Configure Auto-Provisioning

Although AP device templates function similarly to auto-provisioning rules, the best-practice recommendation is to use AP device templates rather than auto-provisioning rules to configure APs as they are onboarded.

Note

If AP device templates and auto-provisioning rules are both in place when the AP is onboarded, ExtremeCloud IQ ignores the AP device template and applies the auto-provisioning rules.

Identify devices for auto provisioning by adding or importing serial numbers or IP subnetworks. Import serial numbers by selecting devices that have already been on-boarded, importing a CSV file populated with serial numbers, or entering serial numbers manually. You can use a combination of any of these methods. To add or import IP subnetworks to an auto-provisioning profile, enter IP subnetworks manually or import a CSV file containing the subnetworks. You can also use IPv6 addresses to identify subnetworks.

Note

Auto-provisioning rules are based on device models. You can define multiple profiles for the same model and distinguish which devices get which profile by specifying a serial number or IP address.

1. Go to Configure > Common Objects > Policy > Auto Provisioning.
2. Select an existing rule, and then select , or select .
3. Enter a Name for the rule.
4. Optional: Enter a Description for the rule.
5. Select a Device Function.
6. Select a Device Model.
   The model that you choose determines the available device functions, interface settings, and radio settings.
7. Select Serial Number to restrict automatic provisioning to particular serial numbers.
   1. Choose the Select Serial Numbers bar.
   2. Add serial numbers from the imported list, import them from a CVS file, or add them manually.
8. Choose IP Subnetworks to auto-provision devices by IP subnetworks.
9. Choose Select IP Subnetworks, then add IP Subnetworks from either a CVS file or manually.
   

   Note

   To create an auto provisioning profile that contains IP subnetworks, the devices in the profile cannot have been previously onboarded.

   When you create multiple auto provisioning profiles for the same device model and use serial numbers or IP subnetworks to identify them, be aware of the following situations:

   • If a conflict arises because two auto provisioning profiles applied to the same device, for example, one profile based on the serial number and the other based on the subnetwork, the profile based on the serial number takes precedence.
   • The same serial number must not appear in more than one auto provisioning profile.
10. Select a Network Policy from the drop-down list.
11. Select the Country for the device from the dropdown list.

    If you later select the Upload configuration automatically check box, ExtremeCloud IQ applies the country code specified here when it automatically pushes a configuration to devices during the initial CAPWAP connection.

Auto-assign Location

12. Select Assign to assign a Default Location to all the devices in the auto provisioning profile.
    

    Note

    You can only assign devices to a floor within a building.
13. If you enabled Select IP Subnetworks, select to Select a Location and IP Subnetwork.
    1. Select a Subnet and Location.
    2. Select Save.

Advanced Settings

14. Select Upload device firmware upon device authentication to upload an image automatically.
    1. Select the Golden version if you want to automatically upload the version with fewer features, but fully tested and super stable for those environments where stability is more important than feature richness.
    2. Select the Latest version if you want to automatically upload new features, some of which might contain bugs.
15. Select Upload configuration automatically to automatically upload a pre-defined configuration, which consists of a network policy, two radio profiles, a topology map, a pair of root and read-only administrators, and CAPWAP settings.
16. Select Reboot after uploading to activate the uploaded image and configuration by rebooting the devices.
    If your deployment includes mesh points, do not select this option. Reboot the devices manually so that you can control the order in which the devices reboot.

Device Credentials

17. Select Enable Device Credential to set device credentials.
    • Root Admin Configuration: Enter a name and password for the root admin for the device. ExtremeCloud IQ uses root admin log in credentials to make SSH connections to configured devices and upload full configurations to them. This admin can also access the device through Telnet, SSH, or console connections.
    • Read-Only Admin Configuration: Enter a name and password for an admin that has read-only privileges.
18. Select Enable CAPWAP configurations to configure primary and secondary CAPWAP servers.
    • Primary CAPWAP Server: From the Primary CAPWAP Server drop-down list, choose the ExtremeCloud IQ address with which you want devices to form a CAPWAP connection first. If you do not see the address you need, select the plus sign and add an IP address or host name.
    • Backup CAPWAP Server: If you are deploying ExtremeCloud IQ as a standalone device, leave this field empty. If it is in an HA pair behind a NAT device from its configured devices, use the drop-down menu to select the domain name or MIP linking to its MGT interface. If you do not see the address you need, select the plus sign and add an IP address or host name.
    • Shared Key for Authentication: To change the passphrase, enter a new alphanumeric string in the Passphrase and Confirm Passphrase fields.

Interface Settings

19. To Enable Interface Settings, set the slider to On.
20. Configure a Wireless interface. See Configure Wireless Interfaces for an AP Template for general instructions.
21. Configure Wired interface. See Configure Wired Interfaces for an AP Template for general instructions.
22. When the auto-provisioning rule configuration is complete, select Save to commit the changes, or select Cancel.