
Beacons
Beacons
Aerohive QuickStart
for the HiveAP 100 Series
This QuickStart guide explains how to set up a HiveAP 100 series device as a managed HiveAP and
how to mount it on a ceiling or wall.
Switch
DHCP
Server
Firewall
Internet
Some other network devices (They
might all be incorporated in the same
device, such as a router or rewall.)
1
Ethernet
Cable
2If the switch provides
PoE (Power-over-
Ethernet), cabling the
HiveAP to the switch
will cause the HiveAP
to power on in a few
seconds.
If the switch does not
provide PoE, use the
AC/DC power adaptor
(available as an
accessory) to connect
the HiveAP to a 100-
240 AC power source.
Eth0
Connect a standard Ethernet
cable with RJ-45 connectors
from ETH0 on the HiveAP to
a switch.
Connecting to HiveManager
3Cable the HiveAP to an Ethernet network—a HiveAP connected directly to the network
like this is called a portal (P)—or place it within radio range of a portal so that it forms
a wireless link through the portal to the wired network. This kind of HiveAP is called a
mesh point (MP). By default, a HiveAP acts as a DHCP client and gets its network settings
automatically from a DHCP server. (You can also congure it with static network settings
through the CLI. See the next section, "Using the Virtual Access Console".)
CAPWAP (Control and Provisioning of Wireless Access Points) is a protocol that access points
use to contact a management device and communicate with it. After getting its network
settings through DHCP, the HiveAP then acts as a CAPWAP client and sends CAPWAP Discovery
messages until HiveManager, acting as the CAPWAP server, responds. A mesh point initially
forms a hive with its portal using a default hive called hive0. Through this link, the mesh
point can reach the network and get its network settings from the DHCP server. Then it can
form a CAPWAP connection with HiveManager. (To add mesh points after changing the hive
name, rst connect them to the wired network. Next, push the conguration with the new
hive name and password to them from HiveManager. Finally, deploy them as mesh points.)
P/N 330026-02 Rev. A
The HiveAP 100 can form a CAPWAP connection to HiveManager in one of these ways:
aHiveManager Online (its domain name
is precongured on the HiveAP)
If the HiveManager Online domain name is
precongured on the HiveAP as the CAPWAP
server, the HiveAP makes a secure CAPWAP
connection to it by sending unicast Discovery
Request messages to that domain name. Make
sure that the rewall allows the following
outgoing trafc: CAPWAP (UDP port 12222) for
management trafc and SSHv2 (TCP port 22) for
HiveOS image and full conguration uploads.
HiveManager
Online
Firewall
First, HiveAP portals and mesh points access
a DHCP server to get their network settings;
that is, unless you congure them yourself.
DHCP Server
HiveManager
DHCP trafc
Wired link
Wireless link
P
PMP
MP
Second, they connect with the CAPWAP
server (HiveManager).
DHCP Server
HiveManager
CAPWAP Trafc
Using the Virtual Access Console
Using your wireless client,
scan for wireless networks.
If you are within range, an
SSID such as "AH-123456_ac"
appears.
Select the SSID, and when
prompted to enter a
network key, type aerohive,
and then click Connect.
Wireless
Client
The virtual access console is a way of accessing the CLI on a HiveAP wirelessly through a special
SSID that the HiveAP, by default, automatically activates for administrative access when it has
no conguration and cannot reach its default gateway. As explained in the previous section,
after connecting a HiveAP to the network and powering it on, it acts as a DHCP client and tries
to get its network settings automatically from a DHCP server in VLAN 1. However, if there is no
DHCP server in that VLAN, if the native VLAN for the network segment is not 1, or if you just
want to assign the HiveAP a static IP address, then you can access the CLI through the virtual
access console SSID and dene the network settings yourself.
The default virtual access console SSID name is “<hiveap-hostname>_ac”. The default host
name of a HiveAP consists of "AH-" plus the last six digits of its MAC address; for example,
AH-123456. In this case, the name of the default virtual access console SSID would be "AH-
123456_ac". By default, this SSID uses aerohive as the PSK (preshared key) for authenticating
user access. To access the virtual access console, do the following:
4
5Check the IP address of the
default gateway that the
DHCP server on the HiveAP
assigned your client. Then
make an SSH or
Telnet connection
to the HiveAP at that IP
address. When prompted to
enter your credentials, enter
the default Aerohive login name
(admin) and password (aerohive).
C:\>ipcong
Windows IP Conguration
Ethernet adapter Wireless
Network Connection:
Connection-specic DNS Sufx . :
IP Address. . . . . . : 1.1.1.2
Subnet Mask . . . . . : 255.255.255.0
Default Gateway . . . : 1.1.1.1
C:\>telnet 1.1.1.1
If the HiveManager system is in a different
subnet, add a DNS A or host record that
resolves "hivemanager" to the HiveManager IP
address. By default, HiveAPs perform a DNS
lookup to resolve "hivemanager.<domain>" to
an IP address, where <domain> is the domain
that the DHCP server assigns the HiveAPs.
The HiveAPs then make a secure CAPWAP
connection with the HiveManager system at
that domain name.
Note: For further options, see "Connecting to the CAPWAP Server" in the HiveOS and
HiveManager release notes.
Different Subnets (DNS Resolution)
c
bSame Subnet (Automatic Discovery) If the HiveAP does not have the HiveManager
IP address or domain name in its conguration,
it broadcasts CAPWAP Discovery Request
messages until it receives a response from a
HiveManager system in the same broadcast
domain. The two devices then form a secure
CAPWAP connection.
Broadcast
HiveManager
CAPWAP Server
HiveAP
CAPWAP Client
Unicast
Router
DNS Server
Status LEDs
The status indicator has been incorporated into the Aerohive logo on the top of the
HiveAP 110 and 120. It is illuminated by various colors to indicate different states of
activity. The meanings of the colors are explained below.
• Dark: There is no power or the status indicator is disabled.
• Blue: (solid) The device is booting up or there is no backhaul link; (ashing) the
device is shutting downy
• Green: The default route is through the backhaul Ethernet interface, but not all
conditions for normal operations (white) have been met.
• Yellow: The default route is through a backhaul wi interface, but not all
conditions for normal operations (white) have been met.
• White: The device is powered on and the rmware is operating normally; that
is, a wireless interface in access mode is up, a wired or wireless backhaul link
is up, and the HiveAP has a CAPWAP connection to either HiveManager or a
management AP.
• Purple: A new image is being loaded from HiveManager or a management AP.
• Orange: An alarm indicating a rmware or hardware issue has occurred.
For locations where the status indicator might be a distraction or attract unwanted
attention, you can adjust its brightness level from bright (the default) to soft to dim.
You can even turn it off completely. In HiveManager, choose the brightness level that
you want from the LED Brightness drop-down list on the Conguration > Management
Services > Management Options page. Through the CLI, enter [ no ] system led
brightness { soft | dim | off }. The four settings are shown below.
6After logging in to the virtual access console, you can view the status of various
functions and make conguration changes. Here are some commonly used commands.
Use these commands: To do the following:
show interface Check the status of both wired and
wireless interfaces
show interface mgt0 See the network settings (IP address,
netmask, default gateway) and VLAN ID
of the mgt0 interface
no interface mgt0 dhcp client Disable the DHCP client
interface mgt0 ip <ip_addr>
<netmask>
Set the IP address and netmask of the
mgt0 interface
interface mgt0 native-vlan <id> Set the native (untagged) VLAN that the
switch infrastructure in the surrounding
wired and wireless network uses
show capwap client See CAPWAP client settings and status
capwap client server name
<string>
Set the IP address or domain name of the
CAPWAP server (HiveManager)
capwap client vhm-name <string> Set the VHM (virtual HiveManager) to
which the client belongs
show hive See the hive name
show hive <string> neighbor Check for any neighboring hive members
hive <string> ... Create a hive and set its parameters
show ssid See a list of all SSID names
ssid <string> ... Congure an SSID
interface { wi0 | wi1 } ssid
<string>
Bind an SSID to a wireless interface in
access mode
To see a list of commands, and their accompanying CLI Help, type a question mark ( ? ).
For example, to see all the show commands, enter show ?
If you want to nd a command that uses a particular character or string of characters,
you can do a search using the following command: show cmds | include
<string>, where <string> is the word or string of characters you want to nd.
Device- and platform-specic CLI reference guides are available online. (To learn how
to access them, see "Where to go for more information" elsewhere in this document.)
Bright Soft Dim Off