Zero Touch Configuration and Auto Recovery

Operation Reference > Miscellaneous Settings > Zero Touch Configuration and Auto Recovery

If an AMF network is properly configured, you can easily add a guest device AP by specifying a guest port on the parent AMF device, instead of specifying the AP's address.
Using this feature, you can start managing a new, unconfigured AP by connecting it to an AMF device, without having to access the AP's management web interface. This is called Zero Touch Configuration.

When using Zero Touch Configuration, an AP connected to a specific switchport on an AMF device is always identified as the same AP, regardless of its IP or MAC addresses. With this, it is possible to pre-configure an AP on the AWC Plug-in before connecting it to a network. It is also possible to quickly recover from a network failure caused by a failed AP by replacing the failed AP with a new one, which is auto-recovered (obtains an automatically applied configuration).

To use the Zero Touch Configuration and Auto Recovery features, the following conditions must be met:

AMF Network
- The Management VLAN of the AP (TQ Series) is untagged.
- The AP is detected as a guest device, and a parent AMF device is configured to collect the guest device information automatically (dynamic discovery).
  
  Note
  Guest devices connected to the AR series cannot perform Zero Touch Configuration or Auto Recovery because the AR series do not support the "dynamic" method.
- On the parent AMF device, DHCP Snooping is enabled for the AP's management VLAN.
  
  Note
  On the AMF device, make sure you enable DHCP Snooping on the AP management VLAN only.
  
  Note
  Make sure that the TQ series' management VLAN and VAP VLAN use different VLAN ID when the AP is detected as a guest device, that a parent AMF device is configured to collect the guest device information automatically ("dynamic discovery"), and that wireless clients get their IP addresses via DHCP.
  Also make sure that DHCP snooping is only enabled on the AP's management VLAN, and disabled on the VAP VLAN.
Vista Manager EX
- The AMF Network is registered in the management database.
AP
- TQ series firmware version 7.0.x, 6.0.x, 5.3.x - 5.4.x, 4.2.x - 4.3.x Bxx or 4.1.x Sxx is installed.
- The DHCP Client is enabled on the AP (default), and the AP acquired its IP address from a DHCP server.
  
  Note
  If you specify a username and password for the AP's guest-class on a parent AMF device, ensure that the AP's login username and password are the same as the ones configured for the guest-class.

Refer to the AlliedWare Plus documentation for more details about AMF guest device and DHCP Snooping.

Zero Touch Configuration

To use Zero Touch Configuration for an AP, enable "Use AMF for AP Provisioning" when you add the AP to the AWC Plug-in's management database.
Refer to Manage AP Registration for details on adding an AP to the database.

Note
Even if you added an AP with "Use AMF for AP Provisioning" disabled, you can later change the setting to "Enabled", provided that the requirements for zero touch configuration are met.
If an AP requires special configuration through its own management web interface (such as LLDP, Ethernet and HTTP/HTTPS), add it with "Use AMF for AP Provisioning" disabled as a guest device, after configuring it on its web interface.

Note
After registering a wireless AP as a guest device, if the AMF device name to which the guest device belongs to is changed in the AMF network, the information in the AWC plug-in must also reflect the change. On the "Wireless AP Edit" screen, update the parent device name to the latest one.
See also Edit AP about changing registered information.

Register AP Manually

Select "Wireless Configuration" > "AP Settings" to open the AP list page.
Place the mouse cursor on the gear icon at the top right of the screen and select "Manual Registration" from the submenu.
The "Wireless AP Edit" dialog box will appear.
Specify the Management Group that you want the AP to belong to.
Once an AMF network is detected by specifying Management Groups, the "Enable" option will be added to "Use AMF for AP Provisioning".
Select "Enable" for "Use AMF for AP Provisioning".
Select an AMF network name from the "Network Name" dropdown list.
Select an AMF area to which the AP will belong to from the "Area Name" dropdown list.
Select or specify an AMF device to which the AP will be connected to in the "Device Name" combo box.
Enter the name of the switchport to which the AP will be connected to in the "Port Number" field (in "portx.x.x" format).
Click "Save". The AP has been added to the AWC Plug-in's management database. At this stage, each AP's "AP Profile" is "Unconfigured", and each AP's "Management Status" is "Unmanaged."
Apply an AP Profile and perform AP-specific configuration as required.

Once the new AP has been successfully detected, the existing configuration for the failed AP is applied to the new AP, and will be managed by the AWC Plug-in.
If the specified guest device is not found, the AP status is "Waiting". When the guest device is found by polling, an AP Profile and AP-specific configuration will be applied to the AP. A notification message will also appear in the Notification section.

Import AP from CSV File

Select "Wireless Configuration" > "AP Settings" to open the AP list page.
Place the mouse cursor on the gear icon at the top right of the screen and select "Import From CSV" from the submenu.
The "Registration from CSV File" dialog box will appear.
Specify the Management Group that you want the AP to belong to.
Once an AMF network is detected by specifying Management Groups, the "Enable" option will be added to "Use AMF for AP Provisioning".
Select "Enable" for "Use AMF for AP Provisioning".
Click "Browse" and select a CSV file which contains AP information.
Click "Add". The AP has been added to the AWC Plug-in's management database. At this stage, each AP's "AP Profile" is "Unconfigured", and each AP's "Management Status" is "Unmanaged."
Apply an AP Profile and perform AP-specific configuration as required.

Register AP From Guest Device AP List

Select "Wireless Configuration" > "AP Settings" to open the AP list page.
Place the mouse cursor on the gear icon at the top right of the screen and select "Registration from Guest Device" from the submenu.
The "Registration from Guest Device" dialog box will appear.
Specify the Management Group that you want the AP to belong to.
Once an AMF network is detected by specifying Management Groups, the "Enable" option will be added to "Use AMF for AP Provisioning".
Select "Enable" for "Use AMF for AP Provisioning".
Use the checkbox to select the AP to register from the list of guest devices.
Click "Add". The AP has been added to the AWC Plug-in's management database. At this stage, each AP's "AP Profile" is "Unconfigured", and each AP's "Management Status" is "Unmanaged."
Apply an AP Profile and perform AP-specific configuration as required.

Once the new AP has been successfully detected, the existing configuration for the failed AP is applied to the new AP, and will be managed by the AWC Plug-in.

Auto Recovery

Once a TQ series AP has been configured with "Use AMF for AP Provisioning" enabled, the AWC Plug-in will be notified when a new AP is connected to the parent AMF device's same switchport.

The AWC Plug-in checks the guest device's IP and MAC addresses. If they are different from the previous ones, the plug-in applies the existing configuration for the AP to the new guest device and puts it under the plug-in's management (Auto Recovery).
The following notification message will appear when the configuration is applied to the new AP:

If a firmware file is assigned to the AP, it is also applied to the new AP when it is detected.
Refer to Reboot AP and Update AP Firmware's Update Firmware for more details.

Note
To use Zero Touch Configuration and Auto Recovery, AMF guest devices have to acquire their IP address from a DHCP server. When an AP's IP address is changed due to a DHCP lease's renewal, an IP address stored in the AWC Plug-in's management database is automatically updated. A notification message won't be displayed in this case.
If you do not want an AP's IP address to change, configure your DHCP server to statically assign IP addresses, or use an infinite lease time.

C613-04115-00 Rev A

02 Nov 2021 16:59