Author : Aditi

Introduction Web Shell is an online interface to remotely log into an AP via SSH. With the 10.0 release, an administrator or a superuser can open Web Shell for a specific access point (AP) from CloudVision Wi-Fi (CVW). Web Shell is helpful to troubleshoot AP issues, especially if an AP is behind a NAT. The URL for the Web Shell is specific to an AP. You can bookmark the URL to open a shell session to the AP directly instead of opening the shell session from CVW. Depending on the limit defined in the config parameter, you can open concurrent...
Continue reading →

Introduction Okta is an identity management service that is primarily built for the enterprise cloud but it is also compatible with many on-premises applications. Using Okta, you can authenticate and manage employee access to any application or device (network access). Okta supports following methods to onboard Wi-Fi and wired clients: Okta On-premises Radius Agents (wired and wireless) O-Auth Integration with Okta (wireless only) Arista supports both these methods; however, this article focuses only on wireless clients (called as clients hereafter) on-boarding using Okta OAuth. Call Flow The following call-flow is used for Okta OAuth: Administrator configures the Okta OAuth application...
Continue reading →

Introduction With the release 10.0, you can now use a VLAN Name to specify the SSID VLAN. One VLAN Name can be mapped to multiple VLAN IDs. By doing this, an SSID can have the same VLAN name mapped to different VLAN IDs for different locations. This mapping is called SSID VLAN Mapping and you can perform the mapping from SSID settings. Another mapping is the Location-based VLAN mapping, where the VLAN ID is mapped to a VLAN Name at a specific location. Note: If both the mappings are present, then the Location-based VLAN mapping takes preference over the SSID...
Continue reading →

Introduction With the 10.0 release, CloudVision Wi-Fi (CVW) supports monitoring the performance of web-based enterprise applications (such as Email applications, HR and Project Management applications, Intranet, Online Drive, and others) along with the existing VOIP-based applications such as Zoom, Hangouts, and others. Arista APs capture essential details of the TCP flows of a web application and send it to the server to determine the health of the application. If the overall health is calculated as poor, CVW displays the percentage of application experience for the duration. A lower percentage indicates a poor application experience whereas a higher percentage indicates a...
Continue reading →

Quality of Experience for Web-Based Applications VLAN Name Mapping to VLAN IDs Tagging mDNS Packets Authenticate Users Using Okta in Captive Portal Access Point Web Shell AP Health

Description With the 9.0 release, Arista access points (APs) now support the Enhanced Open security protocol with Transition Mode that is built for open networks. Enhanced Open is based on Opportunistic Wireless Encryption (OWE), which provides over-the-air encryption of data, but no authentication. OWE is supported only in 802.11ax APs such as C-260, C-250, C-230/C-230E, and O-235/O-235E. However, if you enable Transition Mode with OWE, clients that don’t support OWE can also connect to the OWE SSID using the Open protocol. OWE with Transition Mode is an SSID setting. In CloudVision Wi-Fi (CVW), you can configure OWE with Transition Mode...
Continue reading →

Description With the release 9.0, the Remote Access Point (RAP) solution enables organizations to extend their Enterprise SSIDs to an Arista AP installed at a remote worker’s home office or a small branch office. The RAP solution uses industry-standard protocols to securely connect the remote AP deployed at a workplace with the enterprise data center over the public Internet. The Network Administrators configure the APs with appropriate security and settings, and handover the APs to remote employees. Remote employees simply have to install the AP at their location and get connected to the broadcasted Enterprise SSID. All communication between the...
Continue reading →

Remote Access Points Service Impact of Configuration Changes Turn Access Point Radios On or Off Access Point Communication with RADIUS Server via Tunnel Enhanced Open (OWE) with Transition Mode

Description With the 8.9 release, Arista APs now support the WPA3 Wi-Fi security protocol. WPA3 is supported only in 802.11ax access points (APs) such as C-250, C-230, and O-235. WPA3 has two types — WPA3 Personal and WPA3 Enterprise. WPA3 Personal is typically meant for home users. Its robust password-based authentication and 128-bit data AES encryption provides stronger security and protection than WPA2. WPA3 Personal provides protection against attacks such as offline dictionary attacks that attempt to guess passwords. WPA3 Enterprise has an option to use 192-bit encryption and it is meant for enterprises and office networks where the need...
Continue reading →

Description With the 8.9 release, you can schedule the firmware update of Arista access point (APs) for a particular location. By scheduling your update, you can strategically choose the time and duration of updating APs with least impact to your network usage. For example if your offices remain closed during weekends, you can choose to update your access points during weekends so that your employees are least impacted with the update. You can schedule an update of existing APs at a location as well as automatically update new APs that get added to that location. The schedule can be a...
Continue reading →

Description With the 8.9 release, Arista APs now support the Enhanced Open security protocol built for open networks. Enhanced Open is based on Opportunistic Wireless Encryption (OWE). It is supported only in 802.11ax access points (APs) such as C-230, and O-235. Open SSID networks are widely used in coffee shops, shopping malls, airport lounges, and enterprise guest networks, and they offer minimum or no data security to client devices. OWE offers data security to your clients with encrypted sessions. OWE is an SSID setting. In CloudVision Wi-Fi (CVW), you can configure OWE from the Security tab in the SSID settings....
Continue reading →

Description With the 8.9 release, you can locate a specific access point (AP) or client that is added to a floor plan from CloudVision Wi-Fi (CVW). For example, you can use this feature to locate a rogue AP or client in your floor plan. However, you can’t locate multiple devices or clients. CVW locates an AP or client based on the triangulation method. You can locate a device from the following places in CVW: FLOOR PLANS MONITOR > Wi-Fi > Clients MONITOR > Wi-Fi > Access Points MONITOR > WIPS > Managed Wi-Fi Devices MONITOR > WIPS > Access Points...
Continue reading →