Aruba Controller Configurations

Configure the Internal Access Point Beacons

After your controller is able to reach out to meridianapps.com and you have your Meridian Assets identified, you can now start to configure the IoT Profiles to enable your controller to send data the Meridian servers.

Before you start, the AP Beacons (APB) must be enabled so that it can be provisioned for use with Meridian. If the APB is not enabled, the APB will not be broadcasting the beacon ID, therefore Meridian tools will not be able to configure the beacon.  Enabling the APB can be done using the Controller GUI or the CLI.

Option 1:  Configure the internal BLE radio Using the GUI

Although this is an option, I find that it is more convenient to do all the configurations in CLI.  

On the Mobility Controller, navigate to Configuration > Wireless > AP Configuration > AP Group > default > AP > AP system > Advanced, then scroll down the page to find BLE Endpoint URL and BLE Auth Token and select Beaconing from the pull down menu. Then click Apply 

Option 2: Configure the internal BLE radio Using CLI

In the samples below, an AP system profile labeled “default” will be configured to set the BLE op mode to “Beaconing” and then apply the profile to the AP group labeled “default”.

(host) [mynode] #configure terminal
Enter Configuration commands, one per line. End with CNTL/Z

Create an AP system profile for the internal BLE radio

(host) [mynode] (config) #ap system-profile sample-apsp
(host) [mynode] (AP system profile "sample-apsp") #ble-op-mode Beaconing
(host) [mynode] (AP system profile "sample-apsp") #exit
(host) [mynode] (config) #write memory
Saving Configuration...
Configuration Saved. 

Apply the IoT radio profile to an AP group

(host) [mynode] (config) #ap-group sample-apg 
(host) [mynode] (AP group "sample-apg") #ap-system-profile sample-apsp 
(host) [mynode] (AP group "sample-apg") #exit 
(host) [mynode] (config) #write memory 
Saving Configuration... 
Configuration Saved. 

Verify that the AP system profile and the AP group are configured correctly

(host) [mynode] #show ap system-profile sample-apsp | include "BLE Operation Mode" 
BLE Operation Mode       Beaconing 
(host) [mynode] #show ap-group sample-apg | include "AP system profile" 
AP system profile        sample-apsp

Check the AP’s configuration to ensure that the profile is received correctly

(host) [mynode] #show ap debug ble-config ap-name AP-315A 

BLE Configuration 
----------------- 
Item                                Value 
----                                ----- 
BLE Supported                       ONBOARD 
BLE HW Type                         BT-AP310 
BLE Ready                           Yes 
Beacon Mgmt Update Intvl (in sec)   600 
APB Info Update Intvl (in sec)      100 (2090/2049) 
BLE debug log                       Disabled 
Operational Mode                    Beaconing (APB: Beaconing) 
-----------------

Configure IoT Transport Profile for Beacons Management 

After the BLE radio has been enabled on the AP, you are ready to configure the AP system profiles for Beacons Management.

Option 1: Configure and set the AP system profile using GUI

On the Mobility Controller, navigate to Configuration > System > Profiles > AP > AP Systems > default > Advanced, then scroll down the page to find BLE Endpoint URL and BLE Auth Token, then enter the Meridian Assets for those parameters and then click Submit > Pending Changes > Deploy Changes.

After the changes are set and deployed, the connection to Meridian beacon server should be established.  In Meridian Editor, navigate to the Beacons Management page to make sure the status for Beacon Management is Connected: Your Aruba network is connected to the Meridian Editor. The Editor last heard from your network a few seconds ago.

Option 2: Configure and set the AP system profile using CLI

(host) [mynode] #configure terminal
Enter Configuration commands, one per line. End with CNTL/Z

(host) [mynode] (config) #ap system-profile "sample-apsp"
(host) [mynode] (IoT Data Profile "sample-apsp") #ble-url https://edit.meridianapps.com/api/beacons/manage
(host) [mynode] (IoT Data Profile "sample-apsp") #ble-token <access token>
(host) [mynode] (config) #write memory
Saving Configuration...
Configuration Saved.

Check the configuration parameters

(host) [mynode] (config) #show ap system-profile sample-apsp | include BLE

BLE Endpoint URL             https://edit.meridianapps.com/api/beacons/manage
BLE Auth Token               <access token>
BLE Operation Mode.          Beaconing

Check that the AP system profile has been set

(host) [mynode] (config) #show ap system-profile

AP system profile List
---------------------
Name                References   Profile Status
----                ----------   --------------
default             1
sample-apsp         1
NoAuthApSystem      1
Total:3

Verify the connection to Meridian has been established in Editor

After the changes are set and deployed, you can go to Meridian Editor cloud account to double check the status of Beacons Management.  The status will show that the Beacon Management is now Connected.

In Meridian Editor, navigate to the Beacons Management page to make sure the status for Beacon Management is Connected: Your Aruba network is connected to the Meridian Editor. The Editor last heard from your network a few seconds ago.

Configure AP System Profile for Asset Tracking

Add the DigiCert Root Certificate to the Aruba Controller

A rootCA certificate is required on the controller when connecting the the tags server. The root CA certificate for Meridian is can be downloaded from here.

To add the certificate to the Mobility Controller, navigate to  Configuration > System > Certificates > Import Certificates, and click on the "+" button:

• Enter the Certificate name (no spaces)

• Upload the Certificate

• Select  PEM as the certificate format

• Select TrustedCA as the certificate type.

• Click Submit  

Meridian Asset Tracking was previously using a GeoTrust Root Certificate for SSL signing. That is no longer needed, If you had previously installed the GeoTrust Root Certificate you can safely remove it from the WebGUI.

If you are unsure, you can search for it using the following CLI.  In this case, it did not exit, so there is not further actions to take:

(host) [mynode] #show crypto-local pki TrustedCA 

Certificates
------------
Name Original Filename Reference Count Expired
-------------- ----------------- --------------- -------

(host) [mynode] #configure terminal 
Enter Configuration commands, one per line. End with CNTL/Z 

(host) [mynode] (config) #no crypto-local pki TrustedCA <GeoTrust cert name> 

Configure and set the BLE relay management server 

(host) [mynode] #configure terminal 
Enter Configuration commands, one per line. End with CNTL/Z

(host) [mynode] (config) #ble_relay mgmt-server type ws wss://tags.meridianapps.com/streams/v1beta1/ingestion/tags/websocket
(host) [mynode] (config) #write memory
Saving Configuration...

Partial configuration for /mm/mynode
------------------------------------
Contents of : /flash/com/partial/2/p=sc=mynode.cfg

ble_relay mgmt-server type ws was://tags./meridianapps.com/streams/v1beta1/ingestion/tags/websocket
Configuration Saved.

Verify the BLE relay status are ready

(host) [mynode] #show ble_relay dis-attr all

webSocket Connect Request        : Yes
WebSocket Connect Status         : Connection Established
Websocket Connect Established    : Yes
Websocket Loglevel               : 0
Tag Logging                      : Off
Websocket Address                : wss://tags.meridianapps.com/streams/v1beta1/ingestion/tags/websocket
Websocket Host                   : tags.meridianapps.com
Websocket Path                   : streams/v1beta1/ingestion/tags/websocket
Current Websocket Started at     : <date time>
Websocket Terminated at          : <date time>
Websocket Write Stats            : 311 (15112B)
Websocket Write WM               : 119B (0)
Websocket Read Stats             : 0 (0B)

At least one deployed asset tag will need to be in range of a configured AP before the AP will initiate the WSS connection.

If the WebSocket Connect Status does not get to Connection Established, then go back and check the make sure you have completed the following:

• Look at the logs via CLI: (host) [mynode] #show ble_relay ws-log "Asset Tracking"

• Verify that the DigiCert Root Certificate is installed.

• Verify that DNS is set up properly

• You may need to reboot the server for all changes to be applied

Summary

This guide provides the fundamental components necessary to configure the infrastructure to communicate with Meridian Servers for Beacons Management and Asset Tracking. If the system does not work as expected after completing all the steps described above, you may contact us as asp.arubanetworks.com.