Client Explorer helps you view the distribution of clients that are connected to Arista devices.

It provides a summary view of all the clients and provides an easy way for the network administrators to understand client distribution for each attribute. For example, network administrators can use the Client Explorer to understand client distribution for different versions of Wi-Fi and determine the percentage of legacy clients at a location.

On the Client Explorer chart, you can filter the clients based on their association attributes such as SSID and with AP as well as a range of Client properties. You can use the client connection status drop-down menu to view graphical client distribution based on the selected attribute.

Connection Status

Hover over the Status icon to view the current selection for client connection status filter.

Client Attributes

You can select and deselect a particular bar in the bar graph to filter the tabular data in the client list.

Along with client and network details, the client details dashboard also contains multiple data points regarding client connectivity, performance, and application experience. From a single dashboard, you can conduct live troubleshooting, and review past data to identify and troubleshoot past issues, thus resulting in a faster resolution.

The Client Details Dashboard contains a client connection widget, a client properties widget, and multiple tabs containing different charts and graphs showcasing client details.

Client Connection Widget

The top section of the dashboard has the client connection widget, which visually shows the selected client's network connectivity path. It shows the Client > AP > Switch association.

Hover over any device to view more information about it or click the three-dot menu next to the device icon to see the available actions for that device.

Client Properties Widget

The left side of the dashboard contains the following sections that display client properties:

• Device Details
• RF Details (Radio Frequency)
• Network Details - Only available for connected clients.

Client Dashboard Tabs

Overview Tab

At the very top of the Overview tab is the RCA widget, which shows the Root Cause Analysis for the symptoms faced by the client and the reason, along with the possible solution for the issues.

The Client Health Widget contains multiple charts related to client health, such as % Poor application experience, Connectivity Failures, RSSI, Data Rate, Wired Application Latency, Wireless Application Latency, Retry Rate %, etc. It is an interactive widget that you can customize according to your preferences. You can customize it to add or remove certain charts and change the order of visible charts. You can also hover over any data point to view more information.

To configure the widget, click the Customize  icon next to the chart filters to open the Configure panel. The following image shows the Configure panel for the Client Health widget:

Connectivity Tab

The connectivity tab contains charts that display the client’s connection attempts, the client’s roaming events from one AP to another, and a list of APs watching this client.

The connectivity tab shows the following charts:

• Client Events / Roaming Explorer
• Devices Seeing This Client
• Recently Probed SSIDs
• Association History

Performance Tab

The performance tab contains RSSI, Data Rate, Retry Rate %, and Traffic Volume charts.



Application Tab

The application tab displays charts that provide details about the applications used by the client such as the number of applications, application latency, poor application experience, etc.

It contains the following charts:

• Application Explorer
• Top Applications by Traffic
• Application Experience

Floor Plan Tab

The floor plan shows the location of the client on the floor. For the client to be located on the floor plan, it must be visible to at least three APs operating in the same frequency band. At least three APs must report the device and the APs must be placed on the floor.

If the client cannot be located on the floor plan, the proximity view is displayed.

Troubleshooting a Client

You can perform the following actions on each client. These actions are available under the Troubleshoot menu.

• Rename: To change the name of a client.
• Capture Packet Trace: To intercept a data packet that is crossing or moving over a specific network. The captured packet is stored temporarily for analysis. The packet is inspected to help diagnose and solve network problems.
• Packet Trace History: To view the Packet Trace History for the selected client. The packet traces captured only during the last 30 minutes are displayed in the history.
• Start Live Client Debugging: Displays live client logs of a client connection.
• Disconnect:Disconnects the client.
• Update Device Tag: Update the device tag of the client.

Roaming Explorer provides a graphical and tabular view of a client’s roaming events from one access point (AP) to another AP.

Roaming Explorer consists of a graph view and a split view.

Graph View

The graph view appears as follows:

It is a line graph denoting the client’s roaming activities on different APs. The APs are listed based on the number of events logged for each AP, with the AP having the highest number of roaming events listed on top. The Y-axis shows the APs, and the X-axis shows the timeline of the roaming event. You can hover over any event to view more details about it.

Graph view considers the following roaming events only:

• Association Failure
• Fast Roaming Failure
• Successful-Fast Roam
• Successful-First Association

Split View

The split view consists of a graph view and tabular data that lists all the clients' events along with the event timestamp and further details such as BSSID, AP Name, Location, Frequency Band, and more.

Selecting a client in the Clients list displays the connection logs.

Client Connection Logs shows the list of successful or failed connection attempts made by client. The list provides information about every attempt of connection made by a client. Green color represents successful connection. Red color represents failed connections. Client connection logs can be retrieved only for 802.11ac or higher APs.

You can view the Client Connection Logs in one of the following views:

• Timeline View
• Grid View

The Timeline View appears as follows:

The Grid View appears as follows:

You can view Client Events Logs by navigating to Clients -> Client Connection Logs drop-down menu -> Client Events Logs.

Client Event Logs by default opens in a full screen mode. It lists majority of client events including connection attempts. The list provides information about client connectivity events. Green color represents successful connection events. Grey color represents intermediate events. Red color represents failed connection events.

Graph View

Graph View

The Graph view appears as follows:

If you are interested in a specific event, you can apply filters based on various criteria to view the specific event. The filter is applied on the Grid view but the filter criteria are reflected in the Graph view as well. You can remove the filter from the Grid view.

Use the range scroll to limit the time period of the graph. If you don not want to use the scroll, you can also select the desired area in the graph using a mouse pointer. To go back to the original full range time period, click Reset Zoom. The Graph view is effective in full screen mode. Click the Full Screen icon (expand icon) to enter the full screen mode.

You can click a specific event in the graph and the corresponding event detail is highlighted in the table.

Grid View

The Grid View appears as follows. The red, green and grey colored symbols in event column of the client event logs denotes unsuccessful, successful and intermediate events respectively. Hover on each text to know about type of event occurred.

Client Events are categorized into 5 major categories and further divided into various intermediate events.

Field	Description
BSSID	BSSID is the MAC address of the AP to which the client attempted to connect.
AP Name	Name of the AP to which the client attempted to connect.
SSID	SSID of the WLAN to which the client is connected.
Channel	Operating channel of the AP to which the client attempted to connect. The channel is shown as Dual for sensor that operates on both 802.11a and 802.11b/g simultaneously.
Timestamp	Indicates the date and time when the client connected to an AP.
Event	Indicates if the client successfully connected.
Packet Capture	It provides the link of the wireshark file, that contains a packet capture for all failure events. User can open the file in Arista packets or download the file.

Consolidated View

Consolidated view captures client event logs of all clients connected to Arista devices. To view all client event logs, navigate to TROUBLESHOOT > Event Logs and click the Clients tab. The consolidated view appears as follows.

Top Applications by Traffic chart graphically represents data usage for applications. It always represents data for top five applications, with highest traffic. To view exact data usage, hover on the specific bar in the graph.

The data on the widget can be filtered using the available filters on the top right corner of the widget. To know more about the filters refer Filters on Widgets.

The Client Traffic Volume graph represents the data traffic sent and received by the client every 15 minutes. X-axis in the graph denotes the time period for which the Data Usage is plotted and Y-axis denotes the Traffic Volume.

Hovering the mouse on data point provides detail information about data usage.

Application Session Logs provides details of the applications used by the client. Select a client from MONITOR > WiFi > Clients to view Application Session Logs.

The top left corner denotes the total number of application session logs.

Hover on the pie chart icon to view overall aggregated data. The data provides information about Total Sessions, percentage count of Affected Sessions, Total Experience Time and percentage count for Poor App Experience.

The logs on the widget can be filtered using the available filters on the top right corner of the widget. To know more about the filters refer Filters on Widgets.

Devices Seeing This Client represents list of APs currently watching the client.

The top-left corner denotes the total number of APs seeing the client and the name of the AP associated with the client.

Clicking on the name of AP takes you to the Access Points Information page.

AP Explorer provides a holistic view of all the APs at a location and provides an easy way for the network administrators to understand AP distribution for each attribute.

On the AP Explorer chart, you can filter the devices based on the Device Status (All, Active, or Inactive). You can use the attribute drop-down menu to view graphical AP distribution based on the selected attribute. For example, you can the AP Explorer chart to get a summary view of AP Health by looking at the APs based on CPU Utilization or Memory Utilization.

The Clients by Avg. Data Rate graph displays clients classified based on data rate. CV-CUE has pre-defined, fixed thresholds for Average Data Rate. Since thresholds are configurable, user may select a value that falls in between a bucket on the X-axis. For instance, if a user sets the data rate threshold to 75 Mbps and RSSI threshold to -68 dBm, then these values fall in the “50 to 100 Mbps” data rate bucket and “-65 to -75 dBm” RSSI bucket, respectively.

Currently Associated Clients widget provides the list of clients that are currently associated to the AP.

Top Applications by Traffic chart graphically represents data usage for applications. It always represents data for top five applications that have highest data usage (transmit and receive). To view exact data usage, hover on the specific bar in the graph.

You can access the Network Usage chart in two different ways from CV-CUE UI. If you access the chart from the performance dashboard, it displays a line graph showing the number of clients associated with the SSID and its traffic volume, for all the clients on the selected folder or floor. Whereas when you access the chart through AP drill down, it displays similar data, but this time for the selected AP.

If you hover over the graph, a tooltip providing quick information like timestamp, the number of clients associated and the used traffic volume appears.

You can view or retrieve data using the filters. To know more about these filters refer Filters on Widgets.

The data of the network usage chart can be filtered based on two parameters; a client's data and the amount of data used by an application.

Drill down on the data point on the graph, redirects you to the page containing client connections table. This table contains the list of all the client connections along with their detailed information for the selected timestamp. For client details refer, Filtered Network Usage Chart.

This chart provides overall application usage analysis. It states the time for which application quality was good and the time for which it was bad.

The graph displays poor app experience in red colour and good app experience in green colour. X-axis displays time slots and Y-axis displays amount of time app quality was good or bad.

Click the data point or bar graph in the chart to view more details.

There are four filters provided on the right corner of the chart to filter the data:

Conferencing Apps Filter

SSID Filter

The application quality can also be viewed for specific SSID, using All SSIDs filter. Selecting a specific SSID provides a application quality graph for the specified SSID. Selecting All SSIDs provides an aggregated data on a graph for all the SSIDs.

Frequency Filter

Time Filter

Channel Map displays the number of clients and Access Points (APs) visible to the managed device at a time on a given channel. Network administrators can use this information to identify congested or underutilized channels in a given band.

To view Channel Map, select Channel Map from the drop-down menu in Specturm Occupancy chart.

In the Channel Map chart, from the right-hand drop-down menu, select the band and use the time slider to select your time interval to view the number of visible clients and APs. You can view the Channel Map upto 12 hours in the past from the current time. Hover over the chart to view the exact count of APs and clients on a given channel.

You can launch the RF Explorer from the Spectrum Occupancy chart or from the AP listing under MONITOR > WiFi > Access Points by right-clicking on an AP and selecting Troubleshoot > View RF Exlporer.

As seen in the previous figure, the RF Explorer shows you what an AP sees in its RF neighborhood. For example, it shows you the channels occupied by other APs in the vicinity of the AP and the RSSI values for each of the neighboring APs as seen by the AP.

You can use the RF Explorer to identify issues such as co-channel and adjacent channel interference, and DFS channels occupied by APs. The grey rectangle stretching across the RSSI axis represents the operating channel of the AP itself; the heights of the other channel trapezoids indicate the RSSI values of those channels as seen by the AP. You can click on an AP from the list of APs to see its channel details on the chart (as seen in the callout in the previous figure).

One of the reasons why Wi-Fi clients encounter RF issues is non-Wi-Fi interference. All Wi-Fi 6 and above APs can perform interference classification. CV-CUE classifies interference into four categories — Wi-Fi, Microwave Oven (MWO), Frequency Hopping Spread Spectrum (FHSS), and Continuous Wave (CW).

You can run the interference classifier for a specific band or for a specific channel. The results are shown in a separate tab as a read-only information. To launch Interference Classifier from the AP listing, click MONITOR > WiFi > Access Points . Right click an AP and select selecting Troubleshoot > Start Interference Classifier .

The interference classification opens in a separate tab. Hover your pointer over a data point to see more details about the interference source for a specific channel.

The Visible BSSID widget provides the list of the APs visible to the selected AP. The widget provides two different views: one for Managed BSSIDs and the other for Unmanaged BSSIDs.

Visible BSSIDs - Managed

Selecting Visible BSSIDs - Managed from the drop-down list displays APs that belong to your network and are in the vicinity of the selected AP.

Visible Access Points - Un-managed

Selecting un-managed from the drop-down list displays the Access Points that do not belong to your network but are in the vicinity of the selected AP.

The visible VLANs widget is available on drilling down from any managed Wi-Fi device. The widget displays details of the VLANs visible to the managed device. "Monitored" in the Status column indicates that the VLAN is being monitored by that managed device. "Not monitored" indicates that it is being monitored by another managed device.

The Visible Client widget provides the list of clients visible to the selected AP. It also provides the total number of visible clients on the top left corner of the widget.

AP event logs table maintain event logs of AP. The captured events are from an AP perspective and do not include data related to clients and their connectivity information. These events are sent by the AP to Wireless Manager in real time and logged at Wireless Manager.

You can view AP Event Logs, by selecting the option Troubleshoot > View Event Longs. with a right-click on any AP.

You can assign one or more access points from a location subtree to a group. It is a method used to apply a single Wi-Fi configuration to multiple devices across different locations. If a group has no configuration, then the assigned devices will use the default Wi-Fi configuration of their respective locations. On the other hand, suppose an AP already has custom Wi-Fi configuration applied to it. Then if you assign such an AP to a group it will start using the Wi-Fi configuration of the group.

You can configure an automatic update that includes upgrade or downgrade of Arista devices deployed at your enterprise premises. The device update can be configured or scheduled for devices that connect to the server for the first time as well as for existing devices that are already placed at various locations.

A device firmware update configuration is specific to a location and applies to all Arista devices placed at the location. An individual Arista device cannot have an independent device firmware update configuration.

A device firmware update configuration can be created for location folders only. A location floor cannot have its own device firmware update configuration; it inherits the device firmware update configuration from the parent location folder. When you do not recursively apply a device firmware update configuration to the child location folders, the configuration is applied only to the selected location folder and the location floors directly under the selected location folder.

You can choose to apply a device firmware update configuration recursively to the child location folders, when you are creating or editing the device firmware update configuration, However, a child location folder can have its own device firmware update configuration. If you define the firmware update configuration specific to the child location folder when a schedule for its parent location folder is already defined, the schedule configured to the child location applies to the child location folder

When an active schedule is deleted or modified for a location, the sensors of that location on which the update process is already started or the update command is scheduled would still be upgraded.

The device firmware update setting for a location applies to all active devices deployed at the location. The update can be applied to both existing Arista devices and new devices connecting to the Arista Server for the first time. A schedule can be configured for existing Arista devices at a location. The device firmware update configuration is not tied to release numbers. If a server is updated multiple times between the creation of the update configuration and scheduled time of device update, the devices are updated to the latest firmware release.

Web Shell is an online interface to remotely log into an access point (AP) via SSH. An administrator or a superuser can open Web Shell for a specific AP from CV-CUE. Web Shell is helpful to troubleshoot AP issues, especially if an AP is behind a NAT. The URL for the Web Shell is specific to an AP. You can bookmark the URL to open a shell session to the AP directly instead of opening the shell session from CV-CUE.

For the list of APs supporting Web Shell, see the Access Point Feature Matrix article.

Describes different actions available for certificates from the global toolbar as well as per AP.

You can take actions related to certificates for each AP or for all the APs seen in the Monitor > Access Points tab. When you use the global menu to perform your certificate-related actions, it applies to all APs in that location. For individual APs, you can perform the certificate actions from the three-dot menu per AP.

The following image shows the certificate actions from the toolbar:

The following image shows the certificate actions per AP:

Certificate Tags

Each certificate must have a tag associated with it. Typically, you assign tags for a specific function or you could keep a generic tag and use it for all purposes. For example, you could use a tag named IPsec and assign it to all the APs that use the IPsec protocol. You can also use a tag named Generic and use it for all purposes. This makes handling of certificates easier through tags. Note that after you update the certificate, you still need to manually upload the new certificates to APs.

When you manage certificates for the first time, you do not have any predefined tags. In such cases, you have to create a tag first and then generate a CSR.

You can create a new tag from the global certificate actions only. You cannot create a new tag for an individual AP.

When you generate a CSR for a single AP, you can only assign pre-created tags.

Manage certificates for each access point.

You can see all the certificates for a location from the Manage Certificates page. It is a per-AP feature. Right-click an AP, then click Certificate > Manage Certificates . You can view the current status of certificates based on the tags. Refresh the page to get the latest certificate status.

For each certificate tag, you can perform the forllowing actions:

• Generate CSR
• Download CSR
• Upload Device Certificate
• Delete Certificate
• Repush Certificate

The Last User Action Status column shows the latest action performed by the user. For example, if you regenerate the certificate, this column shows the status of your action. The Certificate Status on AP column shows whether the AP already has a certificate or if it’s in the process of obtaining a certificate.

The actions on the Manage Certificate page are already associated with a tag. Therefore, you do not have to provide a new tag when you perform any action from this page.

Repush a certificate to reupload an existing but corrupt certificate.

When you repush a certificate, the server tries to reupload the device and CA certificates to the AP. Use this option when the AP malfunctions and stops associating with the installed certificates.

When you initiate the Repush action, the server automatically identifies the certificate that was previously available and tries to reinstall the certificate. Note that when you delete a certificate from an AP, the Repush action will not be effective to reinstall the certificate. You need to manually reupload certificates then.

The Visible Clients with Most Application Traffic widget displays a list of the visible clients with highest usage of the selected application along with the detailed information of the client. The number on the top left corner indicates the total number of clients with the most traffic.

The widget has a provision to view or retrieve data using the filters. To know more about these filters refer Filters on Widgets.

You can modify the view of the table by using the set of tools provided in the top-right corner of the widget. You can sort the data in an ascending or descending order by clicking on the Name column.

CV-CUE performs root cause analysis on single clients as well as on the total number of clients facing problems.

For single clients, you do not have to run the Inference Engine. You can view the recommendations from MONITOR > WiFi > Clients .

For total clients, you have to run the Inference Engine in the Client Health widget and the root cause analysis runs based on the locations. You run it from Dashboard > Performance > Client Health > Total Affected.