Shell

You can open the Access Point (AP) web shell from CV-CUE for an individual AP and perform basic operations using CLI commands.

To open the AP Web Shell:
  1. Got to MONITOR > WiFi > Access Points .
  2. Right click the AP and go to Troubleshoot > Open Web Shell .

    Web Shell opens in a new tab.

  3. Enter the root credentials and log in to the web shell.

    You can now type your AP-CLI commands.

To terminate the session, close the browser.

Custom Certificates for Access Points

Manage custom certificates and CA certificates for access points from a central location.

Access points (AP) can authenticate themselves to the network using respective certificates. With AP VPN, an AP uses the EAP-TLS protocol for authentication. Since EAP-TLS requires the client and network to authenticate themselves using respective certificates, the protocol is considered robust compared to exchanging shared secret and Xauth password. Therefore, the AP VPN solution requires the AP to use a unique certificate per AP or per tunnel. APs can use the default certificate or a custom certificate for the authentication.

Caveats

Note the following points before you create certificates:
  • You can upload the Device and CA certificate in the PEM encoded format.
  • You can upload a certificate with a maximum of five CA chain length.
  • You need to upload the device certificate and root CA chain separately at two different places.
  • When you regenerate a CSR, the existing certificates on the APs are not deleted until the new signed certificates are installed on the AP.
  • When you regenerate a CSR, the existing certificates on the APs are not deleted until the new signed certificates are installed on the AP.

Certificate Flow Overview

High level process flow for managing certificates.

Here’s a high level process flow on how you manage certificates in CV-CUE:
  1. Generate CSR.
    1. Create a new tag and assign it to a CSR from the global certificate menu. Note that you cannot a create a new tag for an individual AP.
    2. Use an existing tag to generate a CSR. You can use an existing tag for an individul AP or for all APs.
  2. Download the generated CSR and get it signed manually/offline.
  3. Upload Device Certificate.
  4. Upload CA Certificates.

Certificate Actions and Tags

Describes different actions available for certificates from the global toolbar as well as per AP.

You can take actions related to certificates for each AP or for all the APs seen in the Monitor > Access Points tab. When you use the global menu to perform your certificate-related actions, it applies to all APs in that location. For individual APs, you can perform the certificate actions from the three-dot menu per AP.

The following image shows the certificate actions from the toolbar:
Figure 4. Certificate actions from the global toolbar

The following image shows the certificate actions per AP:
Figure 5. Certificare actions per AP

Certificate Tags

Each certificate must have a tag associated with it. Typically, you assign tags for a specific function or you could keep a generic tag and use it for all purposes. For example, you could use a tag named IPsec and assign it to all the APs that use the IPsec protocol. You can also use a tag named Generic and use it for all purposes. This makes handling of certificates easier through tags. Note that after you update the certificate, you still need to manually upload the new certificates to APs.

When you manage certificates for the first time, you do not have any predefined tags. In such cases, you have to create a tag first and then generate a CSR.
Figure 6. Create a new certificate tag

You can create a new tag from the global certificate actions only. You cannot create a new tag for an individual AP.

When you generate a CSR for a single AP, you can only assign pre-created tags.

CSR Configuration

Configure CSR properties for access points.

CSR Configuration allows you to configure CSR properties for your AP. This is a location-based configuration.

To configure CSR for your AP:
  1. Go to MONITOR > WiFi > Access Points
  2. Click the Certificate Action button from the global toolbar and click CSR Configuration.
  3. In the rght panel, provide the values for each field.
    Figure 7. CSR configuration

  4. Save the configuration.

Generate CSR

Generate CSR for your access points.

You can generate CSR for individual APs or all the APs at the selected location. When you generate CSR for all the APs, you can create a new tag and assign it to the CSR. However, if you generate a CSR for an individual AP, you cannot create a new tag. You have to use an existing tag.

To generate CSR for all the APs at a specific location:
  1. Go to MONITOR > WiFi > Access Points .
  2. Click the Certificate Action button and click Generate CSR.
  3. Assign a new tag or use any existing tags if you have.
    Figure 8. Add new tag and generate CSR

  4. Click Generate.

Manage Certificates

Manage certificates for each access point.

You can see all the certificates for a location from the Manage Certificates page. It is a per-AP feature. Right-click an AP, then click Certificate > Manage Certificates . You can view the current status of certificates based on the tags. Refresh the page to get the latest certificate status.

For each certificate tag, you can perform the forllowing actions:
  • Generate CSR
  • Download CSR
  • Upload Device Certificate
  • Delete Certificate
  • Repush Certificate
Figure 9. Manage certificates per AP

The Last User Action Status column shows the latest action performed by the user. For example, if you regenerate the certificate, this column shows the status of your action. The Certificate Status on AP column shows whether the AP already has a certificate or if it’s in the process of obtaining a certificate.

The actions on the Manage Certificate page are already associated with a tag. Therefore, you do not have to provide a new tag when you perform any action from this page.

Upload Device Certificate

Upload device certificate for one or all access points.

After the certificates are signed by the signing authority, you can upload the device certificate either from the global toolbar or individually for each AP. You must upload the device certificate first before uploading the CA certificates.

To upload the device certificate for each AP:
  1. Go to MONITOR > WiFi > Access Points .
  2. Select the APs for which you want to upload the signed certificates.
  3. Click the three-dot menu and click Certificate > Upload .
    Figure 10. Upload certificate for a single access point

  4. Select the certificate tag and click Upload.

Upload CA Certificate

Upload CA certificate in Advanced Settings.

You can upload the CA certificates from the global settings and the CA certificates get automatically applied to the respective APs that have the device certificate installed.

To upload CA certificates:
  1. Go to SYSTEM > Advanced Settings > CA Certificate .
  2. Click Upload CA Certificate.
    Figure 11. Upload CA certificate

  3. Select the certificate or the certificate chain zip file from your local drive.
  4. (Optional) Select a certificate and click the three-dot menu icon to Delete or Download the CA certificate.
  5. (Optional) Click the certificate to view the certificate details in the right panel.

Note that the default certificate is grayed out and you cannot delete it.

Delete Certificate

 

When you delete a certificate, the tag is also deleted from the AP. When you delete certificates from an AP, you delete both the device certificate and CA certificates associated with the respective tag.

To delete certificates from an AP:
  1. Go to MONITOR > WiFi > Access Points .
  2. Select the APs for which you want to delete the certificates.
  3. Click the three-dot menu and click Certificate > Delete .

However, if you want to update a certificate and not delete it, you can use the Upload option and it will update the certificate.

 

Repush Certificate

Repush a certificate to reupload an existing but corrupt certificate.

When you repush a certificate, the server tries to reupload the device and CA certificates to the AP. Use this option when the AP malfunctions and stops associating with the installed certificates.

When you initiate the Repush action, the server automatically identifies the certificate that was previously available and tries to reinstall the certificate. Note that when you delete a certificate from an AP, the Repush action will not be effective to reinstall the certificate. You need to manually reupload certificates then.

Radios

The Radios tab under MONITOR tab displays a list of all the radios operating on 2.4 GHz, 5 GHz, and 6 GHz bands. It displays a list of clients that are recently associated to the selected Radio. The recent associations are either those that happened in the last 4 hours or the latest 100 clients. This is the total number of associations in the system and not per device.


The Radios tab displays the following information about radios:
Field Description
Status Indicates whether the radio is on or off.
Access Point Name Name of the AP.
Channel Width Displays the width of the operating channel of the radio such as 80 MHz or 40 MHz.
MAC Address Unique 48-bit address of the AP.
IP Address Displays the IP address.
Device Template Indicates the device template applied to the device.
Channel Displays the Channel number on which the AP radio operates.
Clients Displays the number of clients connected to the radio.
Tx. Power(dBm) Indicates the transmission power.
Frequency Indicates the frequency on which radio is operating.
RF Utilization (%) Indicates the percentage of transmit and receive time on the radio.
Upstream Usage Indicates upstream data usage.
Downstream Usage Indicates downstream data usage.
Worst Client RSSI (dBm) Displays the worst client signal strength.
Retry Rate (%) Indicates the re-transmission rate in percentage.
Location Displays the radio location.
Model Displays the name of the device model.
Noise Floor (dBm) Indicates the measure of the signal created from the sum of all the noise sources and unwanted signals within a measurement system.
Channel Width Shows the width of the operating channel of the radio.

Turn Radio On or Off

You can turn individual Access Point (AP) radios on or off. To understand the motivation for this, consider a floor where Wi-Fi APs with both 2.4GHz and 5GHz radios are deployed. Since the 2.4GHz signal propagates better than 5GHz and APs are often deployed to provide high 5GHz RSSI all over the floor, some areas on the floor end up having an “excess” of 2.4GHz signal, i.e., these areas get high RSSI signal from multiple 2.4GHz AP radios. This could cause interference in those areas because the 2.4GHz band has only three non-overlapping channels. You can then simply turn off the 2.4GHz radio for APs near these high 2.4GHz interference spots on the floor.

You can turn an AP radio on or off only if:
  • The AP is active and
  • The radio is not part of a mesh network.
The steps to turn a radio on or off are as follows:
  1. Select the location of the AP whose radio you want to turn on or off.
  2. Go to Monitor > WiFi > Radios.
  3. Right-click on the radio and select Turn Radio Off or Turn Radio On.
    Note:
    • When you turn a radio off, all SSIDs on that radio are turned off. For uninterrupted Wi-Fi in the coverage area of an AP, make sure that at least one AP radio is on.
    • Turning a radio on or off can take a few minutes; the radio appears in italics until its status has changed, after which the UI shows the updated status—on or off, as the case may be.
    • A radio that has been turned off manually is not turned on automatically when its AP reboots or when an SSID of that AP is scheduled to be on.

Active SSIDs

The Active SSIDs page displays a list of active SSID profiles.

Go to MONITOR > WiFi > Active SSIDs to view the Active SSIDs page.
The Active SSIDs page displays the following information:
Field Description
SSID Name of the SSID profile.
Security The mode of security used.
Authentication The authentication method used.
2.4Ghz Clients The number of clients connected on the 2.4 GHz frequency.
5 GHz Clients The number of clients connected on the 5 GHz frequency.
6 GHz Clients The number of clients connected on the 6 GHz frequency.
2.4 GHz Radios The number of 2.4 GHz radios on which the SSID is being broadcasted.
5 GHz Radios The number of 5 GHz radios on which the SSID is being broadcasted.
6 GHz Radios The number of 6 GHz radios on which the SSID is being broadcasted.
Uplink Data The uplink data usage.
Downlink Data The downlink data usage.

Application Visibility

Application information page provides detailed monitoring information for an application selected from the Application Visibility tab. It displays a list of top 10 clients using the selected application and a line graph plotting the usage of the selected application over a period of time.

The name of the selected application is displayed on the top-left of the page. You can select another application from the drop-down list.

The application information page displays the following information:
  • Baseline - Clients Affected
  • Baseline - % Poor Application Experience
  • Application Traffic: It displays the usage of data of the selected application, over a period of time. Refer Application Traffic section for more information.
  • Application Traffic - Clients
  • Application Traffic - Sessions
  • Application Traffic - Quality of Experience
  • Clients Using This Application: It displays a list of the top 10 clients with highest data usage for the selected application along with the detailed information of the client like Username, MAC address, IP address, Recently Associated SSID and so on. Refer Clients Using This Application section for more details.

Monitoring an Application

You can monitor an application, from the list of applications that are displayed in the Application Visibility tab.

To Monitor an application, perform the following tasks:
  1. Go to MONITOR > WiFi > Application Visibility.
  2. Click on the name of the application that you want to monitor. A page providing detailed application information is displayed as follows:

Application Traffic

Application Data Usage Over Time widget displays the usage of data of the selected application, over a period of time. The data is displayed for clients using the selected application, on the selected folder or floor.

You can view or retrieve data using the three filters SSID, Frequency Filter and Time Filter. To know more about these filters refer Filters on Widgets. Use Start Live button for live data.

The graph is plotted at a time interval of 15 minutes. If its live data it is plotted every 3 seconds. If you hover the mouse over the graph, you can get a quick view of the timestamp and the data consumption by the selected application, at the given time.

Visible Clients with Most Application Traffic

The Visible Clients with Most Application Traffic widget displays a list of the visible clients with highest usage of the selected application along with the detailed information of the client. The number on the top left corner indicates the total number of clients with the most traffic.

The widget has a provision to view or retrieve data using the filters. To know more about these filters refer Filters on Widgets.

You can modify the view of the table by using the set of tools provided in the top-right corner of the widget. You can sort the data in an ascending or descending order by clicking on the Name column.

Automated Root Cause Analysis

CV-CUE eliminates the need to manually troubleshoot some commonly occuring network issues. Its powerful Root Cause Analysis (RCA) engine identifies the root causes of network issues for a single client or total clients, and recommends solutions to those problems.

The RCA engine can diagnose and recommend solutions for the following symptoms:
  • Low RSSI
  • Low data rate
  • High retry

Note that root cause analysis is not supported for sticky clients.

The RCA engine analyzes the following causes to display the matching symptoms:
  • Poor Coverage
  • Low RSSI
  • Low SNR
  • High Interference
  • Low Data Rate
  • High Retry Rate
  • High Contention (BSSID/Clients)
  • Sticky Clients
  • Client does not support the latest 2.4 GHz, 5 GHz, or 6 GHz protocol
  • Band Issues such as client does not support the 5 GHz band, 5 GHz capable client is operating in 2.4 GHz band, No 5 GHz SSID for 5 GHz capable client
The RCA engine finds the root cause of a failure based on the following parameters:
  • Symptoms and the number of clients that are showing the symptoms at a location.
  • The domain knowledge determines the reason because of which an issue has occurred. For example, frequency band issues, too many clients with high uplink traffic, poor coverage, etc. are potential reasons for an issue.
  • The system knowledge informs you about the Wi-Fi configuration settings that might have caused the issue. For example: is transmit power set to "Auto"?, is Dynamic Channel Selection enabled?
Note: The RCA engine provides recommendations for some specific root cause types only. There is no recommendation available if the root cause is based on location, SSID, vendor name, OS, or AP.

Root Cause Analysis for a Single Client Vs Total Clients

CV-CUE performs root cause analysis on single clients as well as on the total number of clients facing problems.

For single clients, you do not have to run the Inference Engine. You can view the recommendations from MONITOR > WiFi > Clients .

For total clients, you have to run the Inference Engine in the Client Health widget and the root cause analysis runs based on the locations. You run it from Dashboard > Performance > Client Health > Total Affected.

Looking for Root Causes

The intelligent view is available for performance issues specific to Client Health widget. The generated view expires after an interval of 60 minutes.

Follow the steps below to generate the intelligent view:
  1. Go to DASHBOARD > Performance > Client Health.
  2. Select a parameter (Low RSSI,Low Data Rate, High Retry) that you want to analyze. For example, let us consider "Low Data Rate".
  3. Click on the value showing the total number of clients facing low data rate.
  4. Click Should I look for root causes? This will start the root cause analysis in the background. You can continue navigating to other parts of CV-CUE while it is generating the intelligent view.

    After the background process is completed, a message containing the number of clients for whom the root cause analysis is done appears next to the robot icon . Also, an "Ongoing activity" message box linking to the result of the root cause analysis appears in the lower-right corner of the screen .The link contains the number of clients for which the root cause was found. For example- "Found root causes for 10 out of 20 clients."
  5. Click Should I look for root causes? Or click on the link in the Outgoing Activitymessage box to view the result of the root cause analysis.

    The RCA Engine displays the results of the analysis at one glance.
  6. Click a location to view the list of affected clients.
  7. To view recommendations, click the bulb icon next to the root cause.
  8. To go back to the normal view, first close the recommendation panel.

Perform Root Cause Analysis for a Single Client

When you open the details of a single client, you see the symptoms faced by the client and reason for the issue. Inference Engine automatically does all the calculations in the background and displays the symptoms as well as the probable solution. If there are no issues with the client, then you see a confirmation message.
  1. Click MONITOR > WiFi > Clients.
  2. Click the client name from the list.
    If the client is facing any issue, you will see the symptom and the reason below the client details.
  3. To view recommendations for the symptom, click the How do I fix this icon (bulb icon) next to the root cause.