Distributed Network Management Solution

Technical Training
The Neutron Series

Neutron Series
I. Introduction
II. Features and Algorithm
III. Planning and Design
IV. Documentation
V. Troubleshooting and Maintenance
VI. Applications
VII.Common Questions
Up Next

I. Introduction
Technical Training
 Neutron Series
Overview
The Neutron Series
Distributed Network Management Solution
Flexible, Scalable, Enterprise-Class Management Solution for
Large and Small Networks
Simplified Configuration & Management
Enterprise-Class Performance
Feature-Rich Access Points & WLAN Controller
Switches
ezMaster Centralized Network Management
NO AP Licensing, Subscription or Tech Support Fees

ezMaster Network WLAN Controller Managed

Management Software Switches Access Points
 Neutron Series
Overview
Complete Scalability
Start small or go big with the Neutron Series

Manage a few or 1,000+ APs, Unlimited number of networks

distributed across cities, regions or countries
 Neutron Series Unlimited Flexibility
Overview No matter what your business size, Neutron Series is flexible enough to
meet your network needs.

Managed networks locally, or

Centrally manage remote
locations
 Neutron Series
Overview
ezMaster Deployment Options
 Neutron Series
Overview Target Audience
Neutron Series Is Ideal for Deployment in Expandable
Environments:
Large, geographically diverse organizations
Managed Service Providers (MSPs)
Healthcare Facilities
Hotels & Resorts
School Districts & Campuses
Public Sector
Chain Store/Branch offices
 Neutron Series
Overview Neutron Controller Switches

EWS2910P EWS5912FP EWS7928P EWS7928FP EWS7952FP

Manage
Manage 50 APs
20 APs
8 GbE Ports 10 GbE Ports 24 GbE Ports 48 GbE Ports

2 x 1G SFP Uplink 4 x 1G SFP Uplink

8P PoE af 8P PoE af/at 24P PoE af/at 24P PoE af/at 24P PoE af/at
(61.6W) (130W) (185W) (370W) (740W)

20 Gbps 24 Gbps 104 Gbps

56 Gbps switching
switching switching switching

Desktop
13 1U 19 1U Rackmount
Rackmount
 Neutron Series
Overview Neutron Controller Switches

EWS1200D-10T EWS1200-28T EWS1200-52T

Manage 50 APs

8 GbE Ports 24 GbE Ports 48 GbE Ports

2 x 1G SFP Uplink 4 x 1G SFP Uplink

Non-PoE

20 Gbps switching 56 Gbps switching 104 Gbps switching

Desktop 19 1U Rackmount
 Neutron Series Neutron Series Managed Access Points
Overview

EWS300AP EWS310AP EWS350AP EWS360AP EWS660AP EWS860AP

Indoor Outdoor IP55 Outdoor IP68

Dual Band
Single Band Dual Band 802.11n/ac
802.11n

Internal Antenna Ext. Antenna

2x2:2 2x2:2 2x2:2 3x3:3 2x2:2 3x3:3

300 Mbps 300 + 300 Mbps 300 + 867 Mbps 450 + 1300 Mbps 300 + 867 Mbps 450 + 1300 Mbps
High Power High Power High Power High Power High Power High Power

1 x GbE Uplink 1 x GbE Uplink

1 x GbE Uplink 1 x GbE LAN PSE
1 x GbE LAN

Support 802.3af/at PoE Support 802.3at PoE

0 to 40 C -20 to 60 C
 Neutron Series Neutron Series Wall Plate Access Points
Overview

EWS500AP EWS510AP

Indoor

Single Band Dual Band 802.11n

Internal Antenna

2x2:2 2x2:2
300 Mbps 300 + 300 Mbps

1 x GE Uplink
4 x FE LAN (1 x PoE Out)

Support 802.3af/at PoE

0 to 40 C
 Neutron Series Neutron Series Wave 2 Access Points
Overview

EWS370AP EWS371AP

Indoor

Dual Band 802.11n/ac Wave 2 Dual Band 802.11n/ac Wave 2

Internal Antenna External Antenna

4x4:4 4x4:4
800 + 1733 Mbps 800 + 1733 Mbps

2 x GE Uplink
Supports Aggregation

Support 802.3at PoE (Failover Support)

0 to 40 C
 Neutron Series Neutron Series Wave 2 Access Points
Overview

EWS870AP EWS871AP

Outdoor IP67

Dual Band 802.11n/ac Wave 2 Dual Band 802.11n/ac Wave 2

Internal Antenna External Antenna

4x4:4 4x4:4
800 + 1733 Mbps 800 + 1733 Mbps

2 x GE Uplink
Supports Aggregation

Support 802.3at PoE (Failover Support)

0 to 40 C
 Features
Neutron Series
Overview ezMaster Feature List
Centralized Management Comprehensive Monitoring
Configure, manage and monitor System Status Monitoring
thousands of Neutron devices Device Status Monitoring
Cross-Network AP Management Wireless Client Monitoring
AP Group Configuration Wireless Traffic and Usage Statistics
Visual Topology View
AP Config & Management Floor Plan View
Auto Channel Selection Wireless Coverage Display
Auto Tx Power Map View
Client Limiting Rogue AP Detection
Client Isolation
L2 Isolation Management & Maintenance
VLAN Isolation Kick/Ban Clients
VLAN Tag Captive Portal
Traffic Shaping Seamless Migration
Fast Roaming One-Click Update
Band Steering Bulk Firmware Upgrade
RSSI Threshold WiFi Scheduling*
Multiple SSID Syslog
Secure Guest Network Remote Logging
LED On/Off Control E-Mail Alert
Background Scanning SmartSync Redundancy*
ezRedundancy* (N+1)
*Available through future software upgrade.
 Neutron Series Controller Comparison*
Overview Software Features ezMaster EWS Switch
Project Based Management v -
Cross-Network AP Management v -
AP Group Configuration v v
Auto Channel Selection v v
Auto Tx Power v v
Background Scanning v v
Multiple SSID v v
Client Limiting v v
Client Isolation v v
L2 Isolation v v
VLAN Isolation v v
VLAN Tag v v
Traffic Shaping v v
Fast Roaming v v
Band Steering v v
RSSI Threshold v v
AP LED On/Off Control v v
Secure Guest Network v v
Wireless Coverage View v v
Floor Plan View v v
Map View v v
Rogue AP Detection v v
Visual Topology View v v
Wireless Client Fingerprinting v v
Wireless Traffic & Usage Statistics v v
Bulk Firmware Upgrade v v
One-Click Update v v
Captive Portal v v
Kick/Ban Clients v v
Event Log v v
Remote Logging v v
Email Alert v v
Intelligent Troubleshooting - v
WiFi Scheduling (SSID On.Off) - v
AP Scheduled Reboot - v
PoE Port Scheduled Reboot - v
PoE Port Scheduled On/Off - v
*As of c1.8.x release
 Neutron Series
Overview
ezMaster System Requirements
Recommended environment for managing up to 500 APs
CPU: Intel i3 3.6GHz dual core or above
RAM: 4GB minimum
HDD: 500GB (actual requirement depending on log size)
OS: Microsoft Windows 7 or later + VirtualBox 4.3.30 (or similar
virtualization products)
Recommended environment for managing up to 1000 APs
CPU: Intel i5 3.2GHz quad core or above
RAM: 4GB minimum
HDD: 500GB (actual requirement depending on log size)
OS: Microsoft Windows 7 or later + VirtualBox 4.3.30 (or similar
virtualization products)
Network Topology Requirements
At sites where APs are deployed: a DHCP enabled network for APs to
obtain IP address
 Neutron Series
Overview
Firewall/Port Configuration
Firewall Port Configuration
Depending on how your network is designed, you may need to open ports on your firewall.

The following outbound ports MUST be opened in the firewall at the site where the ezMaster server is
located in order for ezMaster to register with the ezReg server.
Port Description
TCP 80 HTTP port, ezReg communication
UDP 53 DNS port, ezReg communication

The following inbound ports MUST be opened in the firewall at the site where the ezMaster server is
located in order for remote access points to communicate with the ezMaster server.
Port Description
UDP 1234 Custom port, CAPWAP protocol
TCP 80 (default) HTTP port, Captive Portal, port can be defined by user

The following outbound ports MUST be opened in the firewall at the remote site where the AP/switch is
deployed in order to communicate with ezMaster.
Port Description
UDP 1234 Custom port, CAPWAP protocol
TCP 80 HTTP port, ezReg communication
UDP 53 DNS port, ezReg communication
TCP 80 (default) HTTP port, Captive Portal, port can be defined by user
Up Next

II. Features and Algorithm

Technical Training
 Features
and Algorithm
CAPWAP
Control And Provisioning of Wireless Access Points Protocol

Main functions:
AC Discovery
Authentication
Configuration Provisioning
WTP Frame Tunnel Mode
 Features
and Algorithm
CAPWAP Machine State

AP Boots
UP Reset

Discovery Image Data

DTLS Setup
Run

Join Config
 Features
and Algorithm
Neutron Series CAPWAP Discovery
Discovery
Multicast (Unicast if AC IP assigned manually)
UDP
Destination IP: 239.255.1.3
Destination Port: 1234
Interval: around 10~20 secs
Common Issue:
Discovery packet will be dropped if L2 switch filter unknown
multicast address.
 Features
and Algorithm
EWS CAPWAP Echo Request/Response
WTP Echo Request
Unicast
UDP
Destination IP: AC IP
Destination Port: 1234
Interval: 20 secs
Change to offline state: no echo respond over 90 secs

AC Echo Response
Respond when receive WTP echo request
Change to offline state: no echo request over 90 secs
 Features ezMaster/Access Point Registration Process
and Algorithm
 Features Registering ezMaster to ezRegistration Server
Registering ezMaster to ezRegistration Server
and Algorithm In order to manage remote device using ezMaster, you must first register ezMaster to the ezRegistration
server. You may skip this section if you are managing only local devices or if you are manually redirecting
each AP to ezMaster.

1. In the ezMaster user interface, click on the Global Settings menu.

2. Under Admin Account, fill in the fields and click Apply to register your ezMaster to the ezRegistration
server.
Take note that a valid email address is required for you to unregister your devices in the event of
ezMaster server failure.
 Features Adding Devices to ezMaster Device Inventory
Adding devices to ezMaster Device Inventory

and Algorithm Before managing a remote AP/switch, you must first bind the AP to ezMaster's Device Inventory by
registering the device. Skip this section if you are managing only local devices or if you are manually
redirecting each AP to ezMaster.

1. Once ezMaster has been registered with the ezRegistration server, you can start registering your APs
and adding them to ezMasters device inventory by clicking on the Device Inventory icon.

2. Next, click on the Add Device button.

Enter the MAC Address, Check Code and Description of the device you want to register using a semi-
colon (;) to separate each field. eg. MAC Address;Check Code;Description
To register more than one device at the same time, enter the information of one device per row by pressing
Enter. Click the "Register" button once you are done.

Note: The 'check code' of the AP can be found on either the device label at the bottom of the AP. If not,
access the AP's user interface and find it under the "Management > Controller Settings". Contact your
local dealer if you are having problems locating the check code.
 Features Manual AP Registration
and Algorithm For instances when remote registration is not possible, you may manually
register the AP to the ezMaster through the option below:

The AP will appear on the pending list if successful:

Ensure that the AP is able to connect to the internet for remote registrations by using the built in Ping Tool on the GUI.
 Features
ezMaster Connectivity Test
and Algorithm

Connectivity Test Procedure

1. Ping gateway
2. Resolve DNS:
ezreg.engeniusnetworks.com
3. Ping ezreg.engeniusnetworks.com
4. Test ezReg TCP port 80
5. Test ezReg UDP port 53
6. Test ezM controller port UDP 1234 from
ezreg
 Features
Neutron Series CAPWAP Version Compatibility
and Algorithm
v1.05.38-c1.8.12
v : Main software version
c : CAPWAP version
1st digit: Protocol design change
2nd digit: Feature change/enhancement
3rd digit: bug fix
AC will show Incompatible Version on AP list if either
1st or 2nd digit of CAPWAP version are not identical
between AC and AP
e.g.
AC c1.8.12 + AP c1.6.24: Incompatible
AC c1.6.24 + AP c1.8.8: Incompatible
AC c1.8.12 + AP c1.8.8: Compatible
 Features
Map & Floor Plan View
and Algorithm
Map & Floor Plan View

Floor Plan and Map View allows for quickly locating deployed APs, a useful feature for multi-site large scale
AP deployments.
 Features
Group Management
and Algorithm

An Access Point Group is a dynamic,

configuration-aware cluster of
Access Points in the same subnet of
a network. A group provides a
single Access Point to manage the
cluster of Access Points as a single
wireless network instead of a series
of separate devices.
 Features
Fast Roaming
and Algorithm

AP1 AP2

3
<50ms

1. Client logs on AP1

2. The access key of the client is passed on to all connected APs in the network
3. When the client moves between AP1 to AP2, the roaming procedure takes place.
*IEEE standards: 802.11r for fast roaming, 802.11k for assisting 11r, collecting AP traffic.
 Features
Background Scanning
and Algorithm
Periodically doing channel hopping to get APs, utilization for that channel.
Scan one channel at a time, minimize throughput impact.
Background scanning is the basis of auto channel selection, rogue AP detection, and
auto TX power adjustment.
Active probe scan for very short period
Channel n for scanning

Current channel
time

Period for scan single channel

Full cycle to scan all channels

 Features
Background Scanning
and Algorithm

Site survey for all available channel takes very long period

Site survey

Current channel
time
Period for scanning all available channel

Background scan takes very short period

Channel n for scanning

Current channel
time

Period of scanning single channel

Full cycle to scan all channels

 Features
Background Scanning
and Algorithm

Passive Scan
Beacon interval is 102.4 ms
Beacon interval when multiple SSID enabled on EWS AP: 409.6 ms
Dwell time of passive scan needs at least 500 ms
 Features
Background Scanning
and Algorithm

Beacon
 Features
Background Scanning
and Algorithm

Active Scan
Active scan is the process of sending a probe request frame from
wireless client and listening a probe response from AP.

Dwell time of active scan is no longer than 50ms

Null probe request Directed probe request

 Features
802.11 Association process
and Algorithm

Learning time: 1 sec,

AP would suppress
probe response in
learning time for
learning new STAs
capability

Aging time: 60 secs,

the learned entry will
be expired after aging
time.
 Features
Auto Channel Selection
and Algorithm
Using the information collected by
6 Background Scanning, ezMaster has the
11 channel utilization statistics of all channels.
-66
-45 With this info, APs can automatically adjust
1 -50 their radio channel for the best channel
Managed AP utilization and performance.
50
6 Background Scanning must be enable for
-70
-65 this feature to operate.
6 11 Auto Channel Selection will take place on an
-68
Rogue or neighbor AP when the Channel of the AP is set to
Signal strength relation Auto (under Wireless Radio Settings).
11
 Auto Channel Selection
Features
Wi-Fi Interference
and Algorithm
 Features
Adjacent-Channel Interference on 2.4GHz
and Algorithm

5 MHz Wide
 Features
Adjacent-Channel Interference on 5GHz
and Algorithm
 Features
Noise Floor (Background Noise)
and Algorithm
Noise floor is the ambient or background level of radio energy on
a specific channel. Background energy can include modulated or
encoded bits from nearby 802.11 transmitting radios or
unmodulated energy coming from non-802.11 devices such as
microwave oven, Bluetooth device, cordless telephone, and so on.

Real World Scenario

The noise floor of 5GHz is almost always lower than 2.4GHz
because 5GHz frequency band are less crowded
 Features
3 Modes of Band Steering
and Algorithm

Force 5G:
Always encourage dual-band STA associate with 5 GHz

Prefer 5G:
Encourage dual-band STA associate with 5 GHz if RSSI < specific
value

Band Balance:
Encourage dual-band STA associate with 5 GHz if RSSI < specific
value and the ratio of 5G client < specific value
 Features
New Band Steering Algorithm
and Algorithm

Prefer 5GHz: Specify the minimum received signal strength indicator (RSSI) required for dual-
band wireless clients to associate to the 5GHz band. If the clients RSSI value drops below this
threshold, it will only be able to connect to the 2.4GHz band.

Band Balance: Automatically balances the number of newly connected clients across both
2.4GHz and 5GHz bands. For example, the value 75 indicates that the AP will place 75% of all
newly connected clients whose RSSI is above threshold onto the 5GHz band while the
remaining 25% of the newly connected clients will be left on the 2.4GHz band.
 Features
New Band Steering Algorithm
and Algorithm
Client sends probe
request

AP determines
NO Client associates to
whether client
2.4GHz
support dual band

YES
(PREFER 5GHz / BAND BALANCE)

Client associates to AP checks 5GHz

5GHz IF RSSI meet or is RSSI threshold value IF RSSI lower
higher than than specified
specified threshold
IF BAND BALANCE selected

AP checks current
no. of 5GHz clients
IF % lower connected IF % higher
than threshold than threshold
 Features
Switch Management
and Algorithm

Manage all EWS switch models through the ezMaster. Options available for management are the
following:
Port Settings: Allows to view the Link Status, adjust port speed, toggle Flow Control, and
enable/disable the port.
Power Budget: Tweak the maximum power budget you can allocate on the switch.
PoE Port Settings: Configure PoE options as well as view current drawn power per device.
 Features
One-Click Update
and Algorithm
Receive new firmware notifications in GUI so users can conveniently
check that the current firmware on their APs is the most up-to-date
version.

Notifications will appear

when new firmware is
available.
 One-Click Update
Features
One-Click Update
and Algorithm

EWS Switch:
Get list of latest FW version: Execute on users browser
Get FW image and push to AP: Execute on EWS switch

ezMaster:
Get list of latest FW version: Execute on ezMaster
Get FW image and push to AP: Execute on ezMaster

Troubleshooting on EWS switch:

PC ping business.engeniusnetworks.com
EWS switch ping business.engeniusnetworks.com

Troubleshooting on ezMaster:
ezMaster ping business.engeniusnetworks.com
 Features
Bulk Firmware Update
and Algorithm
Upgrade firmware for managed APs: Single or multiple units to save
time, and avoid repeating the process over and over again.
 Features
Guest Network
and Algorithm

The Guest Network is designed to allow users to manage visitors access within the
network. When visitors associate with the unique SSID for accessing Internet, the
administrators can manage and monitor the network from the central location to prevent the
malicious attack to applications at the local network.

SSID: Private Internal Database

Internet

SSID: Guest-Public

Limit guests to access the internal database

 Features
Captive Portal
and Algorithm
Supports:
1. Internal Authentication (Local Database 500 Accounts for EWS Controllers)
with Internal/External Login Page
2. External Authentication (RADIUS) with Internal/External Login Page
3. 3rd party cloud captive portal integration, i.e. Cloud4Wi

After SSID authentication Splash page login Login successful

 Features
Captive Portal
and Algorithm

Create different captive portal

profiles and apply directly to SSID

Splash & Go: No authentication required.

Users can access the network as soon as
they associate.
Local User DB: Authenticate users using
local user database. Users must enter a
username and password before being
allowed on the network (500 accounts for
EWS Controllers).
External RADIUS Server: Authenticate
users using an external RADIUS server.
Users must enter a username and
password before being allowed on the
network.
 Features
Captive Portal
and Algorithm
Choose to use user defined (external URL)
splash page or built-in internal splash page

Upload custom
logo for
internal splash
page

Preview of internal splash page

Enter custom message or terms of use if desired

 Features
Captive Portal
and Algorithm
Option to allow users to continue to
the original URL they intend to visit
or force the user to visit a specified
URL after a successful
authentication.
Option to disconnect user based on:
a.Session time
b.Idle time

Manually specify an IP range users can access prior to sign-on. When you are operating the
hotspot in a hotel, for example, you can include the hotels Web site in the walled garden.
A walled garden for a corporate office, on the other hand, can include Web pages that
show the office directory, emergency information or building maps.
 Features
Smart Search
and Algorithm
 Features
Visual Topology View
and Algorithm

Displays real-time network topology

with information like:

1. IP Address
2. Ports connected
3. No. of clients connected

Expand/collapse topology tree with a

simple click, drag to pan, rotate mouse
wheel to zoom in/out just like Google
Map.
 Features
Smart Troubleshooting
and Algorithm
Check status of APs and provide easy troubleshooting instruction for
offline units. PoE powered APs can be rebooted remotely for easy
troubleshooting.
 Features
Client Fingerprinting
and Algorithm

Client Fingerprinting allows administrators to easily

identify wireless clients connected to the network.
Instead of displaying only the MAC Address, the EWS
Switch will also identify the Operating System and
Client Info.

Traditional EnGenius
 Features
Client Fingerprinting
and Algorithm

Prerequisites
Clients must be set up to request IP addresses
automatically using DHCP.
 Features
Client Fingerprinting
and Algorithm
 Features
Network Usage Statistics
and Algorithm

Meeting Room E seems

to have high traffic

This Client may be

HOGGING the AP??
Further detailed analysis
can be deduce from the
number of clients and the
total throughput used
 Features
Kick/Ban Wireless Clients
and Algorithm

Kick Client
Use this function to temporarily disconnect a wireless client from the network.
The disconnected client can simply reconnect manually if they wish to.

Ban Client
Use this function to permanently block a wireless client from the network.
Go to Device Management > Access Control to unblock the wireless client.
 Features
Access Control
and Algorithm

Whitelist
Allow access only to specific clients per project. Current maximum entries is 32.

Blacklist
Bar devices whose MAC addresses are on this database.
 Features
Rogue AP Detection
and Algorithm

EWS AP scans wireless channels (802.11a/b/g/n/ac) to identify unknown wireless access points.
 Features
Rogue AP Detection
and Algorithm

Detect 3rd party APs in environment

Determine if external APs on conflicting channels and
causing interference
 Features
Controller Event Log & E-mail Alert
and Algorithm
The Neutron series will maintain an internal log of all events
and alarms.
E-mail notification can be set to be sent upon encountering
events including:
- Rogue AP Detected
- AP Lost Contact
- Topology Change
- AP maximum users reached

E-Mail Alert
E-Mail Server
Logon Alert Task (SMTP Authentication Required)
Up Next

III. Planning and Design

Technical Training
 Planning
WLAN Life Cycle
and Design
Design
Identify stakeholders
Gather requirements
Identify network components,
locations, and settings
Standardize configurations
Deploy
Provision and Install
Validate coverage / capacity
performance
Document
Monitor and Report
Continuously monitor performance
Troubleshoot and Remediate
Identify and troubleshoot issues
Make changes and Document
Optimize and Grow
Tune and optimize network
Identify areas for growth
 Design Standardization
Planning
Design Standardization
and Design

How many SSIDs?

Modern networks have 1-3 SSIDs per band
Guest / Resident / End-User
Staff
Devices (e.g. security, VoIP, appliances)
Client isolation and security policies per SSID
Within AP and AP to AP client isolation
VLANs
Security settings per SSID
Traffic shaping policies per SSID
How many APs?
Where are the APs physically being deployed
Channel plan for both 2.4 GHz and 5 GHz
 Planning
Design Standardization
and Design

Standardize configuration for all devices

(switches, APs, etc.)
Assign static IP addresses to equipment
Note that many APs typically associate to network
via DHCP by default
Part of initial configuration during staging or
installation
Use VLANs and a management VLAN
Change default access settings
User passwords
SNMP communities (v1/v2c,v3) & passwords (v3)
 Planning
Provisioning Process
and Design

Start up your EWS switch

Set static IP address for EWS switch
Implement switch settings
VLANs, ACLs, port isolation, etc.
Define your AP group(s)
Stage equipment before initial deployment
Plug in each AP, assign static IP, name (location) and group
Change unique
settings per AP
and switch
Document
 Critical Settings
Planning
Critical Settings
and Design

IP Settings:
Use static IP address
Use private or public DNS servers
PoE Power Budget
Make sure number and type of devices does not
exceed load especially be careful for quantity
of PoE+ devices (i.e. 3+ stream APs)
Layer 2 Features
Link aggregation (for backhaul)
STP/Spanning Tree Protocol
 Planning
Spanning Tree Protocol
and Design
Deployment Case

Client with bridged

Ethernet and
Wireless Adapter
 Planning
Spanning Tree Protocol
and Design
Deployment Case

Client with bridged

Ethernet and
Wireless Adapter
 Planning
Critical Settings
and Design

VLANs
If you are defining multiple SSIDs, use VLANs to keep
them separated
VLANs need to be fully defined
PVIDs and untagged VLANs defined for wired ports
with client devices
ACLs
Rule set that acts as a firewall to allow or deny traffic
based on particular ports
Useful for client isolation
Scheme needs to be defined in advance and should
be uniform for all ports on all switches
 Planning
Tools for the Wi-Fi Engineer
and Design

Wi-Fi Environment Scanner (essential tool)

Look for beacon frames in the environment
Graphically depict environment
Examples:
inSSIDer by
Metageek (PCs)
WiFi Scanner
(Macintosh)
WiFi Analyzer
(Android)
Airport Utility
(iPhone)
 Planning
Wi-Fi Scanner
and Design

Courtesy: CWNP Wi-Fi Conference 2014 Presentation: Your Phy Type (MetaGeek)
 Planning
Site Survey
and Design

Site Survey Software

Software packages that model AP signal propagation
based on location, antenna, power, and channel settings
Used for predictive modeling, passive site surveys, active
site surveys
Examples:
Tamograph
Ekahau
AirMagnet Survey
 Predictive Modeling
Planning
Predictive Model
and Design

Inputs
Floor Plans (to scale)
Location of walls and other structure on the site (e.g. elevator shafts)
Outputs
# APs, their locations, channels and power settings
2.4 GHz and 5 GHz propagation coverage
Channel and transmit power plan
Problematic coverage areas
Problematic capacity areas
 Planning
Predictive Model
and Design

Advantages
Does not require an on-site visit
Provides relatively quick method of establishing a
design
Validate coverage and capacity profiles
Mitigate self-interference from neighboring APs
(enforces proper channel / tx power planning)
Disadvantages
Based on simplified assumptions
Attenuation and reflection of actual walls and floors
may be quite different than standard values
Specified locations of APs may not be practical
 Predictive Model Example: Walls
Planning
Predictive Model Example
and Design
 Predictive Model: 2.4 GHz Signal
Planning
Predictive Model 2.4 GHz Coverage
and Design
 Planning
Predictive Model 2.4 GHz SNR
and Design
 Planning
Predictive Model 2.4 GHz Channel Map
and Design
 Planning
Passive Site Surveys
and Design

Pre-Deployment survey
Post-deployment troubleshooting
Listens for wireless beacon frames by location
Can integrate spectrum analysis by location
Can use directional antennas to triangulate external sources
of interference
Procedure:
Walk the property to create a map of coverage and interference from
surrounding APs
Put up test APs to measure signal propagation through walls / floors
(AP-on-a-stick)
 Passive Site Surveys
Planning
Passive Site Surveys
and Design

Advantages
Measure actual signal propagation through walls / floors
Detect and identify any external sources of Wi-Fi interference
in the environment
Adapt channel / tx power plan to environment
Disadvantages
On-site
Time consuming
Snapshot in time: does not indicate any changes in
environment
 Planning
Active Site Surveys
and Design

Post-Deployment Verification
Existing Network Troubleshooting
Test performance of wireless network by location
Can integrate spectrum analysis by location
Procedure:
Connect to the wireless network
Walk the property to create a map of achieved signal strength,
interference, PHY rates, and achieved throughput
Observe channel and power settings on the APs
 Planning
Active Site Surveys
and Design

Advantages
Measure actual network performance
Adapt channel / tx power plan to environment
Disadvantages
On-site
Time consuming
Snapshot in time: does not indicate any changes in
environment
 Planning
Passive Site Survey
and Design

Courtesy: http://www.tamos.com/products/wifi-site-survey/
 Planning
Dos and Donts
and Design

Stagger APs horizontally and vertically

Avoid hallways
Do not stack floor to floor
Space out APs evenly
Allows for static and uniform transmit power settings
Simplifies channelization process
Use building structure (e.g. walls,
corners) to isolate neighboring APs
Avoid mounting behind obstructions (e.g. above
ceilings, near ductwork/pipes, etc.)
Follow good wiring and mounting practices
 Planning
Hallway Wi-Fi Deployment
and Design

Co-Channel Interference Major Coverage Holes Where

No One is Working in the Hallways Wi-Fi is Needed
Not designed for capacity
AP Should NOT Be in Line of Sight to Each Other
Poor roaming decisions
One of the Greatest Barriers is the Bathroom Lots of Omni Directional APs in
Low Signal Noise Ratio the Hallway
 Planning
Hallway Wi-Fi Deployment
and Design
APs Deployed in Hallways APs Deployed in Rooms
2.4 GHz Signal Coverage 2.4 GHz Signal Coverage

2.4 GHz Co-Channel Interference 2.4 GHz Co-Channel Interference

Significant coverage problems Strong coverage in rooms

Significant self-interference at where devices are used
APs (impacts upstream traffic) Minimal self-interference
 Planning
Hallway Wi-Fi Deployment
and Design
Place the AP as close to client
devices as possible

Minimize obstructions between

AP and clients
Facilitate client devices ability to
talk back to the access point

Place neighboring APs to NOT be in

line of sight of each other

Minimize co-channel interference

with other APs on the network
Maximize channel re-use
 Planning
Hallway Wi-Fi Deployment
and Design
Providing Wi-Fi Coverage Where it Matters!
Up Next

IV. Documentation
Technical Training
 Documentation
Documentation

Document your requirements and constraints

Capture any requirements not implemented
Separate source from the equipment itself indicates
how the network SHOULD be configured
Typically done during provisioning and updated during or
just after installation
Hard part: Keep it updated as changes get made

Know what you have, why it is there, and how it is

supposed to be configured.
 Documentation:
Documentation:
Property
AP
Documentation Property

Network map (logical) WAN circuit information

Property map (physical)
AP locations
MDF / IDF closets
Cabling infrastructure
(CAT6a, fiber, etc.)
Digital photos
Site survey reports
Property contact
information
Hours of operation
Access restrictions
VLAN / IP Subnet
Scheme
ACL Rules
User access types (e.g.
end-customer, staff,
appliances, etc.)
System-wide settings
(e.g. fast roaming)
Redundancy / failover
schemes
Requirements and
constraints (especially
anything skipped)
Documentation Access Point

Channel (per band) Make

Power (per band) Model
SSID settings Firmware
VLAN tag
Security (e.g. WPA2-
Serial Number
AES passphrases) MAC Address
Client isolation IP Address
External antennae Username / Password
selection and
orientation Physical Location
Non-standard mounting Power source
External devices Uplink IP Address /
Unique settings Port
Config file backups
Documentation Backend

Port Make
Configuration Model
Device plugged Firmware
in Serial Number
VLANs (tagged & MAC Address
untagged) IP Address
PoE Username / Password
Speed / duplex Physical Location
IP / MAC ACLs Uplink IP Address /
System settings Port
Config file backups
Unique settings
Documentation Network Diagram
Documentation Network Diagram
Up Next

V. Maintenance and
Troubleshooting
Technical Training
 Post-Deployment Verification
Maintenance
and Troubleshooting
Post-Deployment Verification

Verify the physical layer coverage (active site survey)

Channel and power settings
Signal to Noise / Signal to Interference
Roaming
Validate ability to connect to SSIDs and the Internet
Security settings
VLAN assignments
Client isolation settings
AP and switch configurations
Network services (DHCP, DNS)
Controller performance
Bandwidth performance
 Network Maintenance
Maintenance
and Troubleshooting
Network Maintenance

Planned Maintenance
Firmware upgrades
Optimization
Channel and power settings
Point-to-point path optimization
(e.g. tree trimming)
On-site equipment upgrade
/ swap-out
Unplanned Outages
Equipment failure
Bandwidth failure
Cut / disconnected cabling
 Post-Deployment
Network Verification
Monitoring
Maintenance
and Troubleshooting
Network Monitoring

Manual: Someone must look at what the network is doing

Automated: Network tells you about problems
System sends alerts when there are device issues or other
thresholds exceeded
Issue: Can get inundated with useless alerts, causing real issues
to get hidden in the mess
Self Healing: Automated
monitoring and mitigation
of network issues
Spanning tree protocol and
link aggregation
Auto reboot of down
equipment (e.g. web power
switches)
 Maintenance
and Troubleshooting
Troubleshooting: Common Issues

Throughput
Network performance too slow
Applications not performing properly
Device Connectivity
Devices cannot connect
Devices connect intermittently
Devices disconnect when roaming
 Maintenance
and Troubleshooting
Troubleshooting: Common Issues

Insufficient RF Coverage Interference

Dropped connections when Self-Interference from your
own APs
moving between APs External Interference from
Low connection speeds at neighbor APs
border areas of coverage Non Wi-Fi Sources
Insufficient RF Capacity Typical Fixes
Too many client devices for AP Model / Antenna
too few APs AP Locations
Typically design for 30-50 Channel
client devices per AP Transmit Power

Hidden Node
Two clients talk to the same
AP but cannot hear each
other
May attempt to talk at same
time collision at AP
 Troubleshooting 101
Maintenance
and Troubleshooting
Troubleshooting: Common Issues

Systematic and Iterative Process

Avoid making multiple changes simultaneously
Avoid knee-jerk reactions

Architecture Path: OSI Model Path: Inside

Outside Moving In Moving Out
WAN Link(s) Physical Layer
Routers MAC Layer
Switches Network Layer
Access Points Application Layer
Verify Verify
Devices online Site behavior
Intended configuration Intended configuration
matches actual matches actual
Up Next

VI. Applications
Technical Training
The Neutron Series Wireless Wall Plate Access Point
All-in-One Communication hub for In-room Wireless Connectivity

Zero Effort IPTV

IP Phone
Installation
RJ45 Pass Through Port
EnGenius Wall
Laptop Mount AP
10/100/1000 RJ45 Uplink (PoE In) Mini Fridge
110 Punch Down Block

Mounting Bracket for standard

86-type face plate cover
The Neutron Series Resort Hotel Wi-Fi Planning and Solution

The EnGenius Solution

Wide range of product portfolio for
entire resort Wi-Fi deployment.
Intelligent network management
platform.
Exceptional coverage and reliable
Connectivity
Scalable and expandable without
additional cost e.g subscription fee,
extra hardware upgrade and
licensing fee.

Recommended Models
Indoors : EWS300AP, EWS360AP,
EWS510AP
Outdoors: EWS660AP, EWS860AP
Management Platform: ezMaster, EWS7928FP
The Neutron Series Budget Hotel Wi-Fi Planning and Solution

The EnGenius Solution

Good wireless coverage and reliable connectivity
Affordable solution
Fast deployment
Ease of management

Recommended Models
Indoors: EWS300AP, EWS310AP, EWS500AP
The Neutron Series Retail Chain Store Wi-Fi Planning and Solution

ezMaster

The EnGenius Solution

Distributed Network Management
Seamlessly manage multiple sites
Graphical monitoring for each group
Email push alerts for network issues
Lower Capital & Operating Expenses
Tying customer loyalty with Wi-Fi
Customer Stories Topica Training Education Centre (Vietnam)
Project Requirement
Online training education centre.
Wi-Fi Connection for more than 800 concurrent users includes staff, teachers and students

Product and Solution

The Neutron Series Distributed Network Management Solution (Controller-based)
43 units of EWS310AP + 1 unit of EWS7928P
Customer Stories ZunYi National Museum (China)

Beijing

Background of the SI
Beijing based
Specialized in networking solution
GuiZhou for National Museum across China

Remote Monitoring from Beijing

Integrates EnGenius ezMaster with Distributed Network Management Solution to monitor the status of access points from Beijing office.
Customer Stories The Gateway Resort Corbett National Park (India)

One of the resort under

Taj Group Area 1
Internet
EWS210AP
EWS210AP EWS210AP

EWS210AP
Switch
Firewall EWS660AP

EWS210AP
Area 2
EWS210AP

Core z EWS210AP
Switch
Switch

EWS210AP

EWS660AP

Switch EWS210AP
EWS210AP
EWS210AP

Wi-Fi coverage for

indoor and outdoor area Area 3 EWS660A
Network EWS210AP
P
Management System
 Customer Stories The Gateway Resort Corbett National Park (India)

Heatmap to design and plan the

Wi-Fi solution

Centralized Management
Both indoor and outdoor access points
Comprehensive Monitoring
System Status Monitoring
Device Status Monitoring
Wireless Client Monitoring
Wireless Traffic and Usage
Statistics
Maintenance
One-click update
Bulk Firmware Upgrade
Syslog & Email Alert
Up Next

VII. Common Questions

Technical Training
Common Questions VLAN Isolation

When using different VLANs on multiple SSIDs, does the switch port where the
AP is connected to need to need to be set as a tagged port (trunk port) or
untagged port (access port)?

When configuring an AP with different VLANs per SSID, the port where the AP is
connected to must be set to tagged/trunk.
Common Questions Local Database

How many users can be created on the local database?

500 for the Neutron Controller Switch, no limit on the ezMaster.
Common Questions External Splash Page

If I have a third-party portal authentication server, can I use the

ezMasters authentication function? If yes, how can I configure it?

Yes, select External Splash Page on the captive portal options and
key in the IP/URL of the portal authentication server.
Common Questions RSSI Overlap

Whats the threshold RSSI value should be appropriate?

Our recommended overlap between APs is about -75dBm.

-75dBm
Common Questions
social media Find us on

Website Facebook YouTube

www.engeniustech.com.sg Facebook/EnGenius APAC EnGenius APAC

Thank you.