THE BLOG ★ Ramblings on WiFi & stuff.

So, I got my ACCP

Estimated reading time: 4 minutes, 10 seconds. Contains 836 words

Today I passed my ACCP v6.0 Exam (Aruba Certified ClearPass Professional). I’ve been working on ClearPass Policy Manger (CPPM) since early 2013 and I have to say I really enjoy deploying this solution, but I totally forgot about the exam this Monday. I was a little nervous on Friday after I got back from the Wireless LAN Professionals Conference. I never test well, so even though I have several deployments under my belt I was still wondering how many questions I’d miss just from not reading them correctly, or pure nerves. Well, fortunately I passed with a pretty decent grade and can add another bunch of letters to my name!

I have to say CPPM is quite a large beast to tangle with and the first training class I took did not instill confidence. I remember taking this class in late 2012 and thinking after we were done that I spent a week on a product and I still don’t know anything about it. I mean I had an idea of what it did, but it felt more like a week-long sales training class than a technical deep dive.

So, along comes my first deployment and it’s for a large non-profit with a pretty complex network. Also, very smart people so it’s not like I could pull the wool over their eyes! :-) I honestly had no idea how to move ahead with this project. But, sometimes those are the projects that force you to focus and get the job done. And I did. I dug through some really limited not-so-great documentation (at the time), and even had support from the great Matt Sidhu, and Kaveh Mehrjoo at Aruba (Matt’s no longer there).

Fortunately, Aruba had figured out that their existing training was wholly inadequate for getting qualified implementers out on the streets. They started an advanced CPPM Workshop that was invite only (I think - could be wrong) to get partners up to speed. The class was a week long at their Sunnyvale campus. It was in the ClearPass engineering department so we literally had direct access to them. I mean we could call over the cubicles to them of we needed to. And of course they had several on hand just for the training. So, in the midst of the project we postponed for a week so I could go to the workshop.

The workshop consisted of all of us arriving for a briefing on Monday morning. The briefing was a faux school district that was presenting their requirements for the CPPM (802.1x, OnBoarding, Integrating Cisco WLC and IP Phones, Guest Access, OnGuard, AirGroup sharing, etc.). Our job - in groups of two - was to complete a successful working deployment by the end of the week. So, that’s what we did. We would start on each piece, have a break-out session to go over the deliverables and best practices and then, BOOM! You’re off!

It was the hardest training class I think I’ve ever taken. Most of us worked until 8, 9, sometime 10pm each night (Aruba was kind enough to leave the lights on for us) and we loved it! So, basically without using a customer as our lab (as I had begin to do) each of us were able to go through the pain and glory of a full deployment. Not only did I meet some awesome people there among the trainees and Aruba employees I got deep into CPPM in a way you normally can’t in a standard training course.

I have to hand it to Aruba. They were in a pickle. They had this fantastic product that was so deep, so powerful, so complex that partners couldn’t do the deployment on there own. Believe me - as a partner - professional services is where it’s at. If you have to bring in the manufacturer to deploy you’ve already lost a big chunk of your income (and stake) in the project. But, Aruba’s Advanced Workshop was exactly what they needed to do. A real “deep-dive” into a product where you not only get hands-on, but you get access to the people who built it, and work on it everyday. At the end of the week you really felt like you had a handle on CPPM. Not experts mind you, but at least you knew you were ready to tackle an enterprise project and come out the other end alive.

Coming back to the customer site afterwards was night and day. I had a mental handle on what we were doing. It wasn’t easy as it was still my first deployment, but at least now I had the tools to figure out what and how things needed to be done. Talk about trial by fire!

I would love to see this kind of approach across other products and vendors. Especially with deep, complicated products like ClearPass. I don’t know if this approach works with every product, but I can say I’ve never been to anything like that class and it would be a shame if I never did again.

How to Perform a PCAP with Aruba Instant AP

Estimated reading time: 1 minute, 7 seconds. Contains 224 words

So, this guy at WLAN Pros Conference says, “I wish I could do a packet capture on Aruba Instant”. This other guy says, “I don’t think they can do that”. I say, “Oh, yes, they can.” The other guy say, “Really? Are you sure?” And I say, “Absolutely. I think. Hold on.”

So, I proceed to login to my knowledge base, download, and then e-mail the first guy this PDF that PROVES - beyond a shadow of a doubt - that I am nobody’s fool!

I was wrong.

Wrong, wrong, wrong, wrong, wrong…

Or, so I thought! I sent him the wrong document. Turns out you CAN do pcap on Aruba Instant I just didn’t know that I didn’t know what I was talking about.

Anyways. here’s how it’s done. I stole it from Aruba AirHeads.

- - - - - - - - - - - - - - - - -

Make sure you’ve upgraded to the latest version of Instant OS so you can use the pcap command to do the wireless packet capture on the IAP.

Run the Aruba version of Wireshark on the PC, on the capture interface, select ARUBA udp-port=5555

SSH into IAP

Use “pcap start <base bssid> <ip address of PC with Aruba version of Wireshark installed> <port> 0 1518”

Use “show pcap” to check the active pcap session

Use “pcap stop <base bssid> <pcap-id> to stop the capture

WLPC Attendee Gift Bag

image

image

This is what you missed for not coming to the 2014 WLAN Pros Conference!

  • Aruba AP-225
  • Aerohive BR-100
  • Airtight AP
  • Metageek Eye P.A. AND Chanalyzer Pro w/ Cisco CleanAir AND DBX Pro
  • Linksys AC580 WiFI USB NIC
  • 802.11ac… The Book! (Not to be confused with 802.11ac… The Movie!
  • WildPackets OmniPeek
  • Rat River Software Pack
  • Access Agility Software Pack
  • Ekahau Site Survey AND Adapter
  • Custom WLAN Pros Carrying Case
  • 32GB USB Flash-drive
  • an Aruba Networks Airheads T-Shirt.

Hope I didn’t miss anything. Time to have some fun!

WLPC Conference, Austin

image

Estimated reading time: 1 minute, 21 seconds. Contains 271 words

I’m at the first annual (hopefully) WirelessLAN Professionals Conference in Austin, Texas and this is my first blog post. So, I guess that makes this my first blog. I’m a little nervous that people will find out I’m a phony, not all that professional, and may say something stupid. Actually, I’ve already done that so I probably shouldn’t worry about it anymore.

I’ve been looking forward to this event for months. Since my love affair with WiFi started a few years ago I’ve been eager to learn. Fortunately, thanks to Twitter I’ve been able to grow in my knowledge by following so many wonderful people that are part of the wireless community. The chance to meet many of these people at an event specifically geared around this new passion was one I was not about to miss.

I haven’t been disappointed. We’ve had interesting sessions. We received a ridiculously great “schwag” bag (if you can call $10k of professional WLAN tools schwag). We’ve gotten to enjoy really cool TED-style, 10-minute “Ten-Talks”. But, most of all I’ve gotten to meet and experience great people.

I don’t know of any “Industry” event I’ve ever been to that is more about relationship building, equipping, and training people to do what they love. Maybe we’re still in the “Wild West” of WiFi. Maybe we’re just the vocal minority, but it really makes you feel like you’re at cusp of some big secret that nobody knows and I get to be part of it. I’ll be able to say, “I was at the first one. And I got to see @wifinigel get his CWNE!”

Crud, I have to get some sleep.