Remote Client Details

The remote clients are clients that are connected to the network through VPNVirtual Private Network. VPN enables secure access to a corporate network when located remotely. It enables a computer to send and receive data across shared or public networks as if it were directly connected to the private network, while benefiting from the functionality, security, and management policies of the private network. This is done by establishing a virtual point-to-point connection through the use of dedicated connections, encryption, or a combination of the two.. The in-house wireless and wired clients can also be authenticated using the VPN (VIAVirtual Intranet Access. VIA provides secure remote network connectivity for Android, Apple iOS, Mac OS X, and Windows mobile devices and laptops. It automatically scans and selects the best secure connection to the corporate network.). The overview page displays the client summary details, applications, and events for the selected remote client.

This section includes the following topics:

• Viewing Remote Clients Connected through VPN
• Summary
• Overview
• Applications
• Events

Viewing Remote Clients Connected through VPN

To view the details of a remote client:

1. In the Network Operations app, set the filter to one of the options under Groups, Labels, or Sites. For all devices, set the filter to Global. The dashboard context for the selected filter is displayed.
2. Under Manage, click Clients. The All Clients page is displayed.
3. By default, the Clients table displays a unified list of clients for the selected group, label, site or device.
4. Click the name of the remote client to open the corresponding Client Details page. If there are many clients connected to the network, click Remote to filter the clients connected to the network.
5. Enter the client name in the Client Name column, and click the client name. The client Summary page is displayed.
6. Click the required tab name to navigate and view the details.

Summary

The client summary page displays the following information.

Health Bar

Table 1: Health Bar

Field	Description
Connection status icon	Displays the icons with the connection status of the client. Connection status is updated immediately on state change. The available statuses are: Connecting—Displays a list of client connections that are in progress. Connected—Displays a list of clients that are successfully connected to the network. Failed—Displays a list of all failed client connections. Offline—Displays a list of all offline clients. Blocked—Displays a list of all blocked clients.
Connected To	Displays the name of the AP that broadcasts the SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. to which the client is connected. Click the name of the AP to view the device details page.

Overview

The Overview tab displays information about the type of data path that the client uses, the network and connectivity details, and basic client details such as IP address of the client, type of encryption etc. The following table describes the information displayed in each section:

Table 2: Remote Client Details

Section	Description
Data Path	Displays the data path of the client in the network. Click the controller to view the details page. The data path can be Client > Tunnel > Controller
Client	Displays the following information: Username—User name of the client. Hostname—Hostname of the client. Client Type—Type of the client device. Local IP Address—Link local IP address of the client. IP Address—IP address of the client. MAC Address—MACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network.  address of the client. Client OS—Operating system running on the client device. Connected Since—Date and time since when the client is connected.
Network	Displays the following information: Controller Role—Displays the role assigned to the client. Authentication Type—Displays the authentication method as VIA VPN.
Throughput	Displays the incoming and outgoing throughput traffic for the client during a specific time range. By default, the graph on the Throughput pane is plotted for a time range of 3 hours. To view the graph for a different time range, click the Time Range Filter link. You can choose to view the graph for a time period of 3 hours, 1 day, 1 week, 1 month, or 3 months.

AI Insights

The AI Insight tab displays information about client performance and connectivity issues. AI Insights are displayed for a selected time period based on the time selected in Time Range Filter. The user can select 3 hours, 1 week, 1 day, or 1 month to view the insight data. AI Insights are categorized in high, medium, and low priorities depending on the number of occurrences.

• Red—High priority
• Orange—Medium priority
• Yellow—Low priority

Each insight report specific details on the occurrences of these events for ease in debugging. For more information, see The AI Insights Dashboard

The client AI Insights page displays the following insights:

• Clients with High Wi-Fi Security Key-Exchange Failures
• Clients with High 802.1X Authentication Failures
• Clients with DHCP Server Connection Problems
• Clients with High Number of MAC Authentication Failures

Applications

The Application page consists of the Visibility , UCC and AirGroup tab.

Visibility

The Visibility dashboard provides a summary of client traffic and their data usage to and from applications, and websites. You can also analyze the client traffic flow using the graphs displayed in the Visibility dashboard. The tab consists of a list view and a graph view. The Visibility dashboard displays metrics and graphs related to client traffic flow in the following sections:

• Applications
• Websites

For more information about enabling Application Visibility, list of supported Instant APs, and the data displayed on the Applications and Websites sections, see Application Visibility.

Sessions

The client sessions page consists of the firewallFirewall is a network security system used for preventing unauthorized access to or from a private network. session details for the client connected to a Branch Gateway. The Sessions page displays information filtered by the IP address of the client. The Sessions Summary pane displays the device the client is connected to, total number of sessions, and the time stamp of when the page was last refreshed. The sessions details page refreshes automatically, to refresh the page manually, click the refresh icon after the timestamp.

The Sessions table lists the details of each session. By default, the table displays the following columns: Application, Destination IP, Protocol, , Dest Port, DSCPDifferentiated Services Code Point. DSCP is a 6-bit packet header value used for traffic classification and priority assignment. , Flags, Packets, State and Action.

Click the ellipsis icon to perform additional operations:

• Autofit columns—Adjusts the column width of the table to fit the page evenly.
• Reset to default—Resets the table view to the default columns.

If a filter icon appears next to the column header, click it and enter the filter criteria or select a filter criteria. The following table describes the information displayed in each session:

Table 3: Sessions Tab

Section	Description
Application	Displays the list of applications.
Source IP	Displays the source IP address.
Destination IP	Displays the destination IP address.
Protocol	Displays the communication protocol used.
Source Port	Displays the source port number.
Dest Port	Displays the destination port number.
DSCP	Displays the DSCP value.
Flags	Displays the active flags
Packets	Displays the number of packets.
Bytes	Displays the total number of bytes.
State	Displays the connection state of the application. The state can either be Denied, Active, or Inactive.
Action	Displays the application specific action.
VLANVirtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN.	Displays the VLAN the client is connected to.
Start Time	Displays the start time.
Receive Time	Displays the receive time.
WebCC Category	Displays the WebCC category.
WebCC Reputation	Displays the WebCC reputation.
WebCC Score	Displays the WebCC score.
Application Category	Displays the application category.
Priority	Displays the priority value.

Events

In the Events page, the table displays the following columns by default: Occurred On, Event Type, and Description. Click the ellipsis icon to perform additional operations:

• Autofit columns—Adjusts the column width of the table to fit the page evenly.
• Reset to default—Resets the table view to the default columns.

If a filter icon appears next to the column header, click it and enter the filter criteria or select a filter criteria. The following table describes the information displayed in each event:

Table 4: Events Tab

Section	Description
Occurred On	Displays the time at which the event occurred.
Event Type	Displays the type of the event.
Description	Displays the detailed description of the event.
Device MAC	Displays the MAC address of the device.
BSSID	Displays the BSSIDBasic Service Set Identifier. The BSSID identifies a particular BSS within an area. In infrastructure BSS networks, the BSSID is the MAC address of the AP. In independent BSS or ad hoc networks, the BSSID is generated randomly..

To download events into a CSVComma-Separated Values. A file format that stores tabular data in the plain text format separated by commas. format, click the download button. Aruba Central generates the CSV report of all the events for the selected client.

You can also filter the events based on the type of events, click the Click here for Advance Filtering. Select the type of events from the list and click Filter. The events under the selected categories get listed in the Events table.