all | frequencies |
|
|
|
exhibits | applications |
---|---|---|---|---|---|---|
manuals |
app s | submitted / available | |||||||
---|---|---|---|---|---|---|---|---|
1 2 |
|
Deployment Guide | Users Manual | 2.62 MiB | / March 05 2014 | |||
1 2 |
|
Guide Part 2 | Users Manual | 4.21 MiB | / March 05 2014 | |||
1 2 |
|
Setup Guide Part 1 | Users Manual | 3.77 MiB | / March 05 2014 | |||
1 2 | RF Exposure Info | |||||||
1 2 | RF Exposure Info | |||||||
1 2 | External Photos | / March 05 2014 | ||||||
1 2 | Internal Photos | / March 05 2014 | ||||||
1 2 | ID Label/Location Info | |||||||
1 2 | Cover Letter(s) | |||||||
1 2 | RF Exposure Info | |||||||
1 2 | Test Report | |||||||
1 2 | Test Report | |||||||
1 2 | Test Report | |||||||
1 2 | Cover Letter(s) | |||||||
1 2 | Test Report | |||||||
1 2 | Test Setup Photos | / March 05 2014 | ||||||
1 2 | RF Exposure Info | |||||||
1 2 | RF Exposure Info | |||||||
1 2 | RF Exposure Info | |||||||
1 2 | Test Report | |||||||
1 2 | Test Report | |||||||
1 2 | Test Report | |||||||
1 2 | Test Report |
1 2 | Deployment Guide | Users Manual | 2.62 MiB | / March 05 2014 |
7signal Sapphire Deployment Guide Release 5.0 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com i 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l Preface PREFACE Document scope This document is aimed at people familiarizing themselves with the 7signal Sapphire system before deployment and to aid the actual deployment. After completion of this document, 7signal Sapphire is installed, up and running ready for Wireless Performance Optimization. This document does not describe how the software operates, how to configure testing or how to read the measurements. The actual use of 7signal Sapphire applications is explained in documents 7signal Sapphire Carat User Guide and 7signal Sapphire Analyzer User Guide. FCC Compliance Human RF Exposure This equipment complies with the FCC RF radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 20 centimeters between the radiator and your body. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. The antennas used for this transmitter must be installed to provide a separation distance of at least 20cm from all persons and must not be located or operating in conjunction with any other antenna or transmitter. Part 15 This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at their own expense. Antenna This device has been designed to operate on internal antennas or with an external patch type antenna having a maximum gain of 6dBi. Antennas having a gain greater than 6dBi are strictly prohibited for use with this device. The required antenna impedance is 50 ohms. Notes to the user Any unauthorized modification of 7signal products may result in violation of FCC requirements which would void the users authority to operate the equipment. This device is restricted to indoor-only use in 5180.0 - 5250.0 MHz and 5470.0 - 5725.0 MHz bands The FCC ID for the 7signal Sapphire Eye IEEE802.11a/b/g Eye Unit is YLF-2010-08-APU2. The FCC ID for the 7signal Sapphire Eye, Model 1001 (802.11a/b/g/n), is YLF-EYE-ABGN-APU3 The FCC ID for the 7signal Sapphire Eye, Model 2001 (802.11a/b/g/n) is YLF-INEY2001. Industry Canada Compliance The Industry Canada ID for 7signal Sapphire Eye, Model 2001 (802.11a/b/g/n) is 11766A-INEY2001 This Class A digital apparatus complies with Canadian ICES-003. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com Preface Cet appareil numrique de la classe A est conforme la norme NMB-003 du Canada. ii 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l This device complies with Industry Canada licence-exempt RSS standard(s). Operation is subject to the following two conditions: (1) this device may not cause interference, and (2) this device must accept any interference, including interference that may cause undesired operation of the device. Le prsent appareil est conforme aux CNR d'Industrie Canada applicables aux appareils radio exempts de licence. L'exploitation est autorise aux deux conditions suivantes : (1) l'appareil ne doit pas produire de brouillage, et (2) l'utilisateur de l'appareil doit accepter tout brouillage radiolectrique subi, mme si le brouillage est susceptible d'en compromettre le fonctionnement. Limitations in 5GHz Radar and Mobile Satellite Bands:
(i)
(ii)
(iii)
(i)
(ii)
(iii) operation in the band 5150-5250 MHz is only for indoor use to reduce the potential for harmful interference to co-channel mobile satellite systems;
the maximum antenna gain permitted for devices in the bands 5250-5350 MHz and 5470-5725 MHz shall comply with the e.i.r.p. limit; and the maximum antenna gain permitted for devices in the band 5725-5825 MHz shall comply with the e.i.r.p. limits specified for point-to-point and non point-to-point operation as appropriate. les dispositifs fonctionnant dans la bande 5 150-5 250 MHz sont rservs uniquement pour une utilisation lintrieur afin de rduire les risques de brouillage prjudiciable aux systmes de satellites mobiles utilisant les mmes canaux;
le gain maximal dantenne permis pour les dispositifs utilisant les bandes 5 250-5 350 MHz et 5 470-5 725 MHz doit se conformer la limite de p.i.r.e.;
le gain maximal dantenne permis (pour les dispositifs utilisant la bande 5 725-5 825 MHz) doit se conformer la limite de p.i.r.e. spcifie pour lexploitation point point et non point point, selon le cas. Note: High-power radars are allocated as primary users (i.e. priority users) of the bands 5250-
5350 MHz and 5650-5850 MHz and these radars could cause interference and/or damage to LE-
LAN devices. De plus, les utilisateurs devraient aussi tre aviss que les utilisateurs de radars de haute puissance sont dsigns utilisateurs principaux (c.--d., quils ont la priorit) pour les bandes 5 250-5 350 MHz et 5 650-5 850 MHz et que ces radars pourraient causer du brouillage et/ou des dommages aux dispositifs LAN-EL. Contact information Contact us at 7signal by mail:
by email:
by phone:
support:
526 S. Main Street, Suite 601G, Akron, Ohio 44311, USA info@7signal.com 855-763-9526 (855-QOE-WLAN) support@7signal.com 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com Table of Contents TABLE OF CONTENTS iii 7 s i g n a 1 7signal solution ....................................................................................................................................1 1.1 Solution Overview ......................................................................................................................2 1.2 Hardware ...................................................................................................................................2 1.2.1 802.11a/b/g Standard Eye...............................................................................................2 1.2.2 802.11a/b/g/n Standard Eye ............................................................................................2 1.2.3 802.11a/b/g/n Indoor Eye ................................................................................................3 1.2.4 Soft Eye ..........................................................................................................................3 1.2.5 Micro Eye .......................................................................................................................3 l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 2 Requirements .......................................................................................................................................4 2.1 Carat server requirements ..........................................................................................................4 2.2 Sonar server requirements .........................................................................................................4 2.3 Soft Eye laptop PC requirements ................................................................................................4 3 7signal Sapphire Connectivity.............................................................................................................6 3.1 Communication security .............................................................................................................6 3.2 Supportive connections ..............................................................................................................6 3.2.1 SSH for Eye ....................................................................................................................6 4 Installing 7signal Sapphire ..................................................................................................................7 4.1 Operating System installation tips ...............................................................................................7 4.1.1 Hard disk partitioning ......................................................................................................7 4.2 Setting up Eyes ..........................................................................................................................8 4.2.1 Eye IP address configuration ..........................................................................................8 4.3 Setting up Soft Eyes ...................................................................................................................9 4.3.1 Prerequisites...................................................................................................................9 4.3.2 Install and configure operating system ............................................................................9 4.3.3 Install latest mainline kernel .......................................................................................... 11 4.3.4 Configure firewall .......................................................................................................... 11 4.3.5 Install Soft Eye software ................................................................................................ 11 4.3.6 Install certificate and license ......................................................................................... 12 4.3.7 Start Soft Eye ............................................................................................................... 12 4.3.8 Known issues ............................................................................................................... 12 4.4 Setting up Micro Eyes ............................................................................................................... 13 4.4.1 Set IP configuration....................................................................................................... 13 4.5 Mounting Eyes ......................................................................................................................... 13 4.5.1 Indoor Eye Ceiling Installation ....................................................................................... 14 4.5.2 Standard Eye Ceiling Installation ................................................................................... 15 4.5.3 Wall Mount Installation (optional)................................................................................... 15 4.5.4 Pole Mount (optional) .................................................................................................... 16 4.5.5 Eye installation examples .............................................................................................. 17 4.6 Installing 7signal Sapphire software .......................................................................................... 18 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l Table of Contents iv 4.6.1 Carat server installation (Linux 32 bit and 64 bit) ........................................................... 18 4.6.2 DBMS installation (Linux 32 bit and 64 bit) ................................................................... 22 4.6.3 Analyzer server installation (Linux 32 bit and 64 bit) ...................................................... 25 4.6.4 Sonar Installation (Linux 32 bit and 64 bit) ..................................................................... 27 4.6.5 Carat GUI Installation (Linux) ....................................................................................... 28 4.6.6 Carat GUI Installation (Windows) ................................................................................. 30 5 Upgrading Sapphire ........................................................................................................................... 34 5.1 Copy the latest Sapphire release to the hard disk (Linux) .......................................................... 34 5.2 Stop Sapphire solution (Linux) .................................................................................................. 34 5.3 Carat server upgrade (Linux 32 bit and 64 bit)........................................................................... 36 5.4 DBMS upgrade (Linux) ............................................................................................................. 38 5.5 Carat GUI upgrade (Linux 32 bit and 64 bit) .............................................................................. 39 5.6 Analyzer server upgrade (Linux 32 bit and 64 bit)...................................................................... 41 5.7 Sonar upgrade (Linux 32 bit and 64 bit) .................................................................................... 42 5.8 Carat GUI upgrade (Windows) .................................................................................................. 43 5.9 Start Sapphire solution (Linux) .................................................................................................. 48 5.10 Eye upgrade ........................................................................................................................... 48 5.10.1 Eye upgrade (GUI) ...................................................................................................... 48 5.10.2 Eye upgrade (command line) ...................................................................................... 51 5.11 Start Automated Testing ......................................................................................................... 52 6 Uninstalling Sapphire ........................................................................................................................ 53 6.1 Uninstall Analyzer server (Linux 32 bit and 64 bit) ..................................................................... 53 6.2 Uninstall Carat server (Linux 32 bit and 64 bit) .......................................................................... 53 6.3 Uninstall DBMS (Linux 32 and 64 bit) ........................................................................................ 54 6.4 Uninstall Carat GUI (Linux 32 bit and 64 bit) ............................................................................. 55 6.5 Uninstall Carat GUI (Windows) ................................................................................................. 56 6.6 Uninstall Sonar (Linux 32 bit and 64 bit) .................................................................................... 56 6.7 Uninstall Soft Eye ..................................................................................................................... 57 7 Log Settings ....................................................................................................................................... 58 7.1 Carat server log ........................................................................................................................ 58 7.2 Carat GUI log ........................................................................................................................... 58 7.3 Eye log ..................................................................................................................................... 58 7.4 Soft and Micro Eye log.............................................................................................................. 59 7.5 Analyzer log ............................................................................................................................. 59 7.6 Sonar log (Linux) ...................................................................................................................... 60 8 Sapphire Process Management ......................................................................................................... 61 8.1 Carat ........................................................................................................................................ 61 8.2 Analyzer ................................................................................................................................... 61 8.3 Sonar ....................................................................................................................................... 61 8.4 Eye .......................................................................................................................................... 61 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l Table of Contents v 9 Troubleshoot ...................................................................................................................................... 62 9.1 GUI client cannot connect to Carat server ................................................................................. 62 9.2 Cannot add Eye unit ................................................................................................................. 62 9.3 No access to Sonar server, active test failed ............................................................................. 62 9.4 Analyzer client cannot connect to Carat server.......................................................................... 62 9.5 Eye IP address forgotten .......................................................................................................... 63 10 Command-line utility for Eye ........................................................................................................... 64 10.1 Overview ................................................................................................................................ 64 10.2 7db IP command group ............................................................................................... 64 10.3 Keys command group ............................................................................................................. 65 10.4 AP command group ................................................................................................................ 65 10.5 Conn command group ............................................................................................................ 65 10.6 Run command group .............................................................................................................. 66 10.7 Txp command group ............................................................................................................... 67 10.8 Log command group ............................................................................................................... 67 11 Command-line tool for database management ............................................................................... 70 11.1 Logsetup command ................................................................................................................ 70 11.2 Backup command group ......................................................................................................... 70 11.3 Show command group ............................................................................................................ 71 11.4 Reinit command group ............................................................................................................ 72 11.5 Reorg command group ........................................................................................................... 72 12 Command-line tool for carat server................................................................................................. 74 12.1 License command group......................................................................................................... 74 12.2 Integritycheck command group ............................................................................................... 74 13 Updating encryption certificates ..................................................................................................... 75 13.1 Updating Carat server certificates ........................................................................................... 75 13.2 Updating Analyzer server certificates ...................................................................................... 75 13.3 Updating Carat GUI certificates (Linux) ................................................................................... 75 13.4 Updating Carat GUI certificates (Windows) ............................................................................. 76 13.5 Updating Eye certificates ........................................................................................................ 76 14 Removing old measurement data .................................................................................................... 77 Appendix A. Logical connections ........................................................................................................ 79 Appendix B. Bandwidth requirements ................................................................................................. 85 14.1.1 Eye Sonar ................................................................................................................ 85 14.1.2 Eye Carat................................................................................................................. 85 14.1.3 Carat server Carat GUI ............................................................................................ 86 14.1.4 Analyzer server Analyzer client (browser) ................................................................. 86 14.1.5 DB2 and Analyzer server, DB2 and Carat server ......................................................... 86 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 1 7signal solution 1 7signal solution 1 7 s i g n a 7signal Sapphire provides you a new way to continuously and automatically measure the health and quality of a wireless network from the user's perspective. Companies and their business processes are becoming increasingly dependent on the performance and service quality of their wireless networks. Thanks to the Sapphire solution, companies can integrate the quality management of wireless networks with their existing IT and communications technology services. 7signal Sapphire uses monitoring sensors called Eyes to monitor performance and quality in WLAN networks. It also monitors the surrounding radio frequency environment. The performance of the customers network is tested against the 7signal Sonar, a test server that helps simulate client activity on the network. Interactive tests, Eyes and parameters for automatic measurement are managed with a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l centralized application called the Sapphire Carat. The measurement results are reported via an application called the Sapphire Analyzer. The Eye, continuously monitors the selected WLAN channels via passive listening, which does not have an impact on network performance. It can also emulate a client device in the target network and then use the network and the services provided through it. By analyzing the measurement results, the solution can detect network performance and quality-of-service (QoS) issues. The solution can also produce proactive statistics on the predicted user experience of network performance, which enables the company to increase network capacity before the users notice a loss of performance. In user emulation tests, also known as active tests, the Eye connects to the Sonar over the wireless network and uses it like an ordinary production service. The usage may include mass file transfers, browser downloads, wireless VoIP calls, or connections to another production server. Sapphire tests the end-user experience by examining the entire data chain from the client to the production service. Active tests can monitor the network even when there are no users in the network. This makes it possible to forecast performance problems and take corrective actions before the service level suffers. Active tests show the availability and quality of services offered over the network and they help administrators see why some applications with their various demands for network performance do not work as expected in the network or some of its areas. When problems occur, active tests can also aid to locate of the problem area in the network topology, which often includes WLAN, LAN, and WAN elements. The key differentiators of 7signal Sapphire are user emulation, superb coverage, continuous monitoring, and visibility of network health. Other solutions are often based on monitoring the access point settings. As a result, they do not give any indication of the service quality experienced by the end user. In such limited solutions, the service quality parameters measured are the same as in wired networks. Sapphire, by contrast, produces a comprehensive picture of the radio connection quality, where delay, number of retransmissions, and packet loss are taken into account, in addition to other commonly measured parameters. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 1 7signal solution 1.1 Solution Overview 2 7 s i g n a The 7signal Sapphire quality monitoring solution consists of Sapphire Eye monitoring sensors, Sonar test servers, the Sapphire Carat management software, and Sapphire Analyzer for viewing and reporting on results. l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 1.2 Hardware 7signal Sapphire Eye is a wireless probe or a monitoring station that is installed in a central position within the WLAN network. Currently there are five different hardware variants: the Standard Eye supporting 802.11a/b/g standards, Standard Eye supporting 802.11a/b/g/n standards, Indoor Eye supporting 802.11a/b/g/n standards, and the Micro Eye and Soft Eye supporting 802.11a/b/g/n standards. 1.2.1 802.11a/b/g Standard Eye 802.11a/b/g version of Eye has the following main features (partly optional):
Mechanical parts injection molded polycarbonate plastic Linux computer, 1GB Flash memory WLAN radio module, 802.11 a/b/g support (2.4 GHz, 5.180 GHz - 5.825 GHz) Spectrum Analyzer component 6 sectored high gain antennas covering 360 degrees in horizontal directions, 1 sectored high gain antenna in vertical direction RF board with antenna beam selection capability and low noise amplifiers in receiver chain Heating element Electronic compass 1.2.2 802.11a/b/g/n Standard Eye 802.11a/b/g/n version of Eye has the following main features (partly optional):
Mechanical parts injection molded polycarbonate plastic Linux computer, 1GB Flash memory 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 1 7signal solution WLAN radio module, 802.11 a/b/g/n support (2.4 GHz, 5.180 GHz - 5.825 GHz) Expansion card slots inside the unit: One Mini-PCI and one PCI Express for future use Micro SD card slot inside the unit Spectrum Analyzer component 3 7 s i g n a 6 sectored high gain antennas covering 360 degrees in horizontal directions, 1 sectored high gain antenna in vertical direction RF board with antenna beam selection capability and low noise amplifiers in the receiver chain Heating element Electronic compass Reset button LED indicating status 1.2.3 802.11a/b/g/n Indoor Eye 802.11a/b/g/n version of the Eye has the following main features (partly optional):
Mechanical parts injection molded polycarbonate plastic Linux computer, 1GB Flash memory WLAN radio module, 802.11 a/b/g/n support (2.4 GHz, 5.180 GHz - 5.825 GHz) Expansion card slots inside the unit: One PCI Express for future use Micro SD card slot inside the unit Spectrum Analyzer component 6 sectored high gain antennas covering 360 degrees in horizontal directions RF board with antenna beam selection and low noise amplifiers in the receiver chain Heating element Electronic compass Reset button LED indicating status 1.2.4 Soft Eye Sapphire Eye software can be installed to standard x86 architecture laptop PC, equipped with suitable WLAN network interface card (Supported WLAN cards are listed in Release Notes document). 1.2.5 Micro Eye Micro Eye is a Raspberry PI (rev B) computer board, equipped with suitable WLAN network interface card
(supported WLAN cards are listed in Release Notes document). Micro Eye is shipped with pre-installed SDHC memory card, which contains operating system and Sapphire Eye software. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 2 Requirements 2 REQUIREMENTS 4 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 2.1 Carat server requirements The Carat server controls the Eye units and collects and stores measurement results in the database. Carat server runs on the Linux operating system and can be installed on a dedicated server or virtual environment. The Carat server minimum requirements are below:
Quad core x86 32-bit or x86_64 64-bit Intel and AMD processors minimum 6 GB RAM installation minimum 10GB hard disk space required recommended minimum database space 500GB o depending on target network size, (for reference, typical data volume = uncompressed raw measurement data /AP/month = circa 50MB) o separate 100GB partition for database backups Network connection CentOS 5/6 or Red Hat Enterprise Linux 5/6 2.2 Sonar server requirements Sonar is an end-point software for Sapphire active tests. Sonar server runs on Linux operating system and can be installed to dedicated server or virtual environment. The Sonar server minimum requirements are below:
Dual core x86 32-bit or x86_64 64-bit Intel and AMD processors Network connection CentOS 5/6 or Red Hat Enterprise Linux 5/6 Minimum 2GB RAM To best reflect the business-application behavior, Sonar server would benefit from similar characteristics than the server running the business application. For example, the Windows TCP/IP stack implementation may limit performance by default. 2.3 Soft Eye laptop PC requirements The Soft Eye laptop PC minimum requirements are listed below:
Dual core x86 32-bit or x86_64 64-bit Intel and AMD processors Network connection CentOS 6 or Red Hat Enterprise Linux 6 Minimum 2GB RAM WLAN network interface card o Suitable cards are listed in Release Notes document o Both PCI and USB cards are supported. o If the PC has both PCI and USB WLAN cards, Sapphire Eye will use USB card. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 5 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 2 Requirements Firewall settings The following ports should be opened in firewalls:
Source IP/Mask Destination IP/Mask Protocol/Port Comments Carat server connections to Eye Carat server IP/32 Eye Ethernet IP/32 TCP/77991 Eye management Carat server IP/32 Eye Ethernet IP/32 TCP/22 Eye (SSH) Carat GUI connections to Carat server Carat GUI IP/32 Carat server IP/32 TCP/477771 Carat GUI Carat GUI IP/32 Carat server IP/32 TCP/1099 Carat GUI RMI Analyzer client (web browsers) connections to Carat server Browser host IP/32 Carat server IP/32 Browser host IP/32 Carat server IP/32 TCP/801 TCP/4431 Eye connections to Sonar server Eye WLAN IP/32 Sonar server IP/32 TCP/801 Eye WLAN IP/32 Sonar server IP/32 ICMP Eye WLAN IP/32 Sonar server IP/32 UDP/50000-500091 Eye WLAN IP/32 SIP server IP/32 UDP/5060 Eye Ethernet IP/32 Sonar server IP/32 TCP/5060 TCP/801 Analyzer (HTTP) Analyzer (HTTPS) Sonar tests Sonar RTT Sonar VoIP SIP REGISTER test
(SIP server is not part of Sapphire distribution) Sonar Ethernet tests Eye Ethernet IP/32 Sonar server IP/32 ICMP Sonar Ethernet RTT Eye Ethernet IP/32 Sonar server IP/32 UDP/50000-500091 Sonar Ethernet VoIP Eye Ethernet IP/32 SIP server IP/32 UDP/5060 TCP/5060 SIP REGISTER Ethernet test (SIP server is not part of Sapphire distribution) Sonar server connection to Eye Sonar server IP/32 Eye WLAN IP/32 Sonar server IP/32 Eye Ethernet IP/32 UDP/99991 UDP/99991 Sonar VoIP Sonar Ethernet VoIP 1 This is the default port number. All TCP/UDP ports in Sapphire are configurable. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 3 7signal Sapphire Connectivity 3 7SIGNAL SAPPHIRE CONNECTIVITY 6 7 s i g n a 3.1 Communication security All connections containing meaningful traffic are being encrypted. The used encryption methods are TLS and SSL. The PKI infrastructure (certificates) is being used throughout the solution. Every customer has individual set of certificates, delivered within containers called certificate packages. It is not possible to use the delivered certificates to decrypt traffic of other 7signal Sapphire systems. Q: Where can I find my certificates? All the customer certificates and certificate packages are located in the Certificates CD. l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l It is neither necessary nor encouraged to handle the certificate container files. Install and upgrade processes of 7signal Sapphire take care of all the typical cases. In untypical cases the 7signal staff shall be involved with all the help necessary. 3.2 Supportive connections 3.2.1 SSH for Eye SSH connection is required in deployment phase: IP address configuration is done with 7config command line utility, and Carat server utilizes SSH connection when it is setting management traffic encryption certificates in Eye units. Eye firmware can be also managed with SSH (not recommended normally). 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 4 Installing 7signal Sapphire 4 INSTALLING 7SIGNAL SAPPHIRE 7 7 s i g n a 4.1 Operating System installation tips It is recommended to install the operating system by using the graphical installer. 4.1.1 Hard disk partitioning This chapter gives some guidelines for hard disk partitioning. It is assumed that readers have comprehensive knowledge about Linux file systems, RAID, LVM and disk partitioning. This chapter does not cover basic partitioning requirements, e.g. configuring boot and swap partitions are not covered. l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l Swap is required by the DB2 database. Size of the swap must be 2 x RAM size. Laptop installations Default partitioning suggested by the OS installer is suitable for most of the cases. As laptops are rarely equipped with multiple hard drives, RAID configurations are not possible. Server installations It is recommended to configure at least one RAID array: 7signal databases and database log files should reside on a file system on top of RAIDed disks (RAID level 1 or higher, LVM on top of RAID). Multiple RAIDed file systems are also suitable, for example, OS installation could be on file system on RAID1, and databases on file system on top of RAID5. It is suggested that LVM is used on top of RAIDs: this makes possible to easily add a new RAID array as a LVM physical volume, if the existing ones run out of disk space. On large server installations (having tens of monitoring stations producing large amount of measurement data), it is also suggested that database log files should be placed on different physical disk than the actual databases. This will improve database performance by reducing serialized disk access. Example #1 Two physical disks Boot and swap partitions RAID1 on top of disks, formatted as LVM physical volume Physical volume split into three logical volumes o o 10% of space for OS installation, mount point / (LV1) 70% of space for databases and database log files, mount point
/opt/7signal/databases (LV2) o 20% of space for database backups, mount point /opt/7signal/backups (LV3) Sapphire installation o Sapphire components are installed to /opt/7signal (on LV1) o Sapphire databases are installed to /opt/7signal/databases (on LV2) (7signal DBMS installer asks for location of databases and database log files) o Sapphire database backups will be placed on /opt/7signal/backups (on LV3) Example #2 Five physical disks Boot and swap partitions RAID1 on top of two disk, RAID5 on top of tree disks, all formatted as LVM physical volume Physical volume on RAID1 has two logical volumes 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 8 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 4 Installing 7signal Sapphire o o 50% of space for OS installation, mount point / (LV1) 50% of space for database logs, mount point /opt/7signal/database-logs (LV2) Physical volume on RAID5 has two logical volumes o o 70% of space for databases, mount point /opt/7signal/databases (LV3) 30% of space for database backups, mount point /opt/7signal/backups (LV4) Sapphire installation o Sapphire components are installed to /opt/7signal (on LV1) o Sapphire databases are installed to /opt/7signal/databases (on LV3) and database logs are directed to /opt/7signal/database-logs (on LV2) (7signal DBMS installer asks for location of databases and database log files). o Sapphire database backups will be placed on /opt/7signal/backups (on LV4) 4.2 Setting up Eyes From Release 5.0 onwards, the only mandatory setup phase is Eye IP address configuration. Carat will install Eye software automatically while adding a new Eye to the system. 4.2.1 Eye IP address configuration Step 1: Connect to Eye unit By default Eye units have IP address 192.168.0.1 with net mask 255.255.255.0. Connect to address 192.168.0.1 as root by using a SSH client.
# ssh root@<Eye IP address>
The root default password is 7signal. It is strongly advised to change this password as it is factory default for every single Eye unit. Step 2: Configure IP settings Setting IP address of the management interface:
# 7config ip set addr <IP address>
Setting network mask of the management interface:
# 7config ip set mask <dot-format-mask>
Setting port of the management interface (optional):
# 7config ip set port <port>
Verify the settings with the show command:
# 7config ip show 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 9 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 4 Installing 7signal Sapphire Step 3: Reboot Eye unit Reboot the Eye unit to make the changes effective:
# reboot 4.3 Setting up Soft Eyes 4.3.1 Prerequisites CentOS/Red Hat Enterprise Linux 6 installation media Internet connection (connect to Ethernet port of the laptop) Soft Eye installer (7signal-eye-x.y-x86.bin) Certificate package file Soft Eye license (*.elic file) o License is bound to MAC address of the WLAN card 4.3.2 Install and configure operating system Step 1: Install WLAN card Install WLAN card either to mini-PCI-Express slot or to USB port. Step 2: Install operating system Install operating system by using default partitioning, a Desktop installation is suitable for most of the purposes (for example, if Carat and Carat GUI will be run in the same laptop). Step 3: Configure IP address Configure static IP address. Step 4: Upgrade OS installation to the latest version Open a console, use yum to upgrade OS installation:
# yum upgrade Remove NetworkManager:
# yum remove NetworkManager Step 5: Configure services Enable network service:
# chkconfig network on Enable SSH service:
# chkconfig sshd on 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 10 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 4 Installing 7signal Sapphire Step 6: Check network interface naming rules If the laptop has multiple WLAN cards (e.g. an internal and an USB card), rules related to network interface naming need to be checked in order to get correct names for network interfaces. Network interfaces used by Sapphire Eye Software must be wlan0 and wlan1. Open file /etc/udev/rules.d/70-persistent-net.rules in an editor Lines concerning WLAN devices could be like the following:
# PCI device 0xxxxx:0xxxxx (iwlwifi) SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:27:10:xx:xx:xx", ATTR{type}=="1", KERNEL=="wlan*", NAME="wlan0"
# USB device 0xxxx:0xxxx (usb) SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="50:46:5d:xx:xx:xx", ATTR{type}=="1", KERNEL=="wlan*", NAME="wlan1"
As it can be seen, wlan0 is allocated for PCI device, and wlan1 is allocated for USB device. If USB WLAN card is to be used, change the name of network interface of the PCI device to wlan10, and name of the USB device to wlan0. Using wlan10 for PCI device leaves wlan1 free, as wlan1 will be later created by Sapphire Eye Software:
# PCI device 0xxxxx:0xxxxx (iwlwifi) SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:27:10:xx:xx:xx", ATTR{type}=="1", KERNEL=="wlan*", NAME="wlan10"
# USB device 0xxxx:0xxxx (usb) SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="50:46:5d:xx:xx:xx", ATTR{type}=="1", KERNEL=="wlan*", NAME="wlan0"
Save the file and reboot the system. After reboot, verify that wlan0 is dedicated for USB WLAN card:
# ifconfig a wlan0 Link encap:Ethernet HWaddr 50:46:5D:xx:xx:xx BROADCAST MULTICAST MTU:1500 Metric:1 wlan10 Link encap:Ethernet HWaddr 00:27:10:xxx:xxx:xx BROADCAST MULTICAST MTU:1500 Metric:1 Step 7: Verify network interface configuration Open file /etc/sysconfig/networking/devices/ifcfg-eth0 in an editor Check and change if necessary:
o Change "NM_CONTROLLED" to "no"
o Change "ONBOOT" to "yes"
Save file If the file /etc/sysconfig/networking/devices/ifcfg-wlan0 exists:
o Open file /etc/sysconfig/networking/devices/ifcfg-wlan0 o Change "NM_CONTROLLED" to "no"
o Change HWADDR to contain MAC address of the WLAN card, if necessary Save file 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 11 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 4 Installing 7signal Sapphire Step 8: Reboot Reboot the laptop 4.3.3 Install latest mainline kernel In order to get latest WLAN drivers into use, the Linux kernel must be upgraded to latest mainline kernel. Step 1: Install ELRepo repository configuration Open a console and install ELRepo repository configuration:
# rpm -Uvh http://elrepo.org/elrepo-release-6-5.el6.elrepo.noarch.rpm Step 2: Install latest kernel from ELRepo
# yum --enablerepo=elrepo-kernel install kernel-ml Step 3: Configure boot loader Open file /boot/grub/menu.lst in editor:
Change line "default=1" to "default=0"
Save the file. Reboot the laptop 4.3.4 Configure firewall Open a console and start firewall configuration tool:
# system-config-firewall-tui On Other ports menu, select Add for each port to be added:
o Add port 7799, protocol tcp o Add port 9999, protocol udp Select Close Accept new firewall rules 4.3.5 Install Soft Eye software Step 1: Copy files to laptop Copy Soft Eye installer, certificate package and license file to the laptop. Step 2: Execute installer Open a console and execute the installer:
# ./7signal-eye-vx.y-x86-installer.bin Select install location Enter location to which 7signal Sapphire Eye will be installed [/opt/7signal]:
Select management interface IMPORTANT: Network interface MUST be lo if the Sapphire Carat is/will be installed to the same laptop. Ethernet interface must be used if Carat will connect to the Soft Eye remotely. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 4 Installing 7signal Sapphire Enter name of the Eye management network interface:
- Use e.g. 'eth0' if Sapphire Carat will connect to Eye remotely
- Use 'lo' if Sapphire Carat will connect to Eye locally Interface name: [eth0]: lo Confirm installation Install 7signal Sapphire Eye to directory /opt/7signal/Eye, management network interface lo
[Y/n]? y 4.3.6 Install certificate and license Step 1: Install certificate from certificate package
# 7config conn encryption install <full path name of the certificate package>
Step 2: Install license file
# 7config license install <full path name of the license file>
12 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 4.3.7 Start Soft Eye Start Eye software by issuing a command:
# service 7signalEye initial-start 4.3.8 Known issues Network interface renaming After installation, CentOS/RHEL 6 sometimes decides to rename network interfaces, e.g. from wlan0 to wlan4 or rename11. This prevents proper operation of Soft Eye, as it no longer recognizes the network interfaces. Symptoms:
Tests are not running. Following entry can be found from system log:
7signalCore: WLANDriverManager: Failed to set interface mode: Could not resolve device index of net device Solution:
Open file /etc/udev/rules.d/70-persistent-net.rules in editor Locate lines:
# PCI device <device ID> (<driver name>) SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="<WLAN MAC address>", ATTR{type}=="1", KERNEL=="wlan*", NAME="wlan0"
# PCI device <device ID> (<driver name>) SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="<WLAN MAC address>", ATTR{type}=="803", KERNEL=="wlan*", NAME="wlan1"
Verify that on line containing text "ATTR{type}=="1"", the value of the NAME parameter is wlan0 Verify that on line containing text "ATTR{type}=="803"", the value of the NAME parameter is wlan1 Remove all other lines referring to WLAN interfaces 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 13 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 4 Installing 7signal Sapphire Restart Eye software:
# 7config run restart Same problem can occur also on Ethernet interface. In that case, set the interface name back to eth0 4.4 Setting up Micro Eyes 4.4.1 Set IP configuration Login to Micro Eye as root by using SSH client. Default IP address is 192.168.0.1 and password is 7signal:
# ssh root@192.168.0.1 Use system-config-network-tui tool to configure desired IP address, network mask and default gateway:
# system-config-network-tui Save the configuration and reboot Micro Eye:
# reboot 4.5 Mounting Eyes Mount Sapphire Eye in the most centralized location of the WLAN area. Eye can be installed on the ceiling, wall or mast. Sapphire Eye has extremely sensitive radio technology inside The receiving signal is 10-20dB stronger than the basic WLAN end-user The transmitted signal is 5-6dB stronger at the access point side than with the basic WLAN end-user For best accuracy of the WLAN performance, the Sapphire Eye location should be selected so that:
7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 4 Installing 7signal Sapphire The average signal level for the managed WLAN access points are between -65dBm and -
30dBm. The distance from access point should be > 10ft/3m. NOTE: Eyes must not be located too close (> 3ft/1m) to any metal objects and places surrounded by concrete walls. The best installation location is easily verified with:
Site Miner: The Site Miner kit includes a Carat laptop and an Eye unit (with battery). Site Survey signal level results 14 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 4.5.1 Indoor Eye Ceiling Installation Attach the Indoor Eye sliding bracket onto a suspended ceiling T-rail using the two Twist Clips included with the Eye, and two -inch nuts. Or, secure the bracket with screws to any solid ceiling structure. Slide the Indoor Eye onto the bracket and secure it with the #6 Phillips head screw. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 4 Installing 7signal Sapphire 15 7 s i g n a 4.5.2 Standard Eye Ceiling Installation On top of Eye unit there are three slots for screws. Insert screws (Pan Head Stainless Screw, DIN 7985 M5x12) on top of the Eye unit. The head of the screw is supposed to have few millimeters of space between the inserts on the unit top. l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l Afix the ceiling mounting plate to the ceiling (pictured right below). Mount the Eye unit on the ceiling mounting plate by inserting the screw tops into the plate holes. Make sure that the marking CABLE is pointed towards connectors. Turn the unit and feel it snatching into the plate. 4.5.3 Wall Mount Installation (optional) On top of Eye unit there are three slots for screws. Insert screw thread taps (Socket Set Screw Cone Point, DIN 914, M5x20) on top of the Eye unit. In wall-mounting the screw does not have any head. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 4 Installing 7signal Sapphire 16 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l Attach the wall mount bracket to the wall on its rectangular side. The longest side of the triangle should face downward towards the ground. There are three elliptical holes in the wall-mount mechanics. Mount the Eye unit by pushing the screws on top of the unit through the wall-mount mechanics. From the top-side of the mechanics use the nuts to attach the unit to the mechanics. 4.5.4 Pole Mount (optional) In pole install, the wall-mount is attached to any pole by using mechanics. Screw the provided back plate to the wall-mount mechanics. Push the U bar through the back plate. Follow the wall-mount instructions from here on. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 4 Installing 7signal Sapphire 4.5.5 Eye installation examples The Site Survey results are valuable for Eye location estimation. The Eye location is good if the Site Survey heat map shows >-80dBm signal level from all the access points. 17 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l The Site Survey results are valuable for Eye location selection Verify the signal levels also from the far end access points 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 4 Installing 7signal Sapphire 18 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l The external antenna is useful in the environment where shafts or thick walls are attenuating radio too much. 4.6 Installing 7signal Sapphire software The 7signal Sapphire software can be found from 7signal Sapphire Installation CD. Root privileges are needed for installation of Sapphire components, except for Carat GUI. 4.6.1 Carat server installation (Linux 32 bit and 64 bit) Copy the installer files from the delivery medium to for example /home directory. NOTE! Do not use /tmp directory.
- The installation can be cancelled and restarted anytime by typing CTRL+C 32 bit system:
Step 1: Change to the directory where installer was copied and execute the installer. If you wish to install the Carat server without in-bundled Eye software packages, issue command:
# ./7signal-Carat-x.x-x.x-i686-installer.bin If you wish to install the Carat server within-bundled Eye software packages, issue command:
# ./7signal-Carat-x.x-x.x-full-i686-installer.bin 64 bit system:
Step 1: Change to the directory where installer was copied and execute the installer. If you wish to install the Carat server without in-bundled Eye software packages, issue command:
# ./7signal-Carat-x.x-x.x-x64-installer.bin 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 19 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 4 Installing 7signal Sapphire If you wish to install the Carat server within-bundled Eye software packages, issue command:
# ./7signal-Carat-x.x-x.x-full-x64-installer.bin Step 2: Define the database essential parameters:
Alternative 1: Carat DBMS is not installed yet As the DBMS will be running in the same host, it is recommended to use the defaults. Checking md5sum .. OK Extracting installer, please wait ... Verifying installer, please wait ... Checksum : da5730017b795b61bd8d9c55d7c76f78 Calculated : da5730017b795b61bd8d9c55d7c76f78 Unpacking data files ... Launching installer. Checking for required tools.. Checking unzip .. OK Checking sed .. OK Checking previous installations... Installations were not found Enter location to which 7signal Sapphire Carat server will be installed [/opt/7signal]: <enter>
Copying Eye softwares to SW repository.. Trying to locate 7signal DBMS installation. Please wait ... DBMS installation was not found. Do you want to specify DB properties manually
(defaults: database host localhost, username 'db7sign', TCP port 7722) [y/N]? <enter>
Alternative 2: Carat DBMS is already installed Since the DBMS is already installed, the Carat installer can determine DB configuration automatically. Defaults values should be applied. Extracting installer, please wait ... Verifying installer, please wait ... Unpacking data files ... Launching installer. Checking previous installations... Installations were not found Enter location to which 7signal Sapphire Carat server will be installed [/opt/7signal]: <enter>
Trying to locate 7signal DBMS installation. Please wait ... DBMS installation found at /opt/7signal/dbms. Do you want to use DB user configuration found from this location [Y/n]? <enter>
Configured DB user is db7sign Configured DB port number is 7722 Step 3: Setup host address for RMI server:
Localhost or 127.0.0.1 for the IP address should not be used, as this information shall be used by RMI server and it needs to know the external address in order to serve the remotely connecting clients:
Please enter host name or IP address to which the Carat clients will be connecting to
[192.168.0.2]: <IP address or DNS name> <enter>
7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 4 Installing 7signal Sapphire 20 Step 4: Setup maximum memory The installer asks for the maximum memory that Carat server is allowed to use. Typical amount of memory is about 30-50% of available RAM in megabytes:
Please enter max. amount of memory that the Carat server can use (MB): <512-8192>
IMPORTANT:
Notice that maximum amount of memory that can be configured in 32 bit systems is 2048 Step 5: Install certificate package (and passwords):
The certificate packages and related password are in separate delivery medium. Alternative 1: Install certificates and passwords from separate packages Typically, certificate packages and password packages are delivered separately. Press enter when the installer asks location of 7signal-all.tar.gz certificate package:
Please enter location of archive file (<prefix>-7signal-all.tar.gz): <enter>
Next, the installer asks for location of the certificate package 7signal-certs.tar.gz. Enter the name of the directory in which the certificate package resides:
Please enter location of certificate archive file (<prefix>-7signal-certs.tar.gz): <directory path>
Found file /<directory path>/<customer name>-7signal-certs.tar.gz. Do wish to use it [Y/n]?
<enter>
The installer extracts and verifies required certificates from the certificate package:
Validating archive.. Archive valid. Next, the installer asks for location of the password package 7signal-pwds.tar.gz. Enter the name of the directory in which the password package resides:
Please enter location of certificate archive file (<prefix>-7signal-pwds.tar.gz): <directory path>
Found file /<directory path>/<customer name>-7signal-pwds.tar.gz. Do wish to use it [Y/n]?
<enter>
The installer extracts and installs required certificates and passwords from the certificate and password packages:
Validating archive.. Archive valid. Extracting files.. Extracting passwords.. Alternative 2: Install certificates and passwords from single package Certificates and passwords are delivered in a single package. The installer asks for location of the package 7signal-all.tar.gz. Enter the name of the directory in which the package resides:
Please enter location of archive file (<prefix>-7signal-all.tar.gz): <directory path>
Found file /<directory path>/<customer name> -7signal-all.tar.gz. Do wish to use it [Y/n]?
<enter>
The installer extracts, verifies and installs required certificates and passwords from the package:
Validating archive.. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 21 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 4 Installing 7signal Sapphire Archive valid. Extracting files.. Extracting passwords.. Step 6: The license file location:
The license file is created for each customer individually. It is in the same delivery medium with the certificate packages. The installer asks for location of the license file. Enter path and file name of the license file and press enter:
Please enter location and name of Carat license file (/<path>/<license>.lic): <full path and name of the license file>
It is also possible to not install the license file at this point. This can be done by pressing enter without any input. Alternatives:
a) Enter location and name of the license (.lic) file b) Proceed installation without installing license. You must install the license by using '7carat install set' command before starting the Carat server. c) Cancel installation If b) is selected, user can install license later with command 7carat license set <license_file>
Step 7: Finish installation:
After the license file has been installed, the installation finishes automatically:
Creating carat7 user... Copying init script.. Installing init script.. Extracting Carat package... Copying Carat to /opt/7signal... Installing Java runtime environment... Extracting JRE... Installing JRE... JRE install directory is jre1.6.0_17 JRE already installed, checking if it is up to date Installed version: 1.6.0_17-b04 New version : 1.6.0_17-b04 JRE does not need to be updated. Installing configuration file. Installing license file... Installing 7carat tool... Installing 7edp tool... Modifying file permissions... Creating uninstaller... Saving configuration. Done. The installation is now finished. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 4 Installing 7signal Sapphire 4.6.2 DBMS installation (Linux 32 bit and 64 bit) 22 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l Prerequisities The operating system installation may not have all the necessary components for DBMS installation. Please check the following items:
IP address of the server must be resolvable to DNS name. This can be achieved by following procedures:
o Server has been added to DNS o Hosts file contain the DNS name. more /etc/hosts edit the hosts file if needed Installation The DBMS for Linux comes as a file of type bin that contains both the script and 3rd party installation package for DB2 database. There is another version of the DBMS installer that does not contain the actual DB2 package, which is suitable for upgrades. Copy 7signal-DBMS-installer from delivery medium to for example /root directory. NOTE! Do not use /tmp directory. Alternative 1: Install DBMS database uninterrupted with default settings 32 bit systems:
Issue command:
# ./7signal-DBMS-with-DB2-x.x-x.x-i686-installer.bin s 64 bit systems:
Issue command:
# ./7signal-DBMS-with-DB2-x.x-x.x-x64-installer.bin s The silent install does not require input as all the options shall use default settings. After the installation is finished, the DB2 has been installed and databases have been created. Alternative 2: Install DBMS database interactively 32 bit systems:
Issue command:
# ./7signal-DBMS-with-DB2-x.x-x.x-i686-installer.bin 64 bit systems:
Issue command:
# ./7signal-DBMS-with-DB2-x.x-x.x-x64-installer.bin The installer starts to install 7signal DBMS:
Checking md5sum .. OK Extracting installer, please wait ... Verifying installer, please wait ... 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 23 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 4 Installing 7signal Sapphire Unpacking data files ... Launching installer. Using v10.5fp1_linux.._expc.tar.gz installer. Trying to locate existing installation... Checking host <hostname> reachability.. OK. Checking libaio .. OK Checking mktemp .. OK Checking sed .. OK Checking tar .. OK Checking su .. OK Checking chmod .. OK Checking chown .. OK Checking basename .. OK Checking dirname .. OK Checking grep .. OK Locating 7signal Sapphire Carat installation. Please wait ... Carat installation found at /opt/7signal/Carat. DB tools directory will be /opt/7signal/dbms Do you want to use DB configuration found from this location [Y/n]? <enter>
The question above is asked if there is a 7signal Carat installation on the host2. DBMS directory : /opt/7signal/dbms DB2 installation package location : .installer/v10.5fp1_linux...tar.gz Target directory : /opt/ibm/db2 untarring DB2... Creating DB user.. Configured DB user is db7sign Configured DB port number is 7722 Are db7sign and db7adm user accounts already created [y/N]?
If you have pre-created db7sign and db7adm users (this is sometimes necessary, depending on host system configuration), answer y, otherwise you can let the installer create the user accounts by answering n. Creating group db7sign.. Group GID is 487. Creating user db7sign.. User db7sign home directory is in directory /home. Setting user password... User UID is 493. DB2 instance user home directory is /home/db7sign Do you want to specify DB admin manually [y/N]? <enter>
The installer allows defining the database user and the communication port. As supposedly the host is dedicated to 7signal Sapphire, the defaults should work fine and are encouraged to be used. The installer continues by installing DB2:
Instance user: db7sign UID: 493 GID: 487 DAS user: db7adm UID: 492 GID: 486 Preparing response file... Installing DB2... DBI1191I db2setup is installing and configuring DB2 according to the 2 If the Carat server is not installed yet, the installer asks some configuration parameters for the database. Default values for these parameters are preferred. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 4 Installing 7signal Sapphire response file provided. Please wait. The execution completed successfully. For more information see the DB2 installation log at "/tmp/db2setup.log". IBM DB2 installed. Creating uninstaller... Creating DB schema generator... Creating directory /opt/7signal/dbms/vx.x-x.x Installing 7db tool.. Installing 7signal DB backup & restore tool.. Installing 7signal DB2 library.. Installing 7signal DB2 utilities.. SQL1063N DB2START processing was successful. Enter location for databases [/home/db7sign]:(See NOTE below) 24 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l The database location defaults to the /home file system just like the database logs that are configured below. NOTE! This default database location is not recommended, if the /home file system is not backed up or otherwise replicated, or does not have enough disk space. The logs and the actual database should always reside in separate file systems, preferably on RAIDed, separate physical devices. Database must be always on local disk, for example, not on NFS mount!
The installer continues and the database creation takes several minutes:
7SIGNAL creating management database... 7SIGNAL creating measurement database... 7SIGNAL creating security database... Do you want to change the default database logging method (circular logging) to infinite archival logging [y/N]? <enter>
It is encouraged to make the install with circular logging. The infinite archival logging requires design and practically endless storage device. The instructions for moving to infinite archival logging are in the Carat User Manual among other detailed backup process design issues. The next step is to specify location for database log files. Log file location defaults to the /home file system just like the actual database. Enter location for Management DB log files
[/home/db7sign/db7sign/NODE0000/SQL00001/SQLOGDIR/]: <enter>
OK. Using default. Enter location for Measurement DB log files
[/home/db7sign/db7sign/NODE0000/SQL00002/SQLOGDIR/]: <enter>
OK. Using default. Enter location for Security DB log files
[/home/db7sign/db7sign/NODE0000/SQL00003/SQLOGDIR/]: <enter>
OK. Using default. The installer is now finished. The DB2 is now installed, up and running. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 25 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 4 Installing 7signal Sapphire 4.6.3 Analyzer server installation (Linux 32 bit and 64 bit) Copy 7signal-Analyzer-installer from the delivery medium to e.g. /home directory. NOTE! Do not use /tmp directory. Step 1: Change to the directory where installer was copied and install Analyzer server 32 bit systems:
Issue command:
# ./7signal-Analyzer-x.x-x.x-i686-installer.bin 64 bit systems:
Issue command:
# ./7signal-Analyzer-x.x-x.x-x64-installer.bin Step 2: The installation directory:
Give the location in the file system to install the Analyzer server:
Checking md5sum .. OK Extracting installer, please wait ... Verifying installer, please wait ... Unpacking data files ... Launching installer. Checking previous installations ... Checking sed .. OK No previous installation found. Enter location to which 7signal Sapphire Analyzer will be installed, installer will create a '/Analyzer/' directory under the given path [/opt/7signal]: <enter>
Step 3: Carat server IP address:
The Analyzer server should run in the same host than the Carat server and therefore localhost IP address is suitable:
Configuration for:
* /opt/7signal/Analyzer/apache-tomcat-5.5.26/conf/Catalina/localhost/7signal.xml
* /opt/7signal/Analyzer/webapps/WEB-INF/web.xml Enter the DB2 username [db7sign]: <enter>
Enter the DB2 password (empty keeps the existing password):
Password: <enter>
OK. Keeping old password Enter the location of Carat server [127.0.0.1]: <enter>
Step 4: Ports for Analyzer service:
As the host is expected to be dedicated for 7signal Sapphire, the default ports for HTTP and HTTPS should work fine. However, the ports are freely configurable. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 4 Installing 7signal Sapphire 26 Configuration for:/opt/7signal/Analyzer/apache-tomcat-5.5.26/conf/server.xml Enter the port for Analyzer HTTP server, most commonly 80 or 8080 [80]: <enter>
When the non-SSL port is 80, then the preferred SSL port is 443. Enter the SSL port for Analyzer HTTPS server [443]: <enter>
Step 5: Install certificate package (and passwords):
The certificate packages and related password are in separate delivery medium. Alternative 1: Install certificates and passwords from separate packages Typically, certificate packages and password packages are delivered separately. Press enter when the installer asks location of 7signal-all.tar.gz certificate package:
Please enter location of archive file (<prefix>-7signal-all.tar.gz): <enter>
Next, the installer asks for location of the certificate package 7signal-certs.tar.gz. Enter the name of the directory in which the certificate package resides:
Please enter location of certificate archive file (<prefix>-7signal-certs.tar.gz): <directory path>
Found file /<directory path>/<customer name>-7signal-certs.tar.gz. Do wish to use it [Y/n]?
<enter>
The installer extracts and verifies required certificates from the certificate package:
Validating archive.. Archive valid. Next, the installer asks for location of the password package 7signal-pwds.tar.gz. Enter the name of the directory in which the password package resides:
Please enter location of certificate archive file (<prefix>-7signal-pwds.tar.gz): <directory path>
Found file /<directory path>/<customer name>-7signal-pwds.tar.gz. Do wish to use it [Y/n]?
<enter>
The installer extracts and installs required certificates and passwords from the certificate and password packages:
Validating archive.. Archive valid. Extracting files.. Extracting passwords.. Alternative 2: Install certificates and passwords from single package Certificates and passwords are delivered in a single package. The installer asks for location of the package 7signal-all.tar.gz. Enter the name of the directory in which the package resides:
Please enter location of archive file (<prefix>-7signal-all.tar.gz): <directory path>
Found file /<directory path>/<customer name> -7signal-all.tar.gz. Do wish to use it [Y/n]?
<enter>
The installer extracts, verifies and installs required certificates and passwords from the package:
Validating archive.. Archive valid. Extracting files.. Extracting passwords.. Step 6: Starting of Analyzer server:
7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 4 Installing 7signal Sapphire 27 It is possible to start the server immediately. The requirement is that the database is up and running at the Analyzer start-up:
7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l Updating files according to configuration ... Installing Java runtime environment... Extracting JRE... Installing JRE... JRE install directory is jre1.6.0_17 JRE already installed, checking if it is up to date Installed version: 1.6.0_17-b04 New version : 1.6.0_17-b04 JRE does not need to be updated. JRE installed to /opt/7signal/jre Copying init script ... Installing init script ... Installing 7analyzer tool ... Creating uninstaller ... Checking Carat user .... Creating and linking report directory ... 7signal Sapphire Analyzer install process finished. HTTP server configured to URL: http://localhost:80/
Do you want to start Analyzer server now? [Y/n] <enter>
Installation is finished. 4.6.4 Sonar Installation (Linux 32 bit and 64 bit) Copy 7signal Sonar installer from the delivery medium e.g. to /home directory. NOTE! Do not use /tmp directory. Step 1: Change to the directory where installer was copied and install Sonar server 32 bit systems:
Issue command:
# ./7signal-Sonar-x.x-x.x-i686-installer.bin 64 bit systems:
Issue command:
# ./7signal-Sonar-x.x-x.x-x64-installer.bin Step 2: Specify installation directory:
The installer extracts installation files and asks location for the installation:
Extracting installer, please wait ... Verifying installer, please wait ... Enter location to which 7signal Sonar server will be installed [/opt/7signal]: <enter>
Step 3: Specify configuration parameters:
The installer asks some configuration parameters for Sonar installation. In general, default values can be used:
7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 28 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 4 Installing 7signal Sapphire Enter name for the Sonar server [Sonar]: <enter>
Enter port number for the server [80]: <enter>
Checking that TCP port 80 is not in use.. Port 80 free. Number of simultaneous clients reflects to the number of Eyes running tests against this Sonar installation:
Enter number of maximum simultaneous clients (1..50) [10]: <number of Eyes> <enter>
VoIP tests require individual UDP port for each simultaneously running VoIP test. Ports are reserved as a port range, starting from a port number specified by the user (default: 50000):
Enter first UDP port of UDP port pool [50000]: <starting port> <enter>
Next, enter the size of the port range. The default is 10, which means that 10 simultaneous VoIP tests can be run against this Sonar:
Enter size of port pool (1..20) [10]: <enter>
Last, specify the default logging level. By default, only errors are logged:
Enter log level (DEBUG,INFO,WARN,ERROR) [ERROR]: <enter>
Step 4: Verify configuration:
The installer outputs the specified configuration. Verify the configuration and accept it:
Sonar configuration:
--------------------------------------------------
Server name : Sonar Server port : 80 Max. clients : 10 MOS port pool start: 50000 MOS port pool size : 10 Log level : ERROR Is this configuration OK [Y/n] <enter>
Step 5: Finish installation:
The installer finishes installation automatically:
Copying Sonar to /opt/7signal... Configuring Sonar... Extracting JRE... Installing JRE JRE already installed, checking if it is up to date Installed version: 1.6.0_17-b04 New version : 1.6.0_17-b04 JRE does not need to be updated. Updating files according to configuration... Copying init script.. Installing init script.. Creating uninstaller... Done. 4.6.5 Carat GUI Installation (Linux) Copy 7signal-Carat-GUI-installer from the delivery medium e.g. to /home directory. NOTE! Do not use /tmp directory. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 29 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 4 Installing 7signal Sapphire Step 1: Change to the directory where installer was copied and install Carat GUI 32 bit systems:
Issue command:
# ./7signal-Carat-Client-x.x-x.x-i686-installer.bin 64 bit systems:
Issue command:
# ./7signal-Carat-Client-x.x-x.x-x64-installer.bin The installer starts:
Checking md5sum .. OK Extracting installer, please wait ... Verifying installer, please wait ... Unpacking data files ... Launching installer. Step 2: Choose destination folder:
Enter the path for the desired destination folder:
Enter location to which 7signal Sapphire Carat client will be installed [/opt/7signal]: <enter>
Checking unzip .. OK Extracting Carat client package... Copying Carat to /opt/7signal... Installing Java runtime environment... Extracting JRE... Installing JRE... JRE install directory is jre1.6.0_17 JRE already installed, checking if it is up to date Installed version: 1.6.0_17-b04 New version : 1.6.0_17-b04 JRE does not need to be updated. Updating files according to configuration... Text viewer is gedit PDF viewer is evince Creating uninstaller... Step 3: Install certificate package (and passwords):
The certificate packages and related password are in separate delivery medium. Alternative 1: Install certificates and passwords from separate packages Typically, certificate packages and password packages are delivered separately. Press enter when the installer asks location of 7signal-all.tar.gz certificate package:
Please enter location of archive file (<prefix>-7signal-all.tar.gz): <enter>
Next, the installer asks for location of the certificate package 7signal-certs.tar.gz. Enter the name of the directory in which the certificate package resides:
Please enter location of certificate archive file (<prefix>-7signal-certs.tar.gz): <directory path>
7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 4 Installing 7signal Sapphire 30 Found file /<directory path>/<customer name>-7signal-certs.tar.gz. Do wish to use it [Y/n]?
<enter>
The installer extracts and verifies required certificates from the certificate package:
Validating archive.. Archive valid. Next, the installer asks for location of the password package 7signal-pwds.tar.gz. Enter the name of the directory in which the password package resides:
Please enter location of certificate archive file (<prefix>-7signal-pwds.tar.gz): <directory path>
Found file /<directory path>/<customer name>-7signal-pwds.tar.gz. Do wish to use it [Y/n]?
<enter>
The installer extracts and installs required certificates and passwords from the certificate and password packages:
Validating archive.. Archive valid. Extracting files.. Extracting passwords.. Alternative 2: Install certificates and passwords from single package Certificates and passwords are delivered in a single package. The installer asks for location of the package 7signal-all.tar.gz. Enter the name of the directory in which the package resides:
Please enter location of archive file (<prefix>-7signal-all.tar.gz): <directory path>
Found file /<directory path>/<customer name> -7signal-all.tar.gz. Do wish to use it [Y/n]?
<enter>
The installer extracts, verifies and installs required certificates and passwords from the package:
Validating archive.. Archive valid. Extracting files.. Extracting passwords.. Step 4: Finish installation:
The installer finishes installation automatically:
Finished. The GUI client may be started from the install directory with the script run_client.sh. A desktop icon or launcher is not generated automatically by the installer, because of lack of generic support for desktop icons in Linux distributions. 4.6.6 Carat GUI Installation (Windows) Note: Version number of Carat GUI used in these instructions may not be the one that is going to be installed. However, the instructions are applicable to all Carat GUI versions. Step 1: Execute Carat GUI installer:
7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 4 Installing 7signal Sapphire A double-click on the icon launches the following panel:
31 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l Step 2: Accept the License Agreement:
The distribution medium contains 7signal Sapphire Customer Terms document in the Documents folder. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 4 Installing 7signal Sapphire Step 3: Define the installation destination folder:
32 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l Step 4: Select your 7signal.truststore file and type your truststore password:
The PKI encryption infrastructure requires Carat GUI to provide a certificate. The certificate is stored in a truststore file. The truststore file and the password are delivered within the product package. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 4 Installing 7signal Sapphire Step 5: The package is being installed:
33 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l Step 6: Finish the installation:
Finish the installation. An icon for launching the Carat GUI client should be available on the desktop. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 5 Upgrading Sapphire 5 UPGRADING SAPPHIRE 34 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 5.1 Copy the latest Sapphire release to the hard disk
(Linux) Step 1: Create new directory to the Carat server:
# mkdir /root/SapphireXXYY Step 2: Change to the installer directory:
# cd /root/SapphireXXYY Step 3: Copy the Sapphire Carat CD (X.X-Y.Y) to the install directory:
# cp r /<path to installation media>/* /root/SapphireXXYY/
IMPORTANT: When upgrading from versions prior to 5.0, certificate package file needs to be available on file system of the Carat server host. 5.2 Stop Sapphire solution (Linux) NOTE: All Sapphire components running on the Carat server must be stopped before upgrade. Step 1: Stop the Carat server:
Stop the Carat server by issuing the command:
# 7carat stop Command output should be the following:
7signal Sapphire Carat is running Shutting down 7signal Sapphire Carat: OK 7signal Sapphire Carat is not running Step 2: Stop the Analyzer server:
Stop the Analyzer server by issuing the command:
# 7analyzer stop (7loupe stop in version 3.2 or older) Command output should be the following:
Shutting down 7signal Analyzer server: JRE_HOME is now set to = /opt/7signal/jre 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 5 Upgrading Sapphire in /opt/7signal/Analyzer/shutdown_analyzer_server.sh Attempting to shutdown the Apache Tomcat server... finished. Killing possible Analyzer processes.. no processes to kill 7signal Analyzer server shutdown complete 35 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 5 Upgrading Sapphire 5.3 Carat server upgrade (Linux 32 bit and 64 bit) Step 1: Change to the Carat server installer directory:
# cd /root/SapphireXXYY/Carat_Server/linux Step 2: Execute Carat server installer:
It is preferable to use full installer, as it contains in-bundled Eye software packages that make Eye software updates more easier. 32 bit systems:
Start the installer by issuing the command:
# ./7signal-Carat-X.X-Y.Y-i686-full-installer.bin 64 bit systems:
Start the installer by issuing the command:
# ./7signal-Carat-X.X-Y.Y-x64-full-installer.bin 36 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l The installer starts and finds an existing installation:
Checking md5sum .. OK Extracting installer, please wait ... Verifying installer, please wait ... Unpacking data files ... Launching installer. Checking for required tools.. Checking unzip .. OK Checking previous installations... Installations were found from /opt/7signal Currently active version in directory /opt/7signal/Carat/vx.x-x.x/7signal Active version is x.x.y.y Found existing 7signal Sapphire Carat installations. Confirm upgrade:
Do you want to upgrade from currently active version x.x.y.y to version X.X-Y.Y [Y/n]? <enter>
Installer starts the upgrade process:
7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 5 Upgrading Sapphire OK. Starting upgrade process. Copying Eye softwares to SW repository.. The following configuration was found:
--------------------------------------
Used JRE : /opt/7signal/jre DB host : localhost DB port number : 7722 DB username : db7sign DB password (MD5) : 98005a88379612249f9b656a6dfe8811 -
Copy keystore from : /opt/7signal/Carat/v4.1-0.1/7signal/conf/carat.keystore Copy GUI truststore from : /opt/7signal/Carat/v4.1-0.1/7signal/conf/7signal.keystore Copy license from : /opt/7signal/Carat/v4.1-0.1/7signal/conf/license.xml Collect clients : true true Eye keystore passwd (MD5) : 236e61626c20c2358626cd6547575ffc -
GUI truststore password (MD5) : 236e61626c20c2358626cd6547575ffc -
RMI host address : 10.10.10.8 Maximum memory (MB) : 1024 Eye encryption certificate :
Eye encryption certificate pwd :
Target directory : /opt/7signal Is this configuration OK [Y/n]? <enter>
37 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l OK. Performing installation by using previous configuration. Extracting Carat package... Copying Carat to /opt/7signal... Installing Java runtime environment... Extracting JRE... Installing JRE... JRE install directory is jre1.6.0_17 JRE already installed, checking if it is up to date Installed version: 1.6.0_17-b04 New version : 1.6.0_17-b04 JRE does not need to be updated. Installing configuration file. When upgrading to the next major version, the installer asks for location of the new license file. Enter path and file name of the license file and press enter:
Please enter location and name of Carat license file (/<path>/<license>.lic): <path and name of the license file> <enter>
Installing license file... Copying init script.. Installing init script.. When upgrading from versions prior to 5.0, installer asks location of certificate package. Enter full path name of the certificate package file:
Eye encryption certificate cannot be found in /opt/7signal/Carat/v5.0-0.0/7signal/conf/
Please enter location of archive file (<prefix>-7signal-all.tar.gz): <certificate package path and name>
Found file /xxxx/yyyy/zzzzzz-7signal-all.tar.gz. Do wish to use it [Y/n]? <enter>
Validating archive.. Archive valid. Extracting files.. Extracting passwords.. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 38 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 5 Upgrading Sapphire Installing 7carat tool... Installing 7edp tool... Modifying file permissions... Creating uninstaller... Saving configuration. Done. Upgrade is ready after installer finishes. 5.4 DBMS upgrade (Linux) Step 1: Change to the Carat database installer directory:
# cd /root/SapphireXXYY/Carat-output/Carat_DBMS/linux Step 2: Execute DBMS installer in upgrade mode:
32 bit systems:
Issue command:
# ./7signal-DBMS-X.X-Y.Y-i686-installer.bin upgrade 64 bit systems:
Issue command:
# ./7signal-DBMS-X.X-Y.Y-x64-installer.bin upgrade NOTE: The upgrade command must be used in order to save old measurement data!
The DBMS installer starts to upgrade the DBMS. When the installer asks some upgrade parameters, default values provided are applicable in most of the installations. Upgrade process may take several minutes. Checking md5sum .. OK Checking tar .. OK Checking tail .. OK Checking awk .. OK Extracting installer, please wait ... Verifying installer, please wait ... Checksum : 3f630f68384c9e9f785e3e086d559206 Calculated : 3f630f68384c9e9f785e3e086d559206 Unpacking data files ... Launching installer. Trying to locate existing installation... Found existing DB installation. Starting to upgrade. DBMS location : /opt/7signal/dbms Configured DB user is db7sign Configured DB port number is 7722 DB2 installed to : /opt/ibm/db2 Current version : 4.1-0.0 Version to which upgrade: 5.0-0.0 Enter location of JRE [/opt/7signal/jre]: <enter>
7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 5 Upgrading Sapphire 39 JRE location : /opt/7signal/jre Java location : /opt/7signal/jre/bin/java Do you wish to backup databases before proceeding [Y/n] <enter>
Enter directory to which the backed up databases are copied [/var/opt/7signal/dbms/backups]:
Do you wish to start database upgrade now [Y/n] <enter>
Creating directory /opt/7signal/dbms/v5.0-0.0 connect to mgmt7 Database Connection Information Database server = DB2/LINUX 10.5.1 SQL authorization ID = DB7SIGN Local database alias = MGMT7 Creating uninstaller... Updating version information... Database upgrade done. DBMS upgrade is ready when the installer finishes. 5.5 Carat GUI upgrade (Linux 32 bit and 64 bit) Step 1: Change to the Carat GUI installer directory:
# cd /root/SapphireXXYY/Carat_GUI/linux Step 2: Execute Carat GUI installer:
32 bit systems:
Start the installer by issuing the command:
# ./7signal-Carat-Client-X.X-Y.Y-i686-installer.bin 64 bit systems:
Start the installer by issuing the command:
# ./7signal-Carat-Client-X.X-Y.Y-x64-installer.bin The installer starts to upgrade the GUI. Confirm the upgrade when the installer asks for confirmation:
Checking md5sum .. OK Checking tar .. OK Checking tail .. OK Checking awk .. OK Extracting installer, please wait ... Verifying installer, please wait ... Checksum : caf31f50763ec344e4f39c6c0adaba70 Calculated : caf31f50763ec344e4f39c6c0adaba70 Unpacking data files ... Launching installer. Enter location to which 7signal Sapphire Carat client will be installed [/opt/7signal]: <enter>
Checking unzip .. OK Checking tar .. OK 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 40 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 5 Upgrading Sapphire Checking mktemp .. OK Checking sed .. OK Checking grep .. OK Checking awk .. OK Extracting Carat client package... Found existing installation on given location. Do you want to upgrade [Y/n]? <enter>
Copying Carat to /opt/7signal... Installing Java runtime environment... Extracting JRE... Installing JRE... JRE install directory is jre1.6.0_17 JRE already installed, checking if it is up to date Installed version: 1.6.0_17-b04 New version : 1.6.0_17-b04 JRE does not need to be updated. Updating files according to configuration... Restoring configuration files.. Creating uninstaller... Finished. The GUI upgrade is ready when the installer finishes. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 5 Upgrading Sapphire 41 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 5.6 Analyzer server upgrade (Linux 32 bit and 64 bit) Step 1: Change to the installer directory:
# cd /root/SapphireXXYY/Analyzer/linux Step 2: Execute Analyzer server installer:
32 bit systems:
Start the installer by issuing the command:
# ./7signal-Analyzer-X.X-Y.Y-i686-installer.bin 64 bit systems:
Start the installer by issuing the command:
# ./7signal-Analyzer-X.X-Y.Y-x64-installer.bin The installer starts to upgrade the Analyzer installation. Confirm the upgrade and apply default values for questions asked by the installer:
Checking md5sum .. OK Extracting installer, please wait ... Verifying installer, please wait ... Unpacking data files ... Launching installer. Checking previous installations ... Checking sed .. OK 7signal Sapphire Analyzer installation found from /opt/7signal Do you want to upgrade the previous Analyzer installation [Y/n]? <enter>
Loading configuration from previous web.xml ... Loading configuration from previous server.xml ... TARGET_DIR : /opt/7signal Do you want to continue the upgrade with this configuration [Y/n]? <enter>
Stopping currently running Analyzer ... Shutting down 7signal Sapphire Analyzer server:
Attempting to shutdown the Apache Tomcat server... finished. 7signal Sapphire Analyzer server shutdown complete shutdown successful. Extracting Analyzer package ... Updating files according to configuration ... Installing Java runtime environment... Extracting JRE... Installing JRE... JRE install directory is jre1.6.0_17 JRE already installed, checking if it is up to date Installed version: 1.6.0_17-b04 New version : 1.6.0_17-b04 JRE does not need to be updated. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 42 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 5 Upgrading Sapphire JRE installed to /opt/7signal/jre Copying init script ... Installing init script ... Installing 7analyzer tool ... Creating uninstaller ... Checking Carat user .... Creating and linking report directory ... 7signal Sapphire Analyzer install process finished. HTTP server configured to URL: http://localhost:80/
Do you want to start Analyzer server now? [Y/n] <enter>
Starting 7signal Sapphire Analyzer server: 7signal Sapphire Analyzer server start complete 7signal Sapphire Analyzer service commands:
service 7signalAnalyzer start : Starts Analyzer server (Shortcut: 7analyzer s) service 7signalAnalyzer stop : Stops Analyzer server (Shortcut: 7analyzer x) service 7signalAnalyzer restart : Restarts Analyzer server (Shortcut: 7analyzer r) service 7signalAnalyzer status : Shows if the server is running or not (Shortcut: 7analyzer status) To learn more about the 7analyzer-command, simply type command '7analyzer' without any parameters. 7signal Sapphire Analyzer server is running The Analyzer server upgrade is ready when the installer finishes. 5.7 Sonar upgrade (Linux 32 bit and 64 bit) Step 1: Create install directory to the Sonar server:
# mkdir /root/SapphireXXYY/
Step 3: Copy the Sapphire Sonar CD (X.X-Y.Y) to the install directory:
# cp r /<path to installation media> /root/SapphireXXYY/
Step 4: Change to the installer directory:
# cd /root/SapphireXXYY/Sonar/linux Step 5: Execute Sonar server installer:
32 bit systems:
Start the installer by issuing the command:
# ./7signal-Sonar-X.X-Y.Y-i686-installer.bin 64 bit systems:
Start the installer by issuing the command:
# ./7signal-Sonar-X.X-Y.Y-i686-installer.bin The installer starts to upgrade the Sonar installation. Confirm the upgrade and accept the current configuration:
7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 43 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 5 Upgrading Sapphire Checking md5sum .. OK Checking tar .. OK Checking tail .. OK Checking awk .. OK Extracting installer, please wait ... Verifying installer, please wait ... Checksum : 197c6a5fd66d9bb1fd30c1147243acb2 Calculated : 197c6a5fd66d9bb1fd30c1147243acb2 Unpacking data files ... Launching installer. Sonar installation found from /opt/7signal. Do you want to upgrade [Y/n]? <enter>
Starting to upgrade. Stopping Sonar.. Waiting until Sonar has shut down ... Getting current configuration.. Checking that TCP port 80 is not in use.. Port 80 free. Sonar configuration:
--------------------------------------------------
Server name : Sonar Server port : 80 Max. clients : 10 MOS port pool start: 50000 MOS port pool size : 10 Log level : ERROR Is this configuration OK [Y/n] <enter>
Copying Sonar to /opt/7signal... Configuring Sonar... Installing Java runtime environment... Extracting JRE... Installing JRE... JRE install directory is jre1.6.0_17 JRE already installed, checking if it is up to date Installed version: 1.6.0_17-b04 New version : 1.6.0_17-b04 JRE does not need to be updated. Updating files according to configuration... Copying init script.. Installing init script.. Creating uninstaller... Starting Sonar server.. Starting 7signal Sonar: OK Done. The Sonar server upgrade is ready when the installer finishes. 5.8 Carat GUI upgrade (Windows) Step 1: Install the installation CD to the Windows host:
7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 5 Upgrading Sapphire Step 2: Execute Carat GUI installer:
Execute the windows installer Carat_GUI/win folder. The installer starts and Welcome dialog is shown:
44 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l Click Next to proceed. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 5 Upgrading Sapphire Step 3: Accept the License Agreement:
45 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l Click Next to proceed. Step 4: Select the installation destination folder Browse the folder to which the Carat GUI is currently installed. Click Next to proceed. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 5 Upgrading Sapphire Step 5: Proceed with the current encryption certificates:
46 7 s i g n a Leave empty if Windows client has already been installed before l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l Click Install button (the original 7signal.truststore file and truststore password will be selected automatically). 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 5 Upgrading Sapphire Step 6: Wait installation to be completed:
Click Finish button after installation is complete:
47 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 48 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 5 Upgrading Sapphire 5.9 Start Sapphire solution (Linux) After all components have been upgraded, start the Carat and Analyzer servers. Step 1: Start the Carat server:
Start the Carat server by issuing the command:
# 7carat start The Carat server starts in couple of seconds:
7signal Sapphire Carat is not running Starting 7signal Sapphire Carat: OK 7signal Sapphire Carat is not running 7signal Sapphire Carat is not running 7signal Sapphire Carat is running Step 2: Start the Analyzer server:
Start the Analyzer server by issuing the command:
# 7analyzer start The Analyzer server starts in couple of seconds:
Starting 7signal Analyzer server: 7signal Analyzer server start complete 7signal Analyzer server is not running 7signal Analyzer server is running 5.10 Eye upgrade 5.10.1 Eye upgrade (GUI) Note: The Eye SW version numbers in these instructions may not be the one that is going to be installed. However, the instructions are applicable to all SW versions. Step 1: Start the Carat GUI:
Step 2: If necessary, install new software version to Carat,:
This step needs to be executed only if Carat was updated without in-bundled Eye software packages (i.e. full version was not used). Login as solution admin user. Open the Manage | Eye Software Management | SW repository management view
-
-
Select Import Browse the Eye software installer o APU3 installers are for 802.11a/b/g/n Eyes o APU2 installers are for 802.11a/b/g Eyes o o x86 installers are for Soft Eyes armv6 installers are for Micro Eyes 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 5 Upgrading Sapphire
-
Select the desired installer, select Open 49 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l
-
Eye software versions available is Carat are populated on the list:
-
Import installers for all needed platforms (Soft and Micro Eye SWs, if necessary)
- Close the Eye SW repository management view. Step 3: Upgrade Eye software to Eye units:
7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 5 Upgrading Sapphire Login as configurator user. Open the Manage | Eye Software Management | Eye software update view
-
If a software update is available for some Eyes, the software version and the name of the Eye unit appear on a popup-window:
50 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l
-
-
To update software version to Eye, select OK Software is uploaded and installed to Eye units 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 5 Upgrading Sapphire
-
After the installation is complete, close the Eye software update view 51 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 5.10.2 Eye upgrade (command line) Step 1: Change to the Eye installer directory:
# cd /root/SapphireXXYY/Carat_CD/Eye Step 2: Copy the SW to Eye unit:
802.11a/b/g unit:
# scp 7signal-eye-v0X.YY-APU2installer.bin root@<IP_address>:/nand 802.11a/b/g/n unit:
# scp 7signal-eye-v0X.YY-APU3installer.bin root@<IP_address>:/nand Soft Eye:
# scp 7signal-eye-v0X.YY-x86installer.bin root@<IP_address>:
Micro Eye:
# scp 7signal-eye-v0X.YY-armv6installer.bin root@<IP_address>:
Step 3: Login to Eye:
# ssh root@<eye_ip_address>
Step 4: Install the Eye new SW package:
802.11a/b/g unit and 802.11a/b/g/n units:
[root@Eye]# cd /nand 802.11a/b/g unit:
[root@Eye]# ./7signal-eye-v0X.YY-APU2installer.bin 802.11a/b/g/n unit:
[root@Eye]# ./7signal-eye-v0X.YY-APU3installer.bin Soft Eye:
[root@Eye]# ./7signal-eye-v0X.YY-x86installer.bin Micro Eye:
7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 52 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 5 Upgrading Sapphire
[root@raspi]# ./7signal-eye-v0X.YY-armv6installer.bin Step 5: Restart:
802.11a/b/g unit and 802.11a/b/g/n units:
[root@Eye]# reboot Soft Eye:
[root@Eye]# service 7signalEye restart Micro Eye:
[root@Eye]# systemctl restart 7signalEye.service 5.11 Start Automated Testing Automated testing is in stopped state after the Sapphire has been upgraded. Step 1: Start Carat GUI:
Step 2: Start Automated Testing:
Select Tools | Start Automated Testing. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 6 Uninstalling Sapphire 6 UNINSTALLING SAPPHIRE 53 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 6.1 Uninstall Analyzer server (Linux 32 bit and 64 bit) Step 1: Stop Analyzer server:
Login to Carat host and stop the Analyzer server by issuing the command:
# 7analyzer stop Step 2: Uninstall Analyzer server:
Change to Analyzer installation directory:
# cd <Analyzer installation directory>
Uninstall the Analyzer server by issuing the command:
# ./analyzer_server_uninstall.sh The uninstaller script starts. Confirm uninstall by entering y:
7signal Sapphire Analyzer server will be removed (/opt/7signal/Analyzer). Are you sure [y/N]? y The uninstaller script starts to uninstall the Analyzer server:
Removing files... Done. The uninstallation is finished when the script is ready. 6.2 Uninstall Carat server (Linux 32 bit and 64 bit) Step 1: Stop Carat server:
Login to Carat host and stop the Carat server by issuing the command:
# 7carat stop Step 2: Uninstall Carat server:
Change to Carat installation directory:
# cd /<Carat installation directory>/vX.X-Y.Y/
Uninstall the Carat server by issuing the command:
# ./carat_uninstall.sh The uninstaller script starts. Confirm uninstall by entering y:
7signal Sapphire Carat, related user account and home directory will be removed. Are you sure
[y/N]? y The uninstaller script starts to uninstall the Carat server:
Stopping 7signal Sapphire Carat.. Shutting down 7signal Sapphire Carat: 7signal Sapphire Carat is not running Removing init script.. Removing files... Removing user account and group... Done. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 54 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 6 Uninstalling Sapphire The uninstallation is finished when the script is ready. 6.3 Uninstall DBMS (Linux 32 and 64 bit) The Carat and Analyzer servers must be uninstalled before DBMS can be uninstalled. See chapters 6.1 and 6.2. Login to Carat host and change to DBMS installation directory. It is the parent directory of former Carat installation3:
# cd /<DBMS installation directory>
Uninstall the DBMS by issuing the command:
# ./uninstall-dbms.sh The uninstaller script starts. Confirm uninstall by entering y:
DB2 and related user accounts will be removed. Are you sure [y/N]? y Resolving log directories...
- MGMT7 log directory is /home/db7sign/db7sign/NODE0000/SQL00001/LOGSTREAM0000/
- MEAS7 log directory is /home/db7sign/db7sign/NODE0000/SQL00002/LOGSTREAM0000/
- SECUR7 log directory is /home/db7sign/db7sign/NODE0000/SQL00003/LOGSTREAM0000/
Resolve logging method...
- MGMT7 database uses circular logging.
- MEAS7 database uses circular logging.
- SECUR7 database uses circular logging. Resolving database directory ...
- Databases on /home/db7sign Stopping DB2... SQL1064N DB2STOP processing was successful. Stopping applications... Removing DB instance... DBI1446I The db2idrop command is running. DB2 installation is being initialized. Total number of tasks to be performed: 2 Total estimated time for all tasks to be performed: 305 second(s) Task #1 start Description: Initializing instance list Estimated time 5 second(s) 3 For example, if Carat server was installed to /opt/7signal/Carat, the DBMS installation directory is /opt/7dignal/dbms. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 6 Uninstalling Sapphire Task #1 end Task #2 start Description: Configuring DB2 instances Estimated time 300 second(s) Task #2 end The execution completed successfully. For more information see the DB2 installation log at "/tmp/db2idrop.log.15436". 55 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l Required: Review the following log file also for warnings or errors:
"/tmp/db2idrop_local.log.*"
DBI1070I Program db2idrop completed successfully. Dropping DAS... DBI1070I Program dasdrop completed successfully. Running DB2 uninstaller... DBI1016I Program db2_deinstall is performing uninstallation. Please wait. The execution completed successfully. For more information see the DB2 uninstallation log at
"/tmp/db2_deinstall.log.20127". Removing files... Removing service definitions.. DB2 uninstalled. Removing database users.. Removing product information.. Removing remaining directories .. Done. The uninstallation is finished when the script is ready. 6.4 Uninstall Carat GUI (Linux 32 bit and 64 bit) Login to host and change to Carat GUI installation directory (directory ClientGUICarat on installation path):
# cd /<Carat GUI installation directory>
Uninstall the DBMS by issuing the command:
# ./carat_client_uninstall.sh 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 56 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 6 Uninstalling Sapphire The uninstaller script starts. Confirm uninstall by entering y:
7signal Sapphire Carat client will be removed. Are you sure [y/N]? y The uninstaller script starts to uninstall the Carat server:
Removing files... Done. The uninstallation is finished when the script is ready. 6.5 Uninstall Carat GUI (Windows) Open Start Menu, browse to 7signal Sapphire Carat Client submenu. Choose Uninstall:
The uninstaller starts. Confirm uninstallation by clicking Yes:
The uninstaller uninstalls the Carat GUI. Click Ok when uninstaller has finished. 6.6 Uninstall Sonar (Linux 32 bit and 64 bit) Step 1: Stop Sonar server:
Login to Sonar host and stop the Sonar server by issuing the command:
# service 7signalSonar stop Step 2: Uninstall Sonar server:
Change to Sonar installation directory (e.g. /opt/7signal/Sonar):
# cd /<Sonar installation directory>
7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 57 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 6 Uninstalling Sapphire Uninstall Sonar by issuing the command:
# ./sonar_uninstall.sh The uninstaller script starts. Confirm uninstall by entering y:
7signal Sonar will be removed. Are you sure [y/N]? y The uninstaller script starts to uninstall the Sonar server:
Stopping 7signal Sonar.. Shutting down 7signal Sonar: 7signal Sonar is not running Removing init script.. Removing files... Done. The uninstallation is finished when the script is ready. 6.7 Uninstall Soft Eye Login to Soft Eye laptop and change to Eye Software installation directory (e.g. /opt/7signal/Eye):
# cd /<Eye installation directory>
Uninstall Eye Software by issuing the command:
# ./eye_uninstall.sh The uninstaller script starts. Confirm uninstall by entering y:
7signal Eye will be removed. Are you sure [y/N]? y Stopping 7signal Eye.. Removing init script.. Removing 7config.. Removing files... Done. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 58 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 7 Log Settings 7 LOG SETTINGS All 7signal Sapphire elements have logging capability. 7.1 Carat server log The log file - server.log - is located in /opt/7signal/Carat/7signal. The directory contains older log files as well named server.log.* where by default the asterisk (*) is in range of 1..5. Altogether, there is one active log file named server.log and five files for circulating the files. The oldest logs do get overwritten. To check the latest logs one should issue the following command:
# 7carat log For continuous real-time logging:
# 7carat log -f The Carat log level can be checked or changed by using loglevel command of 7carat tool (for example, from INFO to DEBUG which produces much more detailed information):
# 7carat loglevel show
# 7carat loglevel set DEBUG Notice that Carat server has to be restarted in order to take the changed log level into use. 7.2 Carat GUI log
-
-
In Windows XP by default the log file - client.log - is located in folder
\Program Files\7signal Sapphire Carat Client\7signal In Windows 7 by default the log file - client.log - is located in folder
\Users\user_name\AppData\Roaming\7signal\logs In Linux the log file - client.log - is located in start-up folder (if launched from desktop icon, users home directory). 7.3 Eye log NOTE: as this is Eye logging, all the commands are to be given in the prompt of the monitoring station, not in Carat or Sonar server. The Eye unit has an in-memory circular log that can be followed real-time with the following command:
# logread -f 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 Log Settings Without any arguments the command shows of the whole log and returns immediately:
# logread The logging can be directed to rotating log files instead of the ring buffer with 7config log command. Name and location of the log files depends on Eye hardware version:
Eye for 802.11a/b/g: /nand/syslog Eye for 802.11a/b/g/n: /var/log/messages
# 7config log set target persistent In order to change logging to log files, issue the following command:
To change logging back to ring buffer, use the following command:
The following command shows the log level and log target information:
# 7config log set target buffer 59 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l
# 7config log show 7.4 Soft and Micro Eye log Soft and Micro Eyes utilize syslog of the OS distribution. By default, logs will appear to file
/var/log/messages. In order to get Eye Software debug log messages to a log file, debug logging must be enabled in syslog configuration file. Log in to Soft or Micro Eye and open file /etc/rsyslog.conf in an editor. Add rule for debug logs, e.g. after cron log rule:
# Log cron stuff cron.* /var/log/cron
*.debug /var/log/debug Save the file and restart rsyslog:
Soft Eye:
# service rsyslog restart Micro Eye:
# systemctl restart rsyslog.service In order to enable Eye Software debug logging mode, issue commands:
# 7config log set default DEBUG
# 7config run restart 7.5 Analyzer log Analyzer is based on Tomcat so the log file is named catalina.out and is by default in directory /<Analyzer installation directory>/apache-tomcat-<version>/logs. Tool to follow the most recent logging is 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 60 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 7 Log Settings
# 7analyzer log and for continuous monitoring:
# 7analyzer log -f 7.6 Sonar log (Linux) The log file - sonar-server.log - is located by default in /<Sonar installation directory>/Sonar/log. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 8 Sapphire Process Management 8 SAPPHIRE PROCESS MANAGEMENT 61 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 8.1 Carat Carat is a service in Linux systems. However, the Carat process is supposed to be used by 7signal tool called 7carat:
# 7carat <parameter-from-the-bullet-list>
o o o o start stop restart status 8.2 Analyzer Analyzer is a service in Linux systems. However, the Analyzer process is supposed to be used by 7signal tool called 7analyzer:
# 7analyzer <parameter-from-the-bullet-list>
o o o o start stop restart status 8.3 Sonar Sonar is a service in Linux systems:
# service 7signalSonar <parameter-from-the-bullet-list>
o o o o start stop restart status 8.4 Eye NOTE: The following command requires session in the monitoring station. The utility 7config controls the Eye configuration. See more details on the tool on chapter 10. The process is controlled with command group run.
# 7config run <parameter-from-the-bullet-list>
o o o o start stop restart status 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 9 Troubleshoot 9 TROUBLESHOOT 62 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 9.1 GUI client cannot connect to Carat server 1. Check that username and password are correct in the GUI 2. Check that Carat server is running a. b. c. run 7carat status read the Carat server log if necessary, issue command 7carat start and go to b) 3. Check that GUI port 47777 (default) is open in the firewall of the GUI host 4. Check that RMI port 1099 (default) is open in the firewall of the GUI host 5. Check that the Carat server RMI address is the right one in the GUI host a. The script run_7signal_Carat_mgmt_server.sh contains the IP address as _rmiserver_prop variable. i. the default location for the script is /opt/7signal/Carat/7signal/
b. Check that this variable has the right Carat server address 9.2 Cannot add Eye unit 1. Check that license.xml file is located in the Carat server a. Check the Carat server log for possible license errors b. Check the existence of the file i. The default location for the license file is /opt/7signal/Carat/7signal/conf c. The file permission should be 744. d. Check the contents of the file to see any anomalies 2. Run 7config verify command in Eye unit 3. Check that maximum number of Eyes (license defines) is not exceeded. 4. Check that carat.keystore is located in the Carat server a. the default folder location is /opt/7signal/Carat/7signal/conf 9.3 No access to Sonar server, active test failed 1. 2. 3. 4. 5. 6. 7. Check that Sonar server is configured correctly to Carat (Manage|Test endpoints) a. IP address and Sonar port Check the process at the Sonar host with the command a. service 7signalSonar status b. Remotely one can telnet <sonar-ip-addr> <port-default-80>
i. Sonar opens the connection and closes it after 1 second of idle time Check Sonar log for error messages Check that Sonar ports are open in the firewall(s) Check that the WLAN encryption key has correct definition Check that the key is bound to the managed network Check connectivity options and requirements for Eye and Sonar 9.4 Analyzer client cannot connect to Carat server Analyzer and Carat are both run in the Carat host machine. 1. 2. Check that username and password are correct Check Analyzer log for error messages a. Run command 7analyzer log 3. Check that Analyzer server is running a. Run command 7analyzer status 4. Check Carat log for error messages a. Run command 7carat log 5. Check that carat server is running a. Run command 7carat status 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 9 Troubleshoot 9.5 Eye IP address forgotten 63 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l In order to find out the Eyes IP address, the MAC (Ethernet) address of the Eye must be known. 1. Connect Eye to a Carat host directly with an Ethernet cable (i.e. Carat and Eye have to be in the same LAN). 2. Use the 7edp utility (part of the Carat installation) to find out Eyes IP address. The syntax of the tool is the following:
7edp <name of the Carat Ethernet interface> <MAC address of the Eyes Ethernet interface>
For example:
# 7edp eth0 00:19:F4:EE:01:31 7edp tool resolves the Eyes IP address:
Sending EDP request Waiting response.. Received EDP frame from Eye Eye IP address is 192.168.3.42 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 10 Command-line utility for Eye 10 COMMAND-LINE UTILITY FOR EYE 64 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 10.1 Overview 7config is a command line utility for configuring various things in Eye unit. Commands are divided into thematic command groups so that each group contains one or more commands. A command may also have an argument and a value. Currently supported command groups are the following:
ip: IP address management. keys: Key storage management. ap: Access point configuration storage management. conn: Connection management. verify: System verification. run: Software run-state management. txp: External antenna configuration. log: Log configuration iface: Global interface management. Command group specific help can be shown with command:
7config <group> help General help can be shown with command:
7config help 10.2 7db IP command group4 This command group contains commands for configuring IP configuration of Eye Ethernet interface. Currently, it is possible to show current IP configuration, set IP address, network mask and default gateway address (or alternatively, use DHCP configuration) of the management interface. It is also possible to take a backup from current IP configuration, and restore the configuration from the backup. 7config ip <CMD> <ARG> [VALUE]
'set' command arguments:
addr Set IP address of management interface (eth0) VALUE = Valid IPv4 address mask Set netmask of IP address of management address VALUE = Valid IPv4 netmask in dotted format
(x.x.x.x) port Set management port VALUE = TCP port number gateway Set IP address of default gateway (optional) VALUE = Valid IPv4 address 4 IP command group is not available in Soft and Micro Eyes, as they have their own utilities and processes for IP configuration management. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 65 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 10 Command-line utility for Eye or 'remove' to remove configured gateway dhcp Set DHCP on/off VALUE = on|off
'show' command arguments: none
'backup' command arguments:
create Create backup from existing IP configuration. restore Restore IP configuration from backup. Examples:
Setting IP address of the management interface:
# 7config ip set addr <IP_address>
Setting network mask of the management interface:
# 7config ip set mask <mask_in_dotted_format>
Setting port of the management interface:
# 7config ip set port <IP_address>
Create backup from current IP configuration:
# 7config ip backup create Restore IP configuration from a backup:
# 7config ip backup restore Show current IP configuration:
# 7config ip show 10.3 Keys command group This command group contains command for managing WLAN network keys stored to Eye unit. Currently, the only supported operation is to destroy all WLAN keys from the Eye.
# 7config keys destroy 10.4 AP command group This command group contains command for managing Access Point information stored to Eye unit. Currently, the only supported operation is to destroy all Access Point information from the Eye.
# 7config ap destroy 10.5 Conn command group This command group contains commands for managing encryption settings of management traffic between Eye unit and Carat server. Currently supported operations are to show configured TLS encryption key file name, set TLS encryption key file name, set password of the encryption key file, and install certificates and passwords from certificate and password packages. 7config conn <CMD> <ARG> [VALUE]
'cert' command arguments:
set Set management connection encryption certificate file. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 10 Command-line utility for Eye VALUE = Certificate file name. File must reside in /nand/etc/certificates directory. show Show current encryption certificate file name. install Install certificate from certificate archive. VALUE = Archive name (<prefix>-7signal-certs.tar.gz)
'pwd' command arguments:
set Set encryption certificate password. install Install password from password archive. VALUE = Archive name (<prefix>-7signal-pwds.tar.gz)
'encryption' command arguments:
install Install encryption certificate and password from combined certificate and password archive. VALUE = Archive name (<prefix>-7signal-all.tar.gz) Examples Install certificate from certificate package:
Install password from password package:
# 7config conn cert install <certificate package file>
# 7config conn pwd install <password package file>
66 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 10.6 Run command group This command group contains commands for managing Eye software run-state. Currently supported operations are to ask current status of the software, to start, stop and restart the software, activate software version, show installed version, uninstall a software version, and to reconfigure Eye unit without restarting it. 7config run <CMD> [ARG]
status Show status of Eye software. start Start Eye software. stop Stop Eye software. restart Restart Eye software. reconfig Reconfigure unit and restart Eye software. show Show active software version. list List installed software versions. activate Activate software version. Example: 7config run activate 02.80 Activates version 2.80 remove Uninstall Eye software version. Example: 7config run remove 02.61 Uninstalls SW version 2.61 Examples:
Query status of the Eye software:
# 7config run status Start the Eye software:
# 7config run start Stop the Eye software:
7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 10 Command-line utility for Eye
# 7config run stop Restart the Eye software:
# 7config run restart List installed Eye softwares:
# 7config run list Reconfigure the Eye:
# 7config run reconfig 67 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 10.7 Txp command group This command group contains commands for showing and setting of TX power related parameters. Currently supported operations are showing of TX power settings, setting default TX power, setting gain of an external antenna and setting cable loss of the external antenna. 7config txp [ARG] [VALUE]
'show' command arguments:
default Show default TX power. ext Show configured gain of external antenna. cable Show configured cable loss of external antenna. If no arguments given, all information will be shown.
'set' command arguments:
default Set default TX power. VALUE = TX power (dBm). ext Set gain of external antenna. cable Set cable loss of external antenna. VALUE = Gain of external antenna (dBi). VALUE = Cable loss of external antenna cable (dB). Examples:
Show all information in TX power configuration:
# 7config txp show Show configured cable loss:
# 7config txp show cable Set external antenna gain to 10 dBi:
# 7config txp set ext 10 10.8 Log command group This command group contains commands for configuring log production of the Eye. Logs can be produced either to a ring buffer on RAM (this is the default, can be read by logread command), or to persistent storage on NAND flash. In 802.11a/b/g, the persistent log resides in folder /nand/ as files named syslog*, and in 802.11a/b/g/n in folder /var/log as files named messages. Reading of the log files is either from the chosen storage directly or with a command logread. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 10 Command-line utility for Eye 68 By default, only the critical messages are logged. Currently, the supported commands are:
show which shows the current log configuration. set level which sets the current level of logging o o default which sets default level of logging at system start-up o target which sets logging target, ring buffer or NAND. Log level set by 'set level' command remains active until restart of the system. Default log level after installation is "ERROR". Log levels are the following:
CRIT - Critical messages ERROR - Error messages WARN - Warning messages. DEBUG - Debug messages. INFO - Informational messages. Log levels are cumulative, i.e. the level CRIT logs only critical messages, WARN logs all levels including CRITICAL, ERROR and WARN messages. DEBUG logs all possible messages. Log command group arguments:
'show' Show log configuration.
'set' command arguments:
level Set log level. VALUE = CRIT | ERROR | WARN | INFO | DEBUG default Set default log level. This log level will be active when 7signal software starts. VALUE = CRIT | ERROR | WARN | INFO | DEBUG target Set logging target. VALUE = buffer | persistent Examples:
Set log level to DEBUG:
# 7config log set level DEBUG Set log level to WARN:
# 7config log set level WARN Set default log level to ERROR:
# 7config log set default ERROR Show default log level:
# 7config log show 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 10 Command-line utility for Eye Set logging target to NAND flash:
# 7config log set target persistent 69 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 11 Command-line tool for database management 70 11 COMMAND-LINE TOOL FOR DATABASE MANAGEMENT 7db command is a tool for Carat database. It supports limited data retrieval, general management and database backup administrator for both immediate and automatic backups. It is recommended that database backups should be taken regularly. 7db command groups:
Dump export and import Show status and configurations dump show reinit Re-initialize databases backup Automatic backup management logsetup To change the current logging method reorg db2 Reorganize the database Access to database management system command-line tool 11.1 Logsetup command Changes the way the underlying DBMS handles logging. NOTE: the command is trivial to issue but its consequences are highly resource consuming. Observe awareness when using this command. There are two different logging modes in 7signal Sapphire. This command switches between the modes. There is lots of informative output as this command should not be used carelessly or without proper planning and understanding of the consequences. The command examines the current state of all three different underlying databases. In case they differ from each other, the processing shall stop as it is expected that all the databases are handled similarly. In case the logging method differs, there has been some significant error in DB administration and system otherwise. The logsetup command may result in numerous backups for the safety reasons so the overall process duration is rather long. 11.2 Backup command group Creates instant and automatic database backups. It is possible to schedule one offline and/or one online backup point. NOTE: the backup policy should be well-planned. Please see the 7signal Sapphire User Guide for further discussion on backup and the options available. Backup commands:
show remove set Show automatic backup configuration Remove automatic backup configuration Configure automatic backup o daily <HH:mm> <backup directory>
o weekly <DDD> <HH:mm> <backup directory>
<DDD> = Mon, Tue, Wed, etc. o monthly <day> <HH:mm> <backup directory>
o directory <backup directory>
Backup directory is optional if a backup configuration already exists. now Immediate backup. o online o offline 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 11 Command-line tool for database management 71 restore Recovery command workdir Configure working directory used in backup and restore operations. Examples:
Remove configuration
# 7db backup remove Backup offline every Wednesday at 00:30 to /mnt/backups
# 7db backup set weekly Wed 00:30 /mnt/backups offline Backup online every day at 03:00 to /mnt/backups
# 7db backup set daily 03:00 /mnt/backups online Change backup directory to /mnt/newbackups, do not change time settings
# 7db backup set directory /mnt/newbackups Backup every Sunday at 00:30, do not change backup directory
# 7db backup set weekly Sun 01:30 Back the system up immediately offline
# 7db backup now /mnt/backups offline Back the system up immediately online (requires archival database logging)
# 7db backup now /mnt/backups online Set working directory for backup and restore (highly recommended for larger databases)
# 7db backup workdir set /opt/largefilesystem Restore a known-to-be-good system state
# 7db backup restore <backup-file>
11.3 Show command group Shows the status and configuration of the database Show commands:
tabstatus Show the status of the tables. o all o <database_name>
conf Show configuration of the database. Examples Show status of the tables in the MEAS7 and MGMT7 databases 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 11 Command-line tool for database management 72
# 7db show tabstatus all Show status of the tables in the SECUR7 database
# 7db show tabstatus secur7 Show status of the CARAT7.ap_ftp_qos_test table in the MEAS7 database
# 7db show tabstatus meas7 ap_ftp_qos_test Show configuration of the database
# 7db show conf 11.4 Reinit command group Empty the database and resume initial state of the system.
# 7db reinit Examples:
Re-initialize the MEAS7 and MGMT7 databases
# 7db reinit all Re-initialize the MEAS7 database
# 7db reinit meas7 Re-initialize CARAT7.ap_ftp_qos_test table in the MEAS7 database
# 7db reinit meas7 ap_ftp_qos_test 11.5 Reorg command group Reorganize the database.
# 7db reorg Examples:
Re-organize the MEAS7 and MGMT7 databases
# 7db reorg all Re-organize the MEAS7 database
# 7db reorg meas7 Re-organize the MGMT7 database 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 11 Command-line tool for database management 73
# 7db reorg mgmt7 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 12 Command-line tool for carat server 74 12 COMMAND-LINE TOOL FOR CARAT SERVER 7carat command is a tool for Carat server management. It supports process management, loglevels, license and database integrity. 7carat command groups:
Show the log of the server start/stop/status/restart Manage the carat process log conf verify loglevel license integritycheck certificate Show the configuration of the server Manage the carat loglevels Manage the carat license Verify database integrity Update encryption certificates Verify the configuration 12.1 License command group Manage the carat license. Examples:
Show the license information
# 7carat license Install new carat license
# 7carat license set <full path and name of the license file>
12.2 Integritycheck command group Verify the database integrity. Examples:
Execute the integritycheck
# 7carat integritycheck IMPORTANT: Sapphire Carat must not be running when issuing this command!
7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 13 Updating encryption certificates 75 13 UPDATING ENCRYPTION CERTIFICATES 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l Sometimes it is necessary to update encryption certificates used throughout Sapphire solution. Certificates can be updated from certificate package file in Linux, separate truststore file and truststore password are needed in Windows (see certificates CD/DVD). 13.1 Updating Carat server certificates Step 1: Login to Carat server host as root user Step 2: Use 7carat tool to update certificate
# 7carat certificate set /path_to_package/mycerts-7signal-all.tar.gz Validating archive file..........................................OK Updating Carat server certificates................................. Found Carat configuration from /opt/7signal/Carat/7signal/conf...OK Extracting carat keystore files..................................OK Extracting 7signal keystore......................................OK Extracting Eye certificate.......................................OK Extracting Eye certificate password..............................OK Extracting carat keystore password...............................OK Extracting 7signal keystore password.............................OK Updating server configuration file...............................OK Updating setup configuration file................................OK 13.2 Updating Analyzer server certificates Step 1: Login to Analyzer server host as root user Step 2: Use 7analyzer tool to update certificates
# 7analyzer certificate set /path_to_package/mycerts-7signal-all.tar.gz Validating archive file..........................................OK Updating Analyzer certificates..................................... Found /opt/7signal/Analyzer/webapps/WEB-INF/web.xml..............OK Found /opt/7signal/Analyzer/apache-tomcat-5.5.26/conf/server.xml.OK Found /opt/7signal/Analyzer/start_loupe_server.sh................OK Found current truststore file....................................OK Extracting 7signal truststore....................................OK Installing 7signal truststore....................................OK Extracting Analyzer keystore.....................................OK Extracting truststore password...................................OK Extracting keystore password.....................................OK Modifying configuration files....................................OK 13.3 Updating Carat GUI certificates (Linux) Step 1: Login to Carat GUI host Step 2: Change to Carat GUI installation directory For example:
# cd /opt/7signal/ClientGUICarat Step 3: Update certificates by using update_certificates tool
# ./update_certificates /path_to_package/mycerts-7signal-all.tar.gz 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 76 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 13 Updating encryption certificates Validating archive file..........................................OK Updating Carat GUI certificates.................................... Extracting 7signal truststore....................................OK Extracting truststore password...................................OK Modifying configuration files....................................OK 13.4 Updating Carat GUI certificates (Windows) Step 1: Locate 7signal Sapphire Carat Client installation directory Typically, it is found under Program files (x86) directory. Step 2: Copy new 7signal.truststore file Copy new 7signal.truststore file to 7signal\conf directory. Overwrite existing truststore file Step 3: Open run_client.bat file in editor and change truststore password Open run_client.bat file in an editor, locate password line:
set _truststore_pass=xxxxxxxxx Change truststore password and save the file 13.5 Updating Eye certificates Step 1: Transfer certificate package to Eye /tmp directory by using SCP For example, in Carat server host:
# scp /path_to_package/mycerts-7signal-all.tar.gz root@<Eye IP address>:/tmp Step 2: Login to Eye by using SSH
# ssh root@<Eye IP address>
Step 3: Install certificate from certificate package
# 7config conn encryption install /tmp/mycerts-7signal-all.tar.gz 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 14 Removing old measurement data 14 REMOVING OLD MEASUREMENT DATA 77 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l Sometimes it is necessary to remove old measurement data by using command line tool. This is necessary, for example, if large amounts of data needs to be removed. Performance of command line tool is much better than GUI tool, as data removal approach is different (database export/load vs. SQL delete statements). Step 1: Resolve Eye ID ID of one Eye in the network topology is needed. Login to Analyzer and check topology tree on the left side of the browser window. Click (i) button next to Eye name in the topology tree. Popup window opens. Locate line Eye id in the table and write down the Eye ID number. Step 2: Login to Carat server host as root Step 3: Change to DBMS directory For example:
# cd /opt/7signal/dbms Step 4: Create work directory writable by database user For example:
# su db7sign
$ mkdir /home/db7sign/purge_work_dir
$ exit Step 5: Resolve group ID. Resolve ID of the group that owns the data to be removed. For this, we are using the Eye ID resolved in step 1.
# su db7sign
$ db2 connect to mgmt7 > /dev/null&& db2 select gid from carat7.eye where eye_id = <Eye ID>
Example output could be:
GID
-----------
4 Exit the db7sign shell
$ exit Step 6: Check data removal options Execute data removal tool without options:
# ./purge_measurement_db.sh Usage: purge_measurement_db.sh <date in YYYY-MM-DD format> <Carat group ID that owns the Eyes>
Options: -c Use explicit table column names when exporting data.
-d Use DEL export instead of IXF
-w <directory> Use work directory <directory>
-n Use non-recoverable loading mode Preferred options are td for DB2 version 9.5. w is mandatory Step 7: Execute data removal tool:
For example, if data older than 2013-10-12 should be removed from the measurement DB and group ID is 4, command would be:
# ./purge_measurement_data w /home/db7sign/purge_work_dir 2013-10-12 4 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 14 Removing old measurement data 78 Wait until command finishes. Notice that with large databases, data removal may take several ours, even days. 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 14 Removing old measurement data APPENDIX A. LOGICAL CONNECTIONS Sapphire elements and their logical connections are in the picture below:
79 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l Eye a WLAN probe with both WLAN interface (WLAN client and analysis functions) and Ethernet interface (management functions). Sonar Server software emulating various business services for testing purposes. Deployment method is two-fold as follows: 7signal Solution: the application is running in hosts chosen by the customer. 7signal Site Miner: a dedicated mini-laptop is running the application. Carat centralized management software, a stand-alone application. Deployment method is two-fold as follows: 7signal Solution: the application running in a host chosen by the customer. 7signal Site Miner: a dedicated normal laptop running the application. Analyzer A web-application for measurement visualization that is deployed in conjunction of the Carat server software. Internet browsers Thin-clients for Analyzer server. Not provided by 7signal. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 14 Removing old measurement data Eye Sonar connection 80 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l Eye Sonar TCP testing client TCP/x MOS downlink server UDP/9999 MOS uplink client UDP/x 1 3 2 TCP testing server TCP/80 MOS downlink client UDP/x MOS uplink server UDP/50000 UDP/50001
... UDP/50009 Conn ID 1 Description Data content Test management and typical test connection Test control message and pseudo-data 2 MOS test, uplink direction MOS test specific data 3 MOS test, downlink direction MOS test specific data Remarks Traffic is properly encapsulated HTTP. Uses Eye WLAN interface. Optional. Uses Eye WLAN interface. The number of port varies between 0 and 20. The port numbers are consecutive. By default 10 ports are opened. Optional. Uses Eye WLAN interface. Listening port(s) TCP/80 Configurable during Sonar deployment udp/50000 50009 Configurable during Sonar installer udp/9999 Configurable during Eye deployment Main purpose: Eye connects through WLAN interface to the remote server that simulates or emulates business applications. Important notice: The Sonar servers may be numerous and the network topology between Eye and Sonar may vary radically and could contain numerous firewalls. 7signal has no control over the network topology and cannot influence arbitrary devices and network elements between the endpoints. To ensure fluent deployment, the user/configurator has to have thorough understanding of the network between the endpoints and possibility to affect all the elements necessary. To test and use the wireless connection the following variables must be known:
ESSID test parameter to connect to a particular wireless network. WLAN encryption Network keys pre-shared keys, certificates or similar - are stored in Eye file system by Carat application. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 14 Removing old measurement data 81 To be observerd: the target wireless network may be configured to have MAC address preventions so the MAC address of WLAN interface of the Eye unit must be white-listed as a network client. Eye does not act as an access point of the wireless network. MOS test connections MOS test is a license-controlled feature and not used in every environment. MOS test requires additional ports to be used. MOS traffic is special-purpose traffic with identical fingerprint than any VoWLAN call would have. Sonar may serve numerous Eyes concurrently and therefore it is able to listen numerous UDP ports for incoming VoIP calls. Ports are listened in per-need basis. One UDP port may serve one Eye at a time so the number of concurrent MOS tests in single Sonar is dictated by the number of available ports that is configured during Sonar deployment phase. Eye has one open UDP port for VoIP calls as it communicates with single Sonar only at a time. 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l Eye Carat connection Conn ID 1 Carat server Eye TLS client TCP/x 1 TLS server TCP/7799 SSH server TCP/22 Description Data content Eye server TLS encrypted binary protocol for management and testing. Listening port(s) TCP/7799 Configurable in Eye deployment Remarks Uses Eye ethernet interface. In this case the Eye acts as a server and Carat software is a client. Carat does not make any SSH connections, SSH is optional connection for operators. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 82 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 14 Removing old measurement data Carat server Carat GUI connection Conn ID 1 2 Carat GUI Carat server RMI client TCP/x TLS client TCP/x 1 2 RMI server TCP/1099 TLS server TCP/47777 Description Data content RMI service RMI service protocol Remarks Discovery service for conn #2. Listening port(s) TCP/1099 Typically not changed. TLS encrypted connection from GUI to a Carat server RMI calls TCP/47777 Configurable in Carat GUI deployment The Carat graphical user-interface is a stand-alone Java SE application that is a client to Carat server. It is for managerial actions and interactive WLAN network testing for operators. Internal connections in Carat server Note: as the following connections occur inside one host machine only, this part may be skipped regarding the firewall settings and other networking. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 83 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 14 Removing old measurement data Analyzer server Carat server RMI client TCP/x TLS client TCP/x 1 2 RMI server TCP/1099 TLS server TCP/47777 JDBC client TCP/x JDBC client TCP/x 3 4 JDBC server TCP/7722 DB2 database Conn ID 1 Description Data content RMI service. RMI service protocol Remarks Discovery service for conn #2. Listening port(s) TCP/1099 Typically not changed. Analyzer web-app connecting as a client to a Carat server. RMI calls TCP/47777 IBM DB2 database service for Analyzer. JDBC traffic. IBM DB2 database service for Carat. JDBC traffic. Configurable during Carat GUI deployment TCP/7722 Configurable during DBMS deployment TCP/7722 Configurable during DBMS deployment 2 3 4 Analyzer is a web-application that visualizes the measurements and it has a dual-role in the sense of connectivity: Analyzer acts as a client to both the Carat server and DB2 and as a server to the browser clients. Currently, Carat, Analyzer and IBM DB2 applications are inseparable as they run in the same host in all supported setups. The connection between Carat GUI and DB2 is secured by medium-level encryption implemented by IBM. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 14 Removing old measurement data 7signal installers contain the installation medium for DB2 and the setup of DB2 is automated by 7signal DBMS installer. It is possible to change the defaults during installation time. 84 7 s i g n a Analyzer internet browser connection Web browser Analyzer server 1 HTTP server TCP/80 HTTP(S) client TCP/x redirect l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 2 HTTPS server TCP/443 Conn ID 1 2 Description Data content Standard HTTP connection. Standard HTTP traffic for creating a HTTPS connection. Standard HTTPS connection for measurement requests and responses. Secure HTTP. Report and chart requests and responses. Listening port(s) TCP/80 Remarks Redirects to HTTPS port of Analyzer. Configurable during Analyzer deployment. TCP/443 Configurable during Analyzer deployment. Business connection for Analyzer. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 14 Removing old measurement data 85 APPENDIX B. BANDWIDTH REQUIREMENTS 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l NOTE: the volume estimates are estimates and vary based on the configuration. 14.1.1 Eye Sonar From To Medium Eye Sonar WLAN Traffic motivator Automated test engine and interactive testing by users. Sonar Eye WLAN Responses to client. Volume estimate Major factor Low, each request is a few hundred bytes. Eye acts as one WLAN end-user would do, one operation per minute. Typically pseudo-
data that varies based on the test parameters. The test profile that the Eye is running. In case of MOS test VoFi traffic is transmitted as long as requested in the test parameters, constant traffic at the rate of 100 kBs/s. MOS test most probably contain significant amount of data. For example, the FTP download test transfers by default 2 megabytes of data that does not take long. The amount of data is exceptionally high for data transfer in a logistics environment but on the other hand in office environment transfer of this size is relatively low. The test parameter should be adjusted, either to simulate typical transfer or to save the bandwidth while keeping the transfer size high enough to give measurements out of the network. 14.1.2 Eye Carat From To Medium Carat Eye Ethernet Traffic motivator Automated test engine and interactive testing by users. Volume estimate Major factor 1 kB/minute. The binary protocol for requests is volume-efficient. The chosen test profile and individual test parameters dictate whether the Eye keeps testing a long time or is there frequent test management traffic. Duration of one test varies from a few seconds to almost minutes per request depending on the test type. Spectrum Analysis and MOS test most probably contain significant amount of data. Eye Carat Ethernet Responses to client. 100 kB /minute. The data transferred in only test parameters and in most cases results of analysis, sometimes raw measurements. Naturally the number of Eyes is directionally proportional the traffic load as each Eye connection are independent and concurrent. One single Eye typically executes a test in one minute in the average. However, there are tests that finish in 10 seconds (practical minimum) and few tests run few minutes. The communication protocol is both minimal and binary so the traffic from Carat to Eye is very economic. The measurement result minimum is around 100 bytes in one message and the top range is the spectrum measurement (not available in all configurations) that returns approximately 300 times a 50 byte result unit. In data communications sense the traffic for single Eye is minimal. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l l S a p p h i r e D e p o y m e n t G u d e R e e a s e 5 0
. i l 14 Removing old measurement data 86 Test type and test distribution depend on the test profile used in the Carat server. The test profile content and test parameters (incl. test duration and size of file transfers) are freely modifiable by Carat system administrator. 14.1.3 Carat server Carat GUI From To Medium Carat GUI GUI Carat Ethernet Ethernet Traffic motivator User Responses to client. Volume estimate Very low. 300 kB/minute Major factor User activity, expected low. Spectrum Analysis and MOS test results may contain significant amount of data. There is no continuous interaction, all activities are initiated by the user. The amount of traffic depends completely on user-decisions. Typically the traffic is binary communication. In 7signal Solution the IP cloud between the client and the server may be complex and contain VPNs, wireless links etc. that affect the communications. 14.1.4 Analyzer server Analyzer client (browser) From To Medium Analyzer host Clients in WWW Ethernet, general networking Traffic motivator User actions Volatile. Like Volume estimate one HTTP client. Major factor User activity. Per any request the amount of requested KPIs is the driving factor. There is no continuous machine-to-machine interaction, all activities are initiated by the user. The amount of traffic depends completely on user-decisions. Server output typically contains graphics. Medium duty cycle. 14.1.5 DB2 and Analyzer server, DB2 and Carat server In current implementation all three processes are running in the same host so there is no network burden whatsoever outside the host. From To Medium localhost localhost IP stack Traffic motivator Interoperable server processes. Volume estimate N/A Major factor The amount of Eyes in the network. Data is transferred in the core memory of the host. 7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com
1 2 | Guide Part 2 | Users Manual | 4.21 MiB | / March 05 2014 |
17 7signal solution 17.4.2 Access point centric Test Profiles 69 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Access point centric test profile means that all individual active tests are run against an access point at once. After all active tests of the profile are run against the access point, the profile proceeds to test against the next access point. Access point centric profile can be configured so that all active tests are run within a single association with the access point. This helps reducing workload of authentication servers. If the test profile introduced in the previous chapter would be access point centric, the execution order of the tests would be the following:
Table 9: Test execution order on access point centric test profile Attach AP1 Ping AP1 Detach AP1 Attach AP2 TCP download AP2 Detach AP2 Attach AP3 TCP upload AP3 Detach AP3 Attach AP1 MOS downlink AP1 Detach AP1 Attach AP3 Ping AP3 Detach AP3 Attach AP1 TCP download AP1 Detach AP1 Attach AP2 TCP upload AP2 Detach AP2 Managed scan Attach AP2 Ping AP2 Detach AP2 Attach AP3 MOS uplink AP3 Detach AP3 Attach AP1 TCP upload AP1 Detach AP1 Attach AP3 Ping AP3 Detach AP3 Attach AP1 Ping AP1 Detach AP1 Attach AP2 MOS uplink AP2 Detach AP2 Attach AP3 MOS downlink AP3 Detach AP3 Attach AP2 Ping AP2 Detach AP2 Attach AP3 TCP Download AP3 Detach AP3 Attach AP1 MOS uplink AP1 Detach AP1 Attach AP2 MOS downlink AP2 Detach AP2 Noise monitor As it can be seen, now the execution order of the tests differs from the execution order of test centric profile. All active tests are run in a row for each access point. If the profile is configured to remain associated between tests, the monitoring station does not detach from the access point after a test but remains associated until the test profile proceeds to a next access point or a passive test. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 17 7signal solution Table 10: Test execution order on access point centric test profile, remain associated 70 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Attach AP1 Ping AP1 TCP download AP2 TCP upload AP3 Detach AP3 MOS downlink AP1 Detach AP1 Attach AP3 Ping AP3 TCP download AP1 TCP upload AP2 Detach AP2 Managed scan Attach AP2 Ping AP2 MOS uplink AP3 TCP upload AP1 Detach AP1 Attach AP3 Ping AP3 Attach AP1 Ping AP1 MOS uplink AP2 MOS downlink AP3 Detach AP3 Attach AP2 Ping AP2 TCP Download AP3 MOS uplink AP1 MOS downlink AP2 Detach AP2 Noise monitor 17.5 Operations on templates Templates are for copying and editing. There are two different supported methods for that, Duplicate to make a fresh copy of the sample profile and Copy as essid that adds the template profile to an existing test profile. 17.5.1 Duplicate 1. Select Manage | Test Profiles to open the management tree on the left. 2. Choose the appropriate template and right-click for the submenu. 3. Select Duplicate to open the Test Profile pane. 4. Give a name to the new Test Profile. 5. Bound Tests window is for informative purposes here only. Editing if desired is available later. 6. Select Execution mode. Access point centric execution mode also allows the 7. monitoring station to remain associated between (active) tests. In Common Values one may enter test parameters that apply to every test in the profile. 8. Saving options a. Select Cancel Changes to undo changes. b. Select Keep Changes to save the intermediate work. c. Select Save All Changes to finalize the work on this pane. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 17 7signal solution 17.5.2 Copy as essid 71 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l The pre-requisite here is to have existing test profiles that shall be the target for pasting all elements in the template. This is one form of cut&paste operation. 1. Select Manage | Test Profiles to open the management tree on the left 2. Choose the appropriate template and right-click for the submenu 3. Select Copy as essid (no visible results) 4. Right-click on Test Profile icon and select Insert essid to open essid pane on the right 5. 6. Optionally, insert other common parameters in the table Common Values 7. Select Save All Changes to insert the test elements in the template to the test profile Insert an existing essid name as individual essid. All tests under the essid contain the same parameters, such as Sonar etc. 17.6 Operation on Test Element 17.6.1 Copy element The pre-requisite here is to have existing test profiles that shall be the target for pasting this test element. This is one form of cut&paste operation. 1. Select Manage | Test Profiles to open the management tree on the left 2. Choose one of the test elements and right-click 3. Select Copy element (no visible results) 4. Paste the element by choosing Paste testprofile element available on the right-click a. b. If the target is a Test Profile icon, the element shall be the last one in that profile If the target is an essid inside a test profile, the element shall be the last one for that essid. 5. Repeat step 2-4 until the test profile is according the expectations. 17.6.2 Configure Ethernet test An active test can be configured to be run via Ethernet interface of the monitoring station. This can be configured on Test Element level:
1. Select Manage | Test Profiles to open the management tree on the left 2. Choose one of the test elements and right-click 3. Select Edit 4. 5. Select Save All Changes In the dialog, change WLAN to Ethernet on NetworkInterfaceType row. 17.7 Operations on Test Profile Node Save All Changes Any change in the sub-tree shall be made persistent. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 17 7signal solution Add empty Test Profile A new test profile object to the tree shall be inserted. The only input required is the name of the profile and the execution mode. 17.8 Operations on Test Profile Edit Open a pane with Common Values and Name field ready for editing. Bound Tests remains read-only, the elements are managed in the tree. 72 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Duplicate Create identical test profile with a new name. It is possible to change top-level parameters on the same pane. This option enables easy creation of test profiles with similar test elements to another link. Copy as essid Copies the contents of a test profile to be pasted to another profile as essid object. Remove Removes the object. Bound Eyes Shows the monitoring stations that are using this profile. Paste test profile element Paste previously copied test profile element as the last element in the profile. Save Make the changes in the sub-objects persistent. Insert Essid Paste previously copied essid into this profile as the last element. Insert New Essid Create a new empty essid into this profile as the last element. Export Export test profile content in text file. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 17 7signal solution 17.9 Operations on essid inside a test profile Edit Open a pane with Common Values and Name field ready for editing. Copy Enable pasting of the object. Paste test profile element Paste previously copied test profile element as the last element in the profile. Remove Deletes the object. 17.10 On test elements 73 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Each test has default parameters, which can be used as is or modified as needed. To obtain the best results and find the best measurement methods for a target network, plan and configure the tests to suit the network. A test profile must be configured for each monitoring station separately. The same profile can be used in several monitoring stations. 17.10.1 Modifying test parameter and test name If you wish to modify individual tests, see the instructions below. For each test, do the following:
1. Select the test from the profile and right-click the test 2. Select Edit 3. 4. If desired, change test name (for example, for distinguishing Ethernet tests) If desired, set the test duration (in seconds) a. The test duration does not affect the running of the test; however, if the test type is temporarily removed from the test set, the time specified is spent in sleep mode, depending on the configuration 5. For some tests you may also do the following:
a. Select the interval, or the pause between pings b. Select Sonar c. Select SIP server (if SIP register test is configured) d. Select an access point e. Select an IP address (non DHCP only) f. Select a net mask (non DHCP only) g. Select a default gateway (non DHCP only) h. Select the number of bytes to be downloaded/uploaded i. Select the number of repetitions j. Select the clients IP address policy:
i. DHCP in use (1) ii. Static address (0) enter address data k. Select network interface type: WLAN or Ethernet 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 74 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 17 7signal solution 6. Select Keep changes 7. Select Save all changes 17.10.2 Disabling and enabling test elements A test element within test profile can be disabled. This means that the test is excluded from the test profile and the test wont be run until it is enabled again. Disabled and enabled test profile elements can be identified by their colors (see beginning of the chapter 17). How to disable a test element:
1. Select the test element from the profile and right-click 2. Select Disable element How to enable a test element:
1. Select the test element from the profile and right-click 2. Select Enable element 17.10.3 Use case: Multiple SSID testing There are two ways to achieve testing on multiple networks on one single monitoring station. The first is based on element copying (the previous paragraph) and the other is using copies of essid objects. Using copies of elements may be burdensome at the configuration time but gives control over the test order. By copying one single element (test type) to be sequentially tested on different WLANs produces the following sample profile:
1. TCP on Wlan1 2. TCP on Wlan2 3. TCP on Wlan3 4. Spectrum 5. MOS on Wlan1 6. MOS on Wlan2 7. MOS on Wlan3 8. Scan The other approach is the create a simple test sequence as essid and then duplicate the essid object and make the duplicates to point to different WLANs. The resulting sample test profile would be similar to the following:
1. TCP on Wlan1 2. MOS on Wlan1 3. Spectrum 4. TCP on Wlan2 5. MOS on Wlan2 6. Scan 7. TCP on Wlan3 8. MOS on Wlan3 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 17 7signal solution 75 Please observe that in the latter approach the measurements on a single WLAN network shall be sparser temporally. While individual tests shall happen on roughly the same time interval, the distribution of the samples per network differs a great deal on these two approaches. When planning the test cycles, one should bear in mind:
The more tests there are in the sequence, the bigger the difference in sample distribution. The more networks, the fewer samples for individual networks. 17.11 Running Test Profiles Select Tools | Automated tests management to see current status of Eye units. Figure 35: Automated tests management view The Eyes of the user context are enlisted in the box on the right. The Eye name, the test profile name and the state of the test profile run are indicated. By selecting one of the Eyes brings additional information such as the run time and test profile content on the left. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 17 7signal solution 17.12 Automated tests and KPIs 76 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Each automated test produces measurement data for one or more KPIs. The following table represents which automated test produces data for which KPI. Table 11: Test profile elements and KPIs Test profile element Surveillance Network Scan Managed AP scan Ping Http SIPRegister TCP upload TCP download KPIs CL001 AV001 AV004 AV009-AV011 QURS004 QURS010 AV001 AV008 AV009 QURS002 QURS003 QURS010 AC001 AC002 AC004-AC014 AV002 QUAP032 QURT004 QURT007 AC001 AC002 AC004-AC014 AV002 QUAP007 QUAP028 QUAP031 QUAP032 QUFR070-QUFR081 QUFR118-QUFR129 QUIP013 QUAP040-QUAP045 RE020-RE022 AC001 AC002 AC004-AC014 AV002 QUAP001 QUAP002 QUAP011 QUAP012 QUAP016 QUAP019 QUAP032 QUAP037 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 77 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 17 7signal solution VoIP MOS Noise monitor Access point traffic Spectrum analysis Air utilization Access point radio environment Access point traffic + collect frame details option QUFR034- QUFR069 QUFR118-QUFR129 QUIP005 QUIP006 QURS026-QURS032 RE001 RE002 RE004 AC001 AC002 AC004-AC014 AV002 QUAP005 QUAP006 QUAP013 QUAP015 QUAP022 QUAP025 QUAP032-QUAP036 QUFR082-QUFR129 RE005 RE011 RE012 QURS001 QURS004-QURS008 TR001-TR003 TR012-TR015 TR018-TR023 SP001-SP004 TR030-TR040 TR138 TR050-TR060 TR100-TR137 TR140-TR145 TR200- TR331 TR400-TR473 TR500-TR573 TR600-TR673 TR700-TR709 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 18 7signal solution 78 18 MANUAL TESTS Manual tests can run simultaneously with automated testing. Sapphire will perform ongoing automated test first and then run user defined manual test. Automated test will continue after manual test has been finished. Manual test results will not be saved to database. 18.1 Session events Session events can be shown from active tests (i.e. tests in which the monitoring station associates with an access point). If the test supports session events, the test dialog contains Session events button. Figure 36: Session events Session events describe time line and state of the radio link. Typical session event list can be seen in the figure above. The columns of the session event table are the following:
Time: When the action resulted the event occurred Event: Type of the event. Possible actions resulting a session event are the following:
o Scan started: The monitoring station has started to scan an access point o Authentication started: The monitoring station has started to authenticate itself to an access point o Authentication: The monitoring station has authenticated itself to an access point o Association started: The monitoring station has started to associate with the access point. o Association: The monitoring station has associated with the access point o Connect: Radio link is ready o Connection complete: Radio link and authentication are complete 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 18 7signal solution o Deauthentication: Monitoring station has deauthenticated itself from the access point 79 7 s i g n a o Disconnect: Monitoring station has disconnected itself from the access point o Information: Various types of information events State: State change CTRL-EVENT-*: Internal supplicant events related to e.g. EAP authentication. Source: Source MAC address causing the event. Either the MAC address of the monitoring station or the access point. Target: Destination MAC address causing the event. Either the MAC address of the monitoring station or the access point. Status: Status of the operation. Status or reason code defined by the 802.11 standard. 18.2 Network scan test The network scan test can also be used as a separate test outside initial deployment. The deployment is described in the previous section of this guide. To scan the network, do the following:
1. In the Network topology, select the Eye you want to use for scanning the network 2. Right-click and select Network Scan; a test window is displayed in the right pane 3. Select the test duration from the pull-down menu 4. If you want to view information about each antenna, select Show detailed results If this checkbox is selected, the results window has a separate line for each antenna, which might make the windows content more difficult to read a. 5. If you want to see compass heading from which the access point was heard, select Show antenna headings15 6. Select the scan directions i.e., directional antennas15 7. Select the channels to scan 8. Select Scan 9. The results are displayed in a table Figure 37: Wireless network scan test 15 Antenna selection is not possible in Soft and Micro Eyes. Only one antenna is available. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 18 7signal solution After the network scan, you can verify the suitability of the selected antenna by running the antenna selection test. The information in the table can be edited. Remember to save the changes. Manage: The management status: the managing status of a monitoring station against this access point can be changed Selected Ant: Selected antenna you can change the antenna used by the Eye to monitor the access point16 o We recommend that you compare the signal levels received very thoroughly o We recommend that you perform the antenna selection test if anything is even slightly unclear 80 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l MAC hidden Figure 38: Selecting managing role for an access point Options for processing the results:
Save saves the information in the table to the Carat system. Columns select the visible columns; the table might be easier to read if you hide unnecessary columns Export exports a text file to the local file system you can enter the location in the dialog that appears after you click Export which is a handy feature for comparison of results obtained at different times 18.3 Client scan test You can scan for preconfigured clients by their MAC address. In the Network topology, select the Eye you want to use for scanning the network 1. 2. Right-click and select Active Tests | Client Scan 3. Enter the scan duration under Scan interval 4. Select the scan directions i.e., antenna lobes16 16 Only one antenna can be selected in Soft and Micro Eyes 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 18 7signal solution 5. Select channel widths 6. Select the channels to scan 7. Select Scan 8. The results are displayed in a table:
a. The MAC address of the scanned devices that transmitted during the test b. The noise level and signal strength, by antenna 81 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l MAC hidden Figure 39: Client scan results 9. Select Save; the clients detected remain in the table 10. You can enter a friendly name and description for each user; this name will be displayed in future results instead of the MAC address 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 18 7signal solution 82 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l MAC hidden Figure 40: Saving client scan results as network clients 11. Select Save to save the friendly names and descriptions The data can be viewed and edited. 1. From the top menu bar, select Manage | Network clients 2. To change the information, select the MAC address or name 3. Right-click and select Edit 4. Edit the information 5. Select Save MAC hid-
den Figure 41: Editing network client 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 83 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 18 7signal solution 18.3.1 Adding a new client 1. From the top menu bar, select Manage | Network clients 2. In the hierarchical tree in the left pane, right-click the topmost element, titled Network clients 3. Select Add 4. Enter a MAC alias for the client 5. Enter a users name, if known 6. Enter a description (optional) 7. Enter the clients MAC address 8. Click Save To add several clients at once, select Import network clients in step 3. This option imports a text file from the Carat servers file system. The file format is as follows:
field explanation Name MAC alias,
(optional) A:B:C:D,pda,Pda User, personal digital assistant A:B:C:D,officeLaptop,J.D., User Client user if known (optional) Description Client description
(optional) example MAC MAC address, required complete description omitted partial A:B:C:D,barCodeReader, , The Export network clients function creates a corresponding file in the Carat servers file system. 18.4 Spectrum Analyzer17 The monitoring station supports frequency-sweep-based radio spectrum analysis. The frequency status is displayed as a colored map. In the Network topology, select the Eye that will run the test 1. 2. Right-click and select Spectrum Analysis 3. Select the test duration from the pull-down menu 4. Select the antennas to be used in the test by selecting their respective checkboxes 5. Select Scan For the results, see the figure below:
17 Not available in Soft and Micro Eyes 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 18 7signal solution 84 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 42: Spectrum analyzer result 18.5 Noise monitor test18 You can measure the noise levels surrounding the monitoring station. In the Network topology, select the Eye that will run the test 1. 2. Right-click and select Noise Monitor 3. Select the scan directions i.e., directional antennas19 4. Select the channels to scan 5. Select Execute 6. The results are displayed in a table as seen below 7. To view the results in a graphical view, click Show graph 18 Might not be available in Soft and Micro Eyes. Noise reporting support depends on features of WLAN network interface. 19 Only one antenna available in Soft and Micro Eyes 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 18 7signal solution 85 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 43: Noise monitor test 18.6 Air utilization test To capture spectrum heavy-users and misconfigurations such as extensive use of legacy codecs - in the WLAN network, air utilization test should be run. This test is not part of the default test profiles as it is lengthy troubleshoot test. Special attention to the test parameters is required as the maximum runtime is easily very high. One should check the aggregate time box for an estimate. Figure 44: Air utilization test parameters 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 86 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 18 7signal solution To run the test:
1. Select antennas, at least one must be selected. 2. Select channel width 3. Select the desired channels with the check-boxes. 4. Select the channel widths for the test (802.11n feature) 5. Select the time in seconds to listen to each selected channel on each selected antenna. The results are shown in a table that has each antenna/channel combination as one row. By activating a row on the table with the mouse, detailed results about used bitrates and frame statistics are shown on the right side of the dialog. Figure 45: Air utilization rest result Graphical representation can be shown by clicking Show graph button:
Figure 46: Air utilization test result graph Antenna/channel row is presented in a pie-chart form that show frame type distribution on the left and codec distribution on the right. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 18 7signal solution 18.7 Optimal antenna selection test20 87 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l The antenna test is used to verify the suitability of the selected antenna. Because of reflections, the network scan can show similar results for different antennas. However, during transmission of data to an access point, the differences between antennas become significant. This test is worth running if more than one antenna shows similar results. 1. In the Network topology, select a. the Eye that will run the test i. Right-click and select Manual Tests | Optimal Antenna Selection ii. Select an access point b. Or an access point through which the test will be run i. Right-click and select Manual Tests | Optimal Antenna Selection 2. Select the Sonar against which you want to run the test, or type another IP address 3. Select the Eyes IP address (DHCP or static) a. If static, enter the (1) local IP address, (2) local net mask, and (3) gateway 4. Set up the test options:
a. Select the amount of data transferred at one time b. Select the antennas to be used in the test 5. Select Execute. Test progress information can be seen in the Test progress area. 6. The results are displayed in a table as seen below 7. If an antenna gives better results than the currently used antenna, select the better antenna for monitoring. Select Change and save antenna to save the new antenna selection. 20 Not available in Soft and Micro Eyes 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 18 7signal solution 88 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 47: Optimal antenna selection test 18.8 Download tests This test gives an indication of an access points TCP or UDP downlink capacity. 1. In the Network topology, select a. the Eye that will run the test i. Right-click and select Manual tests ii. From the submenu select either TCP Download Test or UDP Download Test iii. Select an access point b. Or an access point through which the test will be run21 i. Right-click and select Manual tests ii. From the submenu select either TCP Download Test or UDP Download Test 2. Specify whether you want to run the test against a Sonar or another target 3. Select the Sonar against which you want to run the test, or type another IP address 4. Select test type, WLAN or Ethernet 5. Select the Eyes IP address (DHCP or static)22 a. If static, enter the (1) local IP address, (2) local net mask, and (3) gateway 6. Set up the test options a. Select the amount of data transferred at one time b. (UDP only): Packet size to be used (small = 256, medium = 1024, large = 32768 bytes) 21 Meaningless if Ethernet test is chosen. 22 Only if WLAN test is chosen. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 18 7signal solution 89 c.
(UDP only): Sender (Sonar) port. Default 0 means that system shall allocate used ports. User-given port overrides this setting. Please observe possible firewall settings. d. (UDP only): Receiver (Eye) port. Default 0 means that system will allocate used ports. User-given port overrides this setting. Please observe possible firewall settings. e. Select the display format for the results f. Select how many times the test is to be run 7. Select Execute. Test progress information can be seen in the Test progress area. 8. The results are displayed in a table as shown below You can change how the test result is shown even after the test is executed. 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 48: TCP download test 18.9 Upload tests This test gives an indication of an access points TCP uplink capacity. 1. In the Network topology, select a. the Eye that will run the test i. Right-click and select Manual tests ii. From the submenu select either TCP Upload Test or UDP Upload Test iii. Select an access point from the pull-down menu 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 90 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 18 7signal solution b. Or an access point through which the test will be run23 i. Right-click and select Manual tests ii. From the submenu select either TCP Upload Test or UDP Upload Test 2. Select the Sonar against which you want to run the test, or type another IP address 3. Select test type, WLAN or Ethernet 4. Select the Eyes IP address (DHCP or static)24 a. If static, enter the (1) local IP address, (2) local net mask, and (3) gateway 5. Set up the test options:
a. Select the amount of data from the pull-down menu b. (UDP only): Packet size to be used (small = 256, medium = 1024, large = 32768 c. bytes)
(UDP only): Sender (Eye) port. Default 0 means that system will allocate ports
.User-given port overrides this setting. Please observe possible firewall settings. d. (UDP only): Receiver (Sonar) port. Default 0 means that system shall allocate used ports. User-given port overrides this setting. Please observe possible firewall settings. e. Specify how many times the test is to be run f. Select the display format for the results from the pull-down menus g. Select the traffic classes to use (licensed products only) 6. Select Execute. Test progress information can be seen in the Test progress area. The results are displayed in a table as seen below. You can change how the test results are shown even after the test is executed. 23 Meaningless of Ethernet test is chosen. 24 Only if WLAN test is chosen. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 18 7signal solution 91 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 49: TCP upload test 18.10 Ping test A ping test tests the accessibility of a device, the number of packets sent and received, and latency time. 1. In the Network topology, select a. the Eye that will run the test i. Right-click and select Manual tests | Ping test ii. Select an access point from the pull-down menu b. Or an access point through which the test will be run25 i. Right-click and select Manual tests | Ping Test 2. Select the Sonar against which you want to run the test, or type another IP address 3. Select test type, WLAN or Ethernet 4. Select the Eyes IP address (DHCP or static)26 a. If static, enter the (1) local IP address, (2) local net mask, and (3) gateway 5. Set up the test options:
a. Select the size for the ping packet b. Select the waiting time between ping tests (in milliseconds) c. Select the waiting time (in seconds) before termination of a test that does not progress d. Specify how many pings will be send. e. Select the display format for the results from the pull-down menus 6. Select the traffic classes to use (licensed products only) note that it is not recommended to use traffic classes in a ping test 25 Meaningless if Ethernet test is chosen 26 Only if WLAN test is chosen. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 18 7signal solution 7. Select Execute. Test progress information can be seen in the Test progress area. The results are displayed in a report as seen below. You can change how the test results are shown even after the test is executed. 92 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 50: Ping test 18.11 Trace route test This test helps one perform network troubleshooting and identify routing problems or firewalls that may be blocking access to a host. 1. In the Network topology, select a. the Eye that will run the test i. Right-click and select Manual tests | Traceroute Test ii. Select an access point from the pull-down menu b. Or an access point through which the test will be run27 i. Right-click and select Manual tests | Traceroute Test 2. Select the Sonar against which you want to run the test, or type another IP address 3. Select test type, WLAN or Ethernet 4. Select the Eyes IP address (DHCP or static)28 a. If static, enter the (1) local IP address, (2) local net mask, and (3) gateway 5. Set up the test options:
a. Minimum TTL: minimum number of devices/hops to try 27 Meaningless if Ethernet test is chosen. 28 Only if WLAN test is chosen. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 18 7signal solution b. Maximum TTL: maximum number of devices/hops to try c. Queries per hop: how many times a device/hop is tried d. Timeout: how long to wait before giving up on a device/hop e. Test timeout: how long the test is allowed to be run at maximum (useful if there is a risk that the destination Sonar is unreachable) 6. Select the traffic classes to use (licensed products only) 7. Select Execute. Test progress information can be seen in Test progress area The results are displayed in a report as seen below. Note: You can change the report type even after the test is executed 93 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 51: Traceroute test 18.12 Access point traffic test This test listens to radio traffic in the Sapphire Eyes coverage area and gathers many kinds of information. In the Network topology, select the Eye that will run the test 1. 2. Right-click and select Manual tests | Access Point Traffic Test Note: This test is among the active tests since it requires you to select a target access point 3. Select the target access points from the table 4. Select the listening time (in seconds) 5. Select Execute 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 18 7signal solution 94 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 52: Access point traffic test The results are displayed in a table as seen above the tree view in the table shows the access point as the root node, and the heard clients under it; for more information, move the mouse cursor over the individual items in the tree or, to display even more details and a graphical view, click an item in the tree. MAC hidden Figure 53: Access point traffic - client codec and radio characteristics 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 18 7signal solution 18.13 MOS test 95 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l This test creates a VoIP call between Sapphire Eye and Sonar. Both uplink and downlink call quality can be measured. 1. In the Network topology, select a. the Eye that will run the test i. Right-click and select Manual tests | VoIP MOS test ii. Select an access point from the pull-down menu b. Or an access point through which the test will be run29 i. Right-click and select Manual tests | VoIP MOS Test 2. Select the Sonar against which you want to run the test 3. Select test type, WLAN or Ethernet 4. Select the Eyes IP address (DHCP or static)30 a. If static, enter the (1) local IP address, (2) local net mask, and (3) gateway 5. Configure the test data (see separate instructions) 6. Select Execute. Test progress information can be seen in Test progress area Figure 54: VoIP MOS test 18.13.1 MOS test parameters 1. Select the initial display format for the results (Table/Graph) 2. Select the direction of the test (Downlink/Uplink) 3. Select the codec to be used in the test (VoIP Codec):
a. G.711 PCM Linear 16 = 64 kbit/s b. G.729 GSM data = 8 kbit/s 4. Select an optional error correction method (Stream FEC) 29 Meaningless if Ethernet test is chosen. 30 Only if WLAN test is chosen. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 96 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 18 7signal solution 5. Configure sender information:
a. Enter a port for the MOS test (Local port, 0 means port allocated by the system) b. Enter the test duration in seconds (Send time) c. Enter the packet interval in milliseconds (Stream interval) d. Enter the packet size in bytes (Packet size) e. Enter the sampling window size in seconds (Sampling interval) 6. Configure the receiver information:
a. Enter a port for the MOS test (Receiver port, 0 means port allocated by the system) b. Enter the receiving window size in seconds (Window size) c. Enter the sampling interval in seconds (Sampling Interval) d. Enter the size of the dejittering buffer (Dejittering Buffer) e. Enter the connection timeout in milliseconds (Timeout) 7. Enter the traffic class (licensed feature only) 8. Select Execute. Test progress information can be seen in Test progress area. 9. The results are displayed in a new window in the selected format 18.13.2 MOS test result Sample result set:
Figure 55: VoIP MOS test result graphs (top) 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 18 7signal solution 97 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 56: VoIP MOS test result graphs (bottom) Elements of the results image:
MOS result: The distribution of MOS values related to test duration. The color coding indicates quality. Loss Rate: Packet loss as a function of test duration. Average Jitter: Variation in delay as a function of test duration. Codec: The distribution of codecs used during the test. If only one result is visible, the codec was not changed during the test. Levels: Signal and noise levels during the test, averaged over the duration of the test. SNR: Signal/noise ratio during the test, averaged over the duration of the test. Table 12: MOS values Test result 5 4 3 2 1 Excellent Good Fair Poor Bad In practice, the supported codecs can reach MOS scores that are slightly above 4. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 18 7signal solution 18.14 Web page download test This test is used for downloading actual WWW-pages. 98 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 57: Web page download test To run the web page download test:
1. In the Network topology, select a. the Eye that will run the test i. Right-click and select Manual tests | Web page download test ii. Select an access point from the pull-down menu b. Or an access point through which the test will be run31 i. Right-click and select Manual tests | Web page download test 2. Select test type, WLAN or Ethernet a. If Ethernet test is chosen, DNS server IP address must be entered manually 3. Select the Eyes IP address (DHCP or static)32 a. If static, enter the (1) local IP address, (2) local net mask, (3) gateway, (4) DNS server IP address 4. Choose URL from the box a. To add a URL i. Write a well-formed and proper address to the input box ii. Select Add URL b. To remove a URL i. Activate the URL to be removed with a right-click ii. Select Remove URL 5. Select Execute. Test progress information can be seen in Test progress area. 31 Meaningless if Ethernet test is chosen. 32 Only if WLAN test is chosen. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 18 7signal solution 99 The result marks whether the download was successful (protocol errors or not), the download time and the downloaded byte count. 18.15 Internet Availability test This is an infrastructure test that reflects how well a WLAN or Ethernet client (Eye monitoring station) is able to utilize the Internet. The test includes the following steps:
radio link setup (WLAN only)
-
- WLAN authentication (WLAN only)
- DHCP service (WLAN only)
- Gateway pinging
- DNS server checks
- DNS name resolves If the monitoring station passes all the phases of the test, it is justified to assume that the internet use is in general fully functional. Figure 58: Internet availability test To run the Internet availability test:
1. In the Network topology, select a. the Eye that will run the test i. Right-click and select Manual tests | Internet Availability test ii. Select an access point from the pull-down menu b. Or, directly, an access point through which the test will be run33 i. Right-click and select Manual tests | Internet Availability test 2. Select test type, WLAN or Ethernet 33 Meaningless if Ethernet test is chosen. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 18 7signal solution 3. Select IP address a. Use DHCP of the WLAN network by checking the box34 i. DHCP result shall affect other test parameters as the actual servers shall be dictated by the result and the reliability is expected. b. Use of static IP address configuration i. enter the (1) local IP address, (2) local net mask, and (3) gateway ii. Enter primary DNS server35 iii. Enter secondary DNS server (optional) iv. Enter tertiary DNS server (optional) c. Enter 1st network name to be resolved d. Enter 2nd network name to be resolved (optional) e. Enter 3rd network name to be resolved (optional) 4. Select Execute. Test progress information can be seen in Test progress area. 100 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l The result-set is three-fold:
1. General results: IP address obtained, attach time, DHCP retrieval time and gateway address. 2. Status of DNS servers 3. Results of the name resolving. 18.16 SIP Register test It is possible to run SIP Register test in both unauthorized and authorized mode. To run the SIP test:
1. In the Network topology, select a. the Eye that will run the test i. Right-click and select Manual tests | SIP Registration Test ii. Select an access point from the pull-down menu b. Or an access point through which the test will be run36 i. Right-click and select Manual tests | SIP Registration Test 2. Select the SIP server to register to a. From the pull-down menu i. SIP end-point has to be defined as a test end-point to be selectable b. Arbitrary IP address i. Enter IP address and the port 3. Select test type, WLAN or Ethernet 4. Select an access point37 5. Select the Eyes IP address (DHCP or static)38 a. If static, enter the (1) local IP address, (2) local net mask, and (3) gateway 6. Enter the SIP protocol specific parameters a. Name is mandatory b. If alone, the test is run as un-authorized 7. Select the WLAN traffic category39 8. Select Execute. Test progress information can be seen in Test progress area. 34 Only if WLAN test is chosen. 35 Entering DNS servers are mandatory if Ethernet test is chosen. 36 Meaningless if Ethernet test is chosen. 37 Meaningless if Ethernet test is chosen. 38 Only if WLAN test is chosen. 39 Only if WLAN test is chosen. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 18 7signal solution 101 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 59: SIP register test The test result is two-fold: test setup information and SIP specific. Test setup information contains:
attach time
-
- DHCP retrieval time
-
-
Eye IP address used in WLAN interface The gateway SIP results contain:
used IEEE802.11e traffic category SIP server response for REGISTER: SIP protocol code
-
-
- Register time, milliseconds
- Authentication information (optional)
-
- Unregister time, milliseconds SIP server response for UNREGISTER: SIP protocol code 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 18 7signal solution 18.17 Packet capture test 102 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Packet capture test executes packet capture on selected Eye, and resulted capture file will be downloaded to PC running the Management GUI. Packet capture can be run either for a selected access point or with selected antenna, channel and capture filter. Optionally, the downloaded capture file will be automatically opened in selected packet capture viewer (e.g. Wireshark)40. Figure 60: Packet capture test In the Network topology, select the Eye that will run the test 1. 2. Right-click and select Packet capture 3. Select capture type: Capture channel traffic or Capture access point traffic a. Capture channel traffic i. Select an antenna41 ii. Select a channel width iii. Select a channel iv. Enter capture filter (optional)42 b. Capture access point traffic i. Select access point from Access point: drop-down list. 4. Enter capture time (in seconds) 5. Browse the directory to which the capture files will be downloaded. 40 The viewer application must be configured before using this feature. Packet capture viewer application can be configured in Edit | Configure tools dialog. 41 Only one antenna available in Soft and Micro Eyes 42 Standard tcpdump capture filter format is applied. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 18 7signal solution 103 6. Optionally, select Open after capture check-box. 7. Select Execute packet capture. 8. Capture progress can be seen in the progress bar. 9. After capture is completed, the capture file is available in the selected directory (and optionally opened with packet capture viewer) 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 19 7signal solution 104 19 SERVICE LEVEL AGREEMENT Service Level Agreement (SLA) groups a number of KPIs and their expected target values. In a nutshell, typically a KPI has a scalar value while SLA is combination of numerous KPI values and statistical rules that result in a higher-level view on the quality of the network. The ultimate goal is to bind together a contractual agreement and actual measurements, the expression of the desired or required level of the service and the proven real-life phenomena. As such, the SLA is a communication medium between the service provider and the customer. The SLA outcome is percentage value and based on user-defined thresholds it is divided into values green, yellow and red according the three-basket principle. This means that the end-
user experience on the WLAN network might remain adequate but the resulting SLA value is clearly in the red basket. Related icons SLA template SLA KPI definition SLA group KPI definition 19.1 Defining a Service Level Agreement into the system A network service provider can make Service Level Agreements (SLA) with their customers, defining the level of service provided to the customer. 7signal Sapphire enables users to monitor the fulfillment of the various performance level guarantees defined in the SLA. The user may freely choose the performance indicators to be monitored in the service level agreement, in effect forming out of them an SLA group. 19.2 Defining SLA Key Performance Indicators (KPI) In 7signal Sapphire an SLA group is formed out of a set of Key Performance Indicators corresponding to the SLA. The SLA group is bound to a topology element in the monitored network. If an SLA group is not bound to a topology element, 7signal Sapphire applies the default SLA group, or if not defined, the SLA limits defined for KPIs in the SLA template. An SLA group consists of several KPIs which define the boundary values used in monitoring the fulfillment of the service level agreement. In the 7signal Sapphire system the boundary values can be set separately for each KPI contained in the SLA group. Each KPI defines a certain type of boundary value and percentage values for how many measurement samples may fall outside the defined boundary values without causing the service level agreement to be considered unfulfilled. The type of the KPI determines whether measurement samples with values over or under the boundary value are desired. Three color coding is used for service levels in the KPIs: green, yellow and red. The percentage boundaries are defined for green and yellow levels of service. To attain the green level of service the percentage of measurement samples that fulfill the boundary value criteria set in the KPI (that is, are over or under the set boundary value, depending on the type of KPI) must be at least as high as the percentage boundary value set for the green level in the KPI. If there are too many measurement samples that do not fulfill 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 19 7signal solution 105 the boundary value criteria, the service level falls to yellow. The yellow level functions likewise:
if it is not attained, the service level falls to red. As an example, the table below explains how an SLA value is calculated for Upload Throughput KPI, its measurement and statistical analysis. above 5,5 Mbit/s Boundary value 99,0%
Green level Yellow level 95,0%
Red level below 95,0%
The threshold value for KPI. At least 99,0% of measured samples must attain an upload throughput of at least 5,5Mbit/s in order to attain the green level for the KPI in question. If the percentage of measured samples that satisfy the boundary value criteria falls between 95,0% and 99% the yellow level is attained. If the percentage falls below 95,0% the service level can be considered unfulfilled. 19.3 Creating an SLA group An SLA group can be created in one of two ways:
1. By copying an SLA template 2. By creating an empty SLA group and adding to it the desired Key Performance Indicators When the desired set of KPIs has been added to the SLA group the KPI boundary values can be set to match the service levels outlined in the actual Service Level Agreement contract. 19.3.1 Creating an SLA group from a template Figure 61: Creating SLA group from a template Create the SLA group as follows:
1. Click on "Manage | SLA definitions" from the top menu bar 2. Open Templates node. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 106 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 19 7signal solution 3. Right-click on the desired SLA template 4. Choose "Duplicate" from the pop-up menu. An SLA group editing dialog opens to the right (pictured above) 5. Name the SLA group 6. Remove unnecessary KPIs from the "KPI definitions" list by using the "Remove KPI"
button 7. Add wanted KPIs which are not within the template. See next chapter how to do this. If it's desired to change the boundary values of KPIs, choose the desired KPI from the 8.
"KPI definitions" list. The KPI's name, description and boundary values according to service level agreement are updated into the editing dialog. 9. Edit the boundary values to your liking. 10. Repeat from step 7. until every boundary value is as desired. 11. Click "Save"
19.3.2 Creating an SLA group from scratch The dialog pane is identical to the case of duplicated template. Naturally the contents of the pane are empty, but the look and the process are identical. Create the SLA group as follows:
1. Click on "Manage | SLA definitions" from the top menu bar 2. Right-click on "SLA groups" from the tree hierarchy 3. Choose "Add SLA group" from pop-up menu. An SLA group editing dialog opens to the right. 4. Name the SLA group 5. Choose "KPI definitions" from the tree hierarchy. Available KPIs are opened into the tree. 6. Right-click on the desired KPI 7. Choose "Copy" from the pop-up menu 8. Click "Paste KPI" from the SLA group editing dialog 9. Choose the KPI in the SLA group editing dialog ("KPI definitions"). The KPI's name, description and boundary values according to service level agreement are updated into the editing dialog. 10. If necessary, edit the boundary values. 11. Repeat from step 6. onwards until all desired KPIs have been added to the SLA group. 12. Click "Save"
19.3.3 Setting default SLA group An SLA group can be defined as the default SLA group. The default SLA group is applied if no other SLA group is effective on topology elements. Set an SLA group as the default SLA group as follows:
1. Click on "Manage | SLA definitions" from the top menu bar 2. Open SLA Definitions node. 3. Right-click on the desired SLA group 4. Choose "Set as default group" from the pop-up menu. Suffix (default) will appear from the end of the SLA group name in the tree. There can be only one default SLA group. In order to change the default SLA group, or completely remove use of default SLA group feature, the current default SLA group must be changed to ordinary SLA group:
7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 19 7signal solution 1. Click on "Manage | SLA definitions" from the top menu bar 2. Open SLA Definitions node. 3. Right-click on the desired SLA group 4. Choose "Set as not default group" from the pop-up menu. Suffix (default) will disappear from the end of the SLA group name in the tree. 19.4 SLA propagation An SLA Group can be bound to any topology element type. In order to avoid unnecessary binding of the same SLA Groups to multiple topology elements, there is a propagation hierarchy how SLA Groups are propagated from different levels within the topology hierarchy. This means that for example if SLA Group is only bound to Top level organization, it is propagated to each element under the organization. On the other hand, if an SLA Group is explicitly bound to a topology element, this SLA Group is always applied to the topology element. The following figure depicts the SLA propagation order:
107 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Link Inheri ts Access Point Inheri ts Eye Inheri ts Service Area Inheri ts Inheri ts Link Group Inheri ts Netw ork Inheri ts Location Inheri ts Location Inheri ts Inheri ts Organization Propagation rules are the following:
Inheri ts Organization Wireless network inherits from Organization. o If the Organization does not have a bound SLA Group, Wireless network inherits SLA Group from parent Organization of its own Organization. Link inherits from Access Point or Link Group. o o o If both have an SLA Group, SLA Group is inherited from the Access Point. If the Access Point does not have a bound SLA Group, the Link inherits the Group from Eye, etc. If the Link Group does not have a bound SLA Group, the Link inherits the Group from the Location, etc. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 19 7signal solution 108 Link Group inherits from Location. o If the Location does not have a bound SLA Group, the Link Group inherits from parent Location or Organization, etc. Access Point inherits from Eye. o If the Eye does not have a bound SLA Group, the Access Point inherits from Service Area, etc. Eye inherits from Service Area. o If the Service Area does not have a bound SLA Group, the Service Area inherits from Location, etc. Service Area inherits from Location. o If the Location does not have a bound SLA Group, the Service Area inherits from parent Location or Organization, etc. Location inherits from parent Location or Organization. o If the parent Location or Organization does not have a bound SLA Group, the Location inherits from parent Location or Organization, etc. Organization inherits from parent Organization. Management GUI shows the bound or inherited SLA group:
In Network Topology select a topology element 1. 2. Right-click and select Bind SLA If the SLA Group is explicitly bound to the topology element, the bound SLA Group can be seen in the selected state:
Figure 62: SLA Group bound to an Eye 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 19 7signal solution 109 If the SLA Group is inherited, the name of the SLA Group and the name topology element from which the SLA Group is inherited is shown:
7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 63: SLA Group inherited from SLA Group bound to an Eye 19.5 Binding SLA Groups 19.5.1 Binding an SLA group to a Link Bind an SLA group to a link as follows:
1. Click on "View | Network topology" from the top menu bar 2. Right-click on the link that you want to bind an SLA group to from the tree hierarchy 3. Choose "Set SLA group" from the pop-up menu 4. Choose the desired SLA group from the menu that opens Or alternatively 1. Click on "View | Network topology" from the top menu bar 2. Right-click on the link that you want to bind an SLA group to from the tree hierarchy 3. Select "Edit" from the pop-up menu. A link editing dialog opens to the right 4. Choose the desired SLA group from the drop-down menu 5. Click "Save"
7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 110 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 19 7signal solution 19.5.2 Binding an SLA group to a link group Bind an SLA group to a link group as follows:
1. Click on "View | Network topology" from the top menu bar 2. Right-click on the link group that you want to bind an SLA group to from the tree hierarchy 3. Choose "Set SLA group" from the pop-up menu 4. Choose the desired SLA group from the menu that opens Or alternatively 1. Click on "View | Network topology" from the top menu bar 2. Right-click on the link group that you want to bind an SLA group to from the tree hierarchy 3. Select "Edit" from the pop-up menu. A link group editing dialog opens to the right 4. Choose the desired SLA group from the drop-down menu 5. Click "Save"
19.5.3 Binding an SLA Group to other Entities SLA Group can be bound to any entity within the Topology Tree. This can be done as follows 1. Right click the topology element and select Bind SLA 2. Select the SLA from the given list. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 20 7signal solution 20 CONTINUOS AND AUTOMATED REPORTING Analyzer is an interactive tool for studying network phenomena of interest and for in-depth investigation of problems. Reports in standard, easy-to-interpret formats are available to support routine monitoring. 111 7 s i g n a By using the report view in Carat, the user can configure reports from elements that are familiar from Analyzer. In addition to the user-selected indicators, a report configured here contains the time of compilation and delivery and a list of the delivery addresses. At the specified time, Carat generates the report and delivers it to the recipients, specified as either e-mail addresses or directories in the Carat server file system. A report can include KPIs, service level views, and alarms, referred to below as report items. l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Note: Configuring the mail server settings found under Edit | SMTP server enables the use of email in reporting. 20.1 Subscription for a new report 1. Select Manage | Automated report configuration 2. Select New to create a new subscription and open a report template a. Use Edit for editing a subscription b. The Delete option allows you to delete a subscription c. When you select a report name, the description of this existing report is displayed Figure 64: Automated report configuration In the Report Properties Configuration area:
7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 112 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 20 7signal solution 3. Enter a name for the subscription 4. Enter a description for the subscription (optional) 5. Select an report image (optional) 6. Choose the location for the image on the page The image will be repeated on each page of the report. It might represent, for example, a company or a target network. 7. Select the resolution (quality) to be used for the report graphics, mainly relevant to charting. In the Report items area:
8. Configure the items to be included in the report by selecting Add a. this starts content-dependent workflows, instructions below 9. Specify the send time a. recurrence is weekly or monthly i. Field When to send is dynamic and lets one choose either numerous week days or a day in month b. send time has 30 minutes resolution in a drop-down menu 10. Generate preview creates a report and opens it is a viewer tool 11. Generate and send now are available for subscriptions that have been saved (report will be generated and sent to recipients, see Report destination settings). In the Report destination settings area:
12. Choose the delivery format (Media type) of the PDF report a. Email b. save to File system i. an absolute path gives the location in the Carat server file system ii. relative paths are relative to the Carat startup directory (default:
/opt/7signal/Carat/7signal) 13. Add one or more formats in the Destinations field by clicking Add 14. Save the subscription by clicking Save 20.2 Adding Report Items There are five report item types. A report item is an individual piece of information SLA compliance, a KPI chart, an SLA table, a map, or a set of alarms that is part of the report. A report is a series of report items. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 20 7signal solution 113 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 65: Adding a report item To add a report item:
1. Choose the content type 2. Give a name to the report item a. a descriptive name is good especially if the item content groups together numerous pieces of information 3. Optionally write a description of the report item 4. Select Next 20.2.1 Adding SLA compliance report item 1. Select topology elements of the report item. See chapter 20.2.6. 2. Click Next to continue to Report item time configuration. See chapter 20.2.6. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 20 7signal solution 20.2.2 Adding KPI report item 114 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 66: Multiple KPI chart report item 3. Select the desired KPI by left-clicking it in the right-hand pane 4. Right-click and select Add KPI in the submenu 5. Repeat steps 23 until all desired KPIs are in the left pane (depending on chart type:
Multiple KPI chart allows more than one KPI) 6. Select the Chart type 7. Select the method for displaying the measurement series in Chart content 8. Select the display method a. Data Table, Aggregation Chart 9. Click Next to continue to Report item topology configuration. See chapter 20.2.6. 10. Click Next to continue to Report item time configuration. See chapter 20.2.6. 20.2.3 Adding SLA report item
. 1. Choose the topology elements of the report item. See chapter 20.2.6. 2. Click Next to continue to Report item time configuration. See chapter 20.2.6. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 20 7signal solution 20.2.4 Adding alarm report item 115 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 67: Adding alarm report item 1. Select the desired alarm by left-clicking it in the right-hand pane 2. Right-click the alarm and select Add alarm in the submenu a. One may remind oneself about the alarm by selecting Description 3. Repeat steps 23 until all of the desired alarms are in the left pane 4. Select Next to continue to Report item topology configuration. See chapter 20.2.6. 5. Select the time interval for the report. See chapter 20.2.6. 20.2.5 Adding map report item 1. Select the desired KPI by left-clicking it in the right-hand pane 2. Right-click and select Add KPI in the submenu 3. Click Next to continue to Report item topology configuration. See chapter 20.2.6. 4. Click Next to continue to Report item time configuration. See chapter 20.2.6. 20.2.6 Report item general options All report item types have two configuration options: report item topology configuration and report item time configuration. The general configuration options are asked after report item specific options. Report item topology configuration The report item time configuration dialog contains two elements:
Area aggregation selector Topology tree 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 20 7signal solution 116 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 68: Report item topology configuration, access point area aggregation Available area aggregations43 depend on report item type:
Table 13: Supported area aggregations Report item type Supported area aggregations SLA compliance KPI SLA Alarm Access point Network Link Network Access point APEye Link NWServ NWBandServ NWEye NWBand NWBandEye Dest DestAP DestEye DestEyeEth EyeEth Network Access point APEye Link NWServ NWBandServ NWEye NWBand NWBandEye Dest DestAP DestEye DestEyeEth EyeEth Access point 43 For more about area aggregations, please see Analyzer User Manual. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 117 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 20 7signal solution Map Serv NWBandServ Topology tree is used for selecting topology elements to the report item. Which topology elements can be selected depends on the chosen area aggregation. Notice that on Map report items, there must be a map configured for the Service Area. Table 14: Report item topology element selections per area aggregation Area aggregation Topology elements Example Access point At least one access point APEye At least one Eye and access point managed by the Eye Link At least one Link 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 20 7signal solution NWServ At least one Service Area and Network NWBandServ At least one Service Area, Network and band of the Network NWEye At least one Network and Eye NWBand At least one Network and band of the Network 118 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 20 7signal solution NWBandEye At least one Network, band of the Network and Eye Dest At least one Sonar DestAP At least one Sonar and Access Point 119 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 20 7signal solution DestEye DestEyeEth At least one Sonar and Eye EyeEth At least one Eye 120 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Steps for report item topology configuration:
1. Select the Area aggregation 2. From the hierarchical tree presented, select the corresponding elements depending on the selected area aggregation. 3. Click Next to continue to Report item time configuration Report item time configuration Report time configuration dialog contains time interval and time aggregation selectors. Figure 69: Report item time configuration, history mode 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 20 7signal solution 121 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 70: Report time configuration, calendar mode 1. Select the time interval for the report a. History (in the picture above)uses pre-defined intervals from the generation time backwards b. Calendar allows free interval definition 2. Time aggregation defines the averaging period for the report item 3. Click Finish to return to first subscription page 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 21 7signal solution 21 IMPORT Import utility supports currently importing of access point names access point names when last MAC digit is zero access points by replacing existing access points in the configuration In order to import start import utility, select Tools | Import from the menu. The import dialog is opened:
122 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 71: Import dialog, access point name import selected Select Import type from drop-down menu. 21.1 Importing access point names 1. Select a separator character according to field separator character in the file to be 2. imported. If the file contains header lines that should be ignored, select correct number of lines in Header ignored lines drop-down menu. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 21 7signal solution 123 3. 4. If the file contains footer lines that should be ignored, select correct number of lines in Footer ignored lines drop-down menu. If the file contains comment lines that start with a specific character, select a comment line start character in Comment line start drop-down menu. 5. Select the BSSID column number in the file. 0 means first column, 1 means second column, etc. 6. Select the AP name column number in the file. 0 means first column, 1 means second column, etc. 7. Select the file to be imported by clicking Select file.. button. 8. Select Import file. 9. Check status of the import in Import status field. 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 21.1.1 Example access point name import ap_names.txt file contains the following BSSID-to-name mappings:
SSID MAC address Alias
---- ----------- -----
7Guest 00:17:9A:F2:2D:89 7signal-Guest-AP 7signal 58:BC:27:59:CC:20 7signal-AP-5GHz 7signal 58:BC:27:5D:8B:B0 7signal-AP-2.4GHz The file import settings and result looks like the following:
7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 21 7signal solution Separator character is white space Two header lines must be ignored No ignored lines at the end of the file No comment lines MAC address is at the second column of the file AP name is at the third column of the file Import status field indicates that all lines were successfully imported. 21.2 Importing access point names (last digit zero mode) 124 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 21.2.1 Overview This import mode is useful for importing access point names to the system from e.g. Cisco controller output. The last digit of a Cisco access point MAC address is zero, last digit of BSSIDs of the access point are non-zero. For example:
Access point MAC address: 58:BC:27:5D:8B:B0 MAC address of first BSSID: 58:BC:27:5D:8B:B1 MAC address of second BSSID: 58:BC:27:5D:8B:B1 MAC address of third BSSID: 58:BC:27:5D:8B:B2 Access point name list exported from WLAN controller lists the access point names and their MAC addresses:
Test-AP-1 58:BC:27:5D:8B:A0 Test-AP-2 58:BC:27:5D:8B:B0 Test-AP-3 58:BC:27:5D:8B:C0 Importing names for all BSSIDs of the access point can be done by using this import type. 21.2.2 Running import 1. Select a separator character according to field separator character in the file to be 2. 3. 4. imported. If the file contains header lines that should be ignored, select correct number of lines in Header ignored lines drop-down menu. If the file contains footer lines that should be ignored, select correct number of lines in Footer ignored lines drop-down menu. If the file contains comment lines that start with a specific character, select a comment line start character in Comment line start drop-down menu. 5. Select the BSSID column number in the file. 0 means first column, 1 means second column, etc. BSSID here means access point MAC address (which has last digit zero). 6. Select the AP name column number in the file. 0 means first column, 1 means second column, etc. 7. Select the file to be imported by clicking Select file.. button. 8. Select Import file. 9. Check status of the import in Import status field. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 21 7signal solution 125 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 72: Import access point names, last digit zero mode 21.3 Import and replace APs This import type can be used to replace access points in the configuration. Replace is usually needed if, for example, physical access point has been replaced but the access point is wanted to be considered as the same access point in 7signal Sapphire configuration. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 21 7signal solution 126 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 73: Replace access point by import utility 1. Select a separator character according to field separator character in the file to be 2. 3. 4. imported. If the file contains header lines that should be ignored, select correct number of lines in Header ignored lines drop-down menu. If the file contains footer lines that should be ignored, select correct number of lines in Footer ignored lines drop-down menu. If the file contains comment lines that start with a specific character, select a comment line start character in Comment line start drop-down menu. 5. Select the Old BSSID column number in the file. 0 means first column, 1 means second column, etc. This is the MAC address currently configured in 7signal Sapphire 6. Select the New BSSID column number in the file. 0 means first column, 1 means second column, etc. This is the new BSSID of the access point. 7. Select the file to be imported by clicking Select file.. button. 8. Select Import file. 9. Check status of the import in Import status field. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 22 7signal solution 127 22 EXPORTS 7signal Sapphire is capable for exporting test results and alarms to system log of the host running the Carat server. XML schemas applied can be found in Utilities directory of Carat distribution media. The Utilities directory contains three XML schema files:
testresult.xsd: Test result XML schema alarm.xsd: Alarm XML schema common.xsd: Common schema used by two former schemas 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 22.1 Configuring Carat system logging properties carat-syslog.properties in conf directory of Carat installation contains Carat system logger client configuration parameters:
.level= INFO
# Console handler configuration java.util.logging.ConsoleHandler.level = INFO java.util.logging.ConsoleHandler.formatter =
java.util.logging.SimpleFormatter
# Syslog logger com.agafua.syslog.SyslogHandler.transport = tcp com.agafua.syslog.SyslogHandler.facility = local1 com.agafua.syslog.SyslogHandler.port = 514 com.agafua.syslog.SyslogHandler.hostname = localhost Configure desired log level (default: INFO), facility (default: local1) and hostname (default:
localhost). 22.2 Configuring system logger daemon rsyslog is the default system logger daemon in RHEL/CentOS operating systems. Open
/etc/rsyslog.conf file in an editor and do the following changes:
1. Uncomment following lines:
# Provides TCP syslog reception
#$ModLoad imtcp
#$InputTCPServerRun 514 2. Add $MaxMessageSize configuration parameter:
$MaxMessageSize 32768 Notice that "$MaxMessageSize" definition MUST be before "$ModLoad imtcp" line. 3. Add rule for Carat syslog level and facility. If the defaults are used, add the following line to rules section:
local1.info /var/log/carat-xml-output.log 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 22 7signal solution Save the file and restart daemon:
# service rsyslog restart 22.3 Exporting test results to system log Start Management GUI and log in as solution adminstrator. 1. Select Tool | Export in main menu. 2. Select Export test results to system log checkbox 3. Click Save button. 128 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 74: Configuring XML alarm export If automated tests are configured and running, test results start to appear in configured system log file:
Dec 4 15:31:34 localhost INFO: <?xml version="1.0" encoding="UTF-8"
standalone="yes"?><TestResultType><TimeStamp>2013-12-
04T15:31:34.057+02:00</TimeStamp><Type>active</Type><Eye><Name>eye244</Name><Id>58</Id><
/Eye><TestName>RTTPing</TestName><PingTestResult><AttachTimeMilliSeconds>0</AttachTimeMi lliSeconds><DHCPRetrievalTimeMilliSeconds>0</DHCPRetrievalTimeMilliSeconds><LocalIPAddre ss>10.10.10.244</LocalIPAddress><GatewayIPAddress>10.10.10.1</GatewayIPAddress><Associat ionTime>0</AssociationTime><AuthenticationTime>0</AuthenticationTime><NetworkInterface>E thernet</NetworkInterface><AttachSuccess>false</AttachSuccess><IPSuccess>false</IPSucces s><AuthenticationSuccess>false</AuthenticationSuccess><AssociationSuccess>false</Associa tionSuccess><Status>Ok</Status><PayloadBytes>32</PayloadBytes><Sonar><Name>vesku</Name><
Id>1</Id></Sonar><Antenna>0</Antenna><Channel>0</Channel><PingTestCategoryResult><Indivi dualPingTestResultEntry><PingStatus>OK</PingStatus><ElapsedTimeMilliSeconds>1</ElapsedTi meMilliSeconds></IndividualPingTestResultEntry></PingTestCategoryResult></PingTestResult
></TestResultType>
Dec 4 15:31:35 localhost INFO: <?xml version="1.0" encoding="UTF-8"
standalone="yes"?><TestResultType><TimeStamp>2013-12-
04T15:31:35.105+02:00</TimeStamp><Type>active</Type><Eye><Name>eye244</Name><Id>58</Id><
/Eye><TestName>RTTPing</TestName><PingTes 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 22 7signal solution 22.4 Exporting alarms results to system log Start Management GUI and log in as solution adminstrator. 4. Select Tool | Export in main menu. 5. Select Export alarms to system log checkbox 6. Click Save button. 129 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 75: Configuring XML alarm export If automated tests are configured and running, test results start to appear in configured system log file:
Dec 23 14:44:50 localhost INFO: <?xml version="1.0" encoding="UTF-8"
standalone="yes"?><AlarmType><AlarmName>Noise Level Exceeded</AlarmName><State>Acked</State><RaiseTime>2013-12-
23T14:20:28.796+02:00</RaiseTime><AckTime>2013-12-
23T14:44:50.425+02:00</AckTime><Severity>Warning</Severity><Gpt>16</Gpt><Spt>32</Spt><Ac cessPointAlarm><AccessPoint><Name>AP_serverihuone</Name><Id>12</Id></AccessPoint><Report ingEye><Name>eye244</Name><Id>58</
Id></ReportingEye><AccessPointAddress>58:BC:27:59:CC:20</AccessPointAddress><NetworkId>1
</NetworkId><AdditionalInfo>Channel: 48 Antennas: 1 2 3 4 5 6 7
</AdditionalInfo></AccessPointAlarm></AlarmType>
com.sevensignal.server.carat.businesslogic.northbound.syslog.SyslogService eventOccurred 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 23 7signal solution 130 23 CHANGE EVENTS There can be events on wireless networks that impact measurement results of 7signal Sapphire. Such events can be e.g. controller software update, configuration changes in access points, power level changes etc. Because the changes affect to measurement results, 7signal Sapphire provides a method, change event framework, for attaching change information to measurement results.A change event can be logged for access points access points managed by specific Eye Eyes wireless networks wireless networks on specific service area links A change event consist of a timestamp, change name and change description. A change event is visible in Sapphire Analyzer time-axis charts as a vertical line. Which change events are shown in Analyzer charts depends on used area aggregation:
Table 15: Change event to area aggregation map Change event reported for:
Visible in Analyzer with area aggregation:
Access point Access point under specific Eye Eye Wireless network Access point Eye AP DestAP ClientAP QosAP APGroup APEye APEyeAnt Eye EyeAnt ChEye ChEyeAnt ClientEye NW Link Wireless network on specific service area NWServ NWBandServ 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 23 7signal solution 23.1 Reporting change events Change events are reported by using Management GUI. 131 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 76: Adding a change event Select a desired topology element and right-click to open a popup menu:
Access point o Select Change events to report a change event for the access points. o Select Change events on this Eye to report change event for the access point under specific Eye. Eye o Select Change events to report a change for the Eye. Link o Select Change events to report a change for the link. Wireless network o Select Change events to report a change for the wireless network o Select Change events on this Service Area to report a change for the wireless network on the specific service area Change event dialog is opened. Enter information for the change event:
1. Select time of the change a. Select date by clicking arrow down button. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 132 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 23 7signal solution b. Select time from the drop-down menu 2. Enter name of the change 3. Enter description of the change (optional) 4. Select Add change event The added change event will appear on the list. 23.2 Viewing change events Change events related to topology elements can be viewed by right-clicking the topology element and selecting Change events. Alternatively, all change events logged to the 7signal Sapphire can be viewed by selecting View | View change events from the main menu:
23.3 Removing change events Change events can also be removed from 7signal Sapphire. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 23 7signal solution 133 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 77: Removing change events 1. Open a. change event dialog of the desired topology element. Or b. view change event dialog from View | View change events 2. Select change events to be removed from the list by ticking check boxes 3. Select Remove selected change events 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 24 7signal solution 134 24 VIEWER SOFTWARE Test result information and other results can be transferred outside Carat in spreadsheet format and as raw or delimited text and PDFs. You can select the applications you want to use to process these files in Carat. Packet capture viewer application is also defined in this dialog. 1. From the top menu bar, select Edit | Configure tools 2. The installed applications are displayed on the right 3. To change the applications, click Browse 4. Locate the application in the Carat server file system and select Open 5. Click Save Figure 78: File viewer configuration 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 25 7signal solution 25 EMAIL SERVERS In order to enable sending of automated reports and alarms to email addresses, the email server has to be configured. This setting is only for the SMTP server, the email account information is given in each of the features using the SMTP server. There can be only one SMTP per organization. Solution Administrator has visibility to all SMTP servers but local Administrators and Configurators may add only one SMTP server. 1. From the top menu bar, select Edit | Mail server configuration 2. Enter the SMTP servers address 3. Enter the e-mail address that is used as the sender of the emails 4. Enter the SMTP port to use 5. Enter a username and password, if required by the SMTP server 6. Click Save 135 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 79: Mail server configuration 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 26 7signal solution 26 DATABASE MAINTENANCE 26.1 Measurement data purge In order to save disk space it is possible to purge old measurement data from the database. Available purge options are scheduled purge and instant purge. 136 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 80: Database maintenance configuration 1. Select Manage | Database maintenance from Manage menu 2. In order to schedule data purge a. Select daily, weekly or monthly schedule i. If selected monthly, select day of month and time ii. If selected weekly, select day of week and time iii. if selected daily, select time b. Select appropriate data storage time i. Select time from drop-down menu ii. Alternatively, a custom number of days can be entered c. Select Schedule 3. In order to purge data instantly a. Select appropriate data storage time i. Select time from drop-down menu ii. Alternatively, a custom number of days can be entered 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 26 7signal solution b. Select Purge now c. Progress can be followed from progress bar. 4. Select Close 137 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 81: Instant measurement data purge ongoing If the database contains huge amount data that is going to be purged, the purge process may take very long time, even several days. 26.2 Database backup It is possible to backup databases in 7signal Sapphire. Given a proper backup, the system state may be recovered completely in case of system crash. There are two remarkably different alternatives and an option not to backup the database. The default in 7signal Sapphire is no backup. While this option is known to be non-optimal for any production environment, it is chosen as default to force every organization to define own backup policy. 26.2.1 Backup options The backup process will use /tmp directory by default and take a lot of disk space. It is highly recommended that the default backup work directory is changed to directory residing on a large file system (not the file system on which the actual database resides). The directory can be changed with 7db-utility. Example:
# 7db backup workdir set /largefilesys Automated backup with server downtime Backup with downtime is a circadian backup that pauses the measurements by stopping the Carat server and closing the underlying database connections. In quiescent mode a full backup of the database is made and stored to the desired location in the Carat server file system. The user is responsible for managing the backup files, moving and purging and so on. This type of logging is later referred as offline backup. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 138 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 26 7signal solution Example:
# 7db backup set daily 03:00 /mnt/backups Automated backup without server downtime Online backup is a circadian backup that keeps 7signal Sapphire in production while creating the backups. Database logging method must be archival logging. Example:
# 7db backup set daily 03:00 /mnt/backups
# 7db backup set type online Manual backup Circular logging Sapphire processes will be stopped during backup process and automatically restarted after backup has been created. Example:
# 7db backup now /mnt/backups offline Archival logging Sapphire processes will not be stopped during backup process. Example:
# 7db backup now /mnt/backups online 26.2.2 Database logging In short, the logs of a database system are the most precious. It is justified to say that the logs are the database as they are written first and the tables are updated after that. IBM DB2 provides alternative logging methods that affect the backup options. So called
'circular logging' method keeps the size of the logs very predictable. The other option used in 7signal Sapphire is so called 'infinite archive logging'. This is very flexible a logging method provided that there is a special file system available. Practically the file system must not fill up ever. The default logging method in 7signal Sapphire is 'circular logging'. Purging database logs Circular logging 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 26 7signal solution 139 There is no need for purging in case of circular logging. The default logging method in 7signal Sapphire is 'circular logging'. Infinite archive logging There is one secure way of purging the log files in the infinite archive directory. Offline backup has to be done and this comes with price of the 7signal Sapphire halt. Offline backup provides one single and unique point-in-time to be restored later. Once the offline backup exists, the log files in the infinite archive directory become obsolete and may be removed. The other option comes with no warranty whatsoever. The option is to keep 7signal Sapphire running and to delete log files in the infinite archive directory. To understand what files are likely to be unused, the active log files has to be followed to see the time to fill up a single log file and then deduce what infinite archive files might be available for deleting . If one chooses this option, setting the safety margins reasonably high is advisable. In case there is both a system crash and a log file has been deleted too early, the recovery shall never be able to finish. In this case, the only consistent system stage is available at offline backup time. The automated reporting lessens the impact of possible data loss if used in detail and frequently. However, possibility to measurement drill-in analysis is lost as well as any change in the network topology and other management information. The infinite archival logging is provided in order to support online backups (see below) but it should also be seen as a method to make system run longer automatically without user interruption. However, the system has to be maintained and administered. It is outside of the scope of this document to fit 7signal Sapphire to IT processes of all organizations but offline backups with planned system halts are highly recommended. 26.2.3 Backup method options Default state (not recommemded) Essentially the 7signal Sapphire system default state is not a backup system at all but it is based on the underlying database management system's robustness, fault tolerance and basic level recovery options. In case of a permanent disk failure the data is lost. By installing the databases on RAID disks lessens the risk further. On default state the 7signal Sapphire relies on the database management system (IBM DB2) logging. The assumptions are that the management information (Eye, access point and target network) changes are not continuous but rather sporadic. The measurements are continuous but losing few of the most recent samples is a risk that can be tolerated. Typical starting point for analysis is one week of measurements and in case of sudden system down one would lose the data until the system is fixed. And in case of system down it is expected that all the efforts shall be there to bring 7signal Sapphire and other systems online again. There shall be no special snapshots where to start operations again. It is possible to resume a state before the interrupt, possibly the system is operational with no special effort at all. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 26 7signal solution 140 Offline backups are possible but require user actions both to shutdown 7signal Sapphire and do the actual backup. Handicaps of the default method:
-
-
-
no precise and secure backup (system state) to return to by default backup process is completely manual backup process requires downtime Method strengths:
-
-
least planning least resource consuming 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l First degree of backup: offline backup Most importantly this method gives fully recoverable snapshots at the desired intervals. The disk space requirement is an issue but not extremely serious as the frequency is totally user-
managed and the file size growth is easy to check (with the tools provided by the operating system, not by 7signal). The downside is the downtime as the 7signal Sapphire must be halted for the time of the backup, hence it is called offline backup. Typically this would be rather minutes than tens of minutes. Naturally all the measurements are stopped for that time. Offline backup 1st degree is available in every install and run scenario of 7signal Sapphire. One can start offline backup with a tool or have it run by the system in a circadian manner. Method handicaps:
-
backup process requires downtime Method strengths:
-
-
simple to recover recovered system state is thoroughly consistent TIP: offline backup is suitable for environments that require automated backup but do have neither special backup policy hardware nor other extensive resources. 2nd degree of backup: online backup The requirement for the online backup is that infinite archive logging is enabled. When online backup is operational, the most significant benefit is the ability to run circadian backups online i.e. 7signal Sapphire remains operational and continues testing while creating the backup. As opposed to offline backup, the system is online all the time producing measurements. The first and the most important assumption is that there is a storage device available that in practice is a so-called endless device. 7signal cannot and shall not guarantee any checks on the device but it is assumed to be available all the time and have the capacity for massive data transfers. The user is responsible for the storage capacity. NOTE: backups are not done incrementally in any case. This means that over time the needed to dump the database increases but more importantly the disk space requirement increases continuously. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 26 7signal solution NOTE: use of backup systems requires planning and administration i.e. continuous effort from the administrator. This area is outside of 7signal scope, 7signal encourages clear planning on the issue. 141 7 s i g n a During installation there shall be various destination folders inquired by the install script. The folders are for logs, for backup files etc. As complex as online backup may sound, the setting of the online backup is easy. To maintain and keep it available and functional requires IT support that is beyond the scope of 7signal guidance. Behind the scenes the technology relies completely on IBM DB2 backup system and 7signal provides interface that covers and automates IBM interface to support 7signal databases. l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l TIP: there are environments that require separate hardware for backups. If possible, 7signal Sapphire should be integrated (on file system level) to these. TIP: with frequent and detailed automated reports the loss of measurement data becomes less drastic as the needed information may be found in the reports. Changing log settings Install time gives the option to set all the backup related settings including log setup. To change the settings while the system is installed and in production later, please use the tool 7db and the logsetup sub-command. Complete guide to 7db tool is in the appendix of Deployment Guide. Managing backup levels By default the system is in default state, no automated backups at all. Any change to that state would require more resources and administration that should be planned separately. In case one has changed the default settings either by giving such install parameters or issuing the needed commands after the installation - the following operations return the initial state:
1) stop circadian backups 2) set logging to circular mode This implies that the default state means circular logging without circadian backups. File system settings for the database There are three elements that require optimally separate disk space:
1. databases a. measurement database b. management database c. security database 2. database logs 3. database backups 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 26 7signal solution 142 Naturally the backups must be stored separately from the logs and the databases; otherwise the value of the backups reduces significantly. The databases and the related logs are expected to be accessible easily from the hosting server but it is encouraged to use separate physical file systems for these two. NOTE: log files and databases residing in the same physical disk mean duplicate disk operation efforts on the same device. It is good design to separate logs and actual databases to different physical storage devices. Changing backup settings Install time gives the option to set all the backup related settings. To change the settings while the system is installed and in production later, please use the tool 7db and the backup sub-command. Complete guide to 7db tool is in the appendix of Deployment Guide. Below there are example commands to give the reader an overview:
# 7db backup remove
# 7db backup set weekly Wed 00:30 /mnt/backups # 7db backup set daily 03:00 /mnt/backups
# 7db backup set directory /mnt/newbackups
# 7db backup set weekly Sun 01:30
# 7db backup set type online
# 7db backup now /mnt/backups online 26.2.4 Restoring backups Backups are located in the user-defined directory. Backup files contain timestamp in the name;
also the operating system timestamp exists. NOTE: the user must be aware which backup file should be used. Therefore it is essential to understand the backup system and the related files. Based on this information one must choose which backup to restore. Restore command is
# 7db backup restore <absolute-file-path>
NOTE: while issuing restore command when using online backup, it might be necessary for the system to retrieve files from the infinite archive directory when the restore command is issued. The access time is affected by the physical device. If the system cannot access the files, restore shall not happen. The most recent offline backup is the alternative point of recovery. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 26 7signal solution 26.3 Management database integrity check 143 7 s i g n a The Carat management database may sometimes end up to inconsistent state because of power outages, operating system crashes, etc. 7signal Sapphire provides integritycheck tool which is used to check and repair the management database. 1. Login to the server that hosts the Carat server as root user 2. Stop the Carat server:
# 7carat stop 3. Execute integrity check tool:
# 7carat integritycheck If the tool finds out any problems, it asks from the user whether the problem should be corrected or not. By default, answer yes to all questions. 4. l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Example output of integrity check tool:
Connecting databases.. Database connections ready. Starting integrity check.
* Loading SLA groups..
------------------------------------------------------------------
Checking wireless networks:
* Loading networks..
* Checking networks..
* Checking network "7signal"
* Checking network "7signal"
* Checking network "7Guest"
------------------------------------------------------------------
Checking access points:
* Loading access points..
* Checking access points..
------------------------------------------------------------------
Checking Eyes:
* Loading networks..
* Checking Eye eye244
* Checking Eye Eye241
------------------------------------------------------------------
Check for duplicate access points:
* Loading access points from database..
* Loading networks from database
* Checking access points..
* Comparing possible duplicates against networks
------------------------------------------------------------------
Checking links and link groups:
* Loading links..
* Loading link groups..
* Loading managed access points..
* Loading peer devices..
* Loading Eyes..
* Loading locations..
* Checking links..
* Checking link groups..
* Loading links.. Delete all 'removed' state access points from the database?
y=yes/n=no: y
------------------------------------------------------------------
Checking alarms:
* Loading alarms..
------------------------------------------------------------------
7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 26 7signal solution 144 Checking test profiles:
* Loading test profiles..
* Loading peer devices..
* Checking test profile jee
* Checking test profile office
* Checking test profile scan
* Checking test profile passive
* Checking test profile new tests
* Checking test profile radio env
* Checking test profile office+new
* Checking test profile monitor
* Checking test profile aptraffic
* Checking test profile dddd i 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. l 26.4 Reorganizing measurement database In order to maintain optimal performance of the measurement database, the database needs be reorganized periodically. This can be done e.g. before offline backup. Login to the server that hosts the Carat server as root user and execute the measurement database reorganization command:
# 7db reorg meas7 The reorganization tool first checks if reorganization is needed for each table. If so, it executes DB2 reorganization command. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 27 7signal solution 27 NAGIOS SUPPORT 7signal Sapphire supports Nagios, a commonplace open license tool for IT infrastructure monitoring. 145 7 s i g n a In this case Sapphire is the object of monitoring, not the monitor itself. Therefore we assume the general concepts and usage of Nagios to be well-known to the user. If this is not the case, one may start exploring the topic from the Nagios web pages (http://www.nagios.org). Also, a recent Nagios release package is included in the delivery media of the 7signal Solution in Sonar disk and the folder named "Non-7signal Software"
27.1 Adding Sapphire host information to Nagios server The prerequisite is that Nagios is installed and running on the host machine. In order to monitor a remote Carat server do the following steps (as a root user):
1. Modify commands.cfg file (default location: /etc/nagios/object/commands.cfg) Add:
define command {
command_name check_nrpe command_line $USER1$/check_nrpe -H $HOSTADDRESS$ -c $ARG1$
}
2. Create configuration file for remote machine running the Carat server to Nagios objects directory (default location: /etc/nagios/objects) File extension is cfg, otherwise the naming is free. You may use or modify the following:
carat-host-xyz.cfg 7signal_wqa_carat_1.cfg etc. Content of the file:
define host {
use linux-server host_name <host-name-of-the-monitored-server>
alias <alias-of-the-monitored-server>
address <IP address of the monitored server>
}
define service {
use local-service host_name <host-name-of-the-monitored-server>
service_description 7signal Sapphire Carat check_command check_nrpe!check_carat_server
}
3. Add host configuration file (the previous step) to nagios.cfg file (default location:
/etc/nagios/nagios.cfg):
cfg_file=/etc/nagios/objects/carat-host-xyz.cfg 4. Restart Nagios server service nagios restart 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 27 7signal solution 27.2 Adding Nagios Plug-ins To Sapphire Software The prerequisite is that client-side tools of Nagios have been installed on the host running 7signal Sapphire software. The protocol being used is NRPE. There is no SSH support concurrently. 27.2.1 Install NRPE daemon Use online install with yum:
# yum install nrpe 27.2.2 Install toolset Nagios plugins Use online install with yum:
# yum install nagios-plugins-nrpe 146 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l NOTE: the following installers shall open port tcp/5666 for Nagios traffic in the firewall settings.Install Sapphire plugin There folders named Nagios_support on both Carat and Sonar delivery disks. They contain the following files 7signal-Nagios-plugin-<version-info>-for-Carat-installer.bin 7signal-Nagios-plugin-<version-info>-for-Analyzer-installer.bin 7signal-Nagios-plugin-<version-info>-for-Sonar-installer.bin The files are executable and totally self-contained. By running each of the file makes the respective Sapphire Nagios plugin available. The process includes configuration file creation, updates and firewall settings. Silent install mode (option -s) uses 7signal defaults for all parameters. If this option is not used, all parameters are inquired interactively with the default setting visible. By default, the plugin installations end up in /opt/7signal/nagios folder. However, the installation makes the plugins available and after this the process and operations are completely transparent to the Carat user. 27.3 Verifying Nagios Installation Complete and operational install is achieved if Nagios GUI shows check_carat_server check_sonar_server check_analyzer_server as options for monitoring for the hosts running 7signal Sapphire software. 27.4 Removing Nagios plugins The installation directory contains uninstall_nagios.sh that removes Sapphire related plugin files. The NRPE daemon stays untouched and its configuration is cleaned only for Sapphire plugins thus NRPE and other Nagios operations remain untouched. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com
1 2 | Setup Guide Part 1 | Users Manual | 3.77 MiB | / March 05 2014 |
7signal Sapphire Carat User Guide Release 5.0 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com i 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Preface PREFACE Document scope This document is aimed at people that shall manage and configure 7signal Sapphire quality tests on WLAN networks. The test pattern configuration and 7signal Sapphire system administration are explained in this document. This document does not describe how the software is installed and how to handle the monitoring station. This is found in 7signal Sapphire Deployment Guide. To get guidance on how to interpret the measurements, please turn to the 7signal Sapphire Analyzer User Guide. FCC Compliance Human RF Exposure This equipment complies with the FCC RF radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 20 centimeters between the radiator and your body. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. The antennas used for this transmitter must be installed to provide a separation distance of at least 20cm from all persons and must not be located or operating in conjunction with any other antenna or transmitter. Part 15 This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at their own expense. Antennas This device has been designed to operate on internal antennas or with an external patch type antenna having a maximum gain of 6dBi. Antennas having a gain greater than 6dBi are strictly prohibited for use with this device. The required antenna impedance is 50 ohms. Notes to the user Any unauthorized modification of 7signal products may result in violation of FCC requirements which would void the users authority to operate the equipment. This device is restricted to indoor-only use in 5180.0 - 5250.0 MHz and 5470.0 - 5725.0 MHz bands. The FCC ID for the 7signal Sapphire Eye IEEE802.11a/b/g Eye Unit is YLF-2010-08-APU2. The FCC ID for the 7signal Sapphire Eye, Model 1001 (802.11a/b/g/n), is YLF-EYE-ABGN-APU3 The FCC ID for the 7signal Sapphire Eye, Model 2001 (802.11a/b/g/n) is YLF-INEY2001. Industry Canada Compliance The Industry Canada ID for 7signal Sapphire Eye, Model 2001 (802.11a/b/g/n) is 11766A-INEY2001 This Class A digital apparatus complies with Canadian ICES-003. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com Preface Cet appareil numrique de la classe A est conforme la norme NMB-003 du Canada. ii 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l This device complies with Industry Canada licence-exempt RSS standard(s). Operation is subject to the following two conditions: (1) this device may not cause interference, and (2) this device must accept any interference, including interference that may cause undesired operation of the device. Le prsent appareil est conforme aux CNR d'Industrie Canada applicables aux appareils radio exempts de licence. L'exploitation est autorise aux deux conditions suivantes : (1) l'appareil ne doit pas produire de brouillage, et (2) l'utilisateur de l'appareil doit accepter tout brouillage radiolectrique subi, mme si le brouillage est susceptible d'en compromettre le fonctionnement. Limitations in 5GHz Radar and Mobile Satellite Bands:
(i)
(ii)
(iii)
(i)
(ii)
(iii) operation in the band 5150-5250 MHz is only for indoor use to reduce the potential for harmful interference to co-channel mobile satellite systems;
the maximum antenna gain permitted for devices in the bands 5250-5350 MHz and 5470-5725 MHz shall comply with the e.i.r.p. limit; and the maximum antenna gain permitted for devices in the band 5725-5825 MHz shall comply with the e.i.r.p. limits specified for point-to-point and non point-to-point operation as appropriate. les dispositifs fonctionnant dans la bande 5 150-5 250 MHz sont rservs uniquement pour une utilisation lintrieur afin de rduire les risques de brouillage prjudiciable aux systmes de satellites mobiles utilisant les mmes canaux;
le gain maximal dantenne permis pour les dispositifs utilisant les bandes 5 250-5 350 MHz et 5 470-5 725 MHz doit se conformer la limite de p.i.r.e.;
le gain maximal dantenne permis (pour les dispositifs utilisant la bande 5 725-5 825 MHz) doit se conformer la limite de p.i.r.e. spcifie pour lexploitation point point et non point point, selon le cas. Note: High-power radars are allocated as primary users (i.e. priority users) of the bands 5250-
5350 MHz and 5650-5850 MHz and these radars could cause interference and/or damage to LE-
LAN devices. De plus, les utilisateurs devraient aussi tre aviss que les utilisateurs de radars de haute puissance sont dsigns utilisateurs principaux (c.--d., quils ont la priorit) pour les bandes 5 250-5 350 MHz et 5 650-5 850 MHz et que ces radars pourraient causer du brouillage et/ou des dommages aux dispositifs LAN-EL. Contact information Contact us at 7signal by mail:
by email:
by phone:
support:
526 S. Main Street, Suite 601G, Akron, Ohio 44311, USA info@7signal.com 855-763-9526 (855-QOE-WLAN) support@7signal.com 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com Table of Contents TABLE OF CONTENTS iii 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 1 7signal solution ................................................................................................................ 1 1.1 System overview ........................................................................................................... 1 2 Monitoring stations ......................................................................................................... 3 2.1 Sapphire Eye .................................................................................................................. 3 2.2 Soft Eye ......................................................................................................................... 4 2.3 Micro Eye ...................................................................................................................... 4 3 Sapphire Carat ................................................................................................................. 5 4 Sonar ............................................................................................................................... 6 5 Sapphire Analyzer ............................................................................................................ 7 6 Carat user Interface ......................................................................................................... 8 6.1 Menus ........................................................................................................................... 8 6.1.1 Navigation ........................................................................................................... 8 6.2 Network Topology ......................................................................................................... 9 7 Starting the Carat configuration ...................................................................................... 11 7.1 How to create the minimum set of users .................................................................... 11 7.2 Automated Tests ......................................................................................................... 12 7.3 Access Control ............................................................................................................. 12 8 User Management .......................................................................................................... 13 8.1 User Groups and object permissions ........................................................................... 13 8.2 User Group hierarchy .................................................................................................. 13 8.3 User access levels ........................................................................................................ 14 8.4 User Group and User management ............................................................................. 14 8.5 User Groups ................................................................................................................ 14 8.5.1 Related icons ..................................................................................................... 14 8.5.2 User Group parameters .................................................................................... 14 8.5.3 Adding User Groups .......................................................................................... 15 8.5.4 Editing User Groups .......................................................................................... 15 8.5.5 Removing User Groups ..................................................................................... 15 8.5.6 User Group status ............................................................................................. 16 8.6 Users ........................................................................................................................... 16 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com Table of Contents iv 8.6.1 Related icons ..................................................................................................... 16 Parameters ................................................................................................................ 16 8.6.2 Adding Users (New) .......................................................................................... 17 8.6.3 Adding Users by copying ................................................................................... 17 8.6.4 Editing User information ................................................................................... 17 8.6.5 Removing Users ................................................................................................ 18 8.6.6 Changing password for Users ............................................................................ 18 9 Network topology configuration...................................................................................... 19 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 9.1 Choosing networks to be monitored ........................................................................... 19 9.1.1 Organization...................................................................................................... 19 9.1.2 Adding Network Locations ................................................................................ 20 9.1.3 Hidden Networks .............................................................................................. 21 9.1.4 Meru networks ................................................................................................. 22 9.1.5 Avoiding band selection/steering ..................................................................... 25 9.1.6 Removing Networks .......................................................................................... 26 9.1.7 Channel configuration ...................................................................................... 26 10 Eye configuration .......................................................................................................... 28 10.1 States of Monitoring Stations .................................................................................... 28 10.1.1 Monitoring station LED statuses ..................................................................... 28 10.2 Adding Monitoring Stations ...................................................................................... 28 10.2.1 Detecting and adding monitoring station ....................................................... 28 10.2.2 Adding monitoring station manually ............................................................... 30 10.2.3 Install monitoring station software ................................................................. 30 10.3 Monitoring station settings ....................................................................................... 32 10.4 Activating Monitoring Stations .................................................................................. 33 10.5 Managing monitoring station IP configuration .......................................................... 33 10.5.1 Changing static IP configuration...................................................................... 35 10.5.2 Configuring DHCP for monitoring station........................................................ 35 10.6 Managing Monitoring Station Software .................................................................... 36 10.6.1 Importing monitoring station software (Solution Administrator only) ........... 36 10.6.2 Update monitoring station software (configurator/organization admin users)
................................................................................................................................... 37 10.6.3 Uninstalling and changing monitoring station software versions ................... 39 10.7 Initial network scan ................................................................................................... 40 11 Encryption key management ......................................................................................... 42 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Table of Contents v 11.1 Supported encryption types ...................................................................................... 43 11.2 Adding encryption keys (PSK) .................................................................................... 43 11.2.1 Passphrase and pre-shared key ...................................................................... 43 11.2.2 Adding WPA-PSK key ....................................................................................... 44 11.3 Certificate-based encryption ..................................................................................... 44 11.4 HTTP (captive portal) authentication ........................................................................ 45 11.4.1 Prerequisites ................................................................................................... 45 11.4.2 Creating Open HTTP Key ................................................................................. 46 11.5 Multiple network keys per Eye .................................................................................. 47 11.5.1 Microsoft PKI Infrastructure............................................................................ 48 12 Test end-points ............................................................................................................. 50 12.1 Sonar ......................................................................................................................... 50 12.2 Generic test counterparts ......................................................................................... 50 13 Access Point Information ............................................................................................... 52 13.1 Replacing access points ............................................................................................. 52 14 Links And Link Groups ................................................................................................... 54 14.1 Forming Links ............................................................................................................ 54 14.2 Removing Links.......................................................................................................... 54 14.3 Creating Link Groups ................................................................................................. 55 14.4 Removing Link Groups ............................................................................................... 55 14.5 Adding Link to Group................................................................................................. 55 14.6 Removing Links from Group ...................................................................................... 55 15 Alarms .......................................................................................................................... 56 15.1 Network Alarms ........................................................................................................ 56 15.1.1 Creating Alarm Groups .................................................................................... 56 15.1.2 Binding Alarm Groups to access points ........................................................... 58 15.1.3 Viewing Network Alarms................................................................................. 59 15.1.4 Network Alarm forwarding ............................................................................. 59 15.2 System Alarms ........................................................................................................... 61 15.2.1 Viewing System Alarms ................................................................................... 62 15.3 Acknowledge alarms ................................................................................................. 62 15.4 Purge old alarms ....................................................................................................... 62 16 Traffic Classes ............................................................................................................... 63 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Table of Contents vi 17 Automated test configuration ....................................................................................... 64 17.1 Test Profiles ............................................................................................................... 64 17.2 Contents of a Test Profile .......................................................................................... 65 17.2.1 Passive ............................................................................................................ 66 17.2.2 Warehouse ...................................................................................................... 66 17.2.3 Office .............................................................................................................. 66 17.2.4 Lightweight ..................................................................................................... 66 17.2.5 VoIP ................................................................................................................. 67 17.2.6 Hospital ........................................................................................................... 67 17.2.7 Spectrum and Noise ........................................................................................ 67 17.2.8 Surveillance ..................................................................................................... 67 17.2.9 TripleSSID ........................................................................................................ 67 17.3 Testing multiple WLAN networks in one test profile ................................................. 67 17.4 Test Profile execution modes .................................................................................... 67 17.4.1 Test centric test profiles.................................................................................. 68 17.4.2 Access point centric Test Profiles .................................................................... 69 17.5 Operations on templates........................................................................................... 70 17.5.1 Duplicate ......................................................................................................... 70 17.5.2 Copy as essid ................................................................................................... 71 17.6 Operation on Test Element ....................................................................................... 71 17.6.1 Copy element .................................................................................................. 71 17.6.2 Configure Ethernet test................................................................................... 71 17.7 Operations on Test Profile Node ............................................................................... 71 17.8 Operations on Test Profile......................................................................................... 72 17.9 Operations on essid inside a test profile ................................................................... 73 17.10 On test elements ..................................................................................................... 73 17.10.1 Modifying test parameter and test name ..................................................... 73 17.10.2 Disabling and enabling test elements ........................................................... 74 17.10.3 Use case: Multiple SSID testing ..................................................................... 74 17.11 Running Test Profiles ............................................................................................... 75 17.12 Automated tests and KPIs ....................................................................................... 76 18 Manual tests ................................................................................................................. 78 18.1 Session events ........................................................................................................... 78 18.2 Network scan test ..................................................................................................... 79 18.3 Client scan test .......................................................................................................... 80 18.3.1 Adding a new client ......................................................................................... 83 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Table of Contents vii 18.4 Spectrum Analyzer .................................................................................................... 83 18.5 Noise monitor test .................................................................................................... 84 18.6 Air utilization test ...................................................................................................... 85 18.7 Optimal antenna selection test ................................................................................. 87 18.8 Download tests ......................................................................................................... 88 18.9 Upload tests .............................................................................................................. 89 18.10 Ping test .................................................................................................................. 91 18.11 Trace route test ....................................................................................................... 92 18.12 Access point traffic test ........................................................................................... 93 18.13 MOS test ................................................................................................................. 95 18.13.1 MOS test parameters .................................................................................... 95 18.13.2 MOS test result ............................................................................................. 96 18.14 Web page download test ........................................................................................ 98 18.15 Internet Availability test .......................................................................................... 99 18.16 SIP Register test..................................................................................................... 100 18.17 Packet capture test ............................................................................................... 102 19 Service Level Agreement ............................................................................................. 104 19.1 Defining a Service Level Agreement into the system .............................................. 104 19.2 Defining SLA Key Performance Indicators (KPI) ....................................................... 104 19.3 Creating an SLA group ............................................................................................. 105 19.3.1 Creating an SLA group from a template ........................................................ 105 19.3.2 Creating an SLA group from scratch .............................................................. 106 19.3.3 Setting default SLA group .............................................................................. 106 19.4 SLA propagation ...................................................................................................... 107 19.5 Binding SLA Groups ................................................................................................. 109 19.5.1 Binding an SLA group to a Link ...................................................................... 109 19.5.2 Binding an SLA group to a link group ............................................................ 110 19.5.3 Binding an SLA Group to other Entities ......................................................... 110 20 Continuos and automated reporting ............................................................................ 111 20.1 Subscription for a new report ................................................................................. 111 20.2 Adding Report Items ............................................................................................... 112 20.2.1 Adding SLA compliance report item .............................................................. 113 20.2.2 Adding KPI report item .................................................................................. 114 20.2.3 Adding SLA report item ................................................................................. 114 20.2.4 Adding alarm report item ............................................................................. 115 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com Table of Contents viii 20.2.5 Adding map report item................................................................................ 115 20.2.6 Report item general options ......................................................................... 115 21 Import ........................................................................................................................ 122 21.1 Importing access point names ................................................................................. 122 21.1.1 Example access point name import .............................................................. 123 21.2 Importing access point names (last digit zero mode)........................................... 124 21.2.1 Overview ....................................................................................................... 124 21.2.2 Running import ............................................................................................. 124 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 21.3 Import and replace APs ........................................................................................... 125 22 Exports ....................................................................................................................... 127 22.1 Configuring Carat system logging properties .......................................................... 127 22.2 Configuring system logger daemon ......................................................................... 127 22.3 Exporting test results to system log ........................................................................ 128 22.4 Exporting alarms results to system log .................................................................... 129 23 Change events ............................................................................................................ 130 23.1 Reporting change events ......................................................................................... 131 23.2 Viewing change events ............................................................................................ 132 23.3 Removing change events......................................................................................... 132 24 Viewer Software ......................................................................................................... 134 25 Email Servers .............................................................................................................. 135 26 Database maintenance ................................................................................................ 136 26.1 Measurement data purge ....................................................................................... 136 26.2 Database backup ..................................................................................................... 137 26.2.1 Backup options ............................................................................................. 137 26.2.2 Database logging ........................................................................................... 138 26.2.3 Backup method options ................................................................................ 139 26.2.4 Restoring backups ......................................................................................... 142 26.3 Management database integrity check ................................................................... 143 26.4 Reorganizing measurement database ..................................................................... 144 27 Nagios Support ........................................................................................................... 145 27.1 Adding Sapphire host information to Nagios server................................................ 145 27.2 Adding Nagios Plug-ins To Sapphire Software ......................................................... 146 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com Table of Contents ix 27.2.1 Install NRPE daemon ..................................................................................... 146 27.2.2 Install toolset Nagios plugins ...................................................................... 146 27.3 Verifying Nagios Installation .................................................................................... 146 27.4 Removing Nagios plugins ........................................................................................ 146 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 1 7signal solution 1 7SIGNAL SOLUTION 7signal Sapphire provides you a new way to continuously and automatically measure the health and quality of a wireless network from the user's perspective. Companies and their business processes are becoming increasingly dependent on the performance and service quality of their wireless networks. Thanks to the Sapphire solution, companies can integrate the quality management of wireless networks with their existing IT and communications technology services. 1 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 7signal Sapphire uses monitoring sensors called Eyes to monitor performance and quality in WLAN networks. It also monitors the surrounding radio frequency environment. The performance of the customers network is tested against the 7signal Sonar, a test server that helps simulate client activity on the network. Interactive tests, Eyes and parameters for automatic measurement are managed with a centralized management tool called the Sapphire Carat. The measurement results are reported via a reporting application called the Sapphire Analyzer. The Eye continuously monitors the selected WLAN channels via passive listening, which does not have an impact on network performance. It can also emulate a client device in the target network and then use the network and the services provided through it. By analyzing the measurement results, the solution can detect network performance and quality-of-service
(QoS) issues. The solution can also produce proactive statistics on the predicted user experience of network performance, which enables the company to increase network capacity before the users notice a loss of performance. In user emulation tests, also known as active tests, the Eye connects to the Sonar over the wireless network and uses it like an ordinary production service. The usage may include mass file transfers, browser downloads, wireless VoIP calls, or connections to another production server. Sapphire tests the end-user experience by examining the entire data chain from the client to the production service. Active tests can monitor the network even when there are no users in the network. This makes it possible to forecast performance problems and to take corrective actions before the service level suffers. Active tests show the availability and quality of services offered over the network and they help administrators see why some applications with their various demands for network performance do not work as expected in the network or some of its areas. When problems occur, active tests can also help locate a problem area in the network topology, which often includes WLAN, LAN, and WAN elements. The key differentiators of 7signal Sapphire are user emulation, superb coverage, continuous monitoring, and visibility of network health. Other solutions are often based on monitoring the access point settings. As a result, they do not give any indication of the service quality experienced by the end user. In such limited solutions, the service quality parameters measured are the same as in wired networks. Sapphire, by contrast, produces a comprehensive picture of the radio connection quality, where delay, number of retransmissions, and packet loss are taken into account, in addition to the commonly measured parameters. 1.1 System overview The 7signal Sapphire Quality Monitoring Solution consists of Sapphire Eye monitoring sensors, Sonar test servers, the Sapphire Carat management software, and Sapphire Analyzer for viewing and reporting on results. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 1 7signal solution 2 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 1: 7signal Sapphire installation The system components are described in chapters 26. The remaining chapters describe the management software. The result viewing and reporting tool (Analyzer) is described in its own user guide. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 3 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 2 7signal solution 2 MONITORING STATIONS 2.1 Sapphire Eye Sapphire Eye is a monitoring station for WLAN environments. Unlike a common access point or client, the Eye monitoring station uses advanced broadband antenna technology, which creates an exceptionally large coverage area. Consequently, one Eye can monitor several access points, or WLAN cells. The typical number of monitored cells is 58. There are two monitoring station variants: the Standard Eye and the Indoor Eye. The Standard Eye is protected against dust and water (conformant to IP55 or IP65 specifications, depending on the model), so it can be installed outdoors and in challenging environments. Figure 2: Monitoring station on customer's premises In the picture above:
The monitoring station (Eye) is the grey cone-like object in the center;
the Carat management interface is on the service providers premises (top left corner);
the customers premises have a wireless network with six access points (center part of the picture, access points in red);
there is one monitoring station on the customers premises (the colored lobes depict the stations directional antennas and their range);
a problem has occurred in an access point in the red lobe;
the problem can be seen in the monitoring interface or in a report as a falling performance indicator value (lower right corner). 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 2 7signal solution 4 In Sapphire, the management tool Carat and monitoring station Eye work as a client and server, with Eye being the server for Carat. The traffic between the client and server is strongly encrypted and uses 7signals proprietary management protocol. This makes it possible to manage the monitoring stations from geographically distant locations and over insecure networks. A monitoring station conducts both passive and active measurements in a WLAN environment. The passive measurements consist of listening to data traffic that uses the IEEE 802.11 protocol and of general analysis of the radio frequency spectrum in the coverage area. Passive measurements have no effect on the functionality or utilization rate of the target network, or the effect is very small (probe request transmissions). During active measurements, Sapphire Eye contacts each monitored access point in turn and uses the network services via the WLAN;
i.e., it acts as a client in the network. Using both active and passive measurements, the 7signal solution can monitor the experienced network performance along the entire length of the service chain and locate problems in both WLAN and LAN environments. The monitoring station is also able to execute active measurements over its Ethernet interface. Results of Ethernet tests can be distinguished from WLAN test results by applying Ethernet specific Area Aggregations in Sapphire Analyzer tool. 2.2 Soft Eye The monitoring station software can be installed to a laptop PC running Linux distributions supported by 7signal. The laptop must be equipped with a suitable WLAN card. Supported WLAN cards are listed in the Release Notes document. Soft Eye supports smaller set of measurements than Sapphire Eye. 2.3 Micro Eye Micro Eye is a Raspberry PI (rev B) computer board, equipped with suitable WLAN network interface card (supported WLAN cards are listed in Release Notes document). Micro Eye is shipped with pre-installed SDHC memory card, which contains operating system and Sapphire Eye software. Micro Eye supports smaller set of measurements than Sapphire Eye, and it is not suitable for measuring e.g. maximum throughputs. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 3 7signal solution 3 SAPPHIRE CARAT With the Sapphire Carat management tool, you can manage the Sapphire Eye and Micro Eye monitoring stations, run interactive and real-time measurements, configure and manage automatic measurements, and generate reports of the measurement results. The reports shows measurement results in tables and charts. 5 7 s i g n a Sapphire Carat stores the profiles used in the automatic testing of the monitored network, and the networks access rights information. Sapphire Carat can be used interactively to test various areas of the network, or it can be left running in the background for continuous collection of test results. Key features:
l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Status information on the radio networks availability and usability;
Availability of a production service;
Overview of data traffic from the client to the production server;
Packet-level load measurement and traffic analysis in a radio network ;
Tests at application level;
Properties, signal levels, and noise levels of the radio frequency environment;
Statistical analyses, averages, deviations, and distributions;
Monitoring of data security settings;
Location of interference;
Alarms. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 4 7signal solution 6 4 SONAR The role of the Sonar test server in 7signal Sapphire is to emulate one of the customers production servers. Sapphire Eye or Micro Eye connects to Sonar to measure QoS provided by the network. Measurements are performed in both directions (uplink and downlink). Uplink means traffic from end-user device (e.g. Eye) towards network (e.g. Sonar). Downlink means traffic from network towards the end-user device. Single Sonar can serve several monitoring stations which has access through IP networks to Sonar. One Sonar server can therefore be used as the test point for several networks. The 7signal Sapphire solution supports the concurrent use of several Sonar test servers, which means that Sonar can be installed on several servers within a company. Using several Sonars enables the company to detect and locate problems in its network. Sonar can be located in the same network as the access points, in a server room in the same building, or anywhere on the Internet such as in the centralized identification and authorization center of an international organization. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 5 7signal solution 5 SAPPHIRE ANALYZER Sapphire Analyzer is the performance and QoS analysis tool in the 7signal solution. Analyzer cannot be used to control Sapphires functions and measurements themselves. Analyzer makes the networks key performance indicators (KPIs) available at a glance, or in more detailed form for a given time period. Starting from release 5.0, Analyzer also provides new features called Automatic Analysis and Automatic Optimization. Analyzer is browser-based, so authorized persons can use any of the most common browsers to view the results as long as they have an Internet connection. The result summaries can be saved as plain text to comma separated value files (CSV files), or as PDF files, preserving the formatting. The plain-text material can be used in many ways, including import into a spreadsheet. There is a separate user document for the Sapphire Analyzer. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 8 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 6 7signal solution 6 CARAT USER INTERFACE The Carat user interface (GUI) is a stand-alone java client. The purpose of the Carat user interface is to configure and manage the Sapphire solution. Several users can access and configure single Carat simultaneously. 6.1 Menus 6.1.1 Navigation The menu contents are dynamic based on context, user access rights and the current license. Table 1: Management GUI menus Menu Description File Edit Log in / log out, lock the session, and close the application. Enter settings for applications used for viewing the exported result files and packet capture files. Specify the server for outgoing mail. View View network topology, alarms and change events. Manage Sapphires general settings:
Manage alarms
-
- user management
-
-
-
access keys to radio networks test end point settings administration of target network client information settings for automatic reporting remote management of monitoring station software
-
-
- database maintenance Submenus/actions Lock session Log in Log off Exit Configure tools SMTP server Network topology Network alarms System alarms View change events Alarm configuration Users and groups Access Control Network Keys Test end points Alarms o Email o SNMP Network clients SLA Definitions Automated report configuration Eye software management o SW repository management o Eye software update o Eye software management Change password Test Profiles 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 6 7signal solution Tools Start and stop the automatic test profile, import data from external source to Carat. Export test results and alarms in XML format to Carat server system log. Window Refresh the main window of the user interface. Help Read user documentation and general information about the system installation. Database maintenance Start automated testing Stop automated testing Automated tests management Import Export Refresh Release notes Carat User guide Analyzer User guide About 9 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 6.2 Network Topology The Network topology is a hierarchical tree displaying hierarchy from the Organization to Eyes and Access Points. The user can select from multiple ways to access the network: either via monitoring stations or via the networks service areas. Both methods support network testing, but monitoring stations can only be managed by using their respective icons. The network hierarchy is displayed as a tree, with an icon representing each item at each node. If the item has functionality, you can bring it into view by right-clicking the icon. Table 2: Network topology components Topology Node Icon Description Submenus Organization Location Service area In the Organization menu, you can add organizations, locations and service areas to the organization that is being created. From the Location menu, you can set the networks physical location (e.g., country, city, or building). A location is always attached to a higher-level location or organization. A service area is a location where you can install a monitoring station. A service area is determined by the coverage area of the monitoring station, not by the coverage area of the target network. A service area can have a map on which the access Edit Wireless networks Add location Add organization Remove organization Bind SLA Edit Add Location Add service area Remove Add Link Group Bind SLA Edit Add Eye Bind wireless networks Remove Allowed channels Bind SLA Bind Alarms Bind to Test Profile Unbind from Test Profile Map 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 10 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 6 7signal solution Eye Wireless network Access Point Link Link group points and Eyes can be placed. A Sapphire Eye or Micro Eye monitoring station always belongs to a service area. In this menu, you can perform Eye level tests, bind and unbind test profile to/from the Eye, report change events for this Eye and modify Eye connectivity properties
(change IP configuration, SSH password etc.) This menu describes the target network, which can be located in one or more service areas. A service area can contain several target networks. This menu is used to configure the encryption method used in the network, configure allowed channels of the network, and report change events for the network. In this menu, you can perform tests, set alarm groups for an access point, report change events for the access point, and deactivate and activate the access point
(meaning that the access point is monitored or not). In this menu, you can bind an SLA group for the link.
(De)Activate Edit Remove Network key bindings Change events Network scan Client scan Spectrum analysis Noise Monitor Packet capture Air Utilization test Manual tests Bind to test profile Unbind from test profile Automated test status Bind SLA Connection management Add key Edit Unbind wireless network Allowed channels Bind SLA Change events Change events on this Service Area Properties Manual tests Bind to Alarm group Unbind from Alarm group Bind SLA Remove access point Allowed Channels Change Relation to Eye Change events Change events on this Eye Edit Remove link Bind SLA Change events
(De)Activate In this menu, you can bind an SLA group for the link group. Edit Bind SLA Remove 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 7 7signal solution 7 STARTING THE CARAT CONFIGURATION 11 7 s i g n a The access rights and user management heavily relies a group-based model. The group is the starting point: every user belongs to one of the groups and the group determines the access rights of any given user. The technical details and management instructions are in the next section. Any objects in the system Eyes, Sonars, topology elements such as Organizations and Locations belong to some administrative group. Objects that do not belong to a certain group are also invisible to the group. This isolation is very low-level in 7signal Sapphire in order to enable safe and secure operations in large setups with numerous and heterogeneous organizations. 7signal Sapphire supports multiple organizations that are under completely different administration and must remain unaware of each other. NOTE: To fully utilize this feature it is strongly advised that a role called Solution Administrator (see the next section on user and group management) is used only to create other Administrators (Organization Administrators). The recommended minimum setup for an operational 7signal Sapphire is to have default admin user for general handling of users and groups and admins of one or more organizations. Any organization needs two users: one for administration and one for configuration network tests etc. 7.1 How to create the minimum set of users The system default user is the Solution Administrator belonging to Solution Administrator Group. Default user name of Solution Administrator is admin, and the password is admin. This requires no other action than the initial login and changing the default password to a non-
default password. As Solution Administrator 1. Choose Manage | Users and Groups for user account management from the top-
menu. 2. Create a new group for the administrators of the organization. Use a descriptive name, f ex NewAdminGroupForOrganizationX 3. Create a new admin user for the organization. Use a descriptive name, f ex LocalAdministrator1. 4. Logout As LocalAdministrator1 created in the previous step 1. Choose Manage | Users and Groups for user account management from the top-
menu. 2. Create a new group for the configurators of the organization under previously created administrator group. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 7signal solution Use a descriptive name, f ex NewConfigGroupForOrganizationX 3. Create a new configurator user to the Configurator group. Use a descriptive name, f ex LocalConfigurator1. 4. Continue using Sapphire. All other configurations related to network topology, test profiles, WLAN network keys etc. should be made by the user LocalConfigurator1 to enable proper operation of the automated object access rights management system. 12 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Some top-level operations for Solution Administrator are explained right below 7.2 Automated Tests Top-menu selection Tools | Start automated testing affects only those objects that are accessible to the user issuing the command. Stopping works similarly. Solution Administrator level user starts and stops testing system-wide i.e. all the monitoring stations. Local Administrator may affect the monitoring stations only inside their own administrative boundary i.e. only part of the monitoring stations start/stop. However it is advised to use Configurator level users to manage automated testing. 7.3 Access Control The Access control is an accessible pane in the Manage menu. When one follows the intended way of user and group definition, the contents and actions in the Access control pane are redundant. The feature remains activated but the use of it is discouraged and thus not instructed in detail. For sandbox testing and non-warranted try-outs: the left panel contains actual users and groups and related access rights. The right panel contains all objects in 7signal Sapphire. With combinations of right-clicks and drags&drops fine-level adjustment and changes to access rights are possible. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 8 7signal solution 13 8 USER MANAGEMENT User management in 7signal Sapphire is based on user groups. A user's access rights in the system derive from the user group that the user belongs to. A user may belong to one or more user groups. In addition to normal user management the Sapphire system supports user group specific view virtualization. The system can be configured so that different user groups have access to different objects that have been created into the system. For instance, one user group may have access to all objects and two subgroups of that group may only have access to a portion of all objects. It is also not necessary for the subgroups to have access to any of the same objects. User management is also restricted in the same manner as object management. An administrator user only has access to the users created to subgroups in addition to any users belonging to the same administrator group he/she belongs to. Users belonging to the Sapphire admin group have access to the entire system. 8.1 User Groups and object permissions Almost every object created in the Sapphire system includes an access control list (ACL). An object's ACL is mainly determined by the user group of the user that creates the object in question. Note that objects are also created through automatic testing. For example access points, wireless clients and alarms created this way. Objects created as a result of automatic testing inherit their ACL from the Eye that conducted the test. The Sapphire system also includes the functionality to transfer access rights of objects from one user group to another. 8.2 User Group hierarchy The Sapphire system supports two types of user groups: normal user groups and referencing user groups. A normal user group can be created either as a new root group or as a subgroup to an already existing user group. When new groups are created as subgroups under an existing user group, the existing group inherits access rights to all objects that its subgroups have access rights to. This inheritance rule applies to the whole user group hierarchy meaning that the root user group in a hierarchy gets access rights recursively from all subgroups. Access rights of referencing user groups are not inherited in this way. A referencing user group can be created for any group except the Solution Administrator group. A referencing user group always has the same access rights as the user group it references. The only difference is that a referencing user group cannot be granted the same access level as the group it references. A common use for a referencing user group is to have it reference for example an organizations configuration group. This way the referencing groups users can view the configuration groups objects, but cannot configure the system. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 8 7signal solution 8.3 User access levels 14 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l The Sapphire system supports three elementary access levels for user groups: Reporter, Configurator and Administrator. Access rights are inherited from lower to higher levels:
Reporter users only have their own levels access rights, Configurator users have reporter level rights plus additional rights granted by their configurator level, and Administrator users have all rights. There are four levels of access rights:
Solution Administrator system-wide super-user that may be the only user in small set-ups and should be used only for other administrator definitions in large-scale environments Administrator full access and management rights Configurator full access rights, no user management rights Reporter access rights to alarms and reports 8.4 User Group and User management The Sapphire Carat user management dialog can be accessed from the main menu by selecting
"Manage | Users and groups". Only administrator level users can access user group and user management in the Sapphire system. When the user management dialog is opened, a tree view showing the users and user groups currently existing in the system opens to the left of the dialog. 8.5 User Groups 8.5.1 Related icons Reporter group active group referencing group inactive group Configurator group active group referencing group inactive group Administrator group active group referencing group inactive group 8.5.2 User Group parameters Name - The name of the user group Description - A description of the group Service Role - Defines access rights for the group's users in the Sapphire system Type - The group type (normal/referencing) Status - The group status (active/inactive) 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 8 7signal solution 8.5.3 Adding User Groups 15 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l A new user group can be added into the system in three different ways:
1. As a new root group under which to start creating a new user group hierarchy. 2. As a subgroup to an already existing user group. 3. As a symbolic (referencing) group for an already existing group. Adding a group can be done by right-clicking on either the "Groups and users" node in case n:o 1 or an existing user group in cases 2 and 3 and selecting "Add instance group" in case n:o 1 and n:o2 or "Add symbolic group" in cases n:o 3 from the pop-up menu. Steps to create a new group:
1. From the top menu bar select Manage | Users and Groups to open a pane on left 2. Right-click the root object named Users and Groups or an existing group to get a submenu 3. Select Add group to open a pane on right 4. Enter the relevant group information a. user name: login name for the user b. (optional) Description: free-text field for the group description c. Role: group access right level. The field is dynamic; the super-group dictates the default level and available range of valid access level. d. Status: Active or inactive. Only users in an active group may login. 5. Save the group by clicking Save 8.5.4 Editing User Groups The user group editing dialog can be accessed by right-clicking the desired user group and selecting "Edit" from the pop-up menu. An example of editing a user group:
1. Log in as an administrator group user 2. Open the user group and user management dialog by clicking "Manage | Users and Groups" from the top menu bar 3. Select the desired user group for editing by right-clicking on it and choosing "Edit"
from the pop-up menu 4. Make the desired changes to the user groups settings 5. Save the changes by clicking on the "Save" button 8.5.5 Removing User Groups A user group can be removed by selecting the group to be removed by right-clicking on it and selecting "Remove Group" from the pop-up menu. The following criteria must be satisfied before a user group can be removed:
`
1. The group must be empty of users 2. The group must not have any subgroups 3. The group must not own any objects 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 16 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 8 7signal solution An example of removing a user group:
1. Log in as an administrator group user 2. Open the user group and user management dialog by clicking "Manage | Users and Groups" from the top menu bar 3. Right-click on a group that satisfies the removal criteria and select "Remove" from the pop-up menu 8.5.6 User Group status In certain situations it may be desired to inactivate some user group. An inactive user group has no access rights in the system. A user group can be inactivated by right-clicking on the desired group and selecting "Inactivate" from the pop-up menu. An inactive group can be re-
activated by right-clicking on the group and selecting "Activate" from the pop-up menu. An example of changing a groups status:
1. Log in as an administrator group user 2. Open the user group and user management dialog by clicking "Manage | Users and Groups" from the top menu bar Right-click on the desired group and select "Inactivate" from the pop-up menu 8.6 Users 8.6.1 Related icons Administrator user active inactive Configurator user active inactive Reporter user active inactive Parameters User name - User name Alias - An alias for the user name, for example the users real name Email Address - Users email address Phone - Users phone number Organization - The Organization that the user belongs to. Useful for example when a service provider wants to give access rights to clients it manages. Status - Users status Password/Confirm password: Password/Confirm password When creating a new user the user name, status and password fields are required, the rest of the parameters are optional. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 8 7signal solution 8.6.2 Adding Users (New) 17 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l A new user can be added by right-clicking on the user group that the user is to be added into and selecting "Add user" from the pop-up menu. Steps to create a new user:
1. From the top menu bar select Manage | Users and Groups to open a pane on left 2. Right-click the relevant group to get a submenu 3. Select Add user to open a pane on right 4. Enter the relevant user information
(optional) Email address: contact information for the user a. Username: login name for the user b. (optional) Alias: alternative name for the user c. d. (optional) Organization: users organization e. Status: Active or inactive. Only active users may login. f. Password and confirmation: login password 5. Save the user by clicking Save 8.6.3 Adding Users by copying An existing user can be copied to several groups. This enables one single account to be used on numerous organizations while preserving the strict access policy. Steps to copy a user:
1. Create one more group 2. Select a user from a previously existing group and right-click for the menu 3. Select Copy user 4. Select the icon of the new group and right-click for the menu 5. Select Paste user The copied account may now access numerous groups. The login of a user belonging to several groups starts in the typical manner. After successful login a pop-up is shown in order to make selection of the group used for the login. The possible other groups are invisible after the chosen group (context) has been chosen. Figure 3: User group selection dialog 8.6.4 Editing User information A users information can be edited by right-clicking on the desired user and choosing "Edit"
from the pop-up menu. User name and password cannot be changed from here. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 18 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 8 7signal solution An example of editing a users information:
1. Log in as an administrator group user 2. Open the user group and user management dialog by clicking "Manage | Users and Groups" from the top menu bar 3. Right-click on the desired user and pick "Edit" from the pop-up menu 4. Change the desired parameters 5. Save changes by clicking "Save"
8.6.5 Removing Users A user can be removed by right-clicking on him/her and selecting "Remove" from the pop-up menu. An example of removing a user:
1. Log in as an administrator group user 2. Open the user group and user management dialog by clicking "Manage | Users and Groups" from the top menu bar 3. Right-click on the desired user and pick "Remove" from the pop-up menu Users status If for some reason it is desired to deny a certain user from accessing the system, that user can be inactivated by right-clicking on the user and selecting "Inactivate" from the pop-up menu. An inactivated user may be re-activated by right-clicking on him/her and selecting "Activate"
from the pop-up menu. An example of changing a users status:
1. Log in as an administrator group user 2. Open the user group and user management dialog by clicking "Manage | Users and Groups" from the top menu bar 3. Right-click on the desired user and select "Passivate" or "Activate" from the pop-up menu 8.6.6 Changing password for Users A users password can be changed by right-clicking on the user and selecting "Change Password" from the pop-up menu. This will open a new dialog into which the users new password can be entered. An example of changing a users password:
1. Log in as an administrator group user 2. Open the user group and user management dialog by clicking "Manage | Users and Groups" from the top menu bar 3. Right-click on the desired user and select "Change Password" from the pop-up menu 4. 5. Save new password by clicking the "Save" button Input new password 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 9 7signal solution 19 9 NETWORK TOPOLOGY CONFIGURATION Network topology is defined in Carat to reflect geography and organization and help with reporting necessary entities separately. Network topology consists of organizations, locations, service areas, Eyes and managed access points. 9.1 Choosing networks to be monitored 9.1.1 Organization Sapphire can simultaneously manage networks in several independent organizations. A company or other organization can have many separate locations. The networks are displayed in a hierarchical tree starting from the Organization. A company can have several networks, for different purposes. For example:
Office network Warehouse network Guest network To meet this need, Sapphire can monitor several networks at the same time. To handle a hierarchy that might grow utterly complex, 7signal uses a tree-structure. Organization is a starting point to create tree structure. User can add one or more organizations depending what is an appropriate structure. Figure 4: Adding new organization 1. Right click Organizations node in tree and select Add Organization 2. Enter the organizations name 3. Save by clicking Save 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 9 7signal solution 9.1.2 Adding Network Locations 20 7 s i g n a Location is used to define the networks location in a precise or descriptive way. A location might be a city, a part of the city, a building, or a single floor in a building, depending on the coverage area of the organizations network. A small organization might have only a single location, an office. On the other hand, a large organization might have several locations, in different cities, or a single overall location, such as Europe, under which countries and cities etc. are defined. l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 5: Adding new location 1. From the top menu bar, select View | Network topology 2. Right-click the organization 3. Select Add location 4. Enter the locations name 5. Select the location type from the pull-down menu 6. Enter an optional description for the location 7. Click Save You can add as many locations as needed to describe the organizations structure. After you have added a location, you can add a service area. 1. Right-click a location 2. Select Add service area 3. Enter a name for the service area 4. Enter an optional description for the service area 5. Click Save 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 9 7signal solution 9.1.3 Hidden Networks 21 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 7signal Sapphire considers a hidden network to be a property of certain Organization. The network scans are based on listening and actively requesting beacon information on the Service Areas. The hidden networks shall not actively transmit beacons nor respond to requests with partial information only. Due to this the various scans - including the initial scan -
in 7signal Sapphire do not capture hidden networks. Tests related to traffic analysis shall contain also information on hidden networks but the capture is not used as a technique in scans. NOTE: Hiding the network SSID should not be used as a security as it does not limit sending the beacons or SSID names in payload frames but leaves only network SSID field blank in beacon signal. Any attacker or publicly available analysis tool can find hidden network as soon as there are any payload packets in the network. Even popular operating systems may present hidden network after a certain period of time. If SSID name is not transmitted, client devices are forced to start probing their access points continuously. This increase significantly radio interface traffic overhead and lowers overall network performance. In order to add a hidden network to 7signal Sapphire:
1. Locate the Organization with a hidden network from the Topology tree 2. Right-click menu on the Organization and select "Wireless networks"
3. Enter the relevant data on the hidden network on the pane that opened on the right a. Name type (optional): currently only text strings are supported SSIDs b. Name: the name of the network - not friendly name but SSID c. Description (optional): description on the hidden network d. Contact person (optional): the administrator for the hidden network e. Key: the name of the WLAN network access key that has been stored earlier to the system 4. Select "Save" to store the data to the system 5. Locate the Service Area on which the hidden network will be monitored 6. Right-click menu on the Service Area and select Bind Wireless Networks 7. Choose the hidden network from the list 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 9 7signal solution 22 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 6: All Wireless Networks view The pane "All Wireless Networks" shows all defined networks. By choosing the network it is possible to change the current data. Button "Remove" deletes the network and the related information from the system. 9.1.4 Meru networks Virtual Cell and Virtual Port technologies used in Meru networks requires additional configuration steps. In addition to that, certain passive measurement KPIs with certain area aggregations are not available for Meru networks, since for example, access points cannot be distinguished in Virtual Cell environments. Setting correct Meru mode Meru networks can operate in three different modes:
Native: Standard operation Virtual Cell Virtual Port 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 9 7signal solution 23 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 7: Selecting Meru mode In order to set correct mode:
1. Locate Meru network in Topology tree 2. Right-click and select Edit 3. Select the correct Meru operation mode by selecting a checkbox. 4. Click Save button. Access point naming As the access points cannot be distinguished by their BSSID in Meru networks, serial MAC address, Meru access point ID, and radio index of the access point are used. From the user perspective, an access point name is composed from network name, serial MAC and supported standards, instead of network name, BSSID and supported standards. Radio MAC (BSSID) can be seen on Info tab of the Management GUI when a Meru access point is selected in the Topology tree:
7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 9 7signal solution 24 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 8: Meru specific properties In Sapphire Analyzer, the same information can be seen in Info pop-up window. Active and passive measurements All active measurements of Meru networks work similarly to measurements executed for standard networks. Passive measurements are more problematic. In order to collect passive measurement data, you need to add NetworkTraffic to the test profile, and because of nature of Meru networks, only certain area aggregations will work for passive measurement KPIs. Supported area aggregations for passive measurements are:
NW Eye NWEye NWEyeAnt NWServ NWBandServ NWBand NWBandEye NWBandEyeAnt 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 25 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 9 7signal solution NWBandEyeClient NWBandEyeAntClient 9.1.5 Avoiding band selection/steering Some WLAN vendors have implemented different kinds of methods to guide (or force) clients on a certain WLAN band, typically from 2.4 GHz to 5 GHz, which is less crowded. As monitoring stations run measurements on both bands, these band steering/selections will affect negatively to test results, usually resulting attach failures. In order to avoid these problems, monitoring stations can be configured to send additional probe request while it is attaching to a band-steering-enabled network. WLAN controllers typically allow connections from clients that probe more aggressively. Figure 9: Configuring band steering avoidance In order to enable band steering avoidance:
1. Select wireless network in Topology tree. 2. Right-click and select Edit 3. Enter non-zero values in Additional probing interval fields. a. Additional probing if configurable per band basis b. Value 1 means one additional probe per second, value 2 means one additional probe per each two seconds, etc. 4. Click Save button 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 26 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 9 7signal solution 9.1.6 Removing Networks All networks managed by Sapphire are displayed in the Network topology. Networks can be deleted on the organization level. To delete a network from the Network topology:
1. From the Network topology, select the organization containing the wireless network you wish to remove 2. Right-click the organization and select View wireless network then the All Wireless Networks view is displayed in the right-hand pane 3. Select from the list the network you want to remove 4. Click Remove 9.1.7 Channel configuration In addition to access points, a wireless network can include a controller, which remotely sets RF parameters for a network. In such a case, the transmitting power and channels may change over time, due to operator actions or the controllers own actions. Sapphire supports controllers via channel configuration so that each managed wireless network or access point can have its own set of allowed channel changes. Changes that stay within the preconfigured channel set do not cause an alarm. A change in a channel outside the preconfigured channel set causes an alarm if that alarm has been activated. Figure 10: Channel configuration of a Wireless Network 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 9 7signal solution 27 To set up channel configuration, proceed as follows:
1. From the top menu bar, select View | Network topology 2. Right-click the item (access point, service area or network) for which you want to set up a channel configuration and select Channels 3. Select the allowed channels 4. Select Save 7signal Sapphire Enterprise extends this functionality such that all access points or networks within the service area can have their own allowed and forbidden channels. This allows Sapphire to monitor the channel configuration in several networks, and to obtain information on other networks that use channels in unexpected ways. One obvious area of application for channel configuration is office hotels, which have several small wireless networks that can interfere with each other. Extended channel configuration is a feature in the enterprise edition and requires a license. Each version of Sapphire supports channel configuration in managed networks. To monitor external networks, you need the enterprise license or some other license model that supports channel configuration. Without a suitable license, accessing channel configuration in the user interface does nothing. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 28 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 10 7signal solution 10 EYE CONFIGURATION 10.1 States of Monitoring Stations The Eye unit may be in an inactive state. This happens if there is no network connectivity to the monitoring station when a monitoring station is being added to the system. Also, an active monitoring station may be turned inactive. This allows exceeding the number of monitoring stations limited by the license. Only active monitoring stations may run the tests but the topology may contain unlimited number of inactive monitoring stations. Related icons active monitoring station inactive monitoring station 10.1.1 Monitoring station LED statuses LED on the bottom side of an Eye monitoring station indicates its current status:
Table 3: Monitoring station LED states LED status Off Description Power off 0.5 seconds on Monitoring station power on, no connection to Carat server 4 seconds off 2 seconds on 2 seconds off On Monitoring station connected to Carat server, idle state Monitoring station connected to Carat server and executing a measurement 10.2 Adding Monitoring Stations Monitoring stations can be added in the service areas in the Network topology. There are two ways to add a monitoring station: Automatically detect monitoring station in the network, or adding monitoring station manually. 10.2.1 Detecting and adding monitoring station 1. In the Network topology, select the service area where you want to set up a monitoring station (Eye) 2. Right-click the service area and select Find and add Eye Carat server detects any non-configured monitoring stations in the local area network, and shows a list of IP addresses of these stations. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 10 7signal solution 29 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 11: Selecting detected monitoring station in the list 3. Select a monitoring station by left-clicking it. Add Eye dialog will be opened:
Figure 12: Adding a new monitoring station 4. Enter a name for the Eye 5. Enter a description for the Eye (optional) a. for example, its location and mount information 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 10 7signal solution 30 6. Enter Eye SSH password to password field. This enables automatic installation of 7. encryption certificate in the monitoring station1. If you already know the test profile you want to use, you can select it now (for more information on test profiles, see the section on test profiles in this user guide) 8. Enter the regional domain. The WLAN channels and possibly power options are 9. dependent on this setting so one should always choose the right setting2. If an external antenna is attached to the monitoring station, it is possible to use the 8th beam or diversity antenna with the check-box. When selected, one must also provide a. Antenna gain b. Cable loss (measured or estimate) 10. Save the monitoring station settings by clicking Save or Save and move to scan 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 10.2.2 Adding monitoring station manually 1. In the Network topology, select the service area where you want to set up a monitoring station (Eye) 2. Right-click the service area and select Add Eye 3. Enter a name for the Eye 4. Enter the Eyes IP address3 5. Enter a description for the Eye (optional) 6. Enter Eye SSH password to password field. This enables automatic installation of 7. encryption certificate in the monitoring station4. If you already know the test profile you want to use, you can select it now (for more information on test profiles, see the section on test profiles in this user guide) 8. Enter the regional domain. The WLAN channels and possibly power options are 9. dependent on this setting so one should always choose the right setting5. If an external antenna is attached to the monitoring station, it is possible to use the 8th beam or diversity antenna with the check-box. 10. Save the monitoring station settings by clicking Save or Save and move to scan 10.2.3 Install monitoring station software After clicking Save button, Carat checks if the monitoring station software is needed to be updated. When installing a new Eye unit, this is usually the case. A popup-window is opened:
1 If you have already installed encryption certificate manually in the monitoring station, uncheck Install encryption certificate checkbox and leave the password field empty) 2 Regulatory domain cannot be changed in some countries, including United States. 3 In case of a Soft Eye installed to the same host as the Carat server, loopback address 127.0.0.1 MUST BE USED!
4 If you have already installed encryption certificate manually in the monitoring station, uncheck Install encryption certificate checkbox and leave the password field empty) 5 Regulatory domain cannot be changed in some countries, including United States. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 10 7signal solution 31 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 13: Update monitoring station software Click OK in order to install the software to the monitoring station. Progress bar shows the status of uploading and installation process:
Figure 14: Installing monitoring station software After software is uploaded and installed, the dialog is closed. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 10 7signal solution 10.3 Monitoring station settings 32 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 1. Activate the monitoring station by right-clicking on it in the Network topology 2. Select Edit a. This opens the settings window in the right pane 3. The settings window allows you to view and edit the following information about the monitoring station:
a. Name b. Description c. Test profile d. Regulatory domain6 e. Settings for the Eyes heating resistor7 f. Monitoring stations uptime g. Monitoring stations current time h. External antenna enabled or disabled78 i. gain of the external antenna ii. cable loss i. Software versions and temperature7 of the monitoring station (in a table) j. Ethernet and wireless MAC addresses k. Antenna compass headings7 l. Information about the access points within the monitoring stations range 4. You can check the information about the access points monitored by the monitoring station:
a. Access point name (AP name) b. Access point alias name (AP alias) c. The role of the access point with relation to this Eye (Relation to Eye) d. Selected antenna e. Current channel 5. You can also modify the information about the access points monitored by the monitoring station:
a. The role of the access point with relation to this Eye (Relation to Eye) b. Selected antenna 6. Click a. Save to save any changes you have made b. Save and Move to Scan to save any changes you made and move to wireless network scan test. c. Reset Eye to reset the monitoring station d. Update antenna headings to update antenna headings from the monitoring station (may be needed if the location of the monitoring station has changed) 6 Regulatory domain cannot be changed in some countries, including United States. 7 Not available in Micro and Soft Eye 8 External antenna cannot be configured in some countries, including United States. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 10 7signal solution 33 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 15: Viewing and editing monitoring station properties 10.4 Activating Monitoring Stations By default, the monitoring station is in active state. This is flagged with the green background color in the Network topology. An inactive monitoring station would have orange background color. It is possible to deactivate the monitoring station. This feature is mainly targeted for temporary installations. An inactive monitoring station exists in the system and its measurements are accessible as usual. In inactive state, monitoring station IP address can be changed. Only an active monitoring station may produce measurements and run manual tests. The state management enables consistent user view on Network topology and measurements. The use case is to have temporary measurements in numerous locations and to have the possibility to return to one location and continue with identical monitoring station setup to keep the measurements comparable. After activating monitoring station, it is recommended that it would be treated as new if it will be used for monitoring. 10.5 Managing monitoring station IP configuration In order to change monitoring station IP configuration settings:
1. Activate the monitoring station by right-clicking on it in the Network topology 2. Select Connection management 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 10 7signal solution 34 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 16: Eye IP configuration submenu 3. Select Eye IP configuration Eye IP configuration dialog is opened:
7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 10 7signal solution 35 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 10.5.1 Changing static IP configuration 1. Edit IP address/network mask/default gateway properties 2. Click Save and restart Eye button New IP properties are updated to the monitoring station and the monitoring station restarts 10.5.2 Configuring DHCP for monitoring station 1. Select Use DHCP checkbox. Leave Discover new address checkbox selected. 2. Click Save and restart Eye button New IP properties are updated to the monitoring station and the monitoring station restarts. After restart, the monitoring station obtains its IP configuration from DHCP server and Carat will discover the new IP address automatically by applying mDNS/DNS-SD protocol. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 10 7signal solution 10.6 Managing Monitoring Station Software The software versions of the monitoring stations are managed via Carat. Actions related to monitoring station software management can be found in the Eye software management submenu of Manage menu. 36 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 17: Eye Software Management submenu Update of monitoring station software can be divided in two steps:
Import latest monitoring station software to Carat Update monitoring station software to monitoring stations 10.6.1 Importing monitoring station software (Solution Administrator only) Only a Solution Administrator can import new monitoring station software packages. Select SW repository management in Eye software management menu. Eye SW repository management view is opened. On this view, you can manage monitoring station software versions in the Carat server. All software versions imported into Carat are visible in a list. Notice that starting to release 5.0, new monitoring station software versions, specific to the current release, are automatically imported to the system, if Carat server was installed/upgraded by using full installers. If the upgrade was done by using a full installer, this step is unnecessary. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 10 7signal solution 37 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 18: SW repository management view Import monitoring station software as follows:
1. Make sure that you have monitoring station software available in your computer
(7signal-eye-x.y-APU2/APU3/x86) 2. Click Import button 3. Browse and select the monitoring station software from the file list The imported software appears to the software version list. In order to remove old software versions from Carat:
1. Select unwanted software versions from the list. 2. Click Remove button. 10.6.2 Update monitoring station software (configurator/organization admin users) Select Eye software update in Eye Software Management menu. Eye software update view is opened. If Carat detects monitoring stations that do not have the latest software installed, Carat proposes the update:
7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 10 7signal solution 38 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 19: Start Eye software update Accept the software update by clicking OK button on confirmation dialog. Installation progress can be monitored can be inspected by following the progress bars that appear for each monitoring station. First, the software is uploaded to the monitoring stations:
Figure 20: Software upload to monitoring stations ongoing After the upload phase is completed, the monitoring station installs the software update and restarts itself:
7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 10 7signal solution 39 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 21: Software installation ongoing 10.6.3 Uninstalling and changing monitoring station software versions Sometimes it is necessary to uninstall old software versions from monitoring stations. On rare occasions, a rollback to an older version (already installed in monitoring station) is necessary. These actions can be done by using the Eye software management view. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 10 7signal solution 40 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 22: Eye software management view The top portion of the view lists the software versions of an individual monitoring station when the monitoring station is activated. At the same time, you can also perform operations that are available in the top part of the pane. Operations:
Information displays the software versions in the activated Eye Uninstall uninstalls the software version Activate activates the software uploaded to the monitoring station9 10.7 Initial network scan When the Eye has been installed or needs to be reconfigured, you must run a network scan. There are various preconfigured scanning durations. The purpose of the initial scan is to scan the monitoring stations radio frequency environment very thoroughly and to detect the access points suitable for monitoring. Network scan type Description Slow Regular Fast First deployment Normal Quick Estimated duration (all antennas and channels) for channels 1-11 excl. 5 GHz 2127 min 912 min less than 3 min 9 Usually, it is not necessary to activate software version manually. New software version is activated automatically after software update. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 10 7signal solution The scan results are presented in a table. An initial scan should be run whenever substantial physical changes have been made in the environment being monitored (for example, new or removed walls), or if the Eyes location has been changed. The table contains the following information about the WLAN access points detected:
Network name (ESSID) Encryption methods supported by the access point MAC address of the access point10 Alias (access point name in Cisco and Aruba11 access points) Channel Management status (if not known, denoted as Unknown) Managing Eye (if managed by other Eye) Currently selected antenna Antenna that hears the access point best Access point signal strength Noise level12 41 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l The access points in the service area must have a management status. Setting a management status means that the access points existence is acknowledged. Unacknowledged access points prompt issuing of an alarm if such an alarm has been configured. The management statuses are as follows:
Managed: Monitored by this monitoring station o The recommendation for signal strength is >-65 dBm Own: Own access point managed by another monitoring station Known: An access point that is an accepted part of the radio frequency environment
(for example, a neighboring network) o If possible, ensure the access point operates properly and can be accepted Unknown: An access point without a monitoring status o In practice, this status should exist only during network scans in new service areas; it should not exist in normal use The changes are saved in Sapphire Carats database and the installed monitoring station. The test is described in more detail below, under the Network Scan description. 10 In case of a Meru access point, serial MAC of the access point. 11 Availability depends of Aruba software level. 12 No available with Micro Eyes. Might not be available in Soft Eyes. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 11 7signal solution 11 ENCRYPTION KEY MANAGEMENT Related icons WPA 2 encryption WPA 1 encryption WPA EAP encryption WEP encryption IEEE 802.11X authentication with dynamic WEP keys HTTP authentication Before accessing secured WLAN, an encryption key for that network should be created. 42 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 23: Network key configuration dialog 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 43 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 11 7signal solution 11.1 Supported encryption types Table 4: Supported encryption types Key type WPA 1 PSK WPA 2 PSK WPA with EAP Dynamic WEP with EAP WEP Open HTTP Authentication method Inner authentication EAP_TLS EAP_PEAP EAP_TTLS EAP_PSK EAP_FAST LEAP EAP_MSCHAP_V2 EAP_TLS EAP_PEAP EAP_TTLS LEAP EAP_MSCHAP_V2 WEP 104 Hex WEP 104 Asc WEP 40 Hex WEP 40 Asc GTC MD5 MSCHAPV2 OTP TLS MSCHAP MSCHAPV2 PAP CHAP EAP-MSCHAPV2 EAP-TLS EAP-GTC EAP-OTP EAP-MD5 GTC MD5 MSCHAPV2 OTP TLS MSCHAP MSCHAPV2 PAP CHAP EAP-MSCHAPV2 EAP-TLS EAP-GTC EAP-OTP EAP-MD5 11.2 Adding encryption keys (PSK) 11.2.1 Passphrase and pre-shared key Pre-shared key authentication is sometimes called passphrase authentication. Standard configuration interfaces allow user to type passphrase (that is converted to PSK) and proprietary interfaces can allow direct entry of PSK. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 11 7signal solution WPA and WPA2 are both vulnerable to brute force attacks if you use weak PSK. The user may enter either a PSK or a passphrase when creating WPA1/2 PSK. 44 7 s i g n a 11.2.2 Adding WPA-PSK key Add a key by following the instructions below:
1. From the top menu bar, select Manage | Network Keys the available key types and existing keys are displayed in a hierarchical structure in the left pane 2. Right-click the key type you want to create and select Add key 3. Enter a name for the key 4. Enter the data required by the key type a. There are significant differences in the data required for different key types b. When Show input is checked, the user interface displays the passwords in plain-text. 5. Save the key by clicking Save Figure 24: Adding WPA-PSK key After a key has been created, it should be attached to a wireless network. 1. From the top menu bar, select View | Network topology 2. In the Network topology, select the network to which you want to add the encryption key and right-click 3. Select Add Key 4. Select a suitable encryption key for the network from the pull-down menu 5. Click Save 11.3 Certificate-based encryption There are input fields for the CA certificate and Client certificate. It is recommended that both certificates are added. If one certificate file contains all the information, it should be used in both of the input fields. The certificate container is expected to be accessible by the Carat GUI client in the local or shared file system of the host machine. Accepted formats are the following:
CA certificate PEM, DER, PKCS12 (aka PFX) Private key PKCS12 (aka PFX) As a corollary, a single PKCS12 formatted file that contains the CA certificate as well as the private key, can be used in both of the cases. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 11 7signal solution 45 If conversions are required to achieve these formats, please consult Your Certificate Authority. In Linux and UNIX environments OpenSSL is commonplace tool and can handle the conversions required:
To export client certificate from p12 container:
openssl pkcs12 -in <yours>.p12 -clcerts -nokeys -out <yours>client_cert.pem To export private key from p12 container:
openssl pkcs12 -in <yours>.p12 -nocerts -out <yours>private_key.pem To export CA certificate from p12 container:
openssl pkcs12 -in <yours>.p12 -cacerts -nokeys -out <yours>cacert.pem TIP: Microsoft environments may have certificate files with file extension CER. The file content format typically is DER. To turn DER files into PEM, please use the command below:
openssl x509 informat DER in <yours>.cer outformat PEM out <target>.pem Windows environments have extension PFX to mark a typical certificate container file type. This format is exactly PKCS12 format that typically has p12 extension in Linux/Unix world. 7signal Sapphire does not care about the extension but the internal format of the file. 11.4 HTTP (captive portal) authentication 7signal Sapphire has a limited support for HTTP captive portal authentication. There are two basic requirements that must be fulfilled in order to get authentication work:
1. Login form on a login web page must not contain any dynamic fields. As dynamic fields will usually change for each separate login, for monitoring station it is difficult to adapt changing content of the login form. 2. There must not be any mandatory HTTP redirect request during login process. Upcoming Sapphire versions will have support for dynamic fields and HTTP redirects. Captive portal authentication is done simply by issuing HTTP GET or POST request, containing the user credentials, directly to captive portal/authentication server, i.e. not loading the login page first. 11.4.1 Prerequisites Resolve login information A login page typically consists of a HTML form that contains fields for login information. Open the login page in a web browser, and select view source. The login form is an HTML block enclosed within <form> tag. For example:
7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 11 7signal solution
<form method="post" action="http://login.mycompany.com/login">
<input type="hidden" name="SiteId" value="123"/>
<input type="hidden" name="Target" value="www.othercompany.com"/>
<input type="hidden" name="PaymentMethod" value="Passthrough"/>
<input type="hidden" name="ProxyHost" value=""/>
<input name="Confirmed" value="1" type="hidden">
<input type=text name=Username value=JohnDoe/>
<input type=password name=Password value=VerySecret/>
<div id="do_submit">
<div id="free_submit_btn">
<input type="submit" tabindex="5" name="connect" value="" />
</div>
</div>
<div id="do_agree" >
<input name="DoAgree" value="1" type="checkbox" checked>
</div>
</form>
46 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Based on this HTML code, the browser would generate a following HTTP POST data targeted to http://login.mycompany.com/login:
SiteId=123&Target=www.othercompany.com&PaymentMethod=Passthrough&ProxyHost=&Confirmed=1&
Username=JohnDoe&Password=VerySecret&connect=&DoAgree=1 For more information how different HTML elements will be encoded, see http://en.wikipedia.org/wiki/POST_%28HTTP%29 11.4.2 Creating Open HTTP Key 1. From the top menu bar, select Manage | Network Keys the available key types and existing keys are displayed in a hierarchical structure in the left pane 2. Right-click Open HTTP and select Add key 3. Fill in a name for the key 4. Enter authentication URL 5. Select Use HTTP POST, if needed (this is the usual case) 6. Enter POST data 7. Save the key by clicking Save. Based on the HTTP POST example above, the Open HTTP key would look like the following:
7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 11 7signal solution 47 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 25: Adding Open HTTP Key 11.5 Multiple network keys per Eye There is no limitation to number of keys per Eye or per Wireless Network. If there is only one key bound to Wireless Network, that key shall be used every time this particular SSID is associated with. On top of that, each Eye unit may be bound with Eye specific key. The rationale is to support environments where the actual key dictates both access to the access point in general and also the access level to the network services beyond the access point. In order to bind an Eye specific network key to Eye 1. Right-click Eye in the Network Topology 2. Select Network key binding 3. Eye network keys view is opened 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 11 7signal solution 48 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 26: Binding network key to an Eye 4. Select the network in Available networks list 5. Select the network key in Network keys list 6. Click the right-arrow button 7. Select Save In order to remove network key binding 1. Select the binding in Bindings list 2. Click the left-arrow button 3. Select Save 11.5.1 Microsoft PKI Infrastructure One commonplace certificate-based environment is implemented by Microsoft. Typically any appliance shall have its own account (machine-account). It would very challenging to make the Linux-based Eye to serve Windows infrastructure with the proper certificate. An applicable option is to create one user-account to be used by all Eye units, or separate user accounts for each Eye. When a user-account is in place, the authentication may be defined as follows:
7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 11 7signal solution 49 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 27: Adding network key for Microsoft PKI infrastructure 1. Select Dynamic WEP with EAP key to get the dialog above 2. Select WPA key type, either 1 or 2, according the local environment 3. EAP method must be set to EAP_MSCHAP_V2 4. Fill in the account user name to the field Identity 5. Enter and confirm the account password. 6. Enter Windows infrastructure CA certificate. 7. One may enter the same certificate as Client Certificate as well. The Eye is now properly authenticated in Windows PKI environment. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 50 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 12 7signal solution 12 TEST END-POINTS 12.1 Sonar Sonar is 7signal specific server that handles typical network requests i.e. it emulates numerous servers in the network. Sonar (icon
) is the server needed for executing elementary tests. There can be several Sonar servers configured. Each test can be configured to use any of the configured Sonars. Configuring Sonar servers makes it easy to define the parameters for the automatic measurements. Figure 28: Adding new Sonar server 1. From the top menu bar, select Manage | Test endpoints 2. Select Add Sonar from Sonars tree node after right clicking it. 3. Enter a name for the Sonar instance (Note: The name should be descriptive, especially when one is using several Sonars) 4. Enter a description for the Sonar (optional) 5. Enter the IP address and TCP port (Note: At this stage, Carat does not verify that the Sonar actually exists, so ensure that the Sonar exists before you begin testing) 6. Click Save 12.2 Generic test counterparts It is possible to run tests towards actual network servers such as SIP servers or database hosts. Figure 29: Adding generic test counterpart 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 12 7signal solution 51 Test endpoint definition requires information on networking level but does not require anything application specific. For example, an SQL server is considered only from connectivity point of view while the actual access credentials and test queries are defined per test. Therefore the endpoint definition is a simple procedure and is similar to all supported test endpoints. 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 52 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 13 7signal solution 13 ACCESS POINT INFORMATION Related icons unknown access point (unwanted state) known access point (in the coverage area but outside administrative domain) own access point (in administrative domain) managed access point (target to a monitoring station, in administrative domain) deactivated managed access point The access point information can be displayed by right-clicking the access point in the Network topology and selecting Properties. The information includes the following:
Access point name Alias Vendor Meru access points only:
o Meru radio MAC o Meru access point ID o Meru radio index Description The managing Eye (i.e., the Eye that performs the tests) Related Eyes ESSID The antenna used by the Eye to monitor the access point Network MAC address (in case of Meru access point, serial MAC address) Alarm group SLA Group Encryption Beacon Interval Country Code Environment Capabilities Channel and channel change history legacy bitrates and changes in those 802.11n MCS Indexes 802.11n HT Capabilities 802.11n secondary Channel 802.11n Control Channel 802.11n HT Parameters WMM Category: Best Effort WMM Category: Background WMM Category: Video WMM Category: Voice 13.1 Replacing access points 7signal Sapphire saves all access points it has noticed. The changes in the hardware may be due removal of existing hardware or because of extensions of the current network. These cases are handled by inactivation of the removed access points or scanning and saving the new ones. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 13 7signal solution 53 The hardware replacements require a different approach. The new equipment shall have new MAC addresses and this causes a discontinuity in the measurements as it is considered a new access point in the target network. If this is not the intention and the new equipment should totally replace an access point that was previously in Managed more, 7signal Sapphire must be informed. To retain the measurement history with a new hardware:
1. Scan the network to get hold of the new access point hardware 2. Right-click on the access point that has been replaced to summon the properties dialog 3. Locate the replace panel and choose from the drop-down list the new access point that shall assume the role of the replaced access point. Alternatively, it is possible to do replacing-by-import by using import utility. For more information, see chapter 21. The intended use of this feature is to help with replacing identical hardware. If the hardware is not identical, the results may be many-fold. SLAs and alarm thresholds should be checked, for example. There is also possibility to enable automatic access point change logic in Carat server. This can be done configuring Wireless Network to allow automatic changes13. 1. Open Edit Wireless Network by right clicking network in tree and selecting Edit 2. Enable Allow automatic BSSID changes 3. Save Wireless Network Configuration. 13 This feature works only with current Cisco hardware, on which how the MAC addresses are allocated is known. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 14 7signal solution 54 14 LINKS AND LINK GROUPS In 7signal Sapphire a link denotes an end to end connection between an Eye monitoring station and a Sonar server. Link consists of a monitoring station, an access point and a Sonar server. In the Network topology links are positioned below the managed access points. 7signal Sapphire forms the links automatically when it detects an established end to end connection. Related icons link link group A link group is a grouping of links defined by a user. A user can create a link in a Location in the Network topology. The main purpose of a link group is to give users the ability to easily bind one SLA group to multiple links with similar expected level of service. Links and link groups enable the versatile binding of SLA groups formed from service level agreements to end to end connections. For example an SLA group bound to an organization is applied to all topology elements within that organization. However, this can be overridden by binding different SLA groups to specific links or link groups, in which case their compliance with the service level agreement is determined by measuring against the KPIs defined in their own SLA group, instead of the SLA group bound to the organization. 14.1 Forming Links 7signal Sapphire Carat forms a link automatically once a test profile with a Sonar definition is bound to a monitoring station. For example when a test profile containing active tests to two Sonars ("Sonar1" and "Sonar2") is bound to a monitoring station ("Eye1") with two managed access points ("AP1" and "AP2") 7signal Sapphire carat forms the following links:
1. Eye1 - AP1 - Sonar1 2. Eye1 - AP1 - Sonar2 3. Eye1 - AP2 - Sonar1 4. Eye1 - AP2 - Sonar2 14.2 Removing Links 7signal Sapphire Carat automatically removes a link if one of its components (the monitoring station, access point or Sonar) is removed. Because links are formed automatically it may be in certain rare situations necessary for the user to remove links one deems unnecessary. Remove a link as follows:
1. Click on "View | Network topology" from the top menu bar 2. Right-click on the link to be removed from the tree hierarchy 3. Choose "Remove link" from the pop-up menu 4. Confirm link removal 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 14 7signal solution 14.3 Creating Link Groups 55 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Create a link group as follows:
1. Click on "View | Network topology" from the top menu bar 2. Right-click on the desired Location into which the link group is to be added 3. Choose "Add Link Group" from the pop-up menu. A dialog for adding a link group is opened to the right. 4. Name the link group 5. Define the SLA group to be bound to the link group (optional) 6. Click "Save"
14.4 Removing Link Groups Remove a link group as follows:
1. Click on "View | Network topology" from the top menu bar 2. Right-click on the link group to be removed from the tree hierarchy 3. Choose "Remove" from the pop-up menu 4. Confirm link group removal 14.5 Adding Link to Group Add a link to a link group as follows:
1. Click on "View | Network topology" from the top menu bar 2. Drag the link to the desired link group 14.6 Removing Links from Group Remove a link from a link group as follows:
1. Click on "View | Network topology" from the top menu bar 2. Right-click on the link (under a link group) to be removed from the tree hierarchy 3. Choose "Remove link" from the pop-up menu 4. Confirm link removal 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 15 7signal solution 15 ALARMS 7signal Sapphire has two types of alarms: Network Alarms and System Alarms:
56 7 s i g n a The network alarms are triggered by changes in the monitored network's status or topology. Network alarms are configurable; alarms can be switched on and off, alarm thresholds can be configured. System alarms are triggered by serious issues in 7signal Sapphire solution itself. For example, losing connectivity to monitoring station causes a system alarm. 15.1 Network Alarms Related icons alarm configuration critical alarm informational message alarm configuration group network error warning message The network alarms are initiated by significant changes in the monitored network's status or topology. It is possible to send the alarms to an SNMP system. Please see the instructions later in this document. Alarms are used through alarm groups to which the desired alarms can be assigned. There is a preconfigured alarm group, Global Alarms, which is active by default. The alarms will then be issued by any access point in the network. The Global Alarms group includes the following alarms:
Managed Access Point Down Offending Channel Changes of Managed Domain Offending Channel Changes of External Domain 15.1.1 Creating Alarm Groups You can extend the Global Alarms group or create new alarm groups. It is recommended that you create new groups. To create a group, proceed as follows:
1. From the top menu bar, select Manage | Alarm configuration 2. Select Alarm Groups and right-click it 3. Select Add Alarm Group 4. Enter a name for the alarm group 5. Select the alarms by dragging them from Alarm Templates to the alarm group pane 6. When you have added all the alarms you want, select Save Modification of alarms in a group The table below lists the alarms. Some of them have parameters that can be modified. To modify the parameters of an alarm, proceed as follows:
1. Select the alarm to be modified in the alarm group 2. Right-click and select Edit 3. Modify the parameter value 4. Select Update 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 15 7signal solution Table 5: Alarms Menu Managed Access Point Not Responding Channel Interference Managed Access Point Security Settings Changed Managed Access Point Channel Violation Non-Managed Access Point Channel Violation Unknown Access Point Detected End to end latency time exceeded. End-to-End Connection Loss Retransmission Rate Exceeded DCHP Server Unreachable Access Point MAC Change. Attach Success Rate DHCP Server Success Rate Beacon Availability TCP Download Throughput TCP Upload Throughput 57 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Modifiable No Yes No No No Yes Yes Yes Yes Yes No Yes Yes yes Yes Yes Severity Description Critical The alarm is activated when a managed access point does not respond. The alarm is activated when a new access point with a strong signal is detected on a managed channel. The alarm is activated when the security settings of a managed access point are changed. The alarm is activated when a managed access point starts to use a restricted channel. The alarm is activated when an external access point starts to use a restricted channel. The alarm is activated when an unknown access point is detected. The alarm is activated when the average round-trip time in a ping test exceeds the set limit. The alarm is activated when ping tests fail. The alarm is activated when the retransmission rate exceeds the set limit. The alarm is activated on DHCP timeout. Warning Critical Warning Warning Warning Warning Critical Critical Critical Warning Alarm is activate when BSSIDs MAC changes. Warning Alarm is activated when Attach Success Rate falls under configured value. Warning Alarm is activated when DHCP Critical success Rate falls under configured value. Alarm is activated when beacons are not detected under configured value. Warning Alarm is activated when throughput is lower than configured value. Warning Alarm is activated when throughput is lower than configured value. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 58 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 15 7signal solution VoIP MOS, listen quality VoIP MOS, Talk quality Ping Success Rate TCP Success Rate VoIP Success Rate Internet Availability Attach availability VoIP MOS, listening performance VoIP MOS, talking performance TCP Download performance TCP Upload performance Beacon success rate Noise level exceeded Warning Alarm is activated when listening quality drops under configured value. Warning Alarm is activated when Talk quality drops under configured value. Warning Alarm is activated when Ping success rate drops under configured value. Warning Alarm is activated when TCP success rate drops under configured value. Warning Alarm is activated when VoIP test success rate drops under configured value. Warning Alarm is activated when Critical Critical Critical Critical Critical Internet availability is lost. Alarm is activated by consecutive attach failures Alarm is activated when average MOS download value consecutively drops under a configured threshold value. Alarm is activated when average MOS upload value consecutively drops under a configured threshold value. Alarm is activated when average TCP download throughput consecutively drops under a configured threshold value. Alarm is activated when average TCP upload throughput consecutively drops under a configured threshold value. Yes Yes Yes Yes Yes No Yes Yes Yes Yes Yes Warning Alarm is activated when beacons/probe responses are not heard from the access point Yes Warning Noise level on channel has exceeded configured threshold values Yes 15.1.2 Binding Alarm Groups to access points Network alarms can be configured on a per-access-point basis by binding an alarm group to an access point. Only an existing group can be bound to an access point. 1. In the Network topology, right-click the access point to which you want to bind the alarms 2. Select Bind to alarm group 3. From the pull-down menu, select the alarm group you want to use for this access point 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 15 7signal solution Or 1. Open Service Alarm Binder Dialog by right clicking Service Area Node and selecting Bind Alarms 2. Select Alarm Limit Group from the drop-down list 3. Select Access Points for the binding 4. Save 15.1.3 Viewing Network Alarms To view the network alarms issued, select View | Network alarms from the top menu bar. You can indicate whether you want to see all alarms or only alarms that are currently active. You can also select how the alarms are listed. 59 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 30: Network alarm view 15.1.4 Network Alarm forwarding There are two methods that network alarms may be brought to attention of external systems:
email forwarding and SNMP. Email forwarding Alarms are sent as plain-text emails with standard formatting easy to be parsed with typical text-processing tools. NOTE: Email may be used only for relaying the alarms to the other messaging system that convert emails to f ex SMS and messenger formats. 7signal products do not directly provide such integration. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 15 7signal solution Email forwarding requires an SMTP server to be defined. There may be numerous recipients that shall receive the alarms. 60 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 1. From the top menu bar, select Manage | Alarms | Email 2. Enter target email address to New recipient field 3. Select Add to register the email address as a recipient. It shall appear in the box named Email recipients a. Incorrectly added or not any more relevant recipients may be removed by activating the recipient in the box and then selecting Remove 4. Choose the types of alarm event that shall be forwarded by ticking the check-boxes. a. Types are: raised, acked, offed. 5. Choose the set of alarms to be forwarded by ticking the check-boxes on the alarm table. 6. Select Save the make the selection permanent and stored. 7. Select Close to close the pane. SNMP Some alarms in Sapphire Carat can be forwarded as SNMP notifications to a receiving server. 1. From the top menu bar, select Manage | Alarms | SNMP 2. Enter the IP address of the receiving server 3. Enter the UDP port to use 4. Select the SNMP version (v2c/v3) to be used for the message format 5. If you select v3, you must also:
a. Enter a security name b. Select the security level (authentication / no authentication) c. If you select authentication, configure its settings:
i. Select an encryption method (MD5/SHA) ii. Enter a password iii. Re-enter the password 6. Select the alarms you want to forward 7. Select the events you want to forward:
a. Alarms issued 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 15 7signal solution b. Acknowledged alarms c. Alarms that have been turned off 8. Select Update 9. Click Save all Changes. 61 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 31: SNMP alarm forwarding 15.2 System Alarms System alarms cannot be adjusted, since situations causing a system alarm are always serious. The alarm types are listed in following table:
Table 6: System Alarm types Alarm name Connection lost to Eye unit Database write failed Severity Warning Critical Description Info Connection lost to Eye unit Eye ID and its IP address Test result write to database failed. Table name and SQL error code. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 15 7signal solution 62 7 s i g n a 15.2.1 Viewing System Alarms To view the network alarms issued, select View | System alarms from the top menu bar. You can indicate whether you want to see all alarms or only alarms that are currently active. You can also select how the alarms are listed. l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 32: System Alarms 15.3 Acknowledge alarms You can acknowledge a network or system alarm by clicking the symbol under Ack time. The symbol will be replaced by the current time of the Carat server, and the alarm is acknowledged. The alarms are turned off when the cause of the alarm is no longer present. 15.4 Purge old alarms You can purge old alarms clicking Purge alarms button. In order to choose the criteria which alarms will be purged, select appropriate alarm state and time from drop-down lists. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 16 7signal solution 16 TRAFFIC CLASSES The IEEE 802.11e standard defines eight traffic classes. Most mission-critical access points support this standard. Traffic classes are becoming more and more important, especially on account of wireless VoIP. 63 7 s i g n a 7signal Sapphire Enterprise supports the 802.11e standard. Active tests can be configured to have a traffic class. All Sapphire versions support assignment of traffic classes, but if the Sapphire license does not include traffic classes, Sapphire will treat the traffic as ordinary traffic (Non-QoS, best-effort). Traffic classes are taken into account in only those networks whose access points support this feature. A request for a traffic class does not guarantee that it is granted. When viewing measurement reports, you might see that several traffic classes have been used. The class granted will never exceed that requested. The following figure describes the traffic classes for the parameters of active tests:
Figure 33: 802.11e traffic category selection 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 17 7signal solution 64 17 AUTOMATED TEST CONFIGURATION The tests are grouped into passive listening tests and active tests in the radio network. There are two ways to run tests in Sapphire Carat: user-initiated (manual) tests to locate a fault and automated tests for continuous monitoring and collecting of measurement results. You can run the tests from a hierarchical tree. Test menus are accessible by right-clicking a monitoring station or an access point. 17.1 Test Profiles Related icons test profile element (passive test) test profile element (active test) test profile element (disabled) test profile test profile template A test profile is a series of tests that can be run continuously either on a per-access-point basis or in monitor mode, thus listening all 802.11 traffic. Test profile (element) can also be configured to run tests through monitoring station Ethernet port. Sapphire contains preconfigured profiles intended for typical business environments. To set up test profiles, select Manage | Test Profiles to display the Test Profiles view. The existing templates, test elements and actual profiles are displayed on the left in the management tree in descending order, respectively. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 17 7signal solution 65 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l Figure 34: Test profile configuration Templates are a collection of pre-configured test profiles aimed at various business purposes. They are not to be used as runnable test profiles but as a source, reference and model for the user creating the runnable test profiles. Elements are individual tests that may be inserted to test profiles. Color of the test profile element icon indicates type of the test (passive or active). Test profile is a collection of test elements that may be executed. The user is supposed to copy either templates or elements to a test profile. There may be numerous profiles for different purposes. A test profile is always bound to a monitoring station. Test profile can be either test centric or access point centric. Test centric test profile
(default type) means that individual active tests are run against each access point before test profile proceeds to next test. Access point centric test profile means that all individual active tests are run against an access point at once14. 17.2 Contents of a Test Profile The purpose of the network dictates which tests should be used to get the best picture of its functionality. As a result, there are several preconfigured test profiles, where the order and frequency of tests is different and so are test parameters, such as the number of megabytes downloaded and uploaded. The test profile names reflect the business environment in which they are thought to be most useful. 14 Test profile mode does not have any effect to Ethernet tests, because association to a network does not take place. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 17 7signal solution Below is a sample profile that could be used for a monitoring station. Table 7: Test profile example Test RTT ping Download Scan managed Download Access point traffic Noise monitor Scan Http MOS Test parameters 32 B x 10 2 MB x 2 350 ms/channel 2 MB x 2 60 s 350 ms/channel 350 ms/channel 500 kB VoIP parameters 66 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l When the profile is running, each test is run in its turn, followed by the next test. After the last test is run, the test profile starts from the beginning. The table shows the most important test parameters, but the tests also have other configurable parameters. Below are descriptions of the preconfigured profiles - Templates - in Sapphire. You can copy a template and save it under a different name. You can then freely modify the parameters in the original profile and the copy. By copying test profiles, you can easily create a customized profile for each monitoring station. 17.2.1 Passive Passive template contains five passive tests and no active tests. In passive tests, the monitoring station does not attach to an access point; it just listens to radio traffic for the specified time. When using a passive profile, you do not need to configure encryption settings or authentication for the radio network. Note: A passive profile has an extremely small effect on the monitored network. The only effect is that Sapphire sends probe requests to access points. 17.2.2 Warehouse The Warehouse template serves the needs of logistics services where the amount of data transferred is not large but the data traffic is continuous. Network availability and uptime are vital. The network clients are mostly known or even preconfigured. This profile can be used in all environments that have similar circumstances. 17.2.3 Office The Office template is intended for office use wherein the clients are mostly laptops running office applications. An office WLAN must have superb usability and a robust data transfer capacity. This profile can be used in all environments with similar circumstances. 17.2.4 Lightweight The Lightweight profile is intended for environments that do not have several concurrent users and that have a narrowband link to a central server (<512 kbit/s). This profile emphasizes 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 17 7signal solution WLAN availability. Another emphasis is on a fast testing cycle, where each test takes only a short time. 67 7 s i g n a 17.2.5 VoIP The VoIP template is intended for environments where the wireless clients are mostly VoIP devices. A wireless VoIP network must have extremely high-quality radio connections. The MOS test indicates packet losses and jitter in the network, among other things. 17.2.6 Hospital Hospital resembles the Office template. However, the Hospital template produces more results that describe the status of the wireless clients. The profile is a general purpose one that emphasizes wireless clients. 17.2.7 Spectrum and Noise This template is limited in test elements: there are no active tests at all. It is targeted for environments that have severe interference conditions. This can be considered as a trouble-
shooting template that is activated if the normal course of testing does not provide enough information on the source of the interference. 17.2.8 Surveillance The Surveillance is a limited template with one test only that specializes in surveillance. The point is to capture traffic in any channel in any direction. The rationale is environments where there should be no radio traffic at all or only for white-listed devices. 17.2.9 TripleSSID Mainly example how to configure test profiles that access numerous WLAN networks in a single profile. This is the case one Eye unit is supposed to monitor multiple WLANs concurrently. The next chapter has more details on this. 17.3 Testing multiple WLAN networks in one test profile One monitoring station may test multiple access points that provide multiple WLAN networks. In the context of test profiles WLAN networks are referred as ESSIDs. Testing on multiple ESSIDs is achieved by either copying and editing individual test element in a profile or copying a complete template to an existing profile. Whenever it is possible to define an essid to a test element there may be exactly one ESSID per element or no ESSID at all. The latter means that the test in question shall be executed against all access points managed by the monitoring station. The former limits the access points to ones that have the ESSID and are managed by the monitoring station. 17.4 Test Profile execution modes The test profile execution mode controls how the tests are run within the test profile. The execution mode can be set while the test profile is created (or duplicated), or later by editing the test profile. 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com 68 7 s i g n a l S a p p h i r e C a r a t U s e r G u d e R e e a s e 5 0
. i l 17 7signal solution The execution modes are the following:
Test centric (default execution mode) Access point centric The execution modes are described in the following subchapters. 17.4.1 Test centric test profiles Test centric test profile means that individual active tests are run against each access point before test profile proceeds to next test. This is the default execution mode. Consider a test profile consisting of the following elements:
Ping (active test) TCP download (active test) TCP upload (active test) Managed AP scan (passive test) Ping (active test) MOS uplink (active test) MOS downlink (active test) Noise monitor (passive test) For example, if the monitoring station is monitoring access points AP1, AP2 and AP3, the execution order of the test would be the following:
Table 8: Test execution order on test centric test profile Attach AP1 Ping AP1 Detach AP1 Attach AP2 TCP download AP2 Detach AP2 Attach AP3 TCP upload AP3 Detach AP3 Attach AP3 Ping AP3 Detach AP3 Attach AP1 MOS downlink AP1 Detach AP1 Attach AP2 Ping AP2 Detach AP2 Attach AP3 TCP Download AP3 Detach AP3 Managed scan Attach AP1 MOS uplink AP1 Detach AP1 Attach AP2 MOS downlink AP2 Detach AP2 Attach AP3 Ping AP3 Detach AP3 Attach AP1 TCP upload AP1 Detach AP1 Attach AP1 Ping AP1 Detach AP1 Attach AP2 MOS uplink AP2 Detach AP2 Attach AP3 MOS downlink AP3 Detach AP3 Attach AP1 TCP download AP1 Detach AP1 Attach AP2 TCP upload AP2 Detach AP2 Attach AP2 Ping AP2 Detach AP2 Attach AP3 MOS uplink AP3 Detach AP3 Noise monitor 7signal Solutions, Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com, www.7signal.com
frequency | equipment class | purpose | ||
---|---|---|---|---|
1 | 2014-03-19 | 5755 ~ 5795 | DTS - Digital Transmission System | Original Equipment |
2 | 5670 ~ 5670 | NII - Unlicensed National Information Infrastructure TX |
app s | Applicant Information | |||||
---|---|---|---|---|---|---|
1 2 | Effective |
2014-03-19
|
||||
1 2 | Applicant's complete, legal business name |
7signal
|
||||
1 2 | FCC Registration Number (FRN) |
0020031522
|
||||
1 2 | Physical Address |
6155 Rockside Rd.
|
||||
1 2 |
Independence, Ohio 44131
|
|||||
1 2 |
United States
|
|||||
app s | TCB Information | |||||
1 2 | TCB Application Email Address |
t******@metlabs.com
|
||||
1 2 | TCB Scope |
A4: UNII devices & low power transmitters using spread spectrum techniques
|
||||
app s | FCC ID | |||||
1 2 | Grantee Code |
YLF
|
||||
1 2 | Equipment Product Code |
INDR-EYE01
|
||||
app s | Person at the applicant's address to receive grant or for contact | |||||
1 2 | Name |
R**** W********
|
||||
1 2 | Title |
CTO
|
||||
1 2 | Telephone Number |
614-4********
|
||||
1 2 | Fax Number |
216-7********
|
||||
1 2 |
r******@7signal.com
|
|||||
app s | Technical Contact | |||||
1 2 | Firm Name |
7signal Solutions, Inc
|
||||
1 2 | Name |
D**** I******** S******
|
||||
1 2 | Physical Address |
4392 Bunker Lane
|
||||
1 2 |
Stow, Ohio 44224
|
|||||
1 2 |
United States
|
|||||
1 2 | Telephone Number |
(330)********
|
||||
1 2 |
d******@7signal.com
|
|||||
app s | Non Technical Contact | |||||
n/a | ||||||
app s | Confidentiality (long or short term) | |||||
1 2 | Does this application include a request for confidentiality for any portion(s) of the data contained in this application pursuant to 47 CFR § 0.459 of the Commission Rules?: | Yes | ||||
1 2 | Long-Term Confidentiality Does this application include a request for confidentiality for any portion(s) of the data contained in this application pursuant to 47 CFR § 0.459 of the Commission Rules?: | Yes | ||||
1 2 | If so, specify the short-term confidentiality release date (MM/DD/YYYY format) | 05/03/2014 | ||||
if no date is supplied, the release date will be set to 45 calendar days past the date of grant. | ||||||
app s | Cognitive Radio & Software Defined Radio, Class, etc | |||||
1 2 | Is this application for software defined/cognitive radio authorization? | No | ||||
1 2 | Equipment Class | DTS - Digital Transmission System | ||||
1 2 | NII - Unlicensed National Information Infrastructure TX | |||||
1 2 | Description of product as it is marketed: (NOTE: This text will appear below the equipment class on the grant) | Access point | ||||
1 2 | Related OET KnowledgeDataBase Inquiry: Is there a KDB inquiry associated with this application? | No | ||||
1 2 | Modular Equipment Type | Does not apply | ||||
1 2 | Purpose / Application is for | Original Equipment | ||||
1 2 | Composite Equipment: Is the equipment in this application a composite device subject to an additional equipment authorization? | Yes | ||||
1 2 | Related Equipment: Is the equipment in this application part of a system that operates with, or is marketed with, another device that requires an equipment authorization? | No | ||||
1 2 | Grant Comments | Power is listed as conducted. The antenna(s) used for this transmitter must be installed to provide a separation distance of at least 20 cm from all persons and must not be co-located or operating in conjunction with any other antenna or transmitter. Users and installers must be provided with antenna installation instructions and transmitter operating conditions for satisfying RF exposure compliance. | ||||
1 2 | Is there an equipment authorization waiver associated with this application? | No | ||||
1 2 | If there is an equipment authorization waiver associated with this application, has the associated waiver been approved and all information uploaded? | No | ||||
app s | Test Firm Name and Contact Information | |||||
1 2 | Firm Name |
Eurofins MET Laboratories, Inc.
|
||||
1 2 | Name |
J**** F********
|
||||
1 2 | Telephone Number |
41094********
|
||||
1 2 | Fax Number |
41035********
|
||||
1 2 |
j******@metlabs.com
|
|||||
Equipment Specifications | |||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Line | Rule Parts | Grant Notes | Lower Frequency | Upper Frequency | Power Output | Tolerance | Emission Designator | Microprocessor Number | |||||||||||||||||||||||||||||||||
1 | 1 | 15C | MO | 2412 | 2462 | 0.113 | |||||||||||||||||||||||||||||||||||
1 | 2 | 15C | MO | 2422 | 2452 | 0.055 | |||||||||||||||||||||||||||||||||||
1 | 3 | 15C | MO | 5745 | 5825 | 0.129 | |||||||||||||||||||||||||||||||||||
1 | 4 | 15C | MO | 5755 | 5795 | 0.063 | |||||||||||||||||||||||||||||||||||
Line | Rule Parts | Grant Notes | Lower Frequency | Upper Frequency | Power Output | Tolerance | Emission Designator | Microprocessor Number | |||||||||||||||||||||||||||||||||
2 | 1 | 15E | MO | 5180 | 5240 | 0.032 | |||||||||||||||||||||||||||||||||||
2 | 2 | 15E | MO | 5190 | 5230 | 0.027 | |||||||||||||||||||||||||||||||||||
2 | 3 | 15E | MO | 5260 | 5320 | 0.03 | |||||||||||||||||||||||||||||||||||
2 | 4 | 15E | MO | 5270 | 5310 | 0.025 | |||||||||||||||||||||||||||||||||||
2 | 5 | 15E | MO | 5500 | 5580 | 0.092 | |||||||||||||||||||||||||||||||||||
2 | 6 | 15E | MO | 5510 | 5550 | 0.056 | |||||||||||||||||||||||||||||||||||
2 | 7 | 15E | MO | 5660 | 5700 | 0.027 | |||||||||||||||||||||||||||||||||||
2 | 8 | 15E | MO | 5670 | 5670 | 0.042 |
some individual PII (Personally Identifiable Information) available on the public forms may be redacted, original source may include additional details
This product uses the FCC Data API but is not endorsed or certified by the FCC