Central Automation Studio v1.17

System Architecture

The system is designed in two pieces. The WebUI (where you are reading this documentation from) and an API Proxy Server.

The WebUI uses Javascript to make API calls to the API Proxy Server. The API Proxy Server converts those Javascript requests into Python API calls and makes the call to Aruba Central, returning any data back to the WebUI for processing in Javascript.

Multiple API Proxy Servers exist for speed and redundancy. The API Proxy Server used depends on the Central instance being communicated with:

• APAC-based Central Cluster = https://api.wifidownunder.com (Hosted in Sydney - Azure Australia East)
• US-based Central Cluster = https://api-usw.wifidownunder.com (Hosted in Washington - Azure US West 2)
• EU-based Central Cluster = https://api-euw.wifidownunder.com (Hosted in Amsterdam - Azure Europe West)

API Proxy Server Accessibility is available in the footer of each page All API credentials are maintained in the local storage of your web browser. The API Proxy service does not store any credentials, data or logs from your use of the WebUI to communicate with Aruba Central. The API Proxy Server then uses Python to communicate with Central and return the API response back to the WebUI.

Navigation

The above image shows the general navigation bar layout. The Options menu includes

• Help = This documentation page
• Settings = Configuration page for accessing the Central API

Settings

The Settings page allows for control over this site. Central accounts are added in the Settings page using the information gathered in the Overview section. Multiple accounts are supported.
The additional settings below the account table allow for customisation of the Central Automation Studio experience:

• Naming Conventions
• Auto Device Naming Format - Format used when using "auto" device renaming
• Template Hostname Variable - The variable used in templates to configure device hostnames
• Switch Port Variable - The variable used to describe switch ports in templates when renaming switch ports
• Global Settings
• Refresh Interval (minutes) - How often Central Automation Studio will refresh data when left open
• Client Monitoring - Are Client details downloaded? ("Do Not Include" improves performance at the loss of client information/statistics)
• Group Properties - Are Group properties fetched or just group names? ("Do Not Include" improves performance of large numbers of groups)
• AirMatch - All RF Events - Are "All" RF events downloaded for AirMatch? ("Do Not Include" improves performance on large networks with lots of RF events - channel changes, radar, noise)
• QR Code Colour - Colour used when generating QR codes
• QR Code Logo - URL for a custom logo when generating QR codes

Hydra

The Settings page supports adding more than one Central account. These accounts can reside in multiple different Central Clusters.

The Hydra dashboard displays high-level information about each account:

• Clients
• Access Points
• Switches
• Gateways
• Sites

Sites can all be clicked on to display additional details about that accounts site health.

Clicking "Go To Account" for an account allows for the rest of the Central Automation Studio functionality to be used against the selected account.

The Breadcrumb in the top left (Central Automation Studio > Account Name) allows the ability to return to the Hydra Dashboard from the individual account dashboard.

The Hydra Dashboard is only shown once more than one account is added in Settings.

Dashboard

The dashboard page is the launching page to the different modules as well as providing overview information into the information available in Aruba Central. The top section of the page displays the following pieces of information:

• Clients
• Access Points
• Switches
• Gateways
• Sites
• Groups

Each of these tiles can be clicked on to display a table with further information. The tables are searchable and sortable. Clicking on a row will open a new window/tab to display the device or client in Aruba Central. The icon colour on each of these details the status of the devices/sites in the content for each tile.

Universal Search

The information within the overview information tiles is searchable from the universal search box in the navigation bar at the top of the page.

Automated Workflows

Below the overview information tiles, there are tiles to launch the different workflow modules supported by Central Automation Studio:

• CSV Upload Workflows
• Site Workflows
• MSP Workflows (only visible if the Central account is MSP enabled)

Configuration Deployment

There are tiles to launch the different deployment modules supported by Central Automation Studio:

• Group Configuration
• WLAN Deployment
• User Role Deployment
• MPSK-Local Deployment
• Authentication Server Deployment
• Switch Deployment
• Gateways
• Country Codes

Central Services

Tiles to launch the different Central Services modules supported by Central Automation Studio:

• AirMatch
• ClientMatch
• Device Inventory

Monitoring Features

Tiles to launch the different Central Services modules supported by Central Automation Studio:

• Client Statistics
• AP Statistics
• AP Rebooting
• IPAM Monitoring

Experimental Features

These are the tiles for features that are "in the works" and not fully fleshed out:

• AOS-Switch Template Config
• AP Troubleshooting

Management Tasks

• Group Management
• Add Sites

CSV Upload Workflows

The CSV Upload workflows are all based around the selection of a CSV file. There is a sample CSV file available for download here.

CSV Format

The CSV format requires the following header names:

• SERIAL
• MAC

The workflows support more optional header names:

• DEVICE NAME
• LICENSE
• GROUP
• SITE
• ZONE
• RF PROFILE
• RADIO 0 MODE
• RADIO 1 MODE
• RADIO 2 MODE
• DUAL 5GHZ MODE
• SPLIT 5GHZ MODE

Behaviour Notes:

• If the DEVICE NAME is not included, the device renaming workflows will skip that device during the processing
• If the LICENSE is missing, the device is assumed to be assigned a Foundation license of the correct device type (AP, Switch, Gateway)
• If the GROUP is missing for any device, the WebUI will ask you to select a Group. This group will be used for any device with a missing Group value in the CSV
• If the SITE is missing, the device will be skipped when assigning devices to a Site
• If the ZONE is missing or is equal to "-", the device will be skipped when assigning an AP Zone to an Access Point
• If the RF PROFILE is missing or is equal to "-", the device will be skipped when assigning an RF Profile to an AOS10 Access Point
• If any of the RADIO 0/1/2 MODE values are missing or is equal to "-", the device will be skipped when assigning a radio mode for that particular radio to an Access Point. RADIO 2 MODE is only applied to supported AP Models (AP-555, AP-635, AP-655)
• If the DUAL 5GHZ MODE value is missing or is equal to "-", the device will be skipped when assigning Dual 5GHz mode for that Access Point. Config is only applied to supported AP Models (AP-340 Series)
• If the SPLIT 5GHZ MODE value is missing or is equal to "-", the device will be skipped when assigning Tri-Radio (Split 5GHz) mode for that Access Point. Config is only applied to supported AP Models (AP-555)
• Skipped devices will be listed in the Log for the task/automation.

Let's look at the tasks and automations one by one:

Individual Tasks

Add Devices

Adds all devices from the CSV to Central using the MAC and SERIAL data in the CSV.

Archive Devices

Archives all devices from the CSV in Central using the SERIAL data in the CSV.

License Devices

Licenses all devices in the CSV with the appropriate license:

• Foundation
• Advanced
• WLAN (for AOS10 WLAN Gateways)
• Foundation-Base (for SD-Branch Gateways)
• Foundation-Base + Security (for SD-Branch Gateways)
• Advance-Base (for SD-Branch Gateways)
• Foundation + Security (for SD-Branch Gateways)
• Advanced + Security (for SD-Branch Gateways)
If the LICENSE is missing for a device (or all devices) in the CSV, it is assumed a Foundation license will be assigned. The values in the list above are supported in the CSV for values (not including the parts in brackets)

Unlicense Devices

Unassigns the current licenses from all devices in the CSV (using the SERIAL column)
CSV download from Central Device tables is supported for the upload format. Simply filter in Central for the devices you want to unassign licenses for and download the CSV from Central.

Move Devices to Group

Moves devices to the group assigned in the CSV. If the GROUP is missing for a device (or all devices) in the CSV, you will be asked to select a Group to move those devices without a GROUP value to.



Missing Group Selection

Move Devices to Site

Moves devices to the Site assigned in the CSV. If the SITE is missing for a device (or all devices) in the CSV, the device will not be assigned a device. The device will be listed in the Log for the task. For site assignment to work, the device needs to have contacted Aruba Central - you can not assign a site to a newly added device before it has contacted Aruba Central.

Rename Devices

Uses the DEVICE NAME column in the CSV file to rename devices in Aruba Central. If the DEVICE NAME is missing for a device (or all devices) in the CSV, the device will not be renamed. Supported renaming scenarios:

• AP in a UI Group
• Switch in a Template Group - using "_sys_hostname" variable. A different variable name can be designated in the Settings page - "TEMPLATE HOSTNAME VARIABLE"
Currently, Gateways and Switches in UI Groups are not supported.

Auto Rename Devices

Uses the "Auto Device Renaming" naming convention in the Settings page to rename devices automatically. Supported renaming variables:

• site
• initials
• model
• number
• switch
• port
Site = Full site name, Initials = Site name initials, Model = AP Model, Number = Sequential AP Number per Site, Switch = hostname of the uplink switch, Port = connected port number on the switch.
Naming variables need to be enclosed in double curly braces e.g. {{site}} or {{model}}


Devices in template groups are also supported. The default variable name used for the hostname is "_sys_hostname". A custom variable name can be designated in the Settings page - "TEMPLATE HOSTNAME VARIABLE"

Set AP Zones

Uses the SERIAL and ZONE columns in the CSV file to set the AP Zone on the corresponding Access Points in Aruba Central. If the ZONE is missing, or is equal to "-" for an AP (or all APs) in the CSV, the device will not have the AP Zone set.

Set RF Profile

Uses the SERIAL and RF PROFILE columns in the CSV file to set the RF Profile on the corresponding AOS 10 Access Points in Aruba Central. If the RF PROFILE is missing, or is equal to "-" for an AP (or all APs) in the CSV, the device will not have the RF Profile set. If the RF Profile name supplied in the CSV is not configured in the Group for which the AP is configured, the "default" RF Profile is assigned.

Set Radio Mode

Uses the SERIAL, RADIO MODE columns (RADIO 0 MODE, RADIO 1 MODE, RADIO 2 MODE) and DUAL 5GHZ MODE in the CSV file to set the mode on the corresponding radio on Access Points in Aruba Central.
If the RADIO MODE is missing, or is equal to "-" for a radio on an AP (or all APs) in the CSV, the AP will not have the mode set for that particular radio.
The supported values for each of the RADIO MODES are (the values are not case sensitive):

• Access
• Monitor
• Spectrum
• Off - disables the radio for the AP
The supported values for the DUAL 5GHZ MODE are (the values are not case sensitive):
• Automatic
• Enabled
• Disabled
The supported values for the SPLIT 5GHZ MODE are (the values are not case sensitive):
• Enabled
• Disabled

Enable 2.4GHz radios

Uses the SERIAL column in the CSV file to enable the 2.4GHz radio on the corresponding Access Points in Aruba Central.

Disable 2.4GHz radios

Uses the SERIAL column in the CSV file to disable the 2.4GHz radio on the corresponding Access Points in Aruba Central.

Update Device Variables

Updates/Sets variable values for a device in a template group. Utilizes additional columns in the CSV to configure template variables for devices. The following column names mappings apply:

• DEVICE NAME -> _sys_hostname
• IP ADDRESS -> _sys_ip_address
• SERIAL - Ignored
• MAC - Ignored
• GROUP - Ignored
• SITE - Ignored
• LICENSE - Ignored
Any other column name is directly mapped to a variable name for the device.

Update Switch Port Descriptions

For APs in the CSV, this task updates the switchport name variable for its connected switch with the DEVICE NAME from the CSV. The switchport name variable used is configured in the Settings page.
The following is an example of the template configuration to utilize this task (using the variable "int1_name" for interface 1):

interface 1
   %if int1_name%
   name %int1_name%
   %endif%

This example would use the following naming convention in the Settings page: "int{{number}}_name".

For AOS-S Switches in UI Group, port renaming is now available as well. UI Groups use APIs to modify the switchport names - not variables. As such the "switchport name variable" is not used for UI Groups.

Automated Tasks

The automated tasks are the individual tasks linked together. Refer to the descriptions above for each individual task.

Site Workflows

The Site Workflows are based are selecting an existing site. Currently available Site based workflows are detailed below.

Auto Rename Devices

Uses the "Auto AP Renaming" naming convention in the Settings page to rename APs automatically. Supported renaming variables:

• site
• initials
• model
• number
• switch
• port

Site = Full site name, Initials = Site name initials, Model = AP Model, Number = Sequential AP Number per Site, Switch = hostname of the switch, Port = connected port number on the switch.
Naming variables need to be enclosed in double curly braces e.g. {{site}} or {{model}}

Devices in template groups are also supported. The default variable name used for the hostname is "_sys_hostname". A custom variable name can be designated in the Settings page - "TEMPLATE HOSTNAME VARIABLE"

Update Switch Port Descriptions

For APs in the site, this task updates the switchport name for its connected switch with the AP name. The switchport name variable used is configured in the Settings page.
The following is an example of the template configuration to utilize this task (using the variable "int1_name" for interface 1):

interface 1
   %if int1_name%
   name %int1_name%
   %endif%

This example would use the following naming convention in the Settings page: "int{{number}}_name".

For AOS-S Switches in UI Group, port renaming is now available as well. UI Groups use APIs to modify the switchport names - not variables. As such the "switchport name variable" is not used for UI Groups.

Update AP Country Codes

This task configures the Virtual Controller(s) Country Code to match that of the selected Site address - ensuring that each site uses the correct Tx Power limits and Channels.

Enable Split-5GHz Mode (AP-555)

This task configures each AP-555 on the site to be enabled for Tri-Radio Mode.

Enable Dual-5GHz Mode (AP-340 Series)

This task configures each AP-340 Series AP on the site to be enabled for Dual 5GHz Mode.

Automated Tasks

The automated tasks are the individual tasks linked together. Refer to the descriptions above for each individual task.

Tests

Physical Layer Information

This test uses the APs on the selected site to obtain the connected switchport. The table displays the switch view of the wired connection to each AP. Table includes:

• AP
• Status of the wired link
• Connected Switch
• Port Number
• PoE Consumption
• Port Speed
• Duplex Mode
• In Errors
• Out Errors
• Actions

The Actions supported are:

• PoE Bounce
• Interface Bounce
• Cable Test (only supported on AOS-S switches)

MSP Workflows

MSP Workflows are available if the Central account is enabled for MSP mode.

The MSP Upload workflows are all based around the selection of a CSV file. There is a sample CSV file available for download here.

CSV Format

The CSV format requires the following header names:

• SERIAL
• MAC

The workflows support more optional header names:

• LICENSE
• CUSTOMER

If the LICENSE is missing, the device is assumed to be assigned a Foundation license of the correct device type (AP, Switch, Gateway).
If the CUSTOMER is missing for any device, the WebUI will ask you to select a Customer. This group will be used for any device with a missing Customer value in the CSV.
Let's look at the tasks and automations one by one:

Individual Tasks

Add Devices

Adds all devices from the CSV to Central using the MAC and SERIAL data in the CSV.

Assign Devices to a Single Customer

Assigns all devices to a single customer. Customer is selected from a dropdown list of the current Customers.

Assign Devices to Customers

Moves devices to the Customer assigned in the CSV. If the CUSTOMER is missing for a device (or all devices) in the CSV, you will be asked to select a Customer to move those devices without a Customer value to.

License Devices

Licenses all devices in the CSV with the appropriate license:

• Foundation
• Advanced
• WLAN (for AOS10 WLAN Gateways)
• Foundation-Base (for SD-Branch Gateways)
• Foundation-Base + Security (for SD-Branch Gateways)
• Advance-Base (for SD-Branch Gateways)
• Foundation + Security (for SD-Branch Gateways)
• Advanced + Security (for SD-Branch Gateways)

If the LICENSE is missing for a device (or all devices) in the CSV, it is assumed a Foundation license will be assigned. The values in the list above are supported in the CSV for values (not including the parts in brackets)

Automated Tasks

The automated tasks are the individual tasks linked together. Refer to the descriptions above for each individual task.

Management Tasks

Add Customer

Creates a new Customer.

Download Inventory

Downloads the device inventory to a CSV. Fields included in the download are:

• Customer
• Serial Number
• MAC Address
• Device Type
• Model
• Status
• Uptime
• IP Address
• Device Name
• Group
• Site
• License Assigned

Group Configuration

The Group Configuration allows for the modification of the wireless configuration for a selected group. This allows for entry/modification of configutration that doesn't yet have a UI knob in Central.

Note: Background updating of the monitoring data is disabled on this page to ensure group lists are not modified whilst editing the group configuration. Use the refresh button in the top right to refresh the data in the page.

WLAN Deployment

The WLAN Workflows are designed to show the ability to modify WLAN configurations via API. The currently supported workflows are detailed below.

Passphrase Configuration

Provides the ability modify the PSK used by a selected WLAN/SSID. Additionally, the generation of a QR Code is available - to allow for easy client configuration for WP2-PSK SSIDs.

Note: WLAN configuration requires the WLAN Configuration API enabled on to automatically obtain the passphrases (PSK) used on WLANs being migrated. Reach out to your Aruba SE about getting this API enabled.
You can alternatively use the Group Configuration which does not attempt to obtain the PSK used in the WLANs.

WLAN Configuration

Provides the ability modify the WLAN configuration used by a selected WLAN/SSID, and select which Groups to make the WLAN available in. This makes copying WLAN configuration from one UI Group to another simple.

Note: WLAN configuration requires the WLAN Configuration API enabled on to automatically obtain the passphrases (PSK) used on WLANs being migrated. Reach out to your Aruba SE about getting this API enabled.
You can alternatively use the Group Configuration which does not attempt to obtain the PSK used in the WLANs.

User Role Deployment

The User Role Deployment workflows support the creation and modification of User Roles for Access Point UI Groups in Aruba Central. AOS10 is currently supported in underlay deployments only.

This feature includes:

• Adding/Modifying User Roles
• New User Role creation
• Manual CLI view/editing of the user role ACLs
• Ability to select multiple Groups to which to deploy the user role to
Note: Deploying a user role with a duplicate name to a Group will overwrite the existing user role in that Group.

• Removing User Roles
• User Role removal from selected groups
• Removal matches on the role name only (not role contents)
• User Role is removed from the Groups selected only
Note: If the User Roles exists in other groups (but not selected for removal) the User Role will remain in those Groups.

MPSK-Local Deployment

The MPSK-Local Deployment workflows support the creation and modification of MPSK-Local passphrases. QR Code generation is available when passphrases are created or modified

This feature includes:

• New MPSK creation
• Modifying of existing MPSK passphrases
• Removing of existing MPSK passphrases
• Generating QR Code for simple connection using the MPSK (only available for "Known MPSKs")
• Bulk upload of MPSKs using CSV

Notes:

• Modifying an MPSK in an MPSK Pool will update that passphrase for all WLAN/SSIDs that use that MPSK Pool in the selected Group.
• Removing an MPSK from a pool will remove it for all WLANs/SSIDs using that MPSK Pool in the selected Group.
• "Known MPSK" is an MPSK that is either created or edited in Central Automation Studio. The configuration from Central does not provide the MPSK - these unknown MPSKs are shown as "********".

Authentication Server Deployment

The Authentication Server Deployment workflows support the creation and modification of Authentication Servers for Access Point UI Groups in Aruba Central. AOS10 is supported in underlay deployments only.

Phase 1 of this feature includes:

• Adding/Modifying Authentication Servers
• New Authentication Servers creation
• Manual CLI view/editing of the Authentication Server
• Ability to select multiple Groups to which to deploy the Authentication Servers to
• Note: Shared Secret keys, and other passwords (CPPM) will need to be re-entered to deploy the Authentication Server config. (This information is not accessible via API calls)
Note: Deploying a Authentication Server with a duplicate name to a Group will overwrite the existing Authentication Server in that Group.

• Removing Authentication Servers
• Authentication Servers removal from selected groups
• Removal matches on the Authentication Server name only (not Authentication Server contents)
• Authentication Server is removed from the Groups selected only
Note: If the Authentication Server exists in other groups (but not selected for removal) the Authentication Server will remain in those Groups.

Switch Deployment

The Switch Deployment workflows support of variables for Switch Template Groups in Aruba Central.

Phase 1 of this feature includes:

• Syncing of Stack variables from Commander switch to Member switches - just select a switch stack!
Note: This ensures that whichever switch becomes the Commander, the configuration will remain consistent. Syncing simplifies the variable management, as variables only need to be added to the commander switch and then this feature can be used to sync the variables to the member switches on demand.
• Verify if you have any missing or extra variables defined on a switch in the Template Switches section

Gateway Deployment

The Gateway Deployment workflows support of configuration for Gateways using Config Snippets.

Select the Group or Device and enter the structured CLI commands. The following should be noted:

• CLI snippets in structured format - just like what you would enter on the CLI
• "no" commands are acceptable, but are subject to the same limitations as with the CLI (eg, it's not possible to delete config that's in use/referenced)
• In order to go back one step you have to enter an exclamation mark - ! (just as if we were pasting the whole confing via ssh).

Country Code Deployment

The Country Code Deployment workflows support configuration of AP Country Codes.

• Group based config – select any number of Groups from the table (filtering works as well), select the Country Code and go
• Site based config – works for IAP clusters at the site (supports multiple clusters per site). Select any number of sites, and go. The tool pulls the country from the Site in Central and uses that to set the country code – no need to manually select the country code! Config is made at the Virtual Controller level
• Virtual Controller based - select any number of VCs from the table (filtering works as well), select the country code and go

Accessing the Country Code Deployment page is available from the Dashboard and from the AP, Site and Group overview tables (at the top of most pages)

Note: AOS10 APs can currently only be set using the Group based config.

AirMatch

The AirMatch page provides the ability to force AirMatch to "run now" in different modes, as well as display various information from AirMatch:

• Latest AirMatch optimization information
• Previous 10 AirMatch optimizations (clickable for more details)
• Channel Usage (Primary Channel usage)
• EIRP Distribution
• AirMatch Events
• AirMatch History
• Static Radios

The Static radio table supports "Unfreezing" AP radios by using the action button in the right of the table - setting them back to be managed by AirMatch.

The "Freeze AP Radios" button at the bottom of the Static Radio table enables changing an AP from AirMatch/ARM managed into a static channel and power configuration. This allows for an AP to have its current channel and power configuration to be set as the static settings for that AP (somewhat like the AOS 6.x ARM Maintain mode)

ClientMatch

The ClientMatch page for AOS10 Deployments provides the ability to enable/disable ClientMatch and the ClientMatch Load Balancer, as well as display various information from ClientMatch:

• The state of ClientMatch can be controlled by clicking on the state buttons
• Unsteerable Clients - with the ability to remove the client from the unsteerable list
• Recent ClientMatch events
• ClientMatch Statistics Graphs

The Unsteerable Clients table supports "Make Steerable" by using the action button in the right of the table.

The ClientMatch Statistics Graphs display various statistical information about the recent Steering attempts made by ClientMatch

The ClientMatch service control requires the Central Customer ID for your account to be entered in Settings. The Central Customer ID can be found in the account menu in the top right of Central.

Device Inventory

The Device Inventory page supports viewing, filtering and downloading of the Device Inventory in Aruba Central. All table columns are sortable and filterable. The search function supports multiple search terms across any column.

Device Inventory Actions currently support:

• Download Inventory
• Downloading the "Device Inventory" will download a CSV containing the filtered results in the table. The CSV can then be used in the CSV Workflows section
• Move to Group
• The "Move to Group" action will move all devices in the filtered results in the table to the selected Group
• Move to Site
• The "Move to Site" action will move all devices in the filtered results in the table to the selected Site

Licensing Monitoring

The License Monitoring provides the ability to see the current state of all the subscription keys, as well as export the subscription key information to a CSV containing the filtered results in the Subscription Keys table. Status Key:

• - Valid Subscription Key
• - Expiring within the next 30 days
• - Expired Subscription Key

Central Licenses are now also checked during normal background monitoring for any upcoming license expiry (within the next 30 days). A notification will be posted if any are found.

Monitoring Features

This section contains a handful of additional Monitoring features, including Client Statistics, AP Reboot and IP Address Management Monitoring.

Client Statistics

The Client Statistics page is also accessible from the bottom of the Clients table. The following statistics for clients are supported:

• Client Operating System
• 802.11 version support (Mix)
• Band Split (2.4Ghz vs 5GHz vs 6GHz)
• Authentication Type
• Randomized MAC Addresses
• 802.11k support
• 802.11v support
• 802.11r support

Each section of the graphs is clickable and will display the matching clients in a table.

Access Point Statistics

The Access Point Statistics page is also accessible from the bottom of the Access Points table. The following statistics for APs are supported:

• AP Models
• Overview stats for Memory Utilization, CPU Usage, 2.4/5/6Ghz radios that are down
• 10 APs with the most Clients
• 10 APs with the lowest Uptime (with a Troubleshooting action button - processing the "show ap debug system-status" and providing easy access to crash logs)
• 10 APs with the highest Memory Utilization (with a Reboot action button)
• Firmware

Each section of the graphs is clickable and will display the matching clients in a table.

AP Reboot

The AP Reboot page is also accessible from the bottom of the Access Points table. The following is supported:

• Reboot of an entire Virtual Controller Cluster
• Reboot of multiple Virtual Controller Clusters
• Reboot of individual APs
• Reboot of multiple individual APs
• Multi-select is supported (using the checkboxes in the first column)

Use the checkbox at the top of the first column to select everything that is visible – this works nicely with the Search function at the top right of the table. Filter down the APs/VCs list to what you want and then click the select all.

IPAM Monitoring

The IP Address Management Monitoring provides the ability to see which IP addresses (Inner IP Pools and Shared DHCP Pools) are assigned to Microbranch APs.

Experimental Features

AOS-Switch Template Configuration

The AOS-Switch Template Configuration provides the following GUI abilities for AOS-Switches configured using templates:

• Add VLANs
• Edit existing VLANs
• Edit DNS Servers

Feature Notes:

• Templates with and without variables are supported
• Variables in existing templates are dynamically learned and modified
• If variables are not used in a template, the template is directly modified (e.g. in the case where you use a template per switch)
• VLANs created using this feature will utilize variables for IP address, Tagged and Untagged ports. VLAN Name will be written to the template
• VLANs can be configured with no IP Address, DHCP or a Static IP
• If "uplink" ports has been configured for the switch in Aruba Central, the uplinks will be automatically included in the tagged VLANs list
• Template configuration for VLANs created in this feature have the following structure:

  vlan 50
     name "Test VLAN"
     %if vlan50.untagged%
     untagged %vlan50.untagged%
     %endif%
     %if vlan50.tagged%
     tagged %vlan50.tagged%
     %endif%
     %if vlan50.ip%
     ip address %vlan50.ip%
     %endif%
     exit
  

• IP Address variable (vlanX.ip) will contain both the IP Address and the Subnet Mask

• Template configuration for DNS Servers created/managed in this feature have the following structure if variables are being used for System settings:

  %if dns1.ip%
  ip dns server-address priority 1 %dns1.ip%
  %endif%
  %if dns2.ip%
  ip dns server-address priority 2 %dns2.ip%
  %endif%
  

• DNS server configuration (dnsX.ip by default) will use existing variables if they exist in the template.
• If statements will be added to the template automatically if variables are being used

 

AP Troubleshooting

The AP Troubleshooting provides the ability to easily obtain troubleshooting information for specific APs. Important information is presented at the top of the troubleshooting panel, while the full command output is available in the "Raw Output" section. If there is a crash log for the AP, an easy "download" button is provided.

From a searchable list of Access Points, the following troubleshooting actions/commands are currently supported:

• System - "show ap debug system-status"
• 5GHz - "show ap debug radio-stats 1"
• 2.4GHz - "show ap debug radio-stats 0"

Only radios that are up are listed in the actions. The 3rd radio in tri-radio APs is currently not supported due to lack of CLI commands being available.

Management Features

Group Management

The Group Management page provides the following abilities:

• Visualize the Group Properties
• Clone a Group
• Bulk configure Firmware Compliance per Group
• Currently, APs, AOS-Switch and Gateways are supported. AOS-CX support will come when APIs are available
• Firmware compliance is intelligently configured for the selected groups that have the correct allowed devices on the Group. E.g. AP firmware compliance will not be set on a group that does not include APs
• Provides quick link to configure Country Codes for Groups

 

Add Sites

The Add Sites provides the quickly add Sites, either manually or using a CSV upload. Sites can be added either using street addresses or Geo-coordinates

Change Log

Changes/Additions to Central Automation Studio will be documented below:

Version 1.17 (2022/09/28) - "Spectrum Access"

• ClientMatch Improvements
• Added RSSI for the From, To and Destination APs
• Added Radio MAC and Band of the APs to the From, To and Destination APs columns as a tooltip
• Added 11v result to the tooltip for the ClientMatch result column
• Statistics Graphs for recent ClientMatch steers
• New CSV workflows
• Support for Radio Modes bulk config (Access, Monitor, Spectrum) using RADIO 0 MODE, RADIO 1 MODE, RADIO 2 MODE columns in the CSV
• Support for Dual 5GHz Mode bulk config (Automatic, Enabled, Disabled) as part of the Radio Modes workflow for the AP-340 Series
• Support for Tri-Radio (Split 5GHz) Mode bulk config (Enabled, Disabled) as part of the Radio Modes workflow for the AP-555
• New Automated workflow combining AP Hostname and Radio Modes: Rename APs + Update Radio Modes
• New Site workflows
• Support for Dual 5GHz Mode bulk config for all AP340 Series APs that are part of the selected site
• Support for Tri-Radio (Split 5GHz) Mode bulk config for AP-555 that are part of the selected site
• Improved support for 6GHz APs and Clients (AirMatch, ClientMatch, AP Statistics)
• Added the ability to see the list of the APs with issues on the AP Statistics page (Clickable tiles)
• Added setting for not including "All" AirMatch RF Events. This is due to UI performance when there is a large amount of events on the network over time. If the AirMatch page is freezing/stalling then set this to "Do Not Include"
• Updated Documentation and Icons

Version 1.16.1 (2022/09/24)

• ClientMatch Steering History fix to display entries

Version 1.16 (2022/09/09) - "Statistically Speaking"

• Access Point Statistics have been added
• UI tweaks to highlight which areas of Central are being displayed on a page
• Device lists from overview tiles now support searching/filtering on device status (Up and Down)
• Added support for setting RF Profiles for AOS10 APs in the CSV Workflows

Version 1.15.1 (2022/09/08)

• Added support for custom hostname variable when renaming template group devices
• Added restrictions to variables names to match allowed characters in Central
• Fix for uploading variables (updating Hostnames, Experimental Switch config, etc)

Version 1.15 (2022/09/02) - "Compliance"

• Group Management support has been improved
• Consolidated Group Management features into new tile
• Added Firmware Compliance Bulk configurations - Support for CX switches is coming soon...
• Settings are now saved on change. No need to remember to hit the "Save and Go to Dashboard button" after changing a setting

Version 1.14.3 (2022/08/22)

• Site creation now supports using Latitude and Longitude instead of street addresses. Supported in both bulk site creation and single site creation
• CSV Upload Workflows now support enabling/disabling of 2.4GHz radios

Version 1.14.2 (2022/08/18)

• Group listing in the overview tiles now displays the different Group Properties. An option has been added to the Settings page to exclude the Group Properties for speed and API call savings on accounts with lots of Groups

Version 1.14.1 (2022/08/04)

• Gateway Config now includes buttons to view the current committed and effective configurations for the selected Group/Device
• AP Troubleshooting - Added Uptime to AP Table
• MPSK Local - Added fix to prevent duplicate MPSK key names
• Auth Servers now refresh after adding new Auth Server

Version 1.14 (2022/07/21) - "Like and Subscribe"

• Licensing Monitoring support added for viewing and exporting subscription keys

Version 1.13 (2022/07/18) - "Round the World"

• Country Code config for APs
• Easily enable or disable SSIDs in the WLAN Deployment page
• More WLAN config details in the WLAN Deployment table
• MSP Inventory download now available in the MSP page
• MSP Inventory now obtains monitoring information from each tenant to provide more detailed information in the device tables
• MSP Device API calls updated
• Background updates no longer occur when the page isn't visible - saving API calls

Version 1.12.6 (2022/07/09)

• Improved feedback when adding Devices using CSV Workflows
• Any MAC Address format now supported in CSV workflows (No need to have the colon separated format)

Version 1.12.5 (2022/07/05)

• Additional feedback in the event of a failing Central API has been added
• Improved API Proxy reachability testing

Version 1.12.4 (2022/06/30)

• QR Code customization added - Colour and Logo can be changed in Settings

Version 1.12.3 (2022/06/29)

• Client Operating System graph added to Client Statistics page
• Fixed AirMatch EIRP graph display

Version 1.12.2 (2022/06/24)

• Fix for Group table error on MSP Workflow page
• Added MSP logo (if one is configured)
• Reduced API calls used to obtain MSP data

Version 1.12.1 (2022/06/23)

• AP Zone workflows now use "ZONE" for the column name. Change was made to match the CSV export from Central device list. Sample CSV has been updated as well
• Global protection for empty rows in CSVs

Version 1.12 (2022/06/22) - "Happy Snap"

• MSPK-Local management support added
• Ability to generate (and download) QR Codes for Wi-Fi configuration for clients - available in WLAN config and MPSK-Local config
• AP Troubleshooting (Phase 1) is available in the Experimental Section

Version 1.11.2 (2022/06/16)

• Fix for Gateway config not showing list of Groups and Gateways

Version 1.11.1 (2022/06/11)

• Hydra Dashboard trade-off!
• (+) Clients column now shows Wireless/Wired split with Connected and Failed To Connect Status
• (+) Speed increase. Overview data for APs, Switches and Gateways with large accounts now loads just as fast as small accounts
• (+) Reduced API Call usage
• (-) APs, Switches, Gateways no longer display device lists when clicked on - That detail is now only available in the Account view

Version 1.11 (2022/06/10) - "Action Jackson"

• Updated branding to Central Automation Studio (matching GitHub/Docker version)
• Added Troubleshooting tools to the Physical Layer Information in the Site Workflows
• Added Actions to the Device Inventory
• Notifications are now always on top of all popovers - improving readability
• Fix for log messages not appearing on some pages

Version 1.10.4 (2022/06/08)

• Improved loading of WLAN Group config when using accounts with large numbers of groups (no longer pre-fetching WLAN config)
• Improved loading of Group information when using accounts with large numbers of groups (33% Faster)
• Added the ability to obfuscate the Client Secret and Tokens in the Settings page
• Moved the Save button in Settings to a more visible location

Version 1.10.3 (2022/05/31)

• Added support on the Dashboard for cloning Groups - including upgrading to the ArubaOS 10 architecture
• Fix for muddled AP Model information when auto-renaming APs (GLCP related)

Version 1.10.2 (2022/05/24)

• Change of API used to get Client information - now using the Unified Clients (Wired/Wireless) API
• Tooltips added to Graphs

Version 1.10.1 (2022/05/17)

• CSV Workflow result notification improvements
• Workaround for GLCP Inventory response inconsistencies when licensing Devices

Version 1.10 (2022/04/30) - "Back Office"

• Device Inventory Visibility and Exporting support added
• Up to 50x improvement in API calls used when assigning devices to Groups (CSV Workflows)
• Code improvements to improve code portability
• Bug fix for IPAM Monitoring DHCP Table loading error
• Bug fix for Client Monitoring setting not being saved correctly
• Fix for GLCP API limits on certain APIs
• Updated documentation graphics and links

Version 1.9.5 (2022/04/20)

• Improvements to AirMatch Charts

Version 1.9.4 (2022/04/19)

• Rudimentary Page Analytics have been added. A simple page hit counter is now attached to each page - to help guide development resources

Version 1.9.3 (2022/03/23)

• Error Log is now just Log. It contains more information than before, including information level log messages - not just errors. Errors are coloured in red and start with a "-". Log is be auto displayed if an error occurs. Log is available in the menu bar on the top right

Version 1.9.2 (2022/03/18)

• Added support for bulk Device Archiving using CSV workflows
• Updated API calls for Adding Devices automation
• Improved error handling for Adding Devices automation
• IPAM Monitoring now lists actual pool names (not IDs), and displays number of clients per subnet for DHCP pools
• Client Health details as a tooltip now listed failed client reason

Version 1.9.1 (2022/03/15)

• Fix for downloading Device Inventory - now pulls data from correct APIs, and includes all APs (not just IAPs)

Version 1.9.0 (2022/03/14) - "Many Names"

• Update Switchport names now supported on AOS-Switch in UI Groups. This is available in CSV Upload Workflows and Site Workflows - Available with Central 2.5.5
• Proxy Server in use now marked in bold in the footer
• UI tweaks
• Support for downloading entire Device Inventory as CSV - available in the Management Tasks section on the Dashboard

Version 1.8.5 (2022/03/01)

• Added Health details as a tooltip to the Status column on the Lists (Clients, APs, Switches and Gateways)

Version 1.8.4 (2022/02/28)

• Proxy Server status now available in the footer of every page. If proxy servers are unavailable, check accessibility directly via clicking on the proxy status in the footer

Version 1.8.3 (2022/02/15)

• Proxy Server failover is now implemented site-wide. Note: Previous users may need to perform a hard-refresh of the pages to force the Javascript to reload in the browser (Shift key + Page reload)

Version 1.8.2 (2022/02/10)

• Improved Proxy Server scalability and response times by adding additional nodes (1 in the US and 1 in Europe)

Version 1.8.1 (2022/02/09)

• Improvements to error handling when adding devices via CSV

Version 1.8.0 (2022/02/01) - "Match Maker"

• New Central Services section in the dashboard featuring:
• AirMatch
• ClientMatch
• AirMatch Improvements
• Added support for Freezing and Unfreezing radios
• Added support for different run now types in AirMatch
• Improved display of the latest AirMatch optimization
• Improved handling of RF Domains and Partitions in the optimization details
• Last 11 AirMatch optimizations are now available - Latest one + 10 more in the table!
• Improved discoverability of viewing the latest optimization details
• AirMatch Events now filter out events where channel and bandwidth do not change
• ClientMatch
• Added support for controlling the ClientMatch service in AOS10
• Added Central ID in the account settings. This is needed for some API calls (starting with ClientMatch)

Version 1.7.5 (2022/01/16)

• Gateway Config Snippets support added
• Improvements to IP Address Management Monitoring. Now shows the Pool information as well

Version 1.7.4 (2022/01/10)

• IP Address Management Monitoring support added
• Improved discoverability of Client Statistics and AP Reboot by adding tiles to the Monitoring Features section
• Improved legibility of deep links in tables (now in bold)

Version 1.7.3 (2022/01/05)

• Workaround for Safari related Regex bug

Version 1.7.2 (2021/12/22)

• UXI Status for the Sites table now links deep links to the UXI Dashboard
• AP List now denotes if an AP is the Virtual Controller
• AirMatch Optimization details table features a tooltip of valid channels for any given radio (Channels that were available to be selected from for that particular radio)

Version 1.7.1 (2021/12/17)

• Fixed sorting of AirMatch tables based on Date
• Added ability to view AirMatch Optimization details - just click on the row in the "AirMatch Last Run" table
• AirMatch History removed
• AirMatch Radar & Noise Events added
• Additional information in the AirMatch Events table
• AirMatch Channel Usage is blank due to an issue with the associated API
• Fix for missing information from Central that could throw an error in the Client table

Version 1.7.0 (2021/12/14) - "Many Reboots"

• Added support for rebooting of multiple APs at the same time
• Improved notifications for status

Version 1.6.1 (2021/12/12)

• Fixed a bug that could stop Auto Renaming Access Points from working

Version 1.6.0 (2021/12/03) - "Many Arms"

• Hail Hydra!
• Support for multiple accounts
• Bug Fixes/Improvements
• Physical Layer Information (Site Workflows) no longer lists Mesh Point APs and correctly displays switch hostname
• Experimental Switching fixes for changes in Central 2.5.4
• Client, Device, Groups and Site lists now are clickable only from the Name column - deep linked to Central
• AI Insights in the Sites list is now clickable - deep linked to Central
• Client Statistics now includes support for 6GHz clients and Randomized MAC Addresses
• Dark mode improvements
• Template Switching fixes that stopped switches being listed
• AirMatch API response differences corrected
• Corrected an issue where groups might listed twice

Version 1.5.4 (2021/11/24)

• Large reduction in API calls to assign and un-assign licenses - now an API call per license type being assigned/un-assign, not per device

Version 1.5.3 (2021/11/17)

• Improvements for Central 2.5.4

Version 1.5.2 (2021/10/27)

• Added support for Unlicensing Devices in CSV Workflows

Version 1.5.1 (2021/10/25)

• Exposed the ability not include Client Monitoring (i.e. not get Client information) in Settings
• Not including Client Monitoring is recommended for networks with lots of clients
• Not Including reduces API calls
• Not Including doesn't cache Client Monitoring data in local browser storage (Can hit limitations of local storage in browsers)
• Deep links to Central from Client and Device tables now works with Central 2.5.4

Version 1.5.0 (2021/10/22) - "Heavy Lifting"

• Group Configuration editing support added
• Under the hood improvements for upcoming features
• Changes relating to Central 2.5.4 support

Version 1.4.5 (2021/10/01)

• Client Statistics are now clickable - showing the selected clients that match the statistic

Version 1.4.4 (2021/08/26)

• Reduction in API calls to obtain client and device lists
• Improvements in AP Zone notifications/error logging
• Groups with commas (,) in the group name are now skipped - due to API limitation. (unfortunately...)
• Ground work for upcoming features

Version 1.4.3 (2021/08/23)

• Select all groups in WLAN deployment now works as expected

Version 1.4.2 (2021/08/19)

• Improvements in handling when the daily API limit is exceeded
• Improvements in handling paginated API content (reduction in calls)

Version 1.4.1 (2021/08/18)

• AOS-Switch Template Configuration improvements
• UI Improvements
• DNS Server support added (under System tab) for two DNS Servers
• AP Zone support in CSV Workflows

Version 1.4.0 (2021/07/12) - "Frankenstein"

• Experimental Features (aka Beta Features!)
• AOS-Switch Template Configuration

Version 1.3.6 (2021/07/09)

• Dark Mode support added
• Dashboard tweaks to improve readability

Version 1.3.5 (2021/07/02)

• Improvements to saving the Settings - now redirects back to the Dashboard

Version 1.3.4 (2021/07/01)

• Added support for US-WEST4, EU-2 and EU-3 Central Clusters
• Fix for licensing devices when no license type was specified

Version 1.3.3 (2021/06/23)

• Supported added for Wired Client authentication type in Client Statistics

Version 1.3.2 (2021/06/22)

• Added support for Canada-1 Central Cluster

Version 1.3.1 (2021/06/07)

• Switches using Templates - Variable Verification

Version 1.3 (2021/06/06) - "Rollout"

• Dashboard layout improvements
• Stacked Switches using Templates - Variable Syncing
• Global Config Deployment support added
• WLAN Deployment
• User Role Deployment
• Authentication Server Deployment

Version 1.2.1 (2021/05/24)

• User Role Removal from Group is now supported

Version 1.2 (2021/05/24)

• User Role Deployment tile added

Version 1.1.6 (2021/05/23)

• Fix for incorrect client count

Version 1.1.5 (2021/05/18)

• Site Creation
  • Single Site creation
  • Bulk site creation - Sample CSV available

Version 1.1.4 (2021/05/16)

• Reductions in API calls
• Caching of monitoring data in local storage of the web browser to reduce API calls on every page load
• "Add Devices" task now works in a single API call for all devices being added

Version 1.1.3 (2021/05/14)

• Improvements in adding devices from CSV (now supports MAC addresses without colons)
• Improved protection against poorly formatted CSV files
• Default refresh rate changed to 30 minutes to reduce API limit impact
• Improved Getting Started documentation

Version 1.1.2 (2021/05/13)

• Improvements to AirMatch last Optimization display

Version 1.1.1 (2021/05/12)

• Auto AP Renaming now includes additional variables: switch (for switchname) and port (for switch port number)
• Fix for 5GHz only deployments in the AirMatch tile

Version 1.1 (2021/05/11)

• Client Statistics page - found at the bottom of the Clients table
• Physical Layer Information test - found on the Site Workflow page

Version 1.0 (2021/05/09)

• Initial Release

Further Information

For any further information on how Aruba Central Automation Studio works, or to request additional functionality, please send me an email.

A Docker container version of Central Automation Studio is available. The Docker container includes this WebUI and a API Proxy inside the same container, allowing for private use. It can be obtained from either of the two locations:

• GitHub
• DockerHub