Configure Auto-Provisioning

Although AP device templates function similarly to auto-provisioning rules, the best-practice recommendation is to use AP device templates rather than auto-provisioning rules to configure APs as they are onboarded.
Note

Note

If AP device templates and auto-provisioning rules are both in place when the AP is onboarded, the auto-provisioning rules are applied and the AP device template is ignored.
Identify devices for auto provisioning by adding or importing serial numbers or IP subnetworks. Import serial numbers by selecting devices that have already been on-boarded, importing a CSV file populated with serial numbers, or entering serial numbers manually. You can use a combination of any of these methods. To add or import IP subnetworks to an auto-provisioning profile, enter IP subnetworks manually or import a CSV file containing the subnetworks. You can also use IPv6 addresses to identify subnetworks.
Note

Note

Auto-provisioning profiles are based on device models. You can define multiple profiles for the same model and distinguish which devices get which profile by specifying a serial number or IP address.
  1. Select the add icon.
  2. Enter a name.
  3. Enter an optional description.
  4. Select a Device Function.
  5. Select a Device Model.
    The model you choose determines which device functions, interface settings, and radio settings display.
  6. Select Serial Number to restrict automatic provisioning to particular serial numbers.
  7. Choose the Select Serial Numbers bar.
  8. Add serial numbers from the imported list, import them from a CVS file, or add them manually.
  9. Choose IP Subnetworks to auto-provision devices by IP subnetworks.
  10. Choose Select IP Subnetworks.
    Note

    Note

    To create an auto provisioning profile that contains IP subnetworks, the devices in the profile cannot have been previously onboarded.
  11. Add IP Subnetworks from either a CVS file or manually.
    When you create multiple auto provisioning profiles for the same device model and use serial numbers or IP subnetworks to identify them, be aware of the following situations:
    • If a conflict arises because two auto provisioning profiles applied to the same device, for example, one profile based on the serial number and the other based on the subnetwork, the profile based on the serial number takes precedence.
    • The same serial number must not appear in more than one auto provisioning profile.
  12. Select a Network Policy from the drop-down list.
  13. Select the Country for the device from the dropdown list.

    If you later select the Upload configuration automatically check box, ExtremeCloud IQ applies the country code specified here when it automatically pushes a configuration to devices during the initial CAPWAP connection.

  14. Select Assign to assign a Default Location to all the devices in the auto provisioning profile.
    Note

    Note

    You can only assign devices to a floor within a building.
  15. For Select a Location and IP Subnetwork, select the plus sign.
  16. Select a Subnet and Location.
  17. Select Save.
  18. Select Upload device firmware upon device authentication to upload an image automatically.
    1. Select the Golden version if you want to automatically upload the version with fewer features, but fully tested and super stable for those environments where stability is more important than feature richness.
    2. Select the Latest version if you want to automatically upload new features, some of which might contain bugs.
  19. Select Upload configuration automatically to automatically upload a pre-defined configuration, which consists of a network policy, two radio profiles, a topology map, a pair of root and read-only administrators, and CAPWAP settings.
  20. Select Reboot after uploading to activate the uploaded image and configuration by rebooting the devices.
    If your deployment includes mesh points, do not select this option. Reboot the devices manually so that you can control the order in which the devices reboot.
  21. Select Enable Device Credential to set device credentials.
    • Root Admin Configuration: Enter a name and password for the root admin for the device. ExtremeCloud IQ uses root admin log in credentials to make SSH connections to configured devices and upload full configurations to them. This admin can also access the device through Telnet, SSH, or console connections.
    • Read-Only Admin Configuration: Enter a name and password for an admin that has read-only privileges.
  22. Select Enable CAPWAP configurations to configure primary and secondary CAPWAP servers.
    • Primary CAPWAP Server: From the Primary CAPWAP Server drop-down list, choose the ExtremeCloud IQ address with which you want devices to form a CAPWAP connection first. If you do not see the address you need, select the plus sign and add an IP address or host name.
    • Backup CAPWAP Server: If you are deploying ExtremeCloud IQ as a standalone device, leave this field empty. If it is in an HA pair behind a NAT device from its configured devices, use the drop-down menu to select the domain name or MIP linking to its MGT interface. If you do not see the address you need, select the plus sign and add an IP address or host name.
    • Shared Key for Authentication: To change the passphrase, enter a new alphanumeric string in the Passphrase and Confirm Passphrase fields.
9037930-01 Rev AA