Zero Touch Configuration and Auto Recovery

Operation Reference > Miscellaneous Settings > Zero Touch Configuration and Auto Recovery

If an AMF network is properly configured, you can easily add a guest node AP by specifying a guest port on the parent AMF device, instead of specifying the AP's address.
Using this feature, you can start managing a new, unconfigured AP by connecting it to an AMF node, without having to access the AP's management web interface. This is called Zero Touch Configuration.

When using Zero Touch Configuration, an AP connected to a specific switchport on an AMF node is always identified as the same AP, regardless of its IP or MAC addresses. With this, it is possible to pre-configure an AP on the AWC Plug-in before connecting it to a network. It is also possible to quickly recover from a network failure caused by a failed AP by replacing the failed AP with a new one, which is auto-recovered (obtains an automatically applied configuration).

To use the Zero Touch Configuration and Auto Recovery features, the following conditions must be met:

AMF Network
- The Management VLAN of the AP (TQ Series) is untagged.
- The AP is detected as a guest node, and a parent AMF node is configured to collect the guest node information automatically (dynamic discovery).
  
  Note
  Guest nodes connected to AT-AR series cannot perform Zero Touch Configuration or Auto Recovery because the AT-AR series does not support the "dynamic" method.
- On the parent AMF node, DHCP Snooping is enabled for the AP's management VLAN.
  
  Note
  On the AMF node, make sure you enable DHCP Snooping on the AP management VLAN only.
  
  Note
  Make sure that the TQ series' management VLAN and VAP VLAN use different VLAN ID when the AP is detected as an guest node, that a parent AMF node is configured to collect the guest node information automatically ("dynamic discovery"), and that wireless clients get their IP addresses via DHCP.
  Also make sure that DHCP snooping is only enabled on the AP's management VLAN, and disabled on the VAP VLAN.
Vista Manager EX
- The AMF Network is registered in the management database.
AP
- TQ series firmware version 7.0.0, 6.0.x, 5.3.x - 5.4.x, 4.2.x - 4.3.x Bxx or 4.1.x Sxx is installed.
- The DHCP Client is enabled (default) on the AP, and the AP acquired its IP address from a DHCP server.
  
  Note
  If you specify a username and password for the AP's guest-class on a parent AMF node, ensure that the AP's login username and password are the same as the ones configured for the guest-class.

Refer to the AlliedWare Plus documentation for more details about AMF guest node and DHCP Snooping.

Zero Touch Configuration

To use Zero Touch Configuration for an AP, enable "Use AMF for AP Provisioning" when you add the AP to the AWC Plug-in's management database.
Refer to Manage AP Registration for details on adding an AP to the database.

Note
Even if you added an AP with "Use AMF for AP Provisioning" disabled, you can later change the setting to "Enabled", provided that the requirements for zero touch configuration are met.
If an AP requires special configuration through its own management web interface (such as LLDP, Ethernet and HTTP/HTTPS), add it with "Use AMF for AP Provisioning" disabled as a guest node, after configuring it on its web interface.

Note
After registering a wireless AP as a guest node, if the node name of the AMF node to which the guest node belongs to is changed in the AMF network, the information in the AWC plug-in must also reflect the change. On the "Wireless AP Edit" screen, update the parent node name to the latest one.
See also Edit AP about changing registered information.

Register AP Manually

Select "Wireless Configuration" > "AP Settings" to open the AP list page.
Put the mouse cursor on the gear icon at the top right of the screen and select "Manual Registration" from the submenu.
The "Wireless AP Edit" dialog box will appear.
Specify the Management Group that you want the AP to belong to.
Once an AMF network is detected by specifying Management Groups, the "Enable" option will be added to "Use AMF for AP Provisioning".
Select "Enable" for "Use AMF for AP Provisioning".
Select an AMF network name from the "Network Name" dropdown list.
Select an AMF area to which the AP will belong from the "Area Name" dropdown list.
Select or specify an AMF node to which the AP will be connected in "Node Name" combo box.
Enter the name of the switchport to which the AP will be connected in the "Port Number" field (in "portx.x.x" format).
Click "Save". The AP has been added to the AWC Plug-in's management database. At this stage, each AP's "AP Profile" is "Unconfigured", and each AP's "Management Status" is "Unmanaged."
Apply an AP Profile and perform AP-specific configuration as required.

Once the new AP has been successfully detected, the existing configuration for the failed AP is applied to the new AP, and it is managed by the AWC Plug-in.
While the specified guest node is not found, the AP status is "Waiting". When the guest node is found by polling, an AP Profile and AP-specific configuration will be applied to the AP. A notification message will also appear in the Notification section.

Import AP from CSV File

Select "Wireless Configuration" > "AP Settings" to open the AP list page.
Put the mouse cursor on the gear icon at the top right of the screen and select "Import From CSV" from the submenu.
The "Registration from CSV File" dialog box will appear.
Specify the Management Group that you want the AP to belong to.
Once an AMF network is detected by specifying Management Groups, the "Enable" option will be added to "Use AMF for AP Provisioning".
Select "Enable" for "Use AMF for AP Provisioning".
Click "Browse" and select a CSV file which contains AP information.
Click "Add". The AP has been added to the AWC Plug-in's management database. At this stage, each AP's "AP Profile" is "Unconfigured", and each AP's "Management Status" is "Unmanaged."
Apply an AP Profile and perform AP-specific configuration as required.

Register AP From Guest Node AP List

Select "Wireless Configuration" > "AP Settings" to open the AP list page.
Put the mouse cursor on the gear icon at the top right of the screen and select "Registration from Guest Node" from the submenu.
The "Registration from Guest Node" dialog box will appear.
Specify the Management Group that you want the AP to belong to.
Once an AMF network is detected by specifying Management Groups, the "Enable" option will be added to "Use AMF for AP Provisioning".
Select "Enable" for "Use AMF for AP Provisioning".
Use the checkbox to select the AP to register from the list of guest nodes.
Click "Add". The AP has been added to the AWC Plug-in's management database. At this stage, each AP's "AP Profile" is "Unconfigured", and each AP's "Management Status" is "Unmanaged."
Apply an AP Profile and perform AP-specific configuration as required.

Once the new AP has been successfully detected, the existing configuration for the failed AP is applied to the new AP, and it is managed by the AWC Plug-in.

Auto Recovery

Once a TQ series AP has been configured with "Use AMF for AP Provisioning" enabled, the AWC Plug-in will be notified when a new AP is connected to the parent AMF node's same switchport.

The AWC Plug-in checks the guestnode's IP and MAC addresses. If they are different from the previous ones, the plug-in applies the existing configuration for the AP to the new guestnode and puts it under the plug-in's management (Auto Recovery).
The following notification message will appear when the configuration is applied to the new AP:

If a firmware file is assigned to the AP, it is also applied to the new AP when it is detected.
Refer to Reboot AP and Update AP Firmware's Update Firmware for more details.

Note
To use Zero Touch Configuration and Auto Recovery, AMF guestnodes have to acquire their IP address from a DHCP server. When an AP's IP address is changed due to a DHCP lease's renewal, an IP address stored in the AWC Plug-in's management database is automatically updated. A notification message won't be displayed in this case.
If you do not want an AP's IP address to change, configure your DHCP server to statically assign IP addresses, or use an infinite lease time.

C613-04101-00 Rev A

22 Apr 2021 15:29