Cisco Mse 8 User Guide

							Cisco MSE Admin User Interface
•MSEAdminUIHomePage,page1
•UsingDataAccuracyTool,page4
•MonitoringSystemandNetworkHealth,page6
MSE Admin UI Home Page
TheMSEadminUIhomepagedisplaysat-a-glanceviewsofthemostimportantdatainyournetwork,status
ofvariousservices,andallowsyoutoconfigureMSEsystemsettings.YoucanalsoviewtheBetaversionof
variousapplicationssuchastheHealthandDataAccuracyToolbychoosingadmin>enablebetafeatures
inthetoprightsideofthepage.
Launching the MSE Admin User Interface
TolaunchtheMSEadminuserinterface,followthesesteps:
SUMMARY STEPS
1.LaunchtheMSEadminuserinterface(UI).Tolaunchit,typehttps://mseip/mseuiintheWebBrowseror
youcanlaunchitfromtheCiscoPrimeInfrastructure(PI)byclickingtheMSEnamelinkfromServices
>MobilityServicesEnginespage.
2.Entertheusernameandpassword.
3.ClickSignIn.
Cisco Wireless Intrusion Prevention System Configuration Guide, Release 8.0    
    OL-29331-011 
						

							DETAILED STEPS
PurposeCommand or Action
TheMSEadminUIisdisplayedonlyifyou
haveselectedtheMSEAdminViewcheck
boxintheAdministration>UserPreference
PagefromthePrimeInfrastructureuser
interface.
NoteLaunchtheMSEadminuserinterface(UI).Tolaunchit,type
https://mseip/mseuiintheWebBrowseroryoucanlaunchit
fromtheCiscoPrimeInfrastructure(PI)byclickingtheMSE
namelinkfromServices>MobilityServicesEnginespage.
Step 1
Entertheusernameandpassword.Step 2
TheMSEadminUIhomepageappears.ClickSignIn.Step 3
MSE Services
ThissectionbrieflydescribesthedifferentservicesthattheCiscoMSEsupportswithintheoverallCisco
UnifiedWirelessNetwork(CUWN):
AlltheavailableservicesarelistedintheMSEadminUIhomepageundertheServicesgroupbox.
•CMXAnalytics—TheCMXAnalyticsserviceanalyzeswirelessdevicelocationinformationina
particularnetwork.TheCMXAnalyticsserviceusesthedataprovidedbytheCiscoMobilityServices
Engine(MSE)tocalculatethelocationofWi-FidevicesintheWirelessLocalAreaNetwork(WLAN).
Whenawirelessdeviceisenabledinanetwork,ittransmitsproberequestpacketstoidentifythewireless
networkinitsneighborhood.EvenafterconnectingtotheaccesspointintheWLAN,theclientdevices
continuetotransmitproberequestpacketstoidentifyotheraccesspointsforbetterqualityofservice.
TheaccesspointsgathertheserequestandtheassociatedRSSIfromthevariouswirelessdevicesand
forwardsthemtotheWirelessLANController(WLC).Thecontrollerthenforwardsthisinformation
totheMSE.
ThebasicdatathatiscollectedfromvariousAPs,whenanalyzed,producesinformationandknowledge
aboutthemovementandbehaviorpatternsofpeoplewhoareusingWi-Fidevicesinthebuilding.For
example,thebuildingcanbeanairport,shoppingmall,citycenter,andsoon.TheCMXAnalytics
servicehelpstheairportauthoritiesorthebuildingownerstounderstandthemovementofpassengers
orcustomerwithintheirbuilding.Thishelpsthemimprovethesignage,makechangestotheunder
utilizedareas,andsoon.
•ContextAwareService—AlsoknownasLocationservice.ThisisthecoreserviceoftheMobility
ServicesEngine(MSE)thatturnsonWi-FiclienttrackingandlocationAPIfunctionality.AllowsMSE
tosimultaneouslytrackthousandsofmobileassetsandclientsbyretrievingcontextualinformationsuch
aspresence,location,telemetrydata,andhistoricalinformation.
•CMXConnect&Engage—ConnectandEngageService—FormerlyknownasBrowserEngageService.
TheCMXConnectandEngageserviceprovidesconnect,aguestWi-Fion-boardingsolution,zone,and
messageconfigurationfortheCMXSoftwareDevelopmentKit(SDK).
•MobileConcierge—MobileConciergeenablestheCiscoMobilityServicesAdvertisementProtocol
(MSAP).ThisprotocolenablesdirectcommunicationbetweentheMSEandmobiledevices,allowing
contenttobepusheddirectlytothemobiledevicepre-association.Thisfunctionalityisdependenton
themobiledevicesupporting802.11uandMSAP.
   Cisco Wireless Intrusion Prevention System Configuration Guide, Release 8.0
2OL-29331-01   
Cisco MSE Admin User Interface
MSE Services 
						

							•WirelessIntrusionPrevention—Provideswireless-specificnetworkthreatdetectionandmitigation
againstmaliciousattacks,securityvulnerabilities,andsourcesofperformancedisruptionwithinthe
CUWNinfrastructure.wIPSvisualizes,analyzes,andidentifieswirelessthreats,andcentrallymanages
mitigationandresolutionofsecurityandperformanceissuesusingCiscomonitormodeandEnhanced
LocalMode(ELM)AccessPoints.Proactivethreatpreventionisalsosupportedtocreateahardened
wirelessnetworkcorethatisimpenetrablebymostwirelessattacks.
Enabling or Disabling the MSE Services
ToenableordisabletheMSEservices,followthesesteps:
SUMMARY STEPS
1.LaunchtheMSEAdminUI.
2.Toenableanyoftheservices,followthesesteps:
3.Todisableanyoftheservices,followthesesteps:
DETAILED STEPS
PurposeCommand or Action
TheMSEAdminUIhomepageappears.Thefollowingarethevariousservicesdisplayed
intheServicesgroupbox:
LaunchtheMSEAdminUI.Step 1
•CMXAnalytics
•ContextAwareService
•CMXConnect&Engage
•Mobileconcierge
•WirelessIntrusionPrevention
Servicesthatareenabledwillbeingreencolorandthedisabledserviceswill
inredcolor.
NoteToenableanyoftheservices,
followthesesteps:
Step 2
•ClickthedesiredservicestabthatyouwishtoenableintheServicesgroupbox.
•ClicktheUp/Downbutton.
Doyoureallywanttochangetheservicestatusdialogboxappears.
•ClickOk.
ThecoloroftheUpbuttonchangestogreenoncetheserviceisenabled.Alsothe
correspondingservicenameintheServicesgroupboxchangestogreen.
Todisableanyoftheservices,
followthesesteps:
Step 3•ClickthedesiredservicestabthatyouwishtodisableintheServicesgroupbox.
•ClicktheUp/Downbutton.
Doyoureallywanttochangetheservicestatusdialogboxappears.
•ClickOk.
Cisco Wireless Intrusion Prevention System Configuration Guide, Release 8.0    
   OL-29331-013
Cisco MSE Admin User Interface
MSE Services 
						

							PurposeCommand or Action
ThecoloroftheDownbuttonchangestoredoncetheserviceisdisabled.Also
thecorrespondingservicesnameintheServicesgroupboxchangestored.
MSE Applications
TheadminUIiscomposedofthefollowingwebapplicationswhichserveasthefrontendfortheservices:
•What'sNew
•CMXConnectandEngage
•Maps
•DataAccuracyTool
•Health
Using Data Accuracy Tool
Prerequisites
Beforeyoufilterthedevicesusinglocationtuningordevicefilters,youshoulddothefollowingusingCisco
PrimeInfrastructureuserinterface:
•SynchronizethefloorareaofabuildingwiththeMSE.
•DrawPerimeteronthefloor.
Formoreinformationonsynchronizationandmapeditors,seechapterMonitoringMapsinCiscoPrime
InfrastructureClassicViewConfigurationGuide.
Working with Location Tuning
Tofilterthedevicesoutsidethevenue,followthesesteps:
Step 1LaunchtheMSEadminUI.
Step 2Chooseadmin>EnableBetaFeaturestoviewthebetafeatures.
Step 3ClicktheDataAccuracyTooltile.
Thelocationtuningpageappears.
   Cisco Wireless Intrusion Prevention System Configuration Guide, Release 8.0
4OL-29331-01   
Cisco MSE Admin User Interface
MSE Applications 
						

							Step 4Chooseacampusnamefromthedrop-downlist.
Step 5Chooseabuildingnamefromthedrop-downlist.
Step 6Chooseabuildingfloorfromthedrop-downlist.
Step 7ClickShowMap.
Thefloormapappears.
Step 8ClickInsideTraining.
Step 9EnterthecommaseparatedMACaddressesofthedevicesroaminginsidetheperimeterareadrawnonthefloor.
Step 10ClickStartDataCollectiontostartcollectingdataforthedeviceswithintheperimeterarea.
Minimum100%datacollectionisrequiredtocreateamodel.100%representsatleast20RSSIreadingperoperational
APpresentonthefloor.
Step 11ClickOutsideTraining.
Step 12EnterthecommaseparatedMACaddressesofthedevicesroamingoutsidetheareadrawnonthefloor.
Step 13ClickStartDataCollectiontostartcollectingdataforthedevicesoutsidetheperimeterarea.
Minimum100%datacollectionisrequiredtocreateamodel.This100%isconsideringtheinsidetrainingdataalso.
Step 14ClickCreateModeltocreateamodelbasedonthecollecteddata.
ToenableCreateModelbutton,youshouldstopthedatacollectionwhen100%datacollectioniscomplete.Todelete
allthecollecteddata,clickDeleteData.
Filtering Devices Based on Maximum RSSI Threshold
Tofilterthedevices,followthesesteps:
Step 1LaunchtheMSEadminUI.
Step 2Chooseadmin>EnableBetaFeaturestoviewthebetafeatures.
Step 3ClicktheDataAccuracyTooltile.
Step 4ClicktheDeviceFilterstab.
Step 5Chooseabuildingnamefromthedrop-downlist.
Step 6Chooseabuildingfloorfromthedrop-downlist.
Step 7Chooseazoneinthefloor.
Step 8SelectMaxRSSIThresholdfromthereportdrop-downlist.
Step 9EnterthecommaseparatedMACaddressesofthedevicesavailableintheselectedzone.
Step 10SelectaRSSIthresholdvalue.
Step 11ClickView.
Ittakesupto10minutestoshowthedata.
YouwillbeabletoviewtheRSSIreportforthedevices.
Cisco Wireless Intrusion Prevention System Configuration Guide, Release 8.0    
   OL-29331-015
Cisco MSE Admin User Interface
Filtering Devices Based on Maximum RSSI Threshold 
						

							Filtering Devices Based on Stationary Devices and MAC Addresses
Tofilterthedevices,followthesesteps:
Step 1LaunchtheMSEadminUI.
Step 2Chooseadmin>EnableBetaFeatures.
Step 3ClicktheDataAccuracyTooltile.
Step 4ClicktheDeviceFilterstab.
Step 5Chooseabuildingnamefromthedrop-downlist.
Step 6Chooseafloorofthebuilding.
Step 7Chooseazoneinthefloor.
Step 8ChooseStationaryDevicesandMACAddressesfromthereportdrop-downlist.
Step 9EnterthecommaseparatedMACaddressesofthedevicesavailableintheselectedzone.
Step 10Selecttheduration.
Step 11ClickView.
YouwillbeabletoviewtheMACaddressesofthelocateddevices.
Thisallowsyoutodownloadthereportofstationarydevices.
Monitoring System and Network Health
Viewing Health Dashboard
Toviewhealthdashboardforaspecificmobilityservicesengine,followthesesteps:
Step 1ChooseServices>MobilityServices.
Step 2Clickthenameofthemobilityservicesengineyouwanttoconfigure.
Step 3ClickHealthtilefromtheMSEadminUIhomepage.
Step 4ChooseApplicationStatistics>HealthDashboard.
YoucanviewtheutilizationpercentageofCPU,systemmemory,diskspace,analyticsCPU,analyticsmemory,CAS
CPUandCASmemory.
   Cisco Wireless Intrusion Prevention System Configuration Guide, Release 8.0
6OL-29331-01   
Cisco MSE Admin User Interface
Filtering Devices Based on Stationary Devices and MAC Addresses 
						

							Viewing CAS Latency Statistics
ToviewCASlatencystatisticsinformationforaspecificmobilityservicesengine,followthesesteps:
Step 1ChooseServices>MobilityServices.
Step 2Clickthenameofthemobilityservicesengineyouwanttoconfigure.
Step 3ClickHealthtilefromtheMSEadminUIhomepage.
Step 4ChooseApplicationStatistics>CASLatencyStatistics.
YouwillbeabletoviewtheCASlatencystatistics,CASqueuedelayandCAScalculationtime.
Viewing Notification Statistics
Toviewnotificationstatisticsinformationforaspecificmobilityservicesengine,followthesesteps:
Step 1ChooseServices>MobilityServices.
Step 2Clickthenameofthemobilityservicesengineyouwanttoconfigure.
Step 3ClickHealthtilefromtheMSEadminUIhomepage.
Step 4ChooseApplicationStatistics>NotificationStatistics.
ThefollowingtablelistsfieldsintheNotificationStatisticspage.
DescriptionField
DestinationSummary
Destinationstotalcount.TotalDestinations
Unreachabledestinationscount.UnreachableDestinations
StatisticsSummary
ThedestinationIPaddresstowhichthenotificationsare
sent.
HostAddress
Thedestinationporttowhichthenotificationsaresent.Port
Thetypeofthedestination.Example:SOAP_XML.DestinationType
Statusofthedestinationdevice.ThestatusiseitherUpor
Down.
Status
Cisco Wireless Intrusion Prevention System Configuration Guide, Release 8.0    
   OL-29331-017
Cisco MSE Admin User Interface
Viewing CAS Latency Statistics 
						

							DescriptionField
Thedateandtimeatwhichthelastnotificationwassent
tothedestinationdevice.
LastSent
Thedateandtimeatwhichthenotificationhadfailed.LastFailed
TrackdefinitioncanbeeitherNothboundorCASevent
notification.
TrackDefinition(Status)
Thetotalcountofnotificationssenttothedestination.Click
thecountlinktoviewthenotificationstatisticsdetailsof
thedestinationdevice.
TotalCount
Viewing Vital Statistics
Toviewvitalstatisticsinformationforaspecificmobilityservicesengine,followthesesteps:
Step 1ChooseServices>MobilityServices.
Step 2Clickthenameofthemobilityservicesengineyouwanttoconfigure.
Step 3ClickHealthtilefromtheMSEadminUIhomepage.
Step 4ChooseApplicationStatistics>VitalStatistics.
Youcanviewthegraphicalrepresentationofvitalstatisticsoveraperiodoftime.
   Cisco Wireless Intrusion Prevention System Configuration Guide, Release 8.0
8OL-29331-01   
Cisco MSE Admin User Interface
Viewing Vital Statistics