HiveManager-NG Questions

  • 1
  • Question
  • Updated 3 years ago
A few initial questions regarding HiveManager-NG! :)

  1. I cannot see where we configure the RADIUS accounting interval or where we enable/disable CoA support. Please can this be added back, assuming I have not missed where this lives?

  2. When configuring user profiles, it does not appear to be possible to select an existing user profile to be the default, rather, you have to create a new one. Have I missed something here? If not, please can this be changed so that we can also reference an existing user profile?

  3. I am interested in a clarification in how this will all work with the redirector. I assume that we will just need to remove and de-register the serials of any devices we want to test/move from the 'classic' HMOL instance and input them in to the new and everything will hand over? If so, is this a 'immediate' process or is there a synchronisation delay?

  4. What is the provisioning process like when you first connect a supported model of AP that has previous software on it? In some cases, an intermediary version of HiveOS is required before you can put the latest on. This is commonly the case with AP230s. (Auto-provisioning currently does not work well with 'classic' HiveManager here as it does not install any intermediary version(s) as necessary based on what the dependencies are for a HiveOS upgrade. Is this any better with NG?)

  5. When logging in, the username box is not preselected/in focus with the carat flashing and you cannot use the Enter key to submit your credentials once entered. This is a minor nit, but can this be changed?

  6. I have noticed that we are able to take existing license codes and apply them straight in to HiveManager-NG without issue. However, the 'Evaluate & Buy' yellow bar remains. Is this expected behaviour? I would have expected that it should disappear when valid, non-trial licensing information has been applied.
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes

Posted 3 years ago

  • 1
Photo of Hivefan

Hivefan

  • 23 Posts
  • 4 Reply Likes
HI Nick,

Thanks for the questions. Let me take #6 and #5 first as I am familiar with the related part of the product. #6 was an issue and it is fixed in a release that's coming soon. #5, yes, the user name box is not preselected and it's a good idea to preselect it. I found that I actually can submit my credentials once entered. 
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
Yes, it is exactly that. If you have the 1Password browser extension installed, using the Enter key does not work - nothing happens. Not sure whose fault that will end up being - I will investigate more.
(Edited)
Photo of Hivefan

Hivefan

  • 23 Posts
  • 4 Reply Likes
I used Chrome when I did the test and I don't have 1Password extension installed. Let us know what you find out. Thanks again. 
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
The issue occurs only when 1Password doesn't have the username and password saved and prompts you to save it to your vault. If you click cancel to that prompt, the login doesn't occur but it should. I'll do some root cause analysis later. This is probably an unusual, esoteric scenario. Thanks Fan! :)

Update: I have reported the issue to 1Password.
(Edited)
Photo of Ajit

Ajit

  • 11 Posts
  • 0 Reply Likes
Nick,
Please see below response for questions 1-4.

1. You can see them when you click on option settings icon on the right, under Authenticate via Radius server. 
2. This will be available as part of the cloud update on April 11. 
3. You are correct, remove the devices in classic HM and add the new serial numbers in NG, there should be no noticeable delay. 
4. NG requires the AP to have 6.4r1, the first time you connect the AP to NG, it will upgrade the HiveOS version to 6.4r1. Our QA team has tested devices with 6.1r6 or later, NG will auto-upgrade it. 
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
Re: 1) Thanks, I had completed missed that, blind as a bat! :P

Re: 2) Awesome!

Re: 3) Awesome!

Re: 4) I was interested in the scenario where an AP230 has factory shipped 6.1r5.
EDIT: I now understand that a manual update via CLI, 'classic' HiveManager or the APs Web based interface is likely to be required. Thanks! :)
(Edited)
Photo of Joseff Harris

Joseff Harris

  • 11 Posts
  • 0 Reply Likes
An answer question 3...although not a definitive answer...

I completed the process as you describe to move an AP from our HMOL classic to Hivemanager NG. Took about 15 minutes for the AP to show up as managed in HIvemanager NG. Looks like the de-register/register happens pretty quickly. Of course that is ignoring the possibility that we may by chance have done this at a time that coincided with a synchronisation occurring, if this indeed happens only at set intervals.
Photo of Paul

Paul

  • 19 Posts
  • 0 Reply Likes
#3 Migration of my AP's from HMOL to NG was not totally smooth, an AP230 moved over eventually but took some time (I think it was several hours) and I had to do a factory reset on a AP330 before it would register with NG, which of course meant I lost the SSID that AP was publishing, until I was able to push a new config to it from NG. So you will probably want to test this on a couple different model AP's first before switching over your entire estate.

#5 I have noticed a similar issue with lastpass, it does not populate the username field, but will do the password field ok.
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
Next questions:

7) How do we reorder firewall rules? Short of deleting the rules and starting again, I cannot see how to achieve this.

The manual states to check the Moving Rules section but I cannot find this.

8) How do we configure the radio profile in a device template for auto TX power for the 2.4 GHz / 5 GHz radios?

When I add APs, I find that they always default to a manual TX power.
(Edited)
Photo of Andrew Garcia

Andrew Garcia, Official Rep

  • 368 Posts
  • 120 Reply Likes
Hey Nick, 
7 - I will ask.  I was surprised ordering was not there.
8- It is kind of a display bug.  When you push the template, the power is set according to the template.  The display bug is that the interface screen says 10 dBm.  But it is not actually set on the device.  But if you edit something else on the wireless interface page (prune an SSID or something), then the 10 dBm setting gets implemented.
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
Thanks, I have also encountered an issue where changing the host name from HOSTNAME after adding an AP's serial gets overwritten with AH-abcdef when the device actually connects for the first time. Frustrating! :P
Photo of Andrew Garcia

Andrew Garcia, Official Rep

  • 368 Posts
  • 120 Reply Likes
Yeah, seen that too.  Please file feedback for all your little issues like this using the feedback button on the right side.
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
Will do, thanks! :)

There's a couple of other minor, teething issues that I've picked up on so far while playing:

  • Changing the number of devices/clients/events/alarms shown does not stick, it really should - always snapping back to 10 is a little frustrating as you navigate around the interface. It would also be nice to be able to show more than 50 where fixed, per page sizes are used. The previous HM allowed this.
    (It would be awesome to actually have a system where all items are available in a dynamically expanding/contracting 'infinity' view without having to change pages at all. Such a view would ensure that too many elements are not maintained in the DOM in the browser, but persists and retrieves state as needed to add/remove items dynamically as you scroll to the top and bottom, the bounds of the view, and more items exist. Async background updates would keep the information displayed always fresh.)

  • Dates should be shown in the format YYYY-MM-DD not MM-DD-YY. This sorts properly, is not ambiguous and is internationally friendly. Presently, the sorting does not occur chronologically.

  • Selecting, sorting and working with devices or clients only works with those that are shown on the current page - going between them deselects any that have been selected. The sorting issue is most noticeable when doing so by hostname - you would expect it to sort all the items. It's a little frustrating to have to click through all the pages to discover the APs that you want, especially when there's a set with a common naming convention and they've all ended up on different pages. The same issue occurs when attempting to update the configuration on the APs, I feel it's made more of an involved process because of this.
    (You cannot, as far as I can see, filter by host name or user name etc to create a subset view so there is no workaround for this that I can see. Ideally you would be able to filter by any value in any column.)

  • IP addresses are not sorted numerically, they are sorted textually which seems incorrect.

  • For the configuration that I set up, there appears to be no functioning visual indicator that the configuration on an AP is stale or up to date when looking through devices. I suspect this may be a symptom rather than an issue in itself however as a delta is always shown when the configuration is reviewed after performing a complete configuration upload with my settings.

  • There is no longer a free text field on devices to add an arbitrary comment. This can make managing the devices a little more laborious if you have to cross reference elsewhere to get needed information.
  • The Clients view doesn't expand correctly when you elect to show a greater number (e.g. 10 to 50). It instead puts additionally items in a in a small fixed area that can be scrolled. The Devices view does, however, expand correctly, so there is inconsistency in the implementation.

  • It would be helpful if the columns could be resized and reordered.

  • It would be nice to have a Users tab in addition to Devices, Clients, Events and Alarms where subordinate clients are shown and grouped under a user.

  • Where a client MAC address is shown, it would be useful to have the OUI mapped to a vendor. The best database to use is: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=blob_plain;f=manuf

  • It's possible to paste in a space in to text fields where one cannot be typed in and apply this - so the input validation logic isn't behaving consistently. This should probably be checked.
None of these are blocking issues, just niggles that I hope can get changed down the line.

I'd have loved to beta test this. All in all, I've been really impressed so far! :)
(Edited)
Photo of Hivefan

Hivefan

  • 23 Posts
  • 4 Reply Likes
Hi Nick,

Thank you very much for gathering this issues and taking time to report. Here is my comment: 

1) "Changing the number of devices/clients/events/alarms shown does not stick." This is an issue. I will file a bug ticket for it. Your suggestion about expanding / contracting is a good one. I will forward to our UX team. We are making changes to pagination in the next release (in May) to make pagination of pages that have table view more consistent and useful. 

2) "Selecting, sorting and working with devices or clients only works with those that are shown on the current page". In next release (in May), we will do sorting on the server side. So sorting happens across the table , not just the currently displayed page of the table. 

3) "IP addresses are not sorted numerically, they are sorted textually which seems incorrect". This is an issue. I will file a bug ticket for it. 

4) "there appears to be no functioning visual indicator that the configuration on an AP is stale or up to date". Do you mean that when you update a device, you see the progress often stops at 83% and never show rebooting? We are marking an enhancement on that and it will be in next release (in May) ***

5) "The Clients view doesn't expand correctly when you elect to show a greater number (e.g. 10 to 50). It instead puts additionally items in a in a small fixed area that can be scrolled. " This sounds a bug. I will verify it and may file a bug ticket. 

6) "It would be helpful if the columns could be resized and reordered." Good suggestion. We have this roadmap. 

7) "There is no longer a free text field on devices to add an arbitrary comment. " Did you mean tags? ***

8) "It would be nice to have a Users tab in addition to Devices, Clients, Events and Alarms where subordinate clients are shown and grouped under a user." Yeah, I see this is useful from the standpoint of providing more visibility of the network. What do you think are the typical use cases that users would look at data in this user list?

9) "Where a client MAC address is shown, it would be useful to have the OUI mapped to a vendor. " Yes, we can put in a OUI field when we make the columns selectable.  The real estate of screen is very precious. The table is already crowded now. We really need to make the columns selectable so that users can select to display only columns that matter to them. 

10) "It's possible to paste in a space in to text fields where one cannot be typed in and apply this". Good catch. Do you by chance have a specific example, I will file a bug ticket for it.  
Photo of Hivefan

Hivefan

  • 23 Posts
  • 4 Reply Likes
Some updates: 

1) Already fixed in next release.
3) Already fixed In next release.
5) We are tracking it with a bug ticket now. 
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
Hi Fan,

4) I mean that after uploading a full or delta configuration, the audit icon remains grey for this VHM.

7) I mean that it would be useful to be able to enter a comment, arbitrary text, on a device. Previously it was possible to use the location field for this. This comment would be visible under 'Overview' and configured perhaps under 'Additional Device Settings'.

8) I feel that it is simply more discoverable and gives better insight in to a network with this type of view. (I also miss, from a discoverability/insight perspective, the ability to scroll down a list of APs and have a number shown showing at a glance the number of connected clients. This could then be clicked to list them. You can do this by first clicking on a device but it is not discoverable.)

9) Agreed. It would be possible to show this when you view more details of a client though.

10) I managed to do this by accident when adding User Groups by copying and pasting configuration from HM to HM-NG. I noticed later it was not possible to type in a space when creating a new one but it had been possible to paste them in. [I also cannot rename them now because they contain users (why is this?) so I hope that this does not break in the future. :P]



And... A few more questions, sorry :P

11) Will the issue of not being able to reorder firewall rules be fixed? I find this quite inconveniencing as you have to remove and add rules again to get the ordering that you need.

12) Will the issue of duplicating an existing user profile that has a firewall defined be fixed? It results in broken config generation that then cannot be applied to APs as it tries to define the same ip-policy twice. This was a slightly awkward issue to triage to identify the root cause when I hit it.

13) I find that when updating the policy and configuration on a group of devices, the Device Update 'window' can sometimes, prima facie intermittently remain stuck on the display after clicking Upload. It can then be dismissed by clicking on the X, but you are never quite sure that it has done what you expected of it.

I also have an issue where the Troubleshooting area/tab has become non-functional in this particular VHM - a spinning throbber is shown but it remains seemingly indefinitely, nothing ever happens afterwards. I do, however, now have a support case open about this so don't need to trouble you with it.

I suspect that this is due to the amount of data that this environment is generating and the feature not scaling resulting in a timeout somewhere, probably at the SQL level. HM-NG either needs to prune the data back quicker in a busy environment or cope with the amount of data better somehow.

Cheers! :)

Nick
(Edited)
Photo of Ajit

Ajit

  • 11 Posts
  • 0 Reply Likes
Nick,
Thanks for bringing this to our attention.

Items 11, 12 and 13 are targetted to be addressed in upcoming release.
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
The unique clients widget doesn't draw correctly when you have have over 999 connections:

(Edited)
Photo of Hivefan

Hivefan

  • 23 Posts
  • 4 Reply Likes
Hi Nick, 

Thank you very much for the feedback. I have created a bug ticket for this issue. We will fix this in next release. 

Regards,
Fan
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2438 Posts
  • 445 Reply Likes
Thanks Fan! :)

Did you have any thoughts on the other things, bullet pointed above, that I consider to be teething issues?

I also had a question about how we are meant to raise such issues in an official way that gets feedback.

When you click to leave feedback in HM-NG, it is stated:
Use the Feedback button to send us product ideas and feedback on features and usability. For specific questions or issues, or to report a product defect, please contact Aerohive Support directly. Messages received via the Feedback button are not monitored by Aerohive Support.

This makes perfect sense, however, the devil being in the detail, it does not state what international customers who are supported by a VAR are supposed to do at the moment?

Such customers cannot raise a ticket with Aerohive Support directly.

The UK VAR for this particular deployment has understandably stated that HM-NG is a very new product for which they have no other customers and they are yet to get familiarity.

I moved this particular site over to HM-NG in the full knowledge that teething issues were likely to be hit by being an early adopter but I do not really know how best to raise such issues with Aerohive, especially when they are not critical.

I do have email contacts of a few Aerohive employees who I could pass things on to but I feel it would be wrong to do so.

Sorry for pestering!

Cheers,

Nick

(Edited)
Photo of Hivefan

Hivefan

  • 23 Posts
  • 4 Reply Likes
Hi Nick,

I have responded to other points you commented before. There are a few things I hope to clarify with you and I put my question in the comment. Please feel free to send your further comment to my work email directly: flin@aerohive.com

You brought up a great point in this post. For international customers who are supported by a VAR, they purchased support service from VAR and hence don't report support issues to Aerohive Support directly. We will update the statement in the Feedback pop-up window to provide proper guidance. 

For customers who have access to Aerohive support, it's still the recommended approach that "For specific questions or issues, or to report a product defect, please contact Aerohive Support directly", because Aerohive Support is at better position to verify issues and product defects, create and track bug tickets. The feedback button in GUI is best for feature request and usability suggestion. Feedback is collected and reviewed regularly by my Product Management team. High impact, commonly requested items will be prioritized in the next release. As a matter of fact, we have dedicated the next coming release (in May) to address feedback from external and internal customers. 


Cheers,
Fan
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2438 Posts
  • 445 Reply Likes
Hi Fan,

Sorry, I have only just read through this properly. I missed it, somehow...
I will definitely email you with any further comment!

Regards,

Nick
Photo of Hivefan

Hivefan

  • 23 Posts
  • 4 Reply Likes
Hi Nick,

No worries. Appreciated your interest in Aerohive products and tremendous contribution to the community here. 

Cheers,
Fan