Appendix B: Product Compliance

Número IFETEL: RCPARO121-3471

La operación de este equipo está sujeta a las siguientes dos condiciones: (1) es posible que este equipo o dispositivo no cause interferencia perjudicial y (2) este equipo o dispositivo debe aceptar cualquier interferencia, incluyendo la que pueda causar su operación no deseada.

Appendix A: AP-Server Mutual Authentication

The AP-server communication begins with a mutual authentication step in which the AP and server authenticate each other using a shared secret. The AP-server communication takes place only if this authentication succeeds.

After the authentication succeeds, a session key is generated. From this point on, all communication between the AP and server is encrypted using the session key.

The AP and server are shipped with the same default value of the shared secret. Both the server and the AP have CLI commands to change the shared secret.

Note: After the shared secret (communication key) is changed on the server, all APs connected to the server will automatically be set up to use the new communication key. You must manually configure the new communication key on an AP if it is not connected to the server when the key is changed on the server.
Note:Although the server is backward compatible—that is, older version APs can connect to a newer version server—this is not recommended.

Access Point Troubleshooting

The table below lists some of the troubleshooting guidelines for the access point (AP).
 
Problem Solution
The AP did not receive a valid IP address via the DHCP. Ensure that the DHCP server is on and available on the VLAN/subnet to which the AP is connected. If the AP still fails to get a valid IP address, you can reboot it to see if the problem is resolved.
Unable to connect to the server.
  • Ensure that the server is running and is reachable from the network to which the AP is connected. If a firewall or a router has Access Control Lists (ACLs) enabled between the AP and the server, ensure that traffic on UDP port 3851 is allowed.
  • Use the IP-based server discovery method and ensure that you have correctly entered the DNS name, wifi-security-server , on the DNS server.
  • Ensure that the DNS server IP addresses are either correctly configured, or are provided by the DHCP server.
  • The AP might fail to authenticate with the server. In this case, an 'Authentication failed ' event is raised on the server. Refer to the event for recommended action.
The AP has encountered a problem.
  • If you are using Arista Cloud Services, then open the TCP port 443 (SSL). If you have an on-premises installation, then open UDP port 3851 and port 80.
  • If you are using a Proxy, Web Accelerator, or URL Content Filter between the AP and the Internet, ensure that the settings allow communication between the AP and Arista Cloud Services.
  • If your configuration requires you to specify an exact IP address or IP range for Arista Cloud Services, please contact This email address is being protected from spambots. You need JavaScript enabled to view it..

Connect the O-105E using PoE

If you are using a PoE injector, make sure the data connection is plugged into a suitable switch port with proper network connectivity.

Table 1. Labels: Parts
Label Description
1 Width of the LAN cap is 29mm
2 Wrench to open the LAN cap

Connect the O-105E to the Network

To connect the access point (AP) to the network, perform the following steps:
  1. Ensure that a DHCP server is available on the network to enable network configuration of the AP.
  2. Add the DNS entry wifi-security-server on all DNS servers. This entry must point to the IP address of the server.
  3. Ensure that DHCP is running on the subnet to which the AP is connected.
  4. Check the LEDs on the AP to ensure that it is connected to the server.
  5. Log on to the server using ssh and run the get sensor list command.

    You will see a list of all Arista devices that are recognized by the server. Single Sign-On users can go to the Monitor tab in CloudVision Wi-Fi and check whether the device is visible under the Monitor tab.

The AP is connected and operational.
Note:If zero configuration fails, the AP must be configured manually.
Important:If DHCP is not enabled on a subnet, the AP cannot connect to that subnet with zero-configuration. If the DNS entry is not present on the DNS servers, or if you do not have the DHCP server running on the subnet, you must manually configure the AP. For details on configuring an AP manually, see the Access Point Configuration guide on our website at https://www.arista.com/en/support/product-documentation .

Power On the O-105E

An O-105E device can be powered on by plugging one end of the Ethernet cable into the 802.3at Power Over Ethernet+ (PoE+) switch or injector and the other end into the PoE port on O-105E of nominal input voltage 48V DC.

Note: If you are not using PoE, ensure that you use only an AC power adaptor supported by the O-105E access point (AP).

Connect External Antennas to O-105E

Connect the external antennas to their respective ports using "N Type" connectors.

Table 1. Labels: Antenna Ports
Label Description
1 Antenna 4, 2.4 GHz
2 Antenna 3, 5 GHz
3 Antenna 2, 2.4 GHz
4 Antenna 1, 5 GHz

Wall Mount the O-105E

Mounting the access point (AP) on the wall consists of the following steps:

  1. Affix the expansion bolts on the wall such that the holes on the mounting base can be perfectly placed over them.
    Table 1. Labels: Dimensions
    Label Description
    1 Horizontal distance between holes: 50mm
    2 Vertical distance between holes: 84mm
    3 Diameter of the hole: 6.5mm, depth 30mm
  2. Attach the mounting base to the bottom cover of the O-105E device.
    Table 2. Labels: Parts
    Label Description
    1 Philips #2 screwdriver. Length >= 100mm
  3. Mount the device on the expansion bolts.

Pole Mount the O-105E

Use the pole-mount bracket and pole strap to install the O-105E device on a pole. Standard accessories include two metal clamps.:

Use the mounting base to install the O-105E device on the wall. To mount the device:

  1. Attach the device to the mounting base.
  2. Attach the pole-mount bracket to the mounting base. You can position the pole-mount bracket for use on a vertical or horizontal pole. Insert the pole strap in to the pole-mount bracket.
  3. Mount the device securely to the pole by using the pole strap and a Philips #2 screwdriver.
    Table 1. Labels: Parts
    Label Description
    1 Philips #2 screwdriver.

Install the Access Point

This chapter contains the stepwise procedure to install the access point (AP).

Zero-Configuration of O-105E as Access Point

Zero-configuration is supported under the following conditions:

  • The device is in AP mode with background scanning on and no SSID configured.

  • A DNS entry wifi-security-server is set up on all the DNS servers. This entry should point to the IP address of the server. By default, the AP looks for the DNS entry wifi-security-server.

  • The AP is on a subnet that is DHCP enabled.

Important: If the AP is on a network segment that is separated from the server by a firewall, you must first open port 3851 for bidirectional User Datagram Protocol (UDP) and Transport Control Protocol (TCP) traffic on that firewall. This port number is assigned to Arista Networks. Zero-configuration cannot work if multiple APs are set up to connect to multiple servers. In this case, the APs must be configured manually. For details on how to configure an AP manually, see the Access Point Configuration Guide on our website at https://www.arista.com/en/support/product-documentation .

Take a configured AP; that is, ensure that a static IP is assigned to the AP or the settings have been changed for DHCP. Note the MAC address and the IP address of the AP in a safe place before it is installed in a hard-to-reach location. The MAC address of the AP is printed on a label at the bottom of the product.

The steps to install the AP with no configuration (zero-configuration) are as follows:

  1. Wall Mount the O-105E or Pole Mount the O-105E
  2. Power On the O-105E
  3. Connect the O-105E to the Network