Extreme Networks Access Point AP305 and ExtremeCloud IQ

Note: At the time of writing this article, it's about ExtremeCloud IQ 24.4.0.72, AP305c with HiveOS / IQ Engine 10.6r7.

Extreme Networks

Extreme Networks is an American company that develops and manufactures devices for wired and wireless network infrastructure. Additionally, they offer management software (control, analysis, security, and access management) for not only their network elements.

Management can be operated either On-Premise (locally) using physical or virtual appliances. Or we can use ExtremeCloud IQ, which is a cloud application for enterprise network management. Similar to Cisco's cloud management Meraki.

Documentation

• Product Documentation AP305C, AP305CX
• Product Documentation ExtremeCloud IQ
• Product Documentation IQ Engine
• Data Sheet AP305C/CX
• ExtremeCloud IQ User Guide 24.4.0
• Extreme Support Portal

Access Point AP305

The indoor access point (Access Point) Extreme Networks AP305 with support for multiple operating systems. Its main features are:

• Extreme Universal Wi-Fi platform
• supports IEEE 802.11ax (Wi-Fi 6), WPA3
• contains two dual-band radios, Software-Selectable Radios (SSRs), 2x2:2
• operates simultaneously in 2.4 and 5 GHz bands or Dual 5 GHz
• powered by PoE 15.4W (IEEE 802.3af) or PoE+ 25.5W (IEEE 802.3at)
• Gigabit Ethernet RJ45 ports, USB 2.0, micro USB Console
• Broadcom wireless chip, Trusted Module Platform (TPM) chip
• we choose the operating system (OS), which affects the features/capabilities and management method
  • ExtremeCloud IQ (XIQ) - HiveOS / IQ Engine
  • WiNG Operating System

The basic terms are the same as with Cisco. The controlling controller is referred to as WLC (Wireless Controller). The AP uses the standardized CAPWAP (Control and Provisioning of Wireless Access Points Protocol) protocol to communicate with the WLC.

The AP is noticeably smaller compared to Cisco AP. The package does not include a power adapter (power is only possible via PoE) or a mounting bracket, just like in the case of Cisco.

Operating System

At the beginning, we choose the operating system (mode) of the universal AP. Depending on how we want to manage it. Later we can switch the operating mode (persona).

• local management - On-Premise mode, where we use local tools or WLC, uses WiNG OS (Campus or distributed)
• cloud management - using ExtremeCloud IQ, its own operating system is referred to as IQ Engine or HiveOS

Note: Different terms are used in various parts of the documentation. It's always On-Premise WiNG OS, but for the cloud version ExtremeCloud IQ / IQ Engine / HiveOS.

How to Onboard, Switch, and Troubleshoot the Universal AP modes between IQE (ExtremeCloud IQ Engine) and WiNG modes?

ExtremeCloud IQ (XIQ)

The cloud management ExtremeCloud IQ is designed for businesses and is typically a paid service. At the beginning, it's possible to use a 90-day trial version (Trial) with full functionality. We can also run a limited version for free.

• ExtremeCloud IQ Pilot - commercial (full) version
• ExtremeCloud IQ Connect (freemium tier) - limited version (free), does not include advanced and Enterprise features, we can use a maximum of 10 devices, 2 network policies, 4 SSIDs, etc.

What are the main limitations of XIQ Connect (freemium tier)?

Creating an ExtremeCloud IQ Account

At the address ExtremeCloud IQ Registration we can register a new ExtremeCloud IQ account. We also enter the company name and job position. We select a data center (Data Storage Location and Retention), which is offered based on the chosen country. For the Czech Republic, it's currently possible to choose between AWS Frankfurt (data retention for 90 days) or AWS Spain (data retention up to 2 years).

After registration, we receive an email with a link to set a password. Before we start using the service, we must choose (enter) a license. We can also use a 90-day Trial or ExtremeCloud IQ Connect, which the Trial switches to after the trial period expires. Then we must agree to the cloud service terms.

Logging into ExtremeCloud IQ and Initial Setup

We log in to ExtremeCloud IQ and are redirected to the address according to our DC. At the beginning, a Welcome to ExtremeCloud IQ wizard is offered, which we can open at any time from the right side of the screen.

When adding devices, it always starts with choosing whether it's a device managed directly from the cloud or locally.

• Manage your devices directly from the cloud - Start here if you intend to manage your device with ExtremeCloud IQ
• Manage your devices locally - Start here if you intend to manage your device with an on-premise Controller (changes OS of AP to on-premise mode) or other on-premise tools while ExtremeCloud IQ monitors your devices

When we use the wizard, we first create a location. This consists of a named organization in a specific country, Site Group, Site, building, and floor. Everything is hierarchically arranged and we must enter it in the wizard (cannot be skipped). Later we can manage locations in the Manage - Planning menu.

Note: I encountered a problem when I used diacritics in the name. When updating the AP configuration, an error was displayed (SNMP location setting). When entering names in Manage - Planning, diacritics can't even be entered, but the wizard allowed it.

We can continue by adding a device and placing it in a location (creating a network topology). We'll show this later when calling from the menu.

Setting up Extreme Networks AP305

The recommended procedure is probably to first perform Onboarding to ExtremeCloud IQ and then connect the AP to the network.

Adding a New Access Point (Onboarding) to ExtremeCloud IQ

Add Devices Overview

• log in to ExtremeCloud IQ
• in the left menu, select Manage - Devices

• click on the + (plus) button Quick Add Devices - Manage your devices directly from the cloud

• Device type: Real, Entry type: Manual
• Serial number - enter the SN from the back of the AP or the box
• Device OS: Cloud IQ Engine
• Location - we can select a prepared location
• Policy - we can assign an existing network policy
• click on Add devices

ExtremeCloud IQ Companion Mobile App

An interesting option is to use the mobile app for Android or iOS ExtremeCloud IQ Companion. It allows viewing certain (limited) information about devices and clients in a user-friendly graphical interface. Basic configuration and adding new devices can also be performed.

So we can perform Onboarding of a new AP here. The advantage is that we can scan the SN with the camera. Click on the 4 dots icon at the bottom of the screen and select Add device in the menu.

Connecting the AP to the Network

We connect the AP to the Ethernet network and it must be powered through this port. We can use a switch with PoE or a PoE injector. For the test, I used a PoE injector Ubiquiti U-POE-at, which should support IEEE 802.3at. But the AP shows that it's powered only by IEEE 802.3af (the same situation occurred when I tried it with a Cisco AP). Info about power How to check PoE power status on an XIQ or WiNG AP.

The default setting of the AP is to use IP addresses from DHCP. When it starts up (which takes a few minutes), we can connect to the web interface or via SSH to the command line. The default login credentials are admin and password aerohive.

According to the documentation, on first boot, the AP automatically connects to ExtremeCloud IQ and searches for its configuration. If successful, the ExtremeCloud IQ persona is used. After a few minutes, the AP appears as connected in cloud management. Otherwise, on first boot, we must select WiNG OS or ExtremeCloud IQ.

Note: Many events about AP connection, configuration application, WLAN behavior, client connections, etc. can be found in Manage - Events.

I tried to connect to the console via the micro USB port, but unsuccessfully. Windows reports an unknown device. In some places, it's mentioned that a special cable is needed. XIQ - How to console into an Extreme Cloud (XIQ) AP using a micro USB console cable

WLC Address

The server address for managing the AP, if we need to enter it manually, can be found in ExtremeCloud IQ, where we click on the profile in the upper right menu and select About ExtremeCloud IQ. Here is the item CAPWAP Server Hosts. When we connect to the AP's web interface, it's set in HiveManager Configuration.

AP305 Status LED

For initial setup or during troubleshooting, it's useful to have information about the status LED (Status LED) in the corner on the top side of the AP.

• white - normal operation, established CAPWAP connection to ExtremeCloud IQ
• slowly blinking white - normal operation, but power is 802.3af instead of 802.3at
• amber - device is initializing, restarting, or running without CAPWAP connection
• slowly blinking amber - no CAPWAP connection, power is 802.3af instead of 802.3at
• rapidly blinking amber - device is updating IQ Engine firmware
• dark - power off