Back

Compare Products

Hide

Clear All

VS

Home> Support> Downloads>

Ruijie MACC-BASE Private Cloud Implementation Cookbook (V1.0)

2020-02-15 View:


.    SoftwareIntroduction

1.1. Overview

The Ruijie RG-MACC (Managed @Cloud Center) is a revolutionary cloud management platform which supportsunified management and configuration of APs, switches and gateway devicess aswell as value-added marketing features, site survey, etc.

The RG-MACC-BASE is a keycomponent of the RG-MACC, supports device planning, configuration, control,operation and maintenance on cloud, which provides an easy solution tocentrally manage all the Wi-Fi devices.



.    NetworkTopology Requirements

  • MACC-BASE server with enough AP count license
  • A DHCP-enabled network (so any device can obtain an IP address)
  • Model of Access Point can support MACC-BASE since AP version B9P5
  • Connectivity between the Access Point to MACC-BASE server


.    HardwareSupported

Product Type

Product Series

Hardware Model

Minimum Version Required

Access Point

AP130 Series

AP130(W2) , AP130(L)

AP_RGOS 11.1(5)B9P2

AP_RGOS 11.1(5)B9P5

AP520 Series

AP520-I, AP520, AP520(BT), AP520(DA), AP520-I(G2), AP520(W2)

AP_RGOS 11.1(5)B9P2

AP_RGOS 11.1(5)B9P5

AP630 Series

AP630(IDA) , AP630(IODA), AP630(CD)

AP_RGOS 11.1(5)B9P2

AP_RGOS 11.1(5)B9P5

AP720 Series

AP720-I

AP_RGOS 11.1(5)B9P2

AP_RGOS 11.1(5)B9P5

AP740 Series

AP740-I

AP_RGOS 11.1(5)B9P2

AP_RGOS 11.1(5)B9P5

MTFI

M520 Series

RG-MTFi-M520(IZEAA),

RG-MTFi-M520(ILEAA)

MTFI_3.0(1)B3_MTFI-M520-RLIF

Switch

RG-S2910

RG-S2910-24GT4SFP-UP-H

S29_RGOS 11.4(1)B12

RG-S2910C

RG-S2910C-24GT2XS-HP-E

S2910_RGOS 11.4(1)B1P3

RG-S2928G

RG-S2928G-E V3.0

S29_RGOS 11.4(1)B12

 



.    SoftwareInstallation

RG-MACC-BASE_3.1 supports two installation methods: OVF andISO.

4.1. OVFInstall

SystemRequirements

Application

VMware Workstation

OS

Windows 7 / 8 / 10 (64-bit only) server

Device Count

< 1000

1000 to 4000

Above 4000

CPU

4 cores 2.0 GHz

8 cores 2.0 GHz

RAM

8 GB

16 GB

HDD

768GB

1 TB

Remark

-

-

Contact Support

 

InstallationProcedures

1)     ClickFile > Open

 

2)     DownloadMACC-BASE image and unzip the OVF file, then Choose OVF format file on VMware.

 

3)     Set a nameand storage path for the virtual machine.

 

4)     Set thehardware parameter according to your requirements.

5)     Afterinstallation, user can login system console by using account: root/ruijie.

 

Advanced Setting-NetworkSetup

It provides a quick access toNetwork Manager UI for modifying the system IP address, DNS and so on.

1)     Press 1 andgo to network setup UI.

2)     Select “Edita connection” and Choose Edit.

 

3)     Input therelated Ethernet parameters base on network design.

4)    Choose“OK” and “Quit” the Network Manager page.

 

Advanced Setting-SSO Setting

The MACC-BASE enabled SSO andonly allow the user accesses the service from unique IP address, admin user candisable or change the SSO IP/URL by following setting.

1)     Press 2 to modify the SSOsetting

2)     Modify SSO setting byfollowing the prompt.

QQ截图20180118201207


4.2. ISO Install

Ø  System Requirements

*    The following table liststhe minimum hardware and operating system configuration requirements:

Device Count

< 1000

1000 to 4000

Above 4000

CPU

4 cores 2.0 GHz

8 cores 2.0 GHz

RAM

8 GB

16 GB

HDD

256GB

512GB

Bandwidth

(AP Connection)

10Mbps

10Mbps

Remark

-

-

Contact Support

Operation System

CentOS-7-x86_64-Minimal-1511.iso

Download URL: http://vault.centos.org/7.2.1511/isos/x86_64/

*    If the hardware cannotmeet the requirements, the server may not work.

*    Port mapping (This requirement can beskipped if servers use public network IP addresses):

Ensurebelow port numbers are accessible and not be blocked by security equipment:

Internal Port

External Port

Protocol

Mandatory or Optional

Remarks

Port 80

Custom

TCP

Mandatory

HTTP access port

Port 443

Custom

TCP

Optional

HTTPS access port

Port 3478

Port 3478(Fixed)

UDP

Mandatory

For device interaction and Stun learning

Port 3479

Port 3479(Fixed)

UDP

Mandatory

For device interaction and STUN learning

Port 22

Custom

TCP

Optional

Secure shell (SSH) remote login port for the MACC-BASE server.

Do not use Port 22 for mapping. The password for running the operating system must be highly complex to avoid attacks.

Port 8090

Custom

TCP

Optional

MACC-BASE Back-end Management

 

Ø  Disk Partition andDirectory Requirements

The /macc directory is used for saving both MACC-BASEinstallation and running data. This directory is required and assigned 200 GBor more space.

*    Single mass storage disk

If the operating system has been installed and cannot bepartitioned, the /macc directory can be created by running the followingcommand:

[root@localhost ~]# mkdir/macc

*    Multiple disks with no data disk mounted(Take the Alibaba Cloud Computing server as an example.)

Usually, the system has two disks: system and data.

To check the disk status, run the fdisk –l command:

[root@xxxxxxx ~]# fdisk -l

 

Disk /dev/xvda: 21.5 GB,21474836480 bytes 

255 heads, 63 sectors/track,2610 cylinders

Units = cylinders of 16065 *512 = 8225280 bytes

Sector size(logical/physical): 512 bytes / 512 bytes

I/O size (minimum/optimal):512 bytes / 512 bytes

Disk identifier: 0x00078f9c

 

    DeviceBoot     Start        End      Blocks   Id  System

/dev/xvda1  *          1        2611   20970496   83  Linux

 

Disk /dev/xvdb: 429.5 GB,429496729600 bytes 

255 heads, 63 sectors/track,52216 cylinders

Units = cylinders of 16065 *512 = 8225280 bytes

Sector size(logical/physical): 512 bytes / 512 bytes

I/O size (minimum/optimal): 512bytes / 512 bytes

Disk identifier: 0x00000000

 

To check the disk mounting status, run the df command:

[root@iZ28iclrr63Z ~]# df -h

Filesystem     Size  Used Avail Use% Mounted on

/dev/xvda1      20G  2.4G   17G  13% /

/dev/xvdb      394G  275G  100G  74% /macc

If the data disk (/dev/xvdb in the example above) is notmounted, it needs to be formatted and mounted to /macc. The followingprocess is recommended:

mkfs -t ext4 /dev/xvdb

mkdir /macc

mount /dev/xvdb /macc

##Modifying /etc/fstab Automatically mounts the disk upon startup.

vi /etc/fstab            Addinga line at the end.

/dev/xvdb             /macc            ext4     defaults             0      0

/dev/xvdb is added asrequired. Run the df command for confirmation after restarting the server.

*    Multiple disks with the data disk mounted

It is necessary to create the data disk soft link in /macc.

To check the disk mounting status, run the df command:

[root@iZ28iclrr63Z ~]# df -h

Filesystem     Size  Used Avail Use% Mounted on

/dev/xvda1       20G 2.4G   17G  13% /

/dev/xvdb      394G  275G  100G  74% /data

If the data disk is mounted under the /datadirectory, you need to run the mkdir/macc command to create the /maccdirectory. Run the vi/etc/fstab command to mount the data disk to /macc,and then restart the server.

 

Ø  ChangingSystem Time

 

1)    Run command timedatectl to display the current time.

 

2)     Runcommand timedatectl set-timezone xxxxxxx to edit the time zone.

 

3)     Runcommand timedatectl set-time "YYYY-MM-DD HH:MM:SS” to set the time.

*    The new time settings will take effectafter the system is restarted.

Ø  Configuring IPAddresses and DNS Servers

The IP address and DNS server need to be configured beforedeployment and installation.

*    Configuring the IP addresses

Run the ifconfig command to identify the external networkinterface:

[root@localhost ~]# ifconfig

 eth0     Link encap:Ethernet  HWaddr 00:15:5D:5D:27:0B 

         inet addr:172.18.33.67  Bcast:172.18.33.255  Mask:255.255.255.0

         inet6 addr: fe80::215:5dff:fe5d:270b/64 Scope:Link

         UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1

         RX packets:1212674 errors:0 dropped:0 overruns:0 frame:0

         TX packets:1061523 errors:0 dropped:0 overruns:0 carrier:0

         collisions:0 txqueuelen:1000

         RX bytes:1133515990 (1.0 GiB)  TX bytes:1032504656 (984.6 MiB)

 

lo       Link encap:Local Loopback 

         inet addr:127.0.0.1  Mask:255.0.0.0

         inet6 addr: ::1/128 Scope:Host

         UP LOOPBACK RUNNING  MTU:16436  Metric:1

         RX packets:3407442 errors:0 dropped:0 overruns:0 frame:0

         TX packets:3407442 errors:0 dropped:0 overruns:0 carrier:0

         collisions:0 txqueuelen:0

         RX bytes:504690004 (481.3 MiB)  TX bytes:504690004 (481.3 MiB)

         

Take eth0 above as an example. Modify /etc/sysconfig/network-scripts/ifcfg-eth0.Assume that the IP address of Port eth0 is 192.168.23.128 and thegateway IP address of Port eth0 is 192.168.23.1.

vi /etc/sysconfig/network-scripts/ifcfg-eth0

wpsAC19

Set ONBOOT to yes, and BOOTPROTO to static.Add IPADDR (IP address), GATEWAY (gateway), NETMASK (subnet mask), and thenrestart the server.

*    Configuring DNS servers

For example, run the following command to add the server withthe IP address 8.8.8.8 as a DNS server:

echo “nameserver 8.8.8.8”  >>/etc/resolv.conf

 

Ø  Uploading MACC-BASEInstallation Package

The MACC-BASEinstallation package is in ISO format. This section describes how to upload theMACC-BASE installation package to the server, run the mount command to mountthe installation package to /mnt/iso, and to copy the ISO file to the/mnt/install/ directory.

 

UsingFTP/SFTP Tool

CentOS provides a simple tool that enables users to implementdirect interaction between Windows and Linux systems. For details about usingthe tool, see “SecureFXPortable.exe (File Copy Tool)”.

Copy the ISO file to any directory of the server.

Run the mount–o loop /directory for storing the upgradefile/file name/mnt/iso command to mount the ISO file.

For example, to save a file in the home directory, runthe following command:

mkdir /mnt/iso

mount -o loop/home/RG-MACC-BASE_3.1_Build20180126.iso /mnt/iso

Next, to copy the ISO file to the /mnt/install/ directory,run the following command:

mkdir /mnt/install

cp -ar /mnt/iso/* /mnt/install/

 

Usinga USB Flash Drive

Insert a USB flash drive into the USB port.

Run the fdisk –l command to check partitions:


Run the mount -o loop /dev/sdb2 /mnt/ command tomount the USB flash drive to the /mnt directory.

mkdir /mnt/iso

mount –o loop /dev/sdb2 /mnt/iso

Copy the ISO file to the /mnt/install directory.

mkdir /mnt/install

cp -ar /mnt/iso/* /mnt/install/

 

Ø  Deployment andInstallation

Note: Enter commands manually to performinstallation.

As described in“Uploading MACC-BASE Installation Package”, the MACC-BASE installation packagehas been uploaded to the server and mounted to the /mnt/iso directory.The ISO file has been copied to the /mnt/install/ directory.

1)      The following directories will be displayed in the deploymentand upgrade directory:

[root@localhost pkg]# cd /mnt/install/

[root@localhost pkg]# ll

drwxr-xr-x. 4 root root  4096 Aug29 16:43 installpkg

-rwx--x--x. 1 root root 35048 Aug 2916:43 install.sh    <<-----Executed for initialinstallation

2)      Run command install.sh.

[root@localhost install]#./install.sh -len -i 172.18.33.200 <<----Herein, 172.18.33.200 is an external IPaddress.

System version : CentOS-7-x86_64-Minimal

Checking for system ...64-bit

Checking for macc directory...yes

Checking for ppl...no

Installing ppl...

Note 1: Run command chmod to obtain the execution permission ofinstall.sh.

chmod 777 /mnt/install/install.sh

 

Note 2: The following RPM signature warning can be ignored.

warning:

/macc/install_pkg/ RG-MACC-BASE_3.1_Build20180126/installpkg/soft/rpm/kernel-headers-2.6.32-504.1.3.el6.x86_64.rpm:Header V3 RSA/SHA1 Signature, key ID c105b9de: NOKEY

 

Note 3: The following MySQL startup error can be ignored, and does notaffect the installation.

Initializing mysql...

ERROR! MySQL server PID file could notbe found!

Starting MySQL.. SUCCESS!

SUCCESS! MySQL running (2811)

Initialize mysql....................[OK]

Checking for tomcat...no

spawn openssl genrsa -des3 -out./ca/serverkey.pem 2048

 

Note 4: Run the following commands to restart mongoDB if it does notstart normally.

      [root@localhost mongo]# ps-ef|grep mongod  <<------It starts normally if the mongod processexists.

mongod   3810     1  2 13:24?        00:00:00 /usr/bin/mongod -f /etc/mongod.conf

root     3838  2110  0 13:24 pts/0    00:00:00 grepmongodwarning:

 

<<-----If mongoDB is not started,execute the following operation to start mongoDB.

[root@localhost mongo]# rm -rf/var/lib/mongo/*   <<-----Deleting all the files under this directory.

[root@localhost mongo]# service mongodstart   <<-----Starting mongoDB.

Starting mongod: [  OK  ]


4.3. VerifyingDeployment and Installation

 

Ø  Verifying MACC-BASEService

Open the GoogleChrome browser, and enter the URL http://IPaddress or http://IPaddress:port into the address bar to visit the website (the IP address is the actual IPaddress during installation and the default port is Port 80). Enter the accountadmin and password admin (default password) to log in to theMACC-BASE server. For details, see RG-MACC-BASE_3.1 User Guide.

Ø  Verifying Back-endManagement System

Useaccount admin and password admin to log in to the back-endmanagement system (http://IP address:8090). It includes function of Upgrade,HTTPs and Backup.


.   



.   QuickStart

5.1. MACC-BASEAccount Management

MACCprovides 3 different roles for sub-account for admin user to manage systemeasily.

  • Admin: Own the permissions to create sub-account, edit, read.
  • Employee: Own the permissions to edit, read.
  • Guest: Own the permissions to read.

Configure Steps:

1)      LoginMACC-BASE and click Account on top right corner

 

 

2)       Add asub-account and associate to designated group.

 

3)       Login toMACC using this newly created account.

 

5.2. MACC-BASELicense Key

Up to 10 devices are supported by default. You can addlicenses as follows:

1)      Clickthebutton.

2)      Enterthe authorization code, and click  to generate and download the“.dat” file.

Note: After you have bought the authorized MACC-BASE, theauthorization code will be automatically sent to your mailbox.

3)      Importthe “.dat” file to PA system to generate a “.lic” file, and download the“.lic”file. (PA system address: http://pa.ruijie.com.cn:8001/main_software.jsf)

4)      Importthe “lic” file to MACC. 

After the import operation is complete, please refresh thepage. (The default AP license number in MACC-BASE is 10. After 100 licenses areimported, the total license number will be 110)

 

 

5.3. GettingDevices Online

5.3.1.  Adding Devices

AP/Switch

1)     Go to Configuration > Groups

2)     Click on Add Group on lower right corner

3)     Select General Scenario and followthe Wizard to import Serial Number (SN) of APs and Switches.

 

 

 

 

 

MTFI

1)     Go to Configuration > Groups

2)     Click on Add Group on lower rightcorner

3)     Select 4G WIFI Scenario and followthe Wizard to import SIM Card info and MTFI’s Serial Number (SN).

5.3.2.  Configuring Devices

Device can accessMACC-BASE through three methods: DHCP server allocation, CLI configuration andWeb configuration.

*    Please make sure that the device versioncan meet the requirements of MACC-BASE. For details, please refer to MACC-BASE3.1 Release Note.

*    Please check the connectivity betweendevice and MACC-BASE to make sure that the device can go online.

 

Allocating CWMP from DHCPServer (Apply to AP/ Switch )

1)      Run the following commands to configure theDHCP server.

DHCP-Server#conft

DHCP-Server(config)#servicedhcp

DHCP-Server(config)#ipdhcp pool AP

DHCP-Server(config)#network10.10.10.0255.255.255.0           //IP address of device

DHCP-Server(config)#networkdns-server 8.8.8.8 8.8.4.4

DHCP-Server(config)#networkdefault-router 10.10.10.254

DHCP-Server(config)#option 43ascii http://A.B.C.D/service/tr069servlet    //A.B.C.Drepresents the URL or domain name of MACC-BASE

*    Switches cannot obtain IP addressautomatically by default. Please create an SVI and run the ip add dhcp commandto obtain dynamic IP address.

 

2After the dynamic IP address is obtained,the device will send a request to MACC-BASE for going online.

*    Please check the connectivity betweendevice and MACC-BASE to make sure that the device can go online.

 

Configuring CWMP on CLI (Applyto AP/Switch)

*    Before configuration, please run command ap-modemacc to set the running mode of AP to MACC mode.

1) Run the following commands on CLI page to configureCWMP.

Ruijie#conft

Ruijie(config)#cwmp

Ruijie(config-cwmp)#acs url http://A.B.C.D/service/tr069servlet    //A.B.C.D represents the IP address or domain name of MACC-BASE

2) Configure a static IP address, gateway and DNS serverfor the device.

Ruijie#conft

Ruijie(config)#intbvi vlan-id            //AP configuration

Ruijie(config)#intvlan vlan-id           //switchconfiguration

Ruijie(config-if-VLAN-id)#ipadd A.B.C.D  mask      //A.B.C.Drepresents the IP address of device

Ruijie(config)#ipdomain-lookup          //enable DNS lookup

Ruijie(config)#ipname-server 8.8.8.8 8.8.4.4

Ruijie(config)#iproute 0.0.0.0 0.0.0.0  X.X.X.X     //indicatesthe gateway address of device

3) After basic configuration, the device will send arequest to MACC-BASE for going online.

Configuring CWMP on Web UI(Apply to AP/MTFi)

1) Log in to device Web UI with wired connection.

MTFi:192.168.1.1:8888;Password: admin-mtfi

AP:192.168.110.1:80;Username/Password: admin

2) Configure the CWMP URL (http://A.B.C.D/service/tr069servlet) on Advanced > CWMP.

AP:

 

MTFi:

5.3.3.  Online Verification

Log in to MACC-BASEand click Access Point and Switch on MONITOR > DEVICEto check whether the device is online.




.   Configuration Guidance

MACC-BASE3.1 can manage wireless and switch device as listed in release note. And thischapter will introduce configuration examples for each function.

6.1. WirelessDevices

6.1.1.   WIFIConfiguration

Inthis section will introduce how to create SSID for AP and MTFI device.

AccessPoint

InWiFi Setting page, MACC-BASE support wireless basic functions as follow:

·       Authentication: Open, PSK, Dot1x with 3rdparty radius server, WiFidog authentication

·       SSIDAdvanced Setting:SSID QOS, Bridge/NAT working mode, Band Steering, Seamless authentication

·       RadioSetting:Maximum Connectors

·       Security: Web Login Password,Wireless Attack Defence

·       AdvancedFeatures:Whitelist, CLI Command Batch Delivery

 

1)       Choose CONFIGURATION-> WIRELESS->Basic in designated device group

2)       Click “+”to create a SSID for the devices under this group

3)       In SSIDsetting page, user can create an SSID and fill in related parameters based oncustomer requirements.

WLAN ID: Sequencenumber to represent SSID ID (Up to 32 SSID is supported, there may bedifferences between diverse models)

Hidden:Choose disable broadcasting SSID or not

SSID: WiFiName

Forward Mode:

NAT mode or bridge mode. NAT mode: AP will workas a router and DHCP pool to provide IP address for terminal stations.

Bridge mode: AP will work as a switch andpassthrough all traffic. It requires the user to fill in specific VLAN ID forSTA.

(If not familiar with existed network design,NAT mode is recommended)

Encryption Mode:

OPEN: Open SSID and password is not required

WPA-PSK: Use WPA algorithm to encrypt SSID andpassword is required

WPA2-PSK: Use WPA2 algorithm to encrypt SSIDand password is required

WPA2-Enterprise(802.1x): Dot1x authenticationand external radius server is required

Radio: generally,Radio 1 represent 2.4Ghz and Radio 2 represent 5Ghz.

Band Steering: detect clients capable of 5GHz operation and steers them to that frequency which leaves the more crowded2.4 GHz band available for legacy clients. (Please ensure 5G Radio Interface isenabled)

Rate limit per Client:Upload and download speed limitation for each client on this SSID

Rate limit by SSID:Total throughput (upload & download) on this SSID

Auth:

Portal Server URL: external wifidog portalserver URL for user login

Portal IP: Portal server IP address

Portal Port: Port number for landing pageredirection. Default is 80

Gateway ID: Gateway ID value for wifidog

Seamless Online: Seamless auth on STA connectedto SSID second time. Authentication server supports seamless feature isrequired.

Idle Client Timeout:User will be kicked if low traffic or no traffic passthrough in specific period

 

4)       Turn on theRF and fill in Max Clients value as required

*    The Max Clients of each Radio Interface is32 by default.

5)      ClickSave on the top right corner to save all changes and take effect

 

AdvancedSetting

Web Password

This setting enables user to edit WEB UI andincrease security level.

Isolation

Client Isolation is to isolate all traffic(unicast, multicast, broadcast) for each user.

WirelessIntrusion Detection

WirelessIntrusion Detection can monitor STA behavior and prevent damage to networkcaused by anonymous hacker.

 

Whitelist

Whitelist feature can bypass those addresses ortraffic on the list before STA completes authentication process.

CLI Command

CLI Command provides a window for user to execcli setting which not be support in MACC-BASE UI.

MTFI

Pleaserefer “RG-MTFI Implementation Cookbook” on official website.

 

 

 

 

 

 

6.1.2.   LayoutPlanning

LayoutPlanning allows user to import floor plan to MACC-BASE and binds AP to specificlocation as deployment.

ChooseCONFIGUARTION->Layout and click Config Layout to add floor plan to MACC-BASE

 

1)    Drag theAP from un-bond AP list to floor plan to bind AP to specific location

 

6.1.3.   LoadBalance

MACC-BASEload balance feature can dynamic allocate STA to each AP equally in highdensity scenario.

1)      Click Addon CONFIGUARTION->Load Balance to create load balance group

 

2)      Click editicon to add access point into load balance group and turn on groupstatus.

 

 

 

6.1.4.   RFSetting

TheRF Setting provides a global setting of wireless country code, bandwidth andintelligent channel/power planning.

RadioSetting

Countrycode enables you to specify a particular country of operation and it ensureseach radio’s broadcast frequency bands, interfaces, channels, and transmitpower levels are compliant with country-specific regulations. Frequencybandwidth determine how many non-overlap channels can be used for your AP toreduce RF interference.

Thebest practice for user experience is 2.4GHz in 20MHz, 5GHz in 40MHz.

 

http://twimgs.com/networkcomputing/news/2013/10/graphic-80211-acChannels-all.png

AutoPlanning

AutoPlanning works as a smart RRM function. It can help user to evaluate networkchannel and power status and provides recommended parameters by its intelligentalgorithm.

Custom Channel:Allows user to select specific channel for channel planning

Recent RF Scan History:Records all scanning history and recommended value after scanning

Schedule Settings: Periodicscanning setting for access point

In-Service Scan (Quick Scan):

·       TheWiFi service won't be interrupted during scanning process.

·       Thescanning result may not include all interference.

Out-of-Service Scan (Deep Scan):

·       Theresult will cover almost all WiFi interference.

·       TheWiFi service will be interrupted during scanning process (disconnect andreconnect) and it will take around 30 minutes

Sync to Device: Whethersync the recommended setting to APs after scanning

 

ManualPlanning

ManualPlanning enables user to select designated AP and change the channel and powersetting.

*    Only AP740-I can support Radio 3 setting

6.1.5.   Roaming

MACC-BASEroaming function allows STA from AP-1 subnet A roaming to AP-2 subnet B (L3roaming) seamlessly. Once user turns on the roaming button, L3 roaming abilitywill be enabled.

 

*    L2 roaming is enabled by default (OPEN, PPSK).For web authentication, seamless authentication function should be turned on toimproving roaming user experience.

 

6.1.6.   BlueTooth

BlueToothis used for the AP which supports iBeacon feature to broadcast iBeacon signal.

1)       Click “Add”to iBeacon parameters to designated AP. Or click “Import” for batchconfigure.

2)       Fill in APserial number (needs to be online) and iBeacon parameters which are provided byiBeacon service provider.

3)       Verify byusing “nRF Master Control Pannel” APP on Android phone.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

6.2. SwitchDevice

1) Click designated switch on MONITOR > Switch.

2) Click General or Advanced to configurethe switch.

 

6.2.1.   PortSetting

Port setting enablesuser to manage switch interface, including port status, speed, VLAN and SVI.

1)       Click edit button on General page ofdevice detail.

2)       Modify interface setting as required.

 

6.2.2.   VLANSetting

1)       ClickAdd VLAN to create VLAN/SVI.

 

2)       Fillin VLAN info and bind to corresponding interface.

6.2.3.   AdvancedSetting

The advanced setting for switch includes system log, SNMP, NTP,DNS, NFPP and IGMP snooping.



.   Maintenance& Upgrade

7.1.          HTTPS Certification Import

LoginMACC-BASE back-end system(HTTP://MACC-IP:8090) and click HTTPS toimport custom HTTPS certification to HTTPS access.

*    The key value is the private key of SSLcertificate.

 

 

7.2.                           MACC-BASE Firmware Upgrade

LoginMACC-BASE back-end system(HTTP://MACC-IP:8090) and click Upgrade toimport tag.gz format file to upgrade MACC-BASE. It will take around 30 minutes tofinish upgrade process.

AP Firmware Upgrade

MACC-BASEcan manage all devices firmware version (Access Point, Switch) through WEB UIand enables admin user maintain devices software easily.

1)      Click UploadFirmware on MAINTENANCE->Firmware

2)      Select designateddevice to upgrade firmware version on Upgrade page and click Upgrade.

 

3)      Chooseschedule upgrade or execute the upgrade immediately.

7.3. Monitoring

7.3.1.   AP/MTFIStatus

ClickAccess Point serial number to monitor AP running status, including AP info, CPU& Memory usage, connectivity record, traffic, RF setting and interference.

7.3.2.   SwitchStatus

ClickSwitch serial number on switch list to monitor AP running status, including switchinfo, port status, CPU & Memory usage, connectivity record, traffic, devicelog.

 

7.3.3.   STAStatus

Clickclient mac address to view client details, including client info, traffic,delay, RSSI and connect record.

 

 

7.4. AlarmSetting

MACCsupports AP exception alarm function, when AP offline, working on high channelutilization, AP state unstable, it will trigger the mail alarm function onMACC-BASE.

1)    Fill in the mail server setting on System Settingpage.

2)    Enable the alarm function and turn on the mailingfunction on Alarm Setting.

3)    Create contacts and group for those who receiving mailalarm on Contact Page

4)    Edit the Group Contacts and Add the contacts intothis group.

 

5)     Binding the Contact Group to this organization on alarm settings and savethe setting.

7.5. Customization

Usercan customize MACC-BASE background image and notification message on MACC-BASE.

1)    ClickPersonalize on the top right corner to modify the background image.

2)     Add a promptmessage on Notification page.

 

7.6. Log

7.6.1.   OperationLog

OperationLog records all operation info.

7.6.2.   ConfigLog

ConfigLog lists down the status of device configuration. If the device stucks on notsync state, user can check the configuration delivery status by clicking thedetail button.

7.6.3.   UpgradeLog

Devicesfirmware upgrade history will be listed on this page.

7.6.4.   ClientLog

Client History logs in clientlog page, and user can export client info base on days, traffic, hours.

7.6.5.   ConnectionLog

Connection Log is theconnection record between MACC-BASE and managed devices. If the device isabnormal, it’s recommended to check connection history on this page.

7.7. DiagnosisTool

MACCsupports Advanced troubleshooting, CLI access to devices to perform advanceddebugging.

 

1)      Go to Monitoring Page > Access Point /Switch.Click More and select Diagnosis Tool.

 

 

2)      Use General->RunningConfig” to verify the AP setting.

3)      Use “Connection->Ping tool” to check the Internetconnectivity.

4)      Use “WLAN->MBSSID” to verify the broadcast SSID

5)      Use “User->Associated Client” to check the onlineuser.

 



.   FAQ-FrequencyAsked Questions

Deployment

 

What should I check if MACC-BASE service is not runningafter installation?

Followbelow checklist to ensure each item meet the requirement.

·       CentosOS version: CentOS-7-x86_64-Minimal-1511.iso

·       Physical/Virtualplatform meet minimum hardware resource

·       PortMapping is required in NAT environment, refer MACC-BASE installation guide

·       Disablebuilt-in firewall on Cent OS: systemctldisable firewalld.service

·       Restartfollow services with Linux commands on console or restart the server

  tomcat:  ./macc/install/tomcat/bin/startup.sh

  mysqld:  service mysql start

  mongod: mongod -f /etc/mongod.conf

 redis:    redis-server /etc/redis/redis.conf

 zookeeper:./macc/install/zookeeper-3.4.9/bin/zkServer.shstart

     activemq: ./macc/install/apache-activemq-5.13.1/bin/activemqstart

·       Collectservices running log on server. Folder path is /tmp/ServiceMonitor.log

 

Ifabove checklist cannot solve your problem, please contact Ruijie support.

 

How can I change the system time on MACC-BASE?

Usercan select designated time zone when creating device group, but the system timein MACC-BASE is relied on CentOS system. The following link will show you howto change the system time under CentOS.

http://www.putorius.net/2015/04/setting-time-and-date-in-red-hat-7.html

 

The URL of MACC-BASE will redirect to intranet IP with SSOwhen I access from Internet.

MACC-BASEis enabled SSO by default and which only allow user access the WEB service fromunique entrance. We provide a script to change related settings If user needsto NAT WEB service to Internet or modify SSO URL/IP address.

1)     Download thescript from below link.

https://unifi.ruijiecloud.com/index.php/s/rQ2RVLFGrL4g1X3

2)     Upload to CentOSserver and authorize exec permission.

Command: chmod 777config_sso.sh

3)     Execute thescript and follow the prompts to complete SSO setting.

Command: ./config_sso.sh

 

Why my AP cannot go online on MACC-BASE?

·       Verifythe MACC server URL on System Setting->Basic Settings withsuper admin account. The URL should point to MACC-BASE server IP address.

·       Ensuredevices (AP and Switch)’s versions are up to date.

·       Connectivitybetween APs and MACC-BASE (Port:80/443),internet access and DNS setting are required.

·       Verifywhether the device’s serial number was added to MACC-BASE or not.

·       Usecommand “show cwmp config” on device’s CLI and check whether the CWMP URL andCWMP Interval(180s) are correct.

 

 

Configuration

The AP is online but stuck on “Not Synced” status.

·       Ensure devices(AP and Switch)’s versions are up to date.

·       Usecommand “show cwmp config” on device’s CLI and check whether the CWMP URL andCWMP Interval(180s) are correct.

·       Check thesetting push status on MAINTENANCE->Config Log. And click detailfor execution status.

If above steps cannot solve the problem,you can use command perform factory-reset for testing.

Command: AP(config)#apm factory-reset

Wireless STA shows IP address “0.0.0.0” on Client List

Thereare 2 possibilities may cause this problem:

·       Notraffic flow upload to AP after client connected

·       It willtake around 5 minutes to refresh the data on MACC-BASE

 

Could MACC-BASE support multi-tenant?

Bydefault, the multi-tenant function on MACC-BASE is disabled, customer cancontact Ruijie Support to enable this feature if needs. And MACC-BASE supportsmulti-account to manage organization.

 

 

 

 

How to choose 2.4GHz and 5GHz Radio interface for AccessPoint?

·       Radio1 represent 2.4GHz

·       Radio2 represent 5GHz

 

 

 

How to disable WEB portal page after user roaming to otherAPs?

InWEB authentication scenario, user can enable “Seamless Online” function on SSIDpage for seamless roaming.

 

Wireless STA cannot roam to other APs.

TheMACC-BASE is enabled L2(same subnet) roaming by default.

For SSIDin NAT mode or L3 roaming, it’s required to select “NAT Roaming Address PoolConfiguration” for roaming DHCP pool and enable Roaming feature on Wireless-Roamingpage.

From AP’s log, reaching the maximum online number of radio andSTA cannot go online.

Adjustthe Max Client value on MACC-BASE to support more users on radiointerface.

Maintenance

User cannot receive mail alarm from MACC-BASE

Itneeds to verify below setting:

·       ConfigureSMTP server on System Settings-Advanced Settings

·       Ensurethe connectivity between MACC-BASE server and SMTP service

·       Verifywhether the mail address of user account is correct or not

 

How to use WEB CLI for device on MACC-BASE?

Choose designated device and click More->DiagnosisTool

 

How to configure the function which MACC-BASE doesn’tsupport?

Click CLI Command on CONFIGUATION–>Basicand add the command that needs to be configured.

How do you like this document ?

Suggestion


(0/255)

Can we contact you to discuss your suggestion?

Privacy Policy
Thank you. We will inform you of our response as soon as possible.
Thank you again for your valuable input!
This page will be closed in 5 s…
Submit
Document Questionnaire
We sincerely invite you to fill in this questionnaire on Ruijie document acquisition and user experience.
No
Yes

Ruijie Networks websites use cookies to deliver and improve the website experience.

See our cookie policy for further details on how we use cookies and how to change your cookie settings.

Cookie Manager

When you visit any website, the website will store or retrieve the information on your browser. This process is mostly in the form of cookies. Such information may involve your personal information, preferences or equipment, and is mainly used to enable the website to provide services in accordance with your expectations. Such information usually does not directly identify your personal information, but it can provide you with a more personalized network experience. We fully respect your privacy, so you can choose not to allow certain types of cookies. You only need to click on the names of different cookie categories to learn more and change the default settings. However, blocking certain types of cookies may affect your website experience and the services we can provide you.

  • Performance cookies

    Through this type of cookie, we can count website visits and traffic sources in order to evaluate and improve the performance of our website. This type of cookie can also help us understand the popularity of the page and the activity of visitors on the site. All information collected by such cookies will be aggregated to ensure the anonymity of the information. If you do not allow such cookies, we will have no way of knowing when you visited our website, and we will not be able to monitor website performance.

  • Essential cookies

    This type of cookie is necessary for the normal operation of the website and cannot be turned off in our system. Usually, they are only set for the actions you do, which are equivalent to service requests, such as setting your privacy preferences, logging in, or filling out forms. You can set your browser to block or remind you of such cookies, but certain functions of the website will not be available. Such cookies do not store any personally identifiable information.

Accept All

View Cookie Policy Details

Contact Us

Contact Us

How can we help you?

Contact Us

Get an Order help

Contact Us

Get a tech support