Dell W-IAP204, W-IAP205 User Manual
Dell Networking W-Series
Instant
6.4.2.0-4.1.1
UserGuide
Copyright
© 2014 ArubaNetworks,Inc. ArubaNetworkstrademarksinclude
,ArubaNetworks®,Aruba WirelessNetworks®,theregistered ArubatheMobileEdgeCompany logo,and ArubaMobility Management System®. Dell™,theDELL™logo,and PowerConnect™aretrademarksof DellInc.
Allrightsreserved. Specificationsin thismanualaresubject to changewithout notice.
Originated in theUSA. Allothertrademarksaretheproperty of theirrespectiveowners.
Open Source Code
Certain ArubaproductsincludeOpen Sourcesoftwarecodedeveloped by third parties,includingsoftwarecode subject to theGNU GeneralPublicLicense(GPL),GNU LesserGeneralPublicLicense(LGPL),orotherOpen SourceLicenses. IncludessoftwarefromLitech SystemsDesign. TheIF-MAP client library copyright 2011 Infoblox,Inc. Allrightsreserved. Thisproduct includessoftwaredeveloped by LarsFenneberg,et al. TheOpen Sourcecodeused can befound at thissite:
http://www.arubanetworks.com/open_source
Legal Notice
Theuseof ArubaNetworks,Inc. switchingplatformsand software,by allindividualsorcorporations,to terminateothervendors’VPN client devicesconstitutescompleteacceptanceof liability by that individualor corporation forthisaction and indemnifies,in full,ArubaNetworks,Inc. fromany and alllegalactionsthat might betaken against it with respect to infringement of copyright on behalf of thosevendors.
0511581-03 | November 2014 |
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
Contents
About this Guide |
26 |
IntendedAudience |
26 |
RelatedDocuments |
26 |
Conventions |
26 |
ContactingDell |
27 |
About Instant |
28 |
Instant Overview |
28 |
SupportedDevices |
28 |
Instant UI |
29 |
Instant CLI |
30 |
What isNewinInstant 6.4.2.0-4.1.1 |
30 |
Setting up a W-IAP |
31 |
SettingupInstant Network |
31 |
ConnectingaW-IAP |
31 |
AssigninganIPaddresstotheW-IAP |
31 |
AssigningaStaticIP |
32 |
ConnectingtoaProvisioningWi-FiNetwork |
32 |
W-IAPCluster |
32 |
DisablingtheProvisioningWi-FiNetwork |
33 |
LoggingintotheInstant UI |
33 |
Regulatory Domains |
34 |
Country Code |
34 |
SpecifyingCountry Code |
37 |
AccessingtheInstant CLI |
38 |
ConnectingtoaCLI Session |
38 |
ApplyingConfigurationChanges |
39 |
UsingSequenceSensitiveCommands |
39 |
Instant User Interface |
41 |
LoginScreen |
41 |
LoggingintotheInstant UI |
41 |
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
| 3 |
ViewingConnectivity Summary |
41 |
Language |
42 |
MainWindow |
42 |
Banner |
42 |
Search |
42 |
Tabs |
42 |
NetworksTab |
43 |
AccessPointsTab |
43 |
ClientsTab |
44 |
Links |
44 |
NewVersionAvailable |
45 |
System |
45 |
RF |
46 |
Security |
47 |
Maintenance |
48 |
More |
49 |
VPN |
49 |
IDS |
50 |
Wired |
51 |
Services |
51 |
DHCP Server |
52 |
Support |
53 |
Help |
54 |
Logout |
54 |
Monitoring |
54 |
Info |
54 |
RF Dashboard |
56 |
RF Trends |
58 |
Usage Trends |
58 |
Mobility Trail |
64 |
Client Match |
64 |
AppRF |
65 |
Spectrum |
65 |
Alerts |
66 |
IDS |
70 |
4 | |
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
AirGroup |
71 |
Configuration |
71 |
W-AirWaveSetup |
72 |
Pause/Resume |
72 |
Views |
72 |
Initial Configuration Tasks |
73 |
BasicConfigurationTasks |
73 |
ModifyingtheW-IAPName |
73 |
IntheInstant UI |
74 |
IntheCLI |
74 |
UpdatingLocationDetailsof aW-IAP |
74 |
IntheInstant UI |
74 |
IntheCLI |
74 |
ConfiguringaPreferredBand |
74 |
IntheInstant UI |
74 |
IntheCLI |
74 |
ConfiguringVirtualControllerIPAddress |
74 |
IntheInstant UI |
75 |
IntheCLI |
75 |
ConfiguringaTimezone |
75 |
IntheInstant UI |
75 |
IntheCLI |
75 |
ConfiguringanNTPServer |
75 |
IntheInstant UI |
76 |
IntheCLI |
76 |
EnablingAppRFVisibility |
76 |
ChangingPassword |
76 |
IntheInstant UI |
76 |
IntheCLI |
76 |
AdditionalConfigurationTasks |
76 |
ConfiguringVirtualControllerVLAN |
77 |
IntheInstant UI |
77 |
IntheCLI |
78 |
ConfiguringAutoJoinMode |
78 |
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
| 5 |
EnablingorDisablingAutoJoinMode |
78 |
In the Instant UI |
78 |
In the CLI |
78 |
ConfiguringTerminalAccess |
79 |
IntheInstant UI |
79 |
IntheCLI |
79 |
ConfiguringConsoleAccess |
79 |
IntheInstant UI |
79 |
IntheCLI |
79 |
ConfiguringLED Display |
79 |
IntheInstant UI |
80 |
IntheCLI |
80 |
ConfiguringAdditionalWLANSSIDs |
80 |
EnablingtheExtendedSSID |
80 |
In the Instant UI |
80 |
In the CLI |
80 |
PreventingInter-userBridging |
81 |
IntheInstant UI |
81 |
IntheCLI |
81 |
PreventingLocalRoutingbetweenClients |
81 |
IntheInstant UI |
81 |
IntheCLI |
81 |
EnablingDynamicCPU Management |
82 |
IntheInstant UI |
82 |
IntheCLI |
82 |
Customizing W-IAP Settings |
83 |
ModifyingtheW-IAPHostname |
83 |
IntheInstant UI |
83 |
IntheCLI |
83 |
ConfiguringZoneSettingsonaW-IAP |
83 |
IntheInstant UI |
83 |
IntheCLI |
84 |
SpecifyingaMethodforObtainingIPAddress |
84 |
IntheInstant UI |
84 |
6 | |
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
IntheCLI |
84 |
ConfiguringExternalAntenna |
85 |
EIRPandAntennaGain |
85 |
ConfiguringAntennaGain |
85 |
IntheInstant UI |
85 |
IntheCLI |
86 |
ConfiguringRadioProfilesforaW-IAP |
86 |
ConfiguringARM AssignedRadioProfilesforaW-IAP |
86 |
ConfiguringRadioProfilesManually forW-IAP |
86 |
IntheCLI |
87 |
ConfiguringUplinkVLAN foraW-IAP |
87 |
IntheInstant UI |
87 |
IntheCLI |
88 |
MasterElectionandVirtualController |
88 |
MasterElectionProtocol |
88 |
PreferencetoaW-IAPwith3G/4G Card |
88 |
PreferencetoaW-IAPwithNon-Default IP |
89 |
ViewingMasterElectionDetails |
89 |
ManualProvisioningof MasterW-IAP |
89 |
ProvisioningaW-IAPasaMasterW-IAP |
89 |
In the Instant UI |
89 |
In the CLI |
89 |
AddingaW-IAPtotheNetwork |
90 |
RemovingaW-IAPfromtheNetwork |
90 |
VLAN Configuration |
91 |
VLANPooling |
91 |
UplinkVLANMonitoringandDetectiononUpstreamDevices |
91 |
Wireless Network Profiles |
92 |
ConfiguringWirelessNetworkProfiles |
92 |
NetworkTypes |
92 |
ConfiguringWLANSettingsforanSSID Profile |
92 |
IntheInstant UI |
93 |
IntheCLI |
96 |
ConfiguringVLANSettingsforaWLANSSID Profile |
96 |
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
| 7 |
IntheInstant UI |
97 |
IntheCLI |
98 |
ConfiguringSecurity SettingsforaWLANSSID Profile |
99 |
ConfiguringSecurity SettingsforanEmployeeorVoiceNetwork |
99 |
In the Instant UI |
99 |
In the CLI |
104 |
ConfiguringAccessRulesforaWLANSSID Profile |
105 |
IntheInstant UI |
106 |
IntheCLI |
106 |
ConfiguringFast RoamingforWirelessClients |
107 |
OpportunisticKey Caching |
107 |
ConfiguringaW-IAPforOKCRoaming |
108 |
In the Instant UI |
108 |
IntheCLI |
108 |
Fast BSSTransition(802.11rRoaming) |
108 |
ConfiguringaW-IAPfor802.11rsupport |
109 |
In the Instant UI |
109 |
In the CLI |
109 |
Example |
109 |
RadioResourceManagement (802.11k) |
109 |
BeaconReport RequestsandProbeResponses |
110 |
ConfiguringaWLAN SSID for802.11kSupport |
110 |
In the Instant UI |
110 |
In the CLI |
110 |
Example |
110 |
BSSTransitionManagement (802.11v) |
110 |
ConfiguringaWLAN SSID for802.11v Support |
111 |
In the Instant UI |
111 |
In the CLI |
111 |
Example |
111 |
EditingStatusof aWLANSSID Profile |
111 |
IntheInstant UI |
111 |
IntheCLI |
111 |
EditingaWLANSSID Profile |
111 |
DeletingaWLANSSID Profile |
112 |
8 | |
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
Wired Profiles |
113 |
ConfiguringaWiredProfile |
113 |
ConfiguringWiredSettings |
113 |
IntheInstant UI |
113 |
IntheCLI |
114 |
ConfiguringVLANforaWiredProfile |
115 |
IntheInstant UI |
115 |
IntheCLI |
115 |
ConfiguringSecurity SettingsforaWiredProfile |
116 |
ConfiguringSecurity SettingsforaWiredEmployeeNetwork |
116 |
In the Instant UI |
116 |
In the CLI |
116 |
ConfiguringAccessRulesforaWiredProfile |
117 |
IntheInstant UI |
117 |
IntheCLI |
118 |
AssigningaProfiletoEthernet Ports |
118 |
IntheInstant UI |
118 |
IntheCLI |
118 |
EditingaWiredProfile |
119 |
DeletingaWiredProfile |
119 |
LinkAggregationControlProtocol |
119 |
UnderstandingHierarchicalDeployment |
120 |
Captive Portal for Guest Access |
122 |
UnderstandingCaptivePortal |
122 |
Typesof CaptivePortal |
122 |
WalledGarden |
123 |
ConfiguringaWLAN SSID forGuest Access |
123 |
IntheInstant UI |
123 |
IntheCLI |
127 |
ConfiguringWiredProfileforGuest Access |
128 |
IntheInstant UI |
128 |
IntheCLI |
129 |
ConfiguringInternalCaptivePortalforGuest Network |
130 |
IntheInstant UI |
130 |
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
| 9 |
IntheCLI |
131 |
ConfiguringExternalCaptivePortalforaGuest Network |
132 |
ExternalCaptivePortalProfiles |
132 |
CreatingaCaptivePortalProfile |
132 |
IntheInstant UI |
133 |
IntheCLI |
133 |
ConfiguringanSSID orWiredProfiletoUseExternalCaptivePortalAuthentication |
134 |
IntheInstant UI |
134 |
In the CLI |
135 |
ConfiguringExternalCaptivePortalAuthenticationUsingClearPassGuest |
136 |
CreatingaWebLoginpageinClearPassGuest |
136 |
ConfiguringRADIUSServerinInstant UI |
136 |
ConfiguringGuest LogonRoleandAccessRulesforGuest Users |
136 |
IntheInstant UI |
137 |
IntheCLI |
137 |
Example |
138 |
ConfiguringCaptivePortalRolesforanSSID |
138 |
IntheInstant UI |
139 |
IntheCLI |
141 |
ConfiguringWalledGardenAccess |
141 |
IntheInstant UI |
141 |
IntheCLI |
142 |
DisablingCaptivePortalAuthentication |
142 |
Authentication and User Management |
143 |
ManagingW-IAPUsers |
143 |
ConfiguringAuthenticationParametersforManagement Users |
144 |
ConfiguringaTACACS+ ServerProfileforManagement UserAuthentication |
144 |
In the Instant UI |
144 |
In the CLI |
145 |
ConfiguringAdministratorCredentialsfortheVirtualControllerInterface |
145 |
In the Instant UI |
145 |
In the CLI |
146 |
ConfiguringGuest Management InterfaceAdministratorCredentials |
147 |
IntheInstant UI |
147 |
IntheCLI |
147 |
10 | |
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
ConfiguringUsersforInternalDatabaseof aW-IAP |
147 |
IntheInstant UI |
147 |
IntheCLI |
148 |
ConfiguringtheRead-Only AdministratorCredentials |
149 |
IntheInstant UI |
149 |
IntheCLI |
149 |
AddingGuest UsersthroughtheGuest Management Interface |
149 |
UnderstandingAuthenticationMethods |
150 |
802.1X authentication |
150 |
MACauthentication |
150 |
MACauthenticationwith802.1X authentication |
150 |
CaptivePortalAuthentication |
151 |
MACauthenticationwithCaptivePortalauthentication |
151 |
802.1X authenticationwithCaptivePortalRole |
151 |
WISPrauthentication |
151 |
SupportedEAPAuthenticationFrameworks |
152 |
AuthenticationTerminationonW-IAP |
152 |
SupportedAuthenticationServers |
152 |
InternalRADIUSServer |
153 |
ExternalRADIUSServer |
153 |
RADIUSServerAuthenticationwithVSA |
153 |
DynamicLoadBalancingbetweenTwoAuthenticationServers |
157 |
UnderstandingEncryptionTypes |
157 |
WPAandWPA2 |
158 |
RecommendedAuthenticationandEncryptionCombinations |
158 |
Support forAuthenticationSurvivability |
158 |
ConfiguringAuthenticationSurvivability |
159 |
IntheInstant UI |
159 |
Important Points to Remember |
159 |
IntheCLI |
160 |
ConfiguringAuthenticationServers |
160 |
ConfiguringanExternalServerforAuthentication |
160 |
IntheInstant UI |
160 |
IntheCLI |
164 |
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
| 11 |
ConfiguringDynamicRADIUSProxy Parameters |
165 |
EnablingDynamicRADIUSProxy |
165 |
In the Instant UI |
165 |
In the CLI |
165 |
ConfiguringDynamicRADIUSProxy ParametersforAuthenticationServers |
165 |
In the Instant UI |
165 |
In the CLI |
166 |
AssociatetheAuthentication ServerswithanSSID orWiredProfile |
166 |
IntheCLI |
166 |
Configuring802.1X AuthenticationforaNetworkProfile |
167 |
Configuring802.1X AuthenticationforaWirelessNetworkProfile |
167 |
IntheInstant UI |
167 |
IntheCLI |
168 |
Configuring802.1X AuthenticationforWiredProfiles |
168 |
IntheInstant UI |
168 |
IntheCLI |
168 |
ConfiguringMACAuthenticationforaNetworkProfile |
169 |
ConfiguringMACAuthenticationforWirelessNetworkProfiles |
169 |
IntheInstant UI |
169 |
IntheCLI |
169 |
ConfiguringMACAuthenticationforWiredProfiles |
170 |
IntheInstant UI |
170 |
IntheCLI |
170 |
ConfiguringMACAuthenticationwith802.1X Authentication |
171 |
ConfiguringMACand802.1X AuthenticationforaWirelessNetworkProfile |
171 |
IntheInstant UI |
171 |
IntheCLI |
171 |
ConfiguringMACand802.1X AuthenticationforWiredProfiles |
171 |
IntheInstant UI |
171 |
IntheCLI |
172 |
ConfiguringMACAuthenticationwithCaptivePortalAuthentication |
172 |
ConfiguringMACAuthenticationwithCaptivePortalAuthentication |
172 |
IntheInstant UI |
172 |
IntheCLI |
173 |
12 | |
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
ConfiguringWISPrAuthentication |
173 |
IntheInstant UI |
173 |
IntheCLI |
174 |
BlacklistingClients |
174 |
BlacklistingClientsManually |
174 |
AddingaClient totheBlacklist |
175 |
IntheInstant UI |
175 |
IntheCLI |
175 |
BlacklistingUsersDynamically |
175 |
AuthenticationFailureBlacklisting |
175 |
SessionFirewallBasedBlacklisting |
175 |
ConfiguringBlacklist Duration |
175 |
In the Instant UI |
175 |
In the CLI |
176 |
UploadingCertificates |
177 |
LoadingCertificatesthroughInstant UI |
177 |
LoadingCertificatesthroughInstant CLI |
178 |
RemovingCertificates |
178 |
LoadingCertificatesthroughW-AirWave |
178 |
Roles and Policies |
180 |
FirewallPolicies |
180 |
AccessControlList Rules |
180 |
ConfiguringAccessRulesforNetworkServices |
181 |
IntheInstant UI |
181 |
IntheCLI |
183 |
Example |
183 |
ConfiguringNetworkAddressTranslationRules |
183 |
ConfiguringaSourceNATAccessRule |
184 |
In the Instant UI |
184 |
In the CLI |
184 |
ConfiguringSource-BasedRouting |
184 |
ConfiguringaDestinationNATAccessRule |
185 |
In the Instant UI |
185 |
In the CLI |
185 |
ConfiguringALG Protocols |
185 |
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
| 13 |
IntheInstant UI |
186 |
IntheCLI |
186 |
ConfiguringFirewallSettingsforProtectionfromARPAttacks |
186 |
IntheInstant UI |
186 |
IntheCLI |
187 |
ManagingInboundTraffic |
188 |
ConfiguringInboundFirewallRules |
188 |
In the Instant UI |
188 |
In the CLI |
190 |
Example |
190 |
ConfiguringManagement Subnets |
190 |
In the Instant UI |
190 |
In the CLI |
191 |
ConfiguringRestrictedAccesstoCorporateNetwork |
191 |
In the Instant UI |
191 |
In the CLI |
191 |
Content Filtering |
192 |
EnablingContent Filtering |
192 |
EnablingContent FilteringforaWirelessProfile |
192 |
In the Instant UI |
192 |
In the CLI |
192 |
EnablingContent FilteringforaWiredProfile |
192 |
In the Instant UI |
193 |
In the CLI |
193 |
ConfiguringEnterpriseDomains |
193 |
IntheInstant UI |
193 |
IntheCLI |
193 |
ConfiguringURLFilteringPolicies |
193 |
IntheInstant UI |
193 |
IntheCLI |
194 |
Example |
194 |
ConfiguringUserRoles |
195 |
CreatingaUserRole |
195 |
IntheInstant UI |
195 |
IntheCLI |
195 |
AssigningBandwidthContractstoUserRoles |
195 |
14 | |
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
IntheInstant UI |
196 |
IntheCLI: |
196 |
ConfiguringMachineandUserAuthenticationRoles |
196 |
IntheInstant UI |
197 |
IntheCLI |
197 |
ConfiguringDerivationRules |
197 |
UnderstandingRoleAssignment Rule |
197 |
RADIUSVSAAttributes |
197 |
MAC-AddressAttribute |
197 |
RolesBasedonClient Authentication |
198 |
DHCPOptionandDHCPFingerprinting |
198 |
CreatingaRoleDerivationRule |
198 |
IntheInstant UI |
198 |
IntheCLI |
199 |
Example |
199 |
UnderstandingVLANAssignment |
200 |
VendorSpecificAttributes |
200 |
VLANAssignment BasedonDerivationRules |
201 |
UserRole |
202 |
VLANsCreatedforanSSID |
202 |
ConfiguringVLANDerivationRules |
202 |
IntheInstant UI |
202 |
IntheCLI |
203 |
Example |
203 |
UsingAdvancedExpressionsinRoleandVLANDerivationRules |
203 |
ConfiguringaUserRoleforVLANDerivation |
205 |
CreatingaUserVLANRole |
205 |
In the Instant UI |
205 |
In the CLI |
205 |
AssigningUserVLANRolestoaNetworkProfile |
205 |
In the Instant UI |
205 |
In the CLI |
205 |
DHCP Configuration |
206 |
ConfiguringDHCPScopes |
206 |
ConfiguringDistributedDHCPScopes |
206 |
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
| 15 |
IntheInstant UI |
206 |
IntheCLI |
208 |
ConfiguringaCentralizedDHCPScope |
209 |
IntheInstant UI |
209 |
IntheCLI |
211 |
ConfiguringLocal,Local,L2 andLocal,L3 DHCPScopes |
211 |
IntheInstant UI |
212 |
IntheCLI |
213 |
ConfiguringtheDefault DHCPScopeforClient IPAssignment |
214 |
IntheInstant UI |
214 |
IntheCLI |
215 |
VPN Configuration |
216 |
UnderstandingVPNFeatures |
216 |
ConfiguringaTunnelfromaW-IAPtoDellNetworkingW-SeriesMobility Controller |
216 |
ConfiguringanIPSecTunnel |
216 |
IntheInstant UI |
216 |
IntheCLI |
217 |
Example |
218 |
EnablingAutomaticConfigurationof GRETunnel |
218 |
IntheInstant UI |
218 |
IntheCLI |
220 |
Manually ConfiguringaGRETunnel |
220 |
IntheInstant UI |
220 |
IntheCLI |
221 |
ConfiguringanL2TPv3 Tunnel |
221 |
IntheInstant UI |
222 |
IntheCLI |
224 |
Example |
224 |
ConfiguringRoutingProfiles |
227 |
IntheInstant UI |
227 |
IntheCLI |
228 |
IAP-VPN Deployment |
229 |
UnderstandingIAP-VPNArchitecture |
229 |
IAP-VPNScalability Limits |
229 |
16 | |
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
IAP-VPNForwardingModes |
230 |
LocalorNATMode |
230 |
L2 SwitchingMode |
230 |
Distributed L2 Mode |
230 |
Centralized L2 Mode |
231 |
L3 RoutingMode |
231 |
Distributed L3 mode |
231 |
Centralized L3 Mode |
231 |
ConfiguringW-IAPandControllerforIAP-VPNOperations |
231 |
ConfiguringaW-IAPnetworkforIAP-VPNoperations |
231 |
DefiningtheVPNhost settings |
232 |
ConfiguringRoutingProfiles |
232 |
ConfiguringDHCPProfiles |
232 |
ConfiguringanSSID orWiredPort |
233 |
EnablingDynamicRADIUSProxy |
233 |
ConfiguringEnterpriseDomains |
233 |
ConfiguringaControllerforIAP-VPNOperations |
233 |
OSPFConfiguration |
234 |
VPNConfiguration |
235 |
Whitelist Database Configuration |
235 |
VPN Local Pool Configuration |
236 |
Role Assignment for the Authenticated W-IAPs |
236 |
VPN Profile Configuration |
236 |
Branch-ID Allocation |
236 |
BranchStatusVerification |
237 |
Example |
237 |
Adaptive Radio Management |
239 |
ARMOverview |
239 |
ChannelorPowerAssignment |
239 |
VoiceAwareScanning |
239 |
LoadAwareScanning |
239 |
MonitoringtheNetworkwithARM |
239 |
ARMMetrics |
239 |
ConfiguringARMFeaturesonaW-IAP |
240 |
BandSteering |
240 |
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
| 17 |
IntheInstant UI |
240 |
IntheCLI |
240 |
AirtimeFairnessMode |
241 |
IntheInstant UI |
241 |
IntheCLI |
241 |
Client Match |
241 |
IntheInstant UI |
242 |
IntheCLI |
243 |
AccessPoint Control |
243 |
IntheInstant UI |
243 |
IntheCLI |
245 |
VerifyingARMConfiguration |
245 |
ConfiguringRadioSettingsforaW-IAP |
246 |
IntheInstant UI |
246 |
IntheCLI |
247 |
Deep Packet Inspection and Application Visibility |
249 |
DeepPacket Inspection |
249 |
EnablingApplicationVisibility |
249 |
IntheInstant UI |
249 |
IntheCLI |
249 |
ApplicationVisibility |
250 |
ApplicationCategory Charts |
250 |
ApplicationCharts |
251 |
WebCategoriesCharts |
253 |
WebReputationCharts |
254 |
ConfiguringAccessRulesforApplicationandApplicationCategories |
255 |
IntheInstant UI |
255 |
IntheCLI |
257 |
Example |
258 |
ConfiguringWebPolicy Enforcement |
258 |
IntheInstant UI |
258 |
IntheCLI |
259 |
Example |
259 |
18 | |
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
Voice and Video |
260 |
Wi-FiMultimediaTrafficManagement |
260 |
ConfiguringWMMforWirelessClients |
261 |
IntheInstant UI |
261 |
IntheCLI |
261 |
ConfiguringWMM-DSCPMapping |
261 |
IntheInstant UI |
262 |
IntheCLI |
262 |
QoSforMicrosoft OfficeLync |
262 |
Microsoft Office Lync |
263 |
Services |
264 |
AirGroupConfiguration |
264 |
Multicast DNSandBonjour®Services |
265 |
DLNAUPnPSupport |
266 |
AirGroupFeatures |
267 |
AirGroupServices |
268 |
AirGroupComponents |
269 |
CPPMandClearPassGuest Features |
269 |
ConfiguringAirGroupandAirGroupServicesonaW-IAP |
270 |
IntheInstant UI |
270 |
IntheCLI |
271 |
ConfiguringAirGroupandCPPMinterfaceinInstant |
272 |
CreatingaRADIUSServer |
272 |
AssignaServertoAirGroup |
272 |
ConfigureCPPMtoEnforceRegistration |
272 |
Changeof Authorization(CoA) |
272 |
ConfiguringaW-IAPforRTLSSupport |
272 |
IntheInstant UI |
273 |
IntheCLI |
273 |
ConfiguringaW-IAPforAnalyticsandLocationEngineSupport |
274 |
ALEwithInstant |
274 |
EnablingALESupport onaW-IAP |
274 |
IntheInstant UI |
274 |
IntheCLI |
275 |
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
| 19 |
VerifyingALEConfigurationonaW-IAP |
275 |
ConfiguringOpenDNSCredentials |
275 |
IntheInstant UI |
275 |
IntheCLI |
276 |
IntegratingaW-IAPwithPaloAltoNetworksFirewall |
276 |
IntegrationwithInstant |
276 |
ConfiguringaW-IAPforPANintegration |
276 |
IntheInstant UI |
276 |
IntheCLI |
277 |
IntegratingaW-IAPwithanXML API interface |
277 |
IntegrationwithInstant |
278 |
ConfiguringaW-IAPforXML API integration |
278 |
IntheInstant UI |
278 |
IntheCLI |
278 |
CALEAIntegrationandLawfulIntercept Compliance |
279 |
CALEAServerIntegration |
279 |
TrafficFlowfromIAPtoCALEAServer |
279 |
TrafficFlowfromIAPtoCALEAServerthroughVPN |
280 |
Client TrafficReplication |
280 |
ConfiguringaW-IAPforCALEAIntegration |
280 |
CreatingaCALEAProfile |
281 |
In the Instant UI |
281 |
In the CLI |
281 |
CreatinganAccessRuleforCALEA |
281 |
In the Instant UI |
281 |
In the CLI |
282 |
Verifyingtheconfiguration |
282 |
Example |
282 |
W-IAP Management and Monitoring |
284 |
ManagingaW-IAPfromW-AirWave |
284 |
ImageManagement |
284 |
ResettingaW-IAP |
284 |
W-IAPandClient Monitoring |
284 |
Template-basedConfiguration |
285 |
20 | |
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
TrendingReports |
285 |
IntrusionDetectionSystem |
285 |
WirelessIntrusionDetectionSystem(WIDS)Event ReportingtoW-AirWave |
286 |
RFVisualizationSupport forInstant |
286 |
PSK-basedandCertificate-basedAuthentication |
286 |
ConfigurablePort forW-IAPandW-AirWaveManagement ServerCommunication |
286 |
ConfiguringOrganizationString |
287 |
SharedKey |
287 |
ConfiguringW-AirWaveInformation |
287 |
In the Instant UI |
287 |
In the CLI |
288 |
ConfiguringforW-AirWaveDiscovery throughDHCP |
288 |
StandardDHCPoption60 and43 onWindowsServer2008 |
289 |
AlternateMethodforDefiningVendor-SpecificDHCPOptions |
293 |
Uplink Configuration |
295 |
UplinkInterfaces |
295 |
Ethernet Uplink |
295 |
ConfiguringPPPoEUplinkProfile |
296 |
In the Instant UI |
296 |
In the CLI |
297 |
CellularUplink |
297 |
ConfiguringCellularUplinkProfiles |
300 |
In the Instant UI |
300 |
In the CLI |
300 |
Wi-FiUplink |
301 |
ConfiguringaWi-FiUplinkProfile |
301 |
UplinkPreferencesandSwitching |
302 |
EnforcingUplinks |
302 |
In the Instant UI |
302 |
In the CLI |
303 |
SettinganUplinkPriority |
303 |
In the Instant UI |
303 |
In the CLI |
303 |
EnablingUplinkPreemption |
303 |
In the Instant UI |
303 |
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
| 21 |
In the CLI |
304 |
SwitchingUplinksBasedonVPNandInternet Availability |
304 |
SwitchingUplinksBasedonVPNStatus |
304 |
SwitchingUplinksBasedonInternet Availability |
304 |
In the Instant UI |
304 |
In the CLI |
305 |
ViewingUplinkStatusandConfiguration |
305 |
Intrusion Detection |
307 |
DetectingandClassifyingRogueAPs |
307 |
OSFingerprinting |
307 |
ConfiguringWirelessIntrusionProtectionandDetectionLevels |
308 |
Containment Methods |
312 |
ConfiguringIDSUsingCLI |
313 |
Mesh W-IAP Configuration |
315 |
MeshNetworkOverview |
315 |
MeshW-IAPs |
315 |
MeshPortals |
315 |
MeshPoints |
316 |
SettingupInstant MeshNetwork |
316 |
ConfiguringWiredBridgingonEthernet 0 forMeshPoint |
316 |
IntheInstant UI |
317 |
IntheCLI |
317 |
Mobility and Client Management |
318 |
Layer-3 Mobility Overview |
318 |
ConfiguringL3-Mobility |
319 |
HomeAgent LoadBalancing |
319 |
ConfiguringaMobility DomainforInstant |
319 |
IntheInstant UI |
319 |
IntheCLI |
320 |
Spectrum Monitor |
321 |
UnderstandingSpectrumData |
321 |
DeviceList |
321 |
NonWi-FiInterferers |
323 |
ChannelDetails |
324 |
22 | |
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
ChannelMetrics |
325 |
SpectrumAlerts |
326 |
ConfiguringSpectrumMonitorsandHybridW-IAPs |
326 |
ConvertingaW-IAPtoaHybridW-IAP |
326 |
IntheInstant UI |
327 |
IntheCLI |
327 |
ConvertingaW-IAPtoaSpectrumMonitor |
327 |
IntheInstant UI |
327 |
IntheCLI |
328 |
W-IAP Maintenance |
329 |
UpgradingaW-IAP |
329 |
UpgradingaW-IAPandImageServer |
329 |
ImageManagement UsingW-AirWave |
329 |
ImageManagement UsingCloudServer |
329 |
ConfiguringHTTPProxy onaW-IAP |
329 |
In the Instant UI |
329 |
In the CLI |
330 |
UpgradingaW-IAPUsingAutomaticImageCheck |
330 |
UpgradingtoaNewVersionManually |
331 |
UpgradinganImageUsingCLI |
331 |
BackingupandRestoringW-IAPConfigurationData |
331 |
ViewingCurrent Configuration |
332 |
BackingupConfigurationData |
332 |
RestoringConfiguration |
332 |
ConvertingaW-IAPtoaRemoteAPandCampusAP |
333 |
Regulatory DomainRestrictionsforW-IAPtoRAPorCAPConversion |
333 |
ConvertingaW-IAPtoaRemoteAP |
334 |
ConvertingaW-IAPtoaCampusAP |
336 |
ConvertingaW-IAPtoStandaloneMode |
337 |
ConvertingaW-IAPusingCLI |
338 |
ResettingaRemoteAPorCampusAPtoaW-IAP |
338 |
RebootingtheW-IAP |
338 |
Monitoring Devices and Logs |
340 |
ConfiguringSNMP |
340 |
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
| 23 |
SNMPParametersforW-IAP |
340 |
ConfiguringSNMP |
341 |
Creatingcommunity stringsforSNMPv1 andSNMPv2 UsingInstant UI |
341 |
Creatingcommunity stringsforSNMPv3 UsingInstant UI |
342 |
ConfiguringSNMPCommunity StringsintheCLI |
342 |
ConfiguringSNMPTraps |
343 |
IntheInstant UI |
343 |
IntheCLI |
343 |
ConfiguringaSyslogServer |
344 |
IntheInstant UI |
344 |
IntheCLI |
345 |
ConfiguringTFTPDumpServer |
345 |
IntheInstant UI |
345 |
IntheCLI |
346 |
RunningDebugCommandsfromtheUI |
346 |
Support Commands |
346 |
Hotspot Profiles |
351 |
UnderstandingHotspot Profiles |
351 |
GenericAdvertisement Service(GAS) |
351 |
AccessNetworkQuery Protocol(ANQP) |
352 |
Hotspot 2.0 Query Protocol(H2QP) |
352 |
InformationElements(IEs)andManagement Frames |
352 |
NAI RealmList |
353 |
ConfiguringHotspot Profiles |
353 |
CreatingAdvertisement ProfilesforHotspot Configuration |
353 |
ConfiguringanNAI RealmProfile |
353 |
ConfiguringaVenueNameProfile |
355 |
ConfiguringaNetworkAuthenticationProfile |
358 |
ConfiguringaRoamingConsortiumProfile |
358 |
Configuringa3GPPProfile |
358 |
ConfiguringanIPAddressAvailability Profile |
359 |
ConfiguringaDomainProfile |
359 |
ConfiguringanOperator-friendly Profile |
359 |
ConfiguringaConnectionCapability Profile |
359 |
24 | |
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
ConfiguringanOperatingClassProfile |
359 |
ConfiguringaWANMetricsProfile |
360 |
CreatingaHotspot Profile |
360 |
AssociatinganAdvertisement ProfiletoaHotspot Profile |
362 |
CreatingaWLANSSID andAssociatingHotspot Profile |
363 |
SampleConfiguration |
364 |
ClearPass Guest Setup |
366 |
Testing |
369 |
Troubleshooting |
369 |
IAP-VPN Deployment Scenarios |
370 |
Scenario1—IPSec: SingleDatacenterDeployment withNoRedundancy |
371 |
Topology |
371 |
APConfiguration |
371 |
APConnectedSwitchConfiguration |
373 |
DatacenterConfiguration |
374 |
Scenario2—IPSec: SingleDatacenterwithMultipleControllersforRedundancy |
375 |
Topology |
375 |
APConfiguration |
376 |
APConnectedSwitchConfiguration |
378 |
DatacenterConfiguration |
378 |
Scenario3—IPSec: MultipleDatacenterDeployment withPrimary andBackupControllersfor |
|
Redundancy |
379 |
Topology |
379 |
APConfiguration |
380 |
APConnectedSwitchConfiguration |
383 |
DatacenterConfiguration |
383 |
Scenario4—GRE: SingleDatacenterDeployment withNoRedundancy |
384 |
Topology |
384 |
APConfiguration |
385 |
APConnectedSwitchConfiguration |
387 |
DatacenterConfiguration |
387 |
Terminology |
388 |
AcronymsandAbbreviations |
388 |
Glossary |
389 |
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
| 25 |
Chapter 1
About this Guide
ThisUserGuidedescribesthefeaturessupportedby DellNetworkingW-SeriesInstant AccessPoint (W-IAP) andprovidesdetailedinstructionsforsettingupandconfiguringtheInstant network.
Intended Audience
ThisguideisintendedforadministratorswhoconfigureanduseW-IAPs.
Related Documents
Inadditiontothisdocument,theDellW-IAPproduct documentationincludesthefollowing:
•DellNetworking W-Series Instant Access PointInstallation Guides
•DellNetworking W-Series Instant Quick StartGuide
•DellNetworking W-Series Instant CLI Reference Guide
•DellNetworking W-Series Instant MIBReference Guide
•DellNetworking W-Series Instant Syslog Messages Reference Guide
•DellNetworking W-Series Instant Release Notes
Conventions
Thefollowingconventionsareusedthroughout thismanualtoemphasizeimportant concepts:
Table 1: TypographicalConventions
Style Type |
Description |
|
Italics |
This style is usedtoemphasize importantterms andtomarkthe titles of books. |
|
|
|
|
System items |
This fixed-widthfontdepicts the following: |
|
|
• |
Sample screenoutput |
|
• |
Systemprompts |
|
• Filenames, software devices, andspecific commands whenmentionedinthe text. |
|
|
|
|
Commands |
Inthe commandexamples, this style depicts the keywords thatmustbe typedexactly as |
|
|
shown. |
|
|
|
|
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
About this Guide | 26 |
Style Type |
Description |
<Arguments> |
Inthe commandexamples, italicizedtextwithinangle brackets represents items that |
|
youshouldreplace withinformationappropriate toyour specific situation. For example: |
|
# send <text message> |
|
Inthis example, youwouldtype “send”atthe systempromptexactly as shown, followed |
|
by the textof the message youwishtosend. Donottype the angle brackets. |
|
|
[Optional] |
Commandexamples enclosedinbrackets are optional. Donottype the brackets. |
|
|
{Item A | |
Inthe commandexamples, items withincurledbraces andseparatedby a vertical bar |
Item B} |
representthe available choices. Enter only one choice. Donottype the braces or bars. |
|
|
Thefollowinginformationaliconsareusedthroughout thisguide:
Indicateshelpfulsuggestions,pertinent information,andimportant thingstoremember.
Indicatesariskof damagetoyourhardwareorlossof data.
Indicatesariskof personalinjury ordeath.
Contacting Dell
Table 2: SupportInformation
Support
MainWebsite |
dell.com |
ContactInformation dell.com/contactdell
SupportWebsite dell.com/support
DocumentationWebsite dell.com/support/manuals
27 | About this Guide |
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
Chapter 2
About Instant
Thischapterprovidesthefollowinginformation:
•Instant Overview
•What isNewinInstant 6.4.2.0-4.1.1
Instant Overview
Instant virtualizesDellNetworkingW-SeriesMobility Controllercapabilitieson802.11 accesspoints(APs), creatingafeature-richenterprise-gradewirelessLAN(WLAN)that combinesaffordability andconfiguration simplicity.
Instant isasimple,easy todeploy turn-key WLANsolutionconsistingof oneormoreAPs. AnEthernet port withroutableconnectivity totheInternet oraself-enclosednetworkisusedfordeployinganInstant Wireless Network. ADellNetworkingW-SeriesInstant AccessPoint (W-IAP)canbeinstalledat asinglesiteordeployed acrossmultiplegeographically-dispersedlocations. Designedspecifically foreasy deployment,andproactive management of networks,Instant isidealforsmallcustomersorremotelocationswithout any on-siteIT administrator.
Instant consistsof aW-IAPandaVirtualController. TheVirtualControllerresideswithinoneof theAPs. Ina Instant deployment scenario,only thefirst W-IAPneedstobeconfigured. Afterthefirst W-IAPisconfigured, theotherW-IAPsinherit alltherequiredconfigurationinformationfromtheVirtualController. Instant continually monitorsthenetworktodeterminetheW-IAPthat shouldfunctionastheVirtualControllerat any time,andtheVirtualControllerwillmovefromoneW-IAPtoanotherasnecessary without impactingnetwork performance.
Supported Devices
Thefollowingdevicesaresupportedinthecurrent releaseof Instant:
•W-IAP92/93
•W-IAP103
•W-IAP104/105
•W-IAP114/115
•W-IAP134/135
•W-IAP175P/175AC
•W-IAP3WN/3WNP
•W-IAP108/109
•W-IAP155/155P
•W-IAP204/205
•W-IAP214/215
•W-IAP224/225
•W-IAP274/275
Asof Instant 4.1 release,it isrecommendedthat networkswithmorethan128 APsshouldbedesignedas multiple,smallervirtual-controllernetworkswithLayer-3 mobility enabledbetweenthem.
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
About Instant | 28 |
ThefollowingtableprovidesthevariantssupportedforeachIAP model:
Table 3: Supported W-IAP Variants
|
W-IAP###- |
|
W-IAP###-RW |
W-IAP### |
|
W-IAP Model (Reg |
W-IAP###-JP |
(Worldwide |
|||
US |
(Worldwide |
||||
Domain) |
|
(Japan only) |
except US |
||
(US only) |
except US) |
||||
|
|
and Japan) |
|||
|
|
|
|
W-IAP103 |
Yes |
No |
Yes |
No |
|
|
|
|
|
W-IAP104/105 |
Yes |
Yes |
No |
Yes |
|
|
|
|
|
W-IAP114/115 |
Yes |
No |
Yes |
No |
|
|
|
|
|
W-IAP134/135 |
Yes |
Yes |
No |
Yes |
|
|
|
|
|
W-IAP175P/175AC |
Yes |
Yes |
No |
Yes |
|
|
|
|
|
W-IAP3WN/3WNP |
Yes |
Yes |
No |
Yes |
|
|
|
|
|
W-IAP108/109 |
Yes |
Yes |
No |
Yes |
|
|
|
|
|
W-IAP155/155P |
Yes |
Yes |
No |
Yes |
|
|
|
|
|
IAP-204/205 |
Yes |
No |
Yes |
No |
|
|
|
|
|
IAP-214/215 |
Yes |
No |
Yes |
No |
|
|
|
|
|
W-IAP224/225 |
Yes |
No |
Yes |
No |
|
|
|
|
|
W-IAP274/275 |
Yes |
No |
Yes |
No |
Forinformationonregulatory domainsandthelist of countriessupportedby theW-IAP-RWtype,seeCountry Codeonpage36.
Instant UI
TheInstant UserInterface(UI)providesastandardweb-basedinterfacethat allowsyoutoconfigureand monitoraWi-Finetwork. Instant isaccessiblethroughastandardwebbrowserfromaremotemanagement consoleorworkstationandcanbelaunchedusingthefollowingbrowsers:
•Microsoft Internet Explorer10 orearlier
•AppleSafari6.0 orlater
•GoogleChrome23.0.1271.95 orlater
•MozillaFirefox17.0 orlater
29 | About Instant |
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
If theInstant UI islaunchedthroughanunsupportedbrowser,awarningmessageisdisplayedalongwithalist of recommendedbrowsers. However,theusersareallowedtologinusingtheContinue login linkonthe Loginpage.
ToviewtheInstant UI,ensurethat theJavaScript isenabledonthewebbrowser.
TheInstant UI logsout automatically if thewindowisinactivefor15 minutes.
Instant CLI
TheInstant CommandLineInterface(CLI)isatext-basedinterfaceaccessiblethroughaSecureShell(SSH) session.
SSH accessrequiresthat youconfigureanIPaddressandadefault gateway ontheW-IAPandconnect theWIAPtoyournetwork. Thisistypically performedwhentheInstant networkonaW-IAPisset up.
What is New in Instant 6.4.2.0-4.1.1
ThefollowingfeaturesareaddedintheInstant 6.4.2.0-4.1.1.0 release:
Table 4: New Features in 6.4.2.0-4.1.1.0
Feature |
Description |
Separate Accounting |
Instantenables its users toconfigure RADIUS authenticationservers andaccounting |
Server |
servers separately inthe W-IAPSSID profile. |
|
|
Table 5: New Hardware Platforms introduced in this release
W-IAP |
Description |
|
Platform |
||
|
||
W-IAP200 |
The W-IAP200 Series (W-IAP204 andW-IAP205) access points supportthe IEEE 802.11ac and |
|
Series |
802.11nstandards for high-performance WLAN. Itis a dual radio, 2x2:2 802.11ac access point. |
|
|
These access points use MIMO(Multiple-Input, Multiple-Output) technology andother high- |
|
|
throughputmode techniques todeliver high-performance, 802.11n2.4 GHz and802.11ac 5 GHz |
|
|
functionality while simultaneously supporting legacy 802.11a/b/g wireless services. For more |
|
|
informationaboutthis product, visit dell.com. |
|
|
|
|
W-IAP210 |
The W-IAP210 Series (W-IAP214 andW-IAP215) access points are supportthe IEEE 802.11ac |
|
Series |
standardfor high-performance WLAN. Itis a 3x3 802.11ac access pointthatuses MIMO |
|
|
(Multiple-Input, Multiple-Output) technology andother high-throughputmode techniques to |
|
|
deliver high-performance, 802.11ac 2.4 GHz and802.11ac 5 GHz functionality while |
|
|
simultaneously supporting existing 802.11a/b/g wireless services. For more informationabout |
|
|
this product, visit dell.com. |
|
|
|
CheckwithyourlocalDellsalesrepresentativeondeviceavailability foryourregion.
Dell Networking W-Series Instant 6.4.2.0-4.1.1 | User Guide |
About Instant | 30 |
Loading...