Troubleshooting Wi-Fi with ExtremeCloudIQ #Extreme #Aerohive

This blogpost focuses on using ExtremeCloudIQ from Extreme Networks. The portal is quite a user friendly and has some built-in capabilities which can help troubleshoot day to day problems with Wireless. Let’s take a look.

Client Statistics

The good thing about Extreme Cloud IQ is you can see Real-Time & Historical client information of their connections. This does help to find out which AP was/is the client associated with, the SNR and check other stats like roaming, DHCP, DNS. You can navigate to this by clicking on Manage > Clients

ExtremeCIoud IQ 
MANAGE 
Devices 
Reports 
Clients 
users 
Inventory 
Events 
Alarms 
Security 
Applications 
Tools 
Services 
Pilot 
CONNECTION STATUS 
3 Online / O Offline 
Filters 
NO Applied Filters 
TOTAL APPS 
REAL TIME 
35 
HISTORICAL 
CLIENTS 5 
5 Connected Clients. 
USERS O 
Last updated at 2021-04-06 10:47:42 
Q 
OS TYPE 
Tizen OS 
ALARMS 
Defa. 
VLAN 
STATUS 
HEALTH 
O 
O 
O 
O 
O 
CONNECTION 
TYPE 
WIRELESS 
WIRELESS 
WIRELESS 
WIRELESS 
WIRELESS 
HOST NAME 
LGwebOSTV 
nupur 
Chromecast 
Google-Nes„_ 
snifferpc 
CONNECTION 
STATUS 
CONNECTED 
CONNECTED 
CONNECTED 
CONNECTED 
CONNECTED 
IPV4 
19216B_1S2 
MAC 
USER NAME 
My Saved Filters 
SAVE 
NO Saved Filters 
Filter By 
Devices 
Locations 
Search Locations 
-D 
ALL IS WELL 
AUCKLAND 
Device Function 
Access Point 
Clients 
OS Types 
Android 
Apple iOS 
Android 
Android 
Windows...

You can drill down by searching for the client using IP Address / Mac Address / Device Host Name

Client 
LGwebOSTV 
LGwebOSTV

After clicking on the client you can see the current connection status on the right hand side with regards to VLAN/SSID/Radio/Channel. On the Top you can check the current AP associated. The page has lot of details about the client and more information can be drilled by changing the Time Range to Day/Week/Month depending on how far you want to analyse.

ExtremeCloud IQ 
LGwebOSTV 
VLAN: 1 
CURRENT CONNECTION STATUS 
1.6 KB 
0.8 KB 
10:55 
13:25 
15:55 
20:55 
23:25 
01:55 
LGwebOSTV 
192.168.1.92 
Time Range: 
WAR-XTREME-APOI 
Node Type: AP 
IP Address: 192.168.1.163 
Hostname: WAR-XTREME-APOI 
Day 
Hours 
Internet 
24 Hours 
OS TYPE 
Tizen OS 
IP ADDRESS 
192.168.1.92 
MAC ADDRESS 
6 
USER 
N/A 
CONNECTED TO WAR-XTREME- 
APO' 
6 Days 19 Hrs 48 Min... 
CAPTIVE WEB PORTAL 
Unused 
USER PROFILE 
default-profile 
SSI D 
Camper 5GHz 
RADIO 
802.11ac 5G 
CHANNEL 
100 
LOCATION 
Health score: 100 
Client Count: 1 
Native: 1 
Management: 1 
user Profile: 
Usage 
Usage (Click timeline 
Connectivity 
ge time range) 
18:25 
Top Session Vi... 
CLIENT TOOLS 
Noise Floor 
-20 dem 
-60 dem 
-100 dem 
04:25 
06:55 
Average RSSI 
09:25 
From 
04/05/2021 to 04/06/2021 
MOST USAGE TOP SESSION VIEW 
Selected Time 
Most Time Spent 
100% 
Most usage 
AR-XTREME-APO 
AP with most data sent and received 
Session Details > 
Total usage 
Session Start 
Session Duration 
Average RSSI 
Average SNR 
151.59 KB 
04/05/202110:55:56 
24 HRS 
-62 dam 
27 dB 
Compared to devices on this floor. 
Average RSS': -62 dBm 
Not enough data to show RSSI distribution

You can further scroll down to check the roaming patterns/time for the client and also check what apps it is using. I’ve found the Session Details section quite useful to check WiFi Health, Application Health and Client Radio Info etc.

Session Details v 
CLIENT HEALTH 
CLIENT RADIO INFO 
WiFi Health 
Application Health 
Supported Mode 
11b lla llg ling 
Spatial Streams 
100 
llna 
llac 
llax 
4 
Max Negotiated Data Rate 433.33 Mbps 
TX Speed 
27% 
292.50 Mb/s 
(72% success Rate) 
RX Speed 
20% 
390.00 Mb/s 
(38% success Rate) 
Channel 
Channel Width 
Radio profile 
80 MHz 
radio_ng 
_aco_21 
Average SNR 
Compared to devices on this floor. 
1 (13%) EXQllent.•6 (75%) 
WiFi Health 
Compared to devices on this floor. 
Supported Mode 
Compared to devices on JEETS->21 Lieutenant 
Lane
NETWORK USAGE 
Network Usage: (653.49 MB) Total Rx: 24.93 MB / Total rx: 628.56 MB 
O 
rx: 628.56 MB / Rx: 24.93 MB(default-profi1e) 
Max Negotiated Rate: 433.3 Mb's 
Linear Logarithmic 
User Profile 
SSID 
default-profile 
u 
100 K 
50K 
50K 
6.5 Mb, 
Top 10 Apps 
YOUTUBE: 13.58 MB (2.2%) 
52.0 Mb, 
TX Retries 
878 
23411 Mbs 
Rx Retries

From this screen one can navigate to CLIENT TOOLS which has an option for “Troubleshoot Now” which runs the client monitor and captures the events as they happen.

CLIENT TOOLS 
Troubleshoot Now 
VLAN Probe 
x 
28S6 MB

Device Checks

You can perform device level checks by Navigating to Manage > Devices – page. The list can be filtered based on the Locations/Device Types/Connection state/SSID etc..

You can run command line from this screen targeting to one/multiple devices to show relevant information like below.

Action > Advanced > CLI Access

CLI access to Extreme Networks devices 
Add Oovico 
JEET-XTREME-APOI 
JEET-XTREME-APOI 
show acsp neigh 
JEET-XTREME-AP02 
Show Sta 
Chan:channel number; Pow=Power in dB:n; 
mode; Cipher=Encryption mode; 
time; Auth—Authenti cated; 
UPID=User profile Identifier; 
Ifname=wifiO.I 
Mac Addr 
Ifname=wifil.l 
Mac Addr 
Ifname=wifiO . 2 
Mac Addr 
Ifname=wifiO.3 
Mac Addr 
Ifname=wifil . 2 
Mac Addr 
If index—I g, 
IP Addr 
If index—21, 
IP Addr 
If index—22, 
IP Addr 
If index—23, 
IP Addr 
If index—24, 
IP Addr 
SSID-HRIDHAAN SAE: 
Chan Tx Rafe Rx 
SSID-HRIDHAAN SAE: 
Chan Tx Rafe Rx 
SSI DeHRIDHAAN2 . 4: 
Chan Tx Rate Rx 
SSI 
Chan Tx Rate Rx 
SSI DeHRIDHAAN2 . 4: 
Chan Tx Rate Rx 
mode ; 
Rat e 
Rat e 
Rat e 
Rat e 
Rat e 
Pow (SNR) 
Pow (SNR) 
Pow (SNR) 
Pow (SNR) 
Pow (SNR) 
APPLY 
A—Mode 
A—Mode 
A—Mode 
A—Mode 
A—Mode

Tools

There are lot of tools available on the portal which can help with the Wi-Fi analysis. This section can be navigated via Manage > Tools section

The Client Monitor is a good place to start looking at the network-wide issues for any Association/Authentication or Networking (DHCP/DNS) issues.

Client Monitor: Issue List 
133 
1410 
Unique Clients experiencing issues: 
Association 
20:00 
o 
Authentication 
6 Apr 
Show user Sessions 
Extreme 
user 
Networks 
Profile 
Device 
default- 
profile 
02:00 
Location 
10 
Time Range: 
Networking 
Day 
08:00 
1 Hour 
4 Hours 
1010 
8 Hours 
24 Hours 
4 
Showing All Issues from Tue (Apr 6, 2021) 11:17 to Tue (Apr 6, 2021) 12:19 
TROUBLESHOOT SELECTED 
Status 
o 
o 
TROUBLESHOOT ANY CLIENT 
ISSUE TYPE 
TAKE ACTION 
ISSUE STATUS 
DOWNLOAD 
Client Host Name 
Client MAC 
Issue Type 
Authenticatio 
Authenticatio 
Authenticatio 
Authenticatio 
Summary 
PPSK Rejected 
by Guest 
Access 
PPSK Rejected 
by Guest 
Access 
RADIUS server 
Reject 
PPSK Rejected 
by Guest 
Access 
Detected On 
2021-04-06 12:18:48 
2021-04-06 12:13:11 
From 2021-04-06 - to 
2021-04-06 12:11:47 
From 2021-04-06 - 
to 2021-04-06

Packet Capture – Can easily perform AP radio interface level capture for analysis or requested by TAC for troubleshooting.

Client Monitor 
Diagnosis 
utilities 
Remote Packet Capture 
Packet Capture 
START 
Location 
Access Point 
Interface 
Duration 
(1 - 300) 
Packet Count per 
Interface 
(1 - 10000) 
Download Location 
AUCKLAND 
AHMAR 
1 Liberation Road 
21 Lieutenant Lane 
JEET-XTREME-AP02 
JEET-XTREME-APOI 
WiFi1 
30 
2000 
seconds 
C) CloudShark 
@ Local

The Utilities tab opens up a whole lot of useful features. I’ve found a few ones to be really helpful.

Client Monitor Diagnosis 
Get Tech Data 
Enter Hostname. MAC Add 
STATUS 
000 
000 
000 
HOST 
WAR- 
'EET 
JEETé 
utilities Packet Capture 
Locked Devices 
Radius Test 
SSH Availability 
Device List 
Neighbor Info 
Locate Device 
Get Tech Data 
VI-AN Probe 
Device Diagnostics 
Device Client Information 
Client Information 
unbind Device
  1. Locked Devices – Can be used to unlock devices that are locked due to failed authentication when using PPSK.
  2. Get Tech Data – instantaneously captures the Tech Data from AP, similar to the “show tech support” command. Useful to avoid sometimes having to scroll annoyingly for mins to capture the information.
  3. VLAN Probe – Useful to check the number of available IP addresses on a VLAN.
  4. Device Diagnostics – The section can open a range of commands which can be executed per/AP level to extract relevant information.
Device Diagnostics 
STATUS 
000 
000 
000 
HOST 
WAR 
'EET 
'EET 
DIAGNOSTICS 
Ping 
Show Log 
Show Version 
Show Running Config 
Show Startup Config 
Show IP Routes 
Show MAC Routes 
Show ARP cache 
Show Roaming Cache 
Show DNXP Neighbors 
Show DNXP cache 
Show AMRP Tunnel 
Show GRE Tunnel 
Show IKE Event 
Show IKE SA 
Show IPsec SA 
Show IPsec Tunnel 
Show cpu 
Show Memory 
ELL 
ELL

The Diagnosis tab show the captures executed on the devices and display their log information.

One of the key things to note from Aerohive/Extreme documentation that they provide good contextual info when navigating in a particular section or screen.

Examples like below


https://docs.aerohive.com/330000/docs/help/english/ng/Content/gui/troubleshoot/using-client-monitor.htm
https://docs.aerohive.com/330000/docs/help/english/ng/Content/gui/devices/viewing-the-device-list.htm

Author: jeetk

Leave a Reply

Your email address will not be published. Required fields are marked *