Dell W-IAP224, W-IAP114, W-IAP115, W-IAP225 User Manual
Dell Networking W-Series
Instant Access Point
6.3.1.1-4.0
User Guide
Copyright
© 2013 Aruba Networks, Inc. Aruba Networks trademarks include , Aruba Networks®, Aruba
Wireless Networks®, the registered Aruba the Mobile Edge Company logo, and Aruba Mobility Management
System®. Dell™, the DELL™ logo, and PowerConnect™ are trademarks of Dell Inc.
All rights reserved. Specifications in this manual are subject to change without notice.
Originated in the USA. All other trademarks are the property of their respective owners.
Open Source Code
Certain Aruba products include Open Source software code developed by third parties, including software code
subject to the GNU General Public License (GPL), GNU Lesser General Public License (LGPL), or other Open
Source Licenses. Includes software from Litech Systems Design. The IF-MAP client library copyright 2011 Infoblox,
Inc. All rights reserved. This product includes software developed by Lars Fenneberg, et al. The Open Source code
used can be found at this site:
http://www.arubanetworks.com/open_source
Legal Notice
The use of Aruba Networks, Inc. switching platforms and software, by all individuals or corporations, to terminate
other vendors’ VPN client devices constitutes complete acceptance of liability by that individual or corporation for
this action and indemnifies, in full, Aruba Networks, Inc. from any and all legal actions that might be taken against it
with respect to infringement of copyright on behalf of those vendors.
0511471-01| November 2013 Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide
Contents
Contents 3
About this Guide 25
Intended Audience 25
Related Documents 25
Conventions 25
Contacting Dell 26
About Dell W-Instant 27
Dell W-Instant Overview 27
Supported Devices 27
Dell W-Instant UI 28
Dell W-Instant CLI 28
What is New in Dell W-Instant 6.3.1.1-4.0 28
Setting up a W-IAP 32
Setting up Dell W-Instant Network 32
Connecting a W-IAP 32
Assigning an IP address to the W-IAP 32
Assigning a Static IP 32
Connecting to a Provisioning Wi-Fi Network 33
W-IAP Cluster 33
Disabling the Provisioning Wi-Fi Network 33
Logging in to the Dell W-Instant UI 34
Specifying Country Code 34
Accessing the Dell W-Instant CLI 35
Connecting to a CLI Session 35
Applying Configuration Changes 36
Example: 36
Using Sequence Sensitive Commands 36
Dell W-Instant User Interface 38
Login Screen 38
Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide Contents | 3
Logging into the Dell W-Instant UI 38
Viewing Connectivity Summary 38
Language 38
Main Window 39
Banner 39
Search 39
Tabs 39
Networks Tab 40
Access Points Tab 40
Clients Tab 40
Links 41
New Version Available 41
System 41
RF 43
Security 44
Maintenance 45
Help 46
More 46
VPN 46
IDS 47
Wired 48
Services 48
DHCPServer 49
Support 50
Logout 51
Monitoring 51
Info 51
RF Dashboard 53
RF Trends 54
Usage Trends 55
Mobility Trail 59
Spectrum 60
Alerts 60
4 | Contents Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide
IDS 63
Configuration 64
AirGroup 64
W-AirWave Setup 65
Pause/Resume 65
Views 65
Initial Configuration Tasks 67
Updating IP Address of a W-IAP 67
In the Dell W-Instant UI 67
In the CLI 68
Modifying the W-IAP Name 68
In the Dell W-Instant UI 68
In the CLI 68
Updating Location Details of a W-IAP 68
In the Dell W-Instant UI 68
In the CLI 68
Configuring External Antenna 69
EIRP and Antenna Gain 69
Configuring Antenna Gain 69
In the Dell W-Instant UI 69
In the CLI 70
Upgrading a W-IAP 70
Upgrading a W-IAP and Image Server 70
Image Management Using W-AirWave 70
Image Management Using Cloud Server 70
Configuring HTTP Proxy on a W-IAP 70
In the Dell W-Instant UI 70
In the CLI 71
Upgrading a W-IAP Using Automatic Image Check 71
Upgrading to a New Version Manually 72
Upgrading an Image Using CLI 72
Enabling Terminal Access 73
Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide Contents | 5
In the Dell W-Instant UI 73
In the CLI 73
Enabling Auto Join Mode 73
Disabling Auto Join Mode 73
Adding a W-IAP to the Network 73
Removing a W-IAP from the Network 74
Configuring a Preferred Band 74
In the Dell W-Instant UI 74
In the CLI 74
Configuring Radio Profiles for a W-IAP 74
Configuring ARMAssigned Radio Profiles for a W-IAP 74
Configuring Radio Profiles Manually for W-IAP 75
In the CLI 75
Configuring Inter-user Bridging and Local Routing 76
In the Dell W-Instant UI 76
In the CLI 76
Configuring Uplink VLANfor a W-IAP 76
In the Dell W-Instant UI 76
In the CLI 76
Configuring an NTP Server 76
In the Dell W-Instant UI 77
In the CLI 77
Mesh W-IAP Configuration 78
Mesh Network Overview 78
Mesh W-IAPs 78
Mesh Portals 78
Mesh Points 79
Setting up Dell W-Instant Mesh Network 79
VLAN Configuration 80
VLAN Pooling 80
Uplink VLAN Monitoring and Detection on Upstream Devices 80
6 | Contents Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide
Virtual Controller Configuration 81
Virtual Controller Overview 81
Master Election Protocol 81
Preference to a W-IAP with 3G/4G Card 81
Preference to a W-IAP with Non-Default IP 81
Manual Provisioning of Master W-IAP 81
Provisioning a W-IAP as a Master W-IAP 82
In the Dell W-Instant UI 82
In the CLI 82
Virtual Controller IP Address Configuration 82
Configuring IP Address for Virtual Controller 82
In the Dell W-Instant UI 82
In the CLI 83
Wireless Network Profiles 84
Understanding Wireless Network Profiles 84
Network Types 84
Configuring WLAN Settings for an SSID Profile 85
In the Dell W-Instant UI 85
In the CLI 87
Configuring VLAN Settings for a WLAN SSID Profile 88
In the Dell W-Instant UI 88
In the CLI 89
Configuring Security Settings for a WLAN SSID Profile 89
Configuring Security Settings for an Employee or Voice Network 89
In the Dell W-Instant UI 90
In the CLI 93
Configuring Access Rules for a WLAN SSID Profile 94
In the Dell W-Instant UI 95
In the CLI 95
Configuring Support for Fast Roaming of Clients 96
802.11r Roaming 96
Configuring a W-IAP for 802.11r support 96
Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide Contents | 7
In the Dell W-Instant UI 96
In the CLI 97
Opportunistic Key Caching 97
Configuring a W-IAP for OKC Roaming 98
In the Dell W-Instant UI 98
In the CLI 98
Editing Status of a WLAN SSID Profile 98
In the Dell W-Instant UI 99
In the CLI 99
Configuring Additional WLAN SSIDs 99
Enabling the Extended SSID 99
In the Dell W-Instant UI 99
In the CLI 100
Editing a WLAN SSID Profile 100
Deleting a WLAN SSID Profile 100
Wired Profiles 101
Configuring a Wired Profile 101
Configuring Wired Settings 101
In the Dell W-Instant UI 101
In the CLI 102
Configuring VLAN for a Wired Profile 102
In the Dell W-Instant UI 102
In the CLI 103
Configuring Security Settings for a Wired Profile 103
Configuring Security Settings for a Wired Employee Network 103
In the Dell W-Instant UI 104
In the CLI 104
Configuring Access Rules for a Wired Profile 104
In the Dell W-Instant UI 104
In the CLI 105
Understanding Hierarchical Deployment 106
Configuring Wired Bridging on Ethernet 0 106
8 | Contents Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide
In the Dell W-Instant UI 107
In the CLI 107
Assigning a Profile to Ethernet Ports 107
In the Dell W-Instant UI 107
In the CLI 107
Editing a Wired Profile 107
Deleting a Wired Profile 108
Captive Portal for Guest Access 109
Understanding Captive Portal 109
Types of Captive Portal 109
Walled Garden 110
Configuring a WLANSSID for Guest Access 110
In the Dell W-Instant UI 110
In the CLI 112
Configuring Wired Profile for Guest Access 113
In the Dell W-Instant UI 113
In the CLI 114
Configuring Internal Captive Portal for Guest Network 115
In the Instant UI 115
In the CLI 116
Configuring External Captive Portal for a Guest Network 117
External Captive Portal Profiles 117
Creating a Captive Portal Profile 117
In the Dell W-Instant UI 117
In the CLI 118
Configuring an SSID or Wired Profile to Use External Captive Portal Authentication 119
In the Dell W-Instant UI 119
In the CLI 120
Configuring External Captive Portal Authentication Using ClearPass Guest 120
Creating a Web Login page in the ClearPass Guest 120
Configuring the RADIUS Server in Dell W-Instant 120
Configuring Guest Logon Role and Access Rules for Guest Users 121
Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide Contents | 9
In the Dell W-Instant UI 121
In the CLI 121
Configuring Captive Portal Roles for an SSID 122
In the Dell W-Instant UI 123
In the CLI 124
Configuring Walled Garden Access 125
In the Dell W-Instant UI 125
In the CLI 125
Disabling Captive Portal Authentication 125
User Management 127
W-IAP Users 127
Configuring Administrator Credentials for the Virtual Controller Interface 127
In the Dell W-Instant UI 127
In the CLI 128
Configuring Guest Management Interface Administrator Credentials 129
In the Dell W-Instant UI 129
In the CLI 129
Configuring Users for Internal Database of a W-IAP 129
In the Dell W-Instant UI 129
In the CLI 130
Configuring the Read-Only Administrator Credentials 131
In the Dell W-Instant UI 131
In the CLI 131
Adding Guest Users through the Guest Management Interface 131
Authentication 133
Understanding Authentication Methods 133
Supported Authentication Servers 134
External RADIUS Server 135
RADIUS Server Authentication with VSA 135
Internal RADIUS Server 135
Authentication Termination on W-IAP 136
Supported VSAs 136
10 | Contents Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide
Understanding Encryption Types 140
WPA and WPA2 140
Recommended Authentication and Encryption Combinations 140
Understanding Authentication Survivability 141
Configuring Authentication Servers 143
Configuring an External Server for Authentication 143
In the Dell W-Instant UI 143
In the CLI 146
Configuring Dynamic RADIUSProxy Parameters 147
Enabling Dynamic RADIUS Proxy 147
In the Dell W-Instant UI 147
In the CLI 148
Configuring Dynamic RADIUS Proxy Parameters for Authentication Servers 148
In the Dell W-Instant UI 148
In the CLI 148
Associate the AuthenticationServers with an SSID or Wired Profile 148
In the CLI 149
Configuring Authentication Parameters for Virtual Controller Management Interface 149
In the Dell W-Instant UI 149
In the CLI 150
Configuring 802.1X Authentication for a Network Profile 150
Configuring 802.1X authentication for a Wireless Network Profile 151
In the Dell W-Instant UI 151
In the CLI 151
Configuring 802.1X authentication for Wired Profiles 152
In the Dell W-Instant UI 152
In the CLI 152
Configuring MAC Authentication for a Network Profile 152
Configuring MAC Authentication for Wireless Network Profiles 153
In the Dell W-Instant UI 153
In the CLI 153
Configuring MAC Authentication for Wired Profiles 153
Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide Contents | 11
In the Dell W-Instant UI 153
In the CLI 153
Configuring MAC Authentication with 802.1X Authentication 154
Configuring MAC and 802.1X Authentication for a Wireless Network Profile 154
In the Dell W-Instant UI 154
In the CLI 154
Configuring MAC and 802.1X Authentication for Wired Profiles 154
In the Dell W-Instant UI 154
In the CLI 155
Configuring MAC Authentication with Captive Portal Authentication 155
Configuring MAC Authentication with Captive Portal Authentication 155
In the Dell W-Instant UI 155
In the CLI 156
Configuring WISPr Authentication 156
In the Dell W-Instant UI 156
In the CLI 157
Blacklisting Clients 157
Blacklisting Clients Manually 158
Adding a Client to the Blacklist 158
In the Dell W-Instant UI 158
In the CLI 158
Blacklisting Users Dynamically 158
Authentication Failure Blacklisting 158
Session Firewall Based Blacklisting 158
Configuring Blacklist Duration 158
In the Dell W-Instant UI 158
In the CLI 159
Uploading Certificates 159
Loading Certificates using Dell W-Instant UI 160
Loading Certificates using Dell W-Instant CLI 160
Loading Certificates using W-AirWave 160
12 | Contents Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide
Roles and Policies 163
Firewall Configuration 163
Configuring ALG Protocols 163
In the Dell W-Instant UI 163
In the CLI 164
Configuring Firewall Settings for Protection from ARP Attacks 165
In the Dell W-Instant UI 165
In the CLI 165
Managing Inbound Traffic 166
Configuring Management Subnets 166
In the Dell W-Instant UI 166
In the CLI 167
Configuring Restricted Access to Corporate Network 167
In the Dell W-Instant UI 167
In the CLI 167
Access Control List Rules 168
Configuring Access Rules 168
In the Instant UI 168
In the CLI 170
Configuring Network Address Translation 170
Configuring a Source NAT Access Rule 171
In the Dell W-Instant UI 171
In the CLI 171
Configuring Source-Based Routing 171
Configuring a Destination NAT Access Rule 172
In the Dell W-Instant UI 172
In the CLI 172
Configuration Examples for Access Rules 172
Allow POP3 Service to a Particular Server 173
Allow TCP Service to a Particular Network 173
Deny FTP Service except to a Particular Server 173
Deny bootp Service except to a Particular Network 174
Configuring User Roles 174
Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide Contents | 13
Creating a User Role 174
In the Dell W-Instant UI 174
In the CLI 175
Assigning Bandwidth Contracts to User Roles 175
Assigning Bandwidth Contracts in the Dell W-InstantUI 175
Assigning a bandwidth contract using Dell W-Instant CLI: 175
Configuring Machine and User Authentication Roles 176
In the Dell W-Instant UI 176
In the CLI 176
Configuring Derivation Rules 177
Understanding Role Assignment Rule 177
RADIUS VSA Attributes 177
MAC-Address Attribute 177
Roles Based on Client Authentication 177
DHCP Option and DHCP Fingerprinting 177
Creating a Role Derivation Rule 178
In the Dell W-Instant UI 178
In the CLI 179
Example 179
Understanding VLAN Assignment 179
Vendor Specific Attributes (VSA) 179
VLAN Assignment Based on Derivation Rules 180
User Role 181
VLANs Created for an SSID 181
Configuring VLAN Derivation Rules 181
In the Dell W-Instant UI 181
In the CLI 182
Example 182
Using Advanced Expressions in Role and VLAN Derivation Rules 183
Configuring a User Role for VLAN Derivation 184
Creating a User VLAN Role 184
In the Dell W-Instant UI 184
14 | Contents Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide
In the CLI 184
Assigning User VLAN Roles to a Network Profile 184
In the Dell W-Instant UI 184
In the CLI 185
Uplink Configuration 186
Uplink Interfaces 186
Ethernet Uplink 187
Configuring PPPoE Uplink Profile 188
In the Dell W-Instant UI 188
In the CLI 188
3G/4G Uplink 189
Types of Modems 189
Configuring Cellular Uplink Profiles 191
In the Dell W-Instant UI 191
In the CLI 192
Wi-Fi Uplink 193
Configuring a Wi-Fi Uplink Profile 193
Uplink Preferences and Switching 195
Enforcing Uplinks 195
In the Dell W-Instant UI 195
In the CLI 195
Setting an Uplink Priority 195
In the Dell W-Instant UI 195
In the CLI 196
Enabling Uplink Preemption 196
In the Dell W-Instant UI 196
In the CLI 196
Switching Uplinks Based on VPN and Internet Availability 196
Switching Uplinks Based on VPN Status 196
Switching Uplinks Based on Internet Availability 197
In the Dell W-Instant UI 197
In the CLI 197
Viewing Uplink Status and Configuration 198
Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide Contents | 15
Mobility and Client Management 199
Layer-3 Mobility Overview 199
Configuring L3-Mobility 200
Home Agent Load Balancing 200
Configuring a Mobility Domain for Dell W-Instant 200
In the Dell W-Instant UI 200
In the CLI 201
Spectrum Monitor 202
Understanding Spectrum Data 202
Device List 202
Non Wi-Fi Interferers 203
Channel Details 205
Channel Metrics 206
Spectrum Alerts 207
Configuring Spectrum Monitors and Hybrid W-IAPs 207
Converting aW-IAP to a Hybrid W-IAP 207
In the Dell W-Instant UI 207
In the CLI 207
Converting aW-IAP to a Spectrum Monitor 208
In the Dell W-Instant UI 208
In the CLI 208
Adaptive Radio Management 210
ARM Overview 210
Channel or Power Assignment 210
Voice Aware Scanning 210
Load Aware Scanning 210
Band Steering Mode 210
Client Match 210
Airtime Fairness Mode 211
Access Point Control 211
Monitoring the Network with ARM 212
ARM Metrics 212
16 | Contents Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide
Configuring ARM Features on a W-IAP 212
In the Dell W-Instant UI 212
In the CLI 215
Configuring Radio Settings for a W-IAP 217
In the Dell W-Instant UI 217
In the CLI 218
Intrusion Detection 220
Detecting and Classifying Rogue APs 220
OS Fingerprinting 220
Configuring Wireless Intrusion Protection and Detection Levels 221
Containment Methods 225
Configuring IDSUsing CLI 225
Content Filtering 227
Content Filtering 227
Enabling Content Filtering 227
Enabling Content Filtering for a Wireless Profile 227
In the Dell W-Instant UI 227
In the CLI 227
Enabling Content Filtering for a Wired Profile 228
In the Dell W-Instant UI 228
In the CLI 228
Configuring Enterprise Domains 228
In the Dell W-Instant UI 228
In the CLI 228
Configuring OpenDNS Credentials 228
In the Dell W-Instant UI 229
In the CLI 229
DHCP Configuration 230
Configuring DHCP Scopes 230
Configuring Distributed DHCP Scopes 230
In the Dell W-Instant UI 230
In the CLI 232
Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide Contents | 17
Configuring Centralized DHCP Scope 233
In the Dell W-Instant UI 233
In the CLI 234
Configuring Local and Local,L3 DHCP Scopes 235
In the Dell W-Instant UI 235
In the CLI 236
Configuring DHCP Server for Client IP Assignment 237
In the Dell W-Instant UI 237
In the CLI 237
VPN Configuration 238
Understanding VPN Features 238
Configuring a Tunnel from a W-IAP to Dell Networking W-Series Mobility Controller 238
Configuring IPSec Tunnel 238
In the Dell W-Instant UI 238
In the CLI 239
Example 240
Enabling Automatic Configuration of GRETunnel 240
In the Dell W-Instant UI 240
In the CLI 242
Manually Configuring a GRETunnel 242
In the Dell W-Instant UI 242
In the CLI 243
Configuring an L2TPv3 Tunnel 243
In the Dell W-Instant UI 244
In the CLI 245
Example 246
Configuring Routing Profiles 249
In the Dell W-Instant UI 249
In the CLI 250
IAP-VPN Configuration 251
Overview 251
Termination of IPSec and GRE VPNTunnels 251
18 | Contents Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide
L2/L3 Forwarding Modes 251
IAP-VPN Scalability Limits 252
OSPFConfiguration 252
VPN Configuration 254
Whitelist Database Configuration 254
Controller Whitelist Database 254
External Whitelist Database 254
VPN Local Pool Configuration 254
Role Assignment for the Authenticated W-IAPs 254
VPN Profile Configuration 255
Viewing Branch Status 255
Example 255
W-AirwaveIntegration and Management 257
W-AirWave Features 257
Image Management 257
W-IAP and Client Monitoring 257
Template-based Configuration 257
Trending Reports 258
Intrusion Detection System 258
Wireless Intrusion Detection System (WIDS) Event Reporting to W-AirWave 258
RF Visualization Support forDell W-Instant 258
PSK-based and Certificate-based Authentication 259
Configuring W-AirWave 259
Configuring Organization String 259
Shared Key 260
Configuring W-AirWave Information 260
In the Dell W-Instant UI 260
In the CLI 261
Configuring for W-AirWave Discovery through DHCP 261
Standard DHCP option 60 and 43 on Windows Server 2008 261
Alternate Method for Defining Vendor-Specific DHCP Options 264
Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide Contents | 19
AirGroup Configuration 267
AirGroup Overview 267
AirGroup with Dell W-Instant 268
AirGroup Solution 269
AirGroup Features 270
CPPM and ClearPass Guest Features 271
AirGroup Components 271
AirGroup Services 271
Configuring AirGroup and AirGroup Services on a W-IAP 272
In the Dell W-Instant UI 272
In the CLI 273
Configuring AirGroup and CPPM interface in Dell W-Instant 274
Creating a RADIUS Server 274
Assign a Server to AirGroup 274
Configure CPPM to Enforce Registration 274
Change of Authorization (CoA) 274
Integration with Security and Location Services Applications 275
Configuring a W-IAP for Analytics and Location Engine Support 275
ALE with Dell W-Instant 275
Enabling ALE Support on a W-IAP 275
In the Dell W-Instant UI 275
In the CLI 276
Verifying ALE Configuration on a W-IAP 276
Configuring a W-IAP for RTLSSupport 276
In the Dell W-Instant UI 276
In the CLI 277
Integrating a W-IAP with Palo Alto Networks Firewall 277
Integration with Dell W-Instant 278
Configuring a W-IAP for PAN integration 278
In the Dell W-Instant UI 278
In the CLI 279
20 | Contents Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide
Lawful Intercept and CALEA Integration 280
CALEA Integration and Lawful Intercept Compliance 280
CALEA Server Integration 280
Traffic Flow from IAP to CALEA Server 280
Traffic Flow from IAP to CALEA Server through VPN 281
Client Traffic Replication 282
Configuring W-IAPs for CALEAIntegration 282
Creating a CALEA Profile 282
In the Dell W-Instant UI 283
In the CLI 283
Creating an Access Rule for CALEA 283
In the Dell W-Instant UI 283
In the CLI 284
Verifying the configuration 284
Example 284
Hotspot Profiles 286
Understanding Hotspot Profiles 286
Generic Advertisement Service (GAS) 286
Access Network Query Protocol (ANQP) 287
Hotspot 2.0 Query Protocol (H2QP) 287
Information Elements (IEs) and Management Frames 287
NAI Realm List 287
Configuring Hotspot Profiles 287
Creating Advertisement Profiles for Hotspot Configuration 288
Configuring an NAI Realm Profile 288
Configuring a Venue Name Profile 290
Configuring a Network Authentication Profile 291
Configuring a Roaming Consortium Profile 292
Configuring a 3GPP Profile 292
Configuring an IP Address Availability Profile 292
Configuring a Domain Profile 292
Configuring an Operator-friendly Profile 293
Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide Contents | 21
Configuring a Connection Capability Profile 293
Configuring an Operating Class Profile 293
Configuring a WAN Metrics Profile 293
Creating a Hotspot Profile 294
Associating an Advertisement Profile to a Hotspot Profile 296
Creating a WLAN SSID and Associating Hotspot Profile 296
Sample Configuration 297
Extended Voice and Video 300
QoS for Microsoft Office OCS and Apple Facetime 300
Microsoft OCS 300
Apple Facetime 300
Dynamic CPUManagement 301
Dynamic CPU Management 301
Configuring for Dynamic CPU Management 301
In the Dell W-Instant UI 301
In the CLI 301
Example 301
Link Aggregation Control Protocol for W-IAP220 Series 302
W-IAP Management 303
Configuring LED Display 303
In the Dell W-Instant UI 303
In the CLI 303
Backing up and Restoring W-IAP Configuration Data 303
Viewing Current Configuration 303
Backing up Configuration Data 303
Restoring Configuration 304
Converting a W-IAP to a Remote AP and Campus AP 304
Converting a W-IAP to Remote AP 304
Converting a W-IAP using CLI 306
Converting a W-IAP to Campus AP 306
Converting a W-IAP to Standalone Mode 307
Converting a W-IAP using CLI 307
22 | Contents Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide
Resetting a Remote AP or Campus AP to a W-IAP 307
Rebooting the W-IAP 308
Monitoring Devices and Logs 309
Configuring SNMP 309
SNMP Parameters for W-IAP 309
Configuring SNMP 310
Creating community strings for SNMPv1 and SNMPv2 Using Dell W-Instant UI 310
Creating community strings for SNMPv3 Using Dell W-Instant UI 310
Configuring SNMP Community Strings in the CLI 311
Configuring SNMP Traps 312
In the Dell W-Instant UI 312
In the CLI 312
Configuring a Syslog Server 312
In the Dell W-Instant UI 312
In the CLI 314
Configuring TFTP Dump Server 314
In the Dell W-Instant UI 314
In the CLI 314
Running Debug Commands from the Dell W-Instant UI 315
Support Commands 315
Regulatory Domain 320
Country Codes List 320
ClearPass Guest Setup 325
Testing 328
Troubleshooting 328
Terminology 329
Acronyms and Abbreviations 329
Glossary 330
Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide Contents | 23
Chapter 1
About this Guide
This User Guide describes the features supported by Dell Networking W-Series Instant Access Point (W-IAP) and
provides detailed instructions for setting up and configuring Dell W-Instantnetwork.
Intended Audience
This guide is intended for customers who configure and use Dell W-Instant.
Related Documents
In addition to this document, the Dell W-IAP product documentation includes the following:
l
Dell Networking W-Series Instant Access Point Installation Guides
l
Dell Networking W-Series Instant Access Point 6.3.1.1-4.0 Quick Start Guide
l
Dell Networking W-Series Instant Access Point 6.3.1.1-4.0 CLI Reference Guide
l
Dell Networking W-Series Instant Access Point 6.3.1.1-4.0 MIB Reference Guide
l
Dell Networking W-Series Instant Access Point 6.3.1.1-4.0 Syslog Messages Reference Guide
l
Dell Networking W-Series Instant Access Point 6.3.1.1-4.0 Release Notes
Conventions
The following conventions are used throughout this manual to emphasize important concepts:
Table 1:
Type Style Description
Italics
System items
Commands
<
Typographical Conventions
This style is used to emphasize important terms and to mark the titles of books.
This fixed-width font depicts the following:
l Sample screen output
l System prompts
l Filenames, software devices, and specific commands when mentioned in the text.
In the command examples, this style depicts the keywords that must be typed exactly as
shown.
Arguments
> In the command examples, italicized text within angle brackets represents items that you
should replace with information appropriate to your specific situation. For example:
# send <
In this example, you would type “send” at the system prompt exactly as shown, followed by
the text of the message you wish to send. Do not type the angle brackets.
text message
>
[Optional]
{Item A |
Item B}
Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide About this Guide | 25
Command examples enclosed in brackets are optional. Do not type the brackets.
In the command examples, items within curled braces and separated by a vertical bar
represent the available choices. Enter only one choice. Do not type the braces or bars.
The following informational icons are used throughout this guide:
Indicates helpful suggestions, pertinent information, and important things to remember.
Indicates a risk of damage to your hardware or loss of data.
Indicates a risk of personal injury or death.
Contacting Dell
Table 2:
Support Information
Support
Main Website dell.com
Contact Information dell.com/contactdell
Support Website dell.com/support
Documentation Website
dell.com/support/manuals
26 | AboutthisGuide Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide
Chapter 2
About Dell W-Instant
This chapter provides the following information:
l Dell W-Instant Overview
l What is New in Dell W-Instant 6.3.1.1-4.0
Dell W-Instant Overview
Dell W-Instant virtualizes Dell Networking W-Series Mobility Controller capabilities on 802.11 access points (APs),
creating a feature-rich enterprise-grade wireless LAN (WLAN) that combines affordability and configuration
simplicity.
Dell W-Instant is a simple, easy to deploy turn-key WLAN solution consisting of one or more APs. An Ethernet port
with routable connectivity to the Internet or a self-enclosed network is used for deploying an Instant Wireless
Network. A Dell Networking W-Series Instant Access Point (W-IAP) can be installed at a single site or deployed
across multiple geographically-dispersed locations. Designed specifically for easy deployment, and proactive
management of networks. Dell W-Instant is ideal for small customers or remote locations without any on-site IT
administrator.
Dell W-Instant consists of a W-IAP and a Virtual Controller. The Virtual Controller resides within one of the APs. In a
Dell W-Instant deployment scenario, only the first W-IAP needs to be configured. After the first W-IAP is configured,
the other W-IAPs inherit all the required configuration information from the Virtual Controller. Dell W-Instant
continually monitors the network to determine the W-IAP that should function as the Virtual Controller at any time,
and the Virtual Controller will move from one W-IAP to another as necessary without impacting network
performance.
Supported Devices
The following devices are supported in the current release of Dell W-Instant:
l W-IAP92
l W-IAP93
l W-IAP104
l W-IAP105
l W-IAP114
l W-IAP115
l W-IAP134
l W-IAP135
l W-IAP175P/175AC
l W-IAP3WN/3WNP
l W-IAP108
l W-IAP109
l W-IAP155/155P
l W-IAP224
l W-IAP225
All APs support an unlimited number of W-IAPs. In a network comprising of W-IAP92 and W-IAP93, an AP can
support up to 16 W-IAPs only.
Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide About Dell W-Instant | 27
All W-IAPs except W-IAP224, W-IAP225, W-IAP114, and W-IAP115 are available as the following variants:
l W-IAP-US (United States)
l W-IAP-JP (Japan)
l W-IAP-RW (Rest of World)
The W-IAP224, W-IAP225, W-IAP114, and W-IAP115 are available as the following variants:
l W-IAP-US (United States)
l W-IAP-RW. The RWvariant also includes JP variants.
For information on regulatory domains and the list of countries supported by the W-IAP-RW type, see:
l Regulatory Domain on page 320
l Country Codes List on page 320
Dell W-Instant UI
The Dell W-Instant User Interface (UI) provides a standard web based interface that allows you to configure and
monitor a Wi-Fi network. Dell W-Instant is accessible through a standard web browser from a remote management
console or workstation and can be launched using the following browsers:
l Internet Explorer 10 or lower
l Safari 6.0 or later
l Google Chrome 23.0.1271.95 or later
l Mozilla Firefox 17.0 or later
To view the Dell W-Instant UI, ensure that the JavaScript is enabled on the web browser. For more information on
Dell W-Instant UI features, see Dell W-Instant User Interface on page 38.
In the current release, Dell W-Instant UI does not support Internet Explorer 11.
The Dell W-Instant UI logs out automatically if the window is inactive for 15 minutes.
Dell W-Instant CLI
The Dell W-Instant Command Line Interface (CLI) is a text-based interface accessible through a Secure Shell (SSH)
session.
SSH access requires that you configure an IP address and a default gateway on the W-IAP and connect the W-IAP
to your network. This is typically performed when the Dell W-Instant network on a W-IAP is set up.
What is New in Dell W-Instant 6.3.1.1-4.0
The following features are added in the Dell W-Instant 6.3.1.1-4.0 release:
Table 3:
Feature Description
New Features in 6.3.1.1-4.0
Bandwidth contract
enhancements
28 | AboutDellW-Instant Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide
Dell W-Instant supports assigning bandwidth contracts to the user roles. The
administrator can assign a bandwidth contract configured in Kbps to upstream (client to
the W-IAP) or downstream (W-IAP to clients) traffic for a user role. All users in that role will
be part of that bandwidth contract.
Table 3:
New Features in 6.3.1.1-4.0
Feature Description
The administrators can also set per user bandwidth to provide a specific bandwidth for
each user connecting to the SSID or wired profile.
Support for 802.11r
Roaming and Fast BSS
Transition
Support for Client
Roaming Based on
Opportunistic Key
Caching
LACP on W-IAP220
Series
W-IAP Guest
Management Interface
W-IAP Integration with
Analytics and Location
Engine (ALE)
W-IAP Integration with
Palo Alto Networks
Firewall
Dell W-Instant supports 802.11r roaming standard. As part of the 802.11r implementation,
Dell W-Instant supports the Fast BSS Transition protocol. The Fast BSS Transition
mechanism minimizes the time required to resume data connectivity when a BSS
transition happens.
Dell W-Instant also supports opportunistic key caching (OKC) based roaming. In the OKC
based roaming, the 802.1X authentication profile enables a cached pairwise master key
(PMK), which is used when a client roams to a new W-IAP. This allows faster roaming of
clients between the W-IAPs in a cluster, without the need for a complete 802.1X
authentication.
W-IAP220 Series supports link aggregation using either standard port-channel
(configuration based) or Link Aggregation Control Protocol (protocol signaling based).
Dell W-Instant now supports a guest management interface for managing guest users.
Dell W-Instant supports integration with Application and Location Engine (ALE). The ALE
server acts as a primary interface to all third-party applications and the W-IAP sends
client information and other status information to the ALE server.
Dell W-Instant supports integration with the Palo Alto Networks (PAN) firewall. To
integrate a W-IAP with PAN user ID, a global profile is added. This profile can be
configured on a W-IAP with PAN firewall information such as IP address, port, user name,
password, firewall enabled or disabled status. W-IAP maintains the network (such as
mapping IP address) and user information for its clients in the network and can provide
the required information for the user ID feature on PAN firewall.
Domain-name based
ACL
Enhancements to
Internal Captive Portal
Splash Page
Support for multiple
Captive portal profiles
Client Match
Support for Spanning
Tree Protocol
Customizing Internal
Captive Portal Certificate
Dell W-Instant supports configuration of domain-based Access Control List (ACL)rule.
Access to specific domains is allowed or denied based on the ACL rule definition.
Dell W-Instant now supports customization of logo, policy text, and usage terms for the
internal Captive portal splash page.
Dell W-Instant supports multiple Captive portal profiles and allows the users to customize
the Captive portal profiles based on guest logon role and SSID. You can create a set of
captive portal profiles and associate them with an SSID or wired profile, or create an
external Captive portal profile for a WLAN SSID or a wired profile in the WLAN wizard or
Wired Network window.
Dell W-Instant supports the ARM client match feature that continually monitors a client's
RF neighborhood to provide the ongoing client bandsteering service and load balancing,
and enhanced W-IAP reassignment for roaming mobile clients.
Dell W-Instant allows enabling of Spanning Tree Protocol (STP) on a wired profile. STP
ensures that there are no loops in any bridged Ethernet network and operates on all
downlink ports, regardless of forwarding mode. By default, Spanning Tree is disabled on
wired profiles.
Dell W-Instant now supports uploading of customized internal Captive Portal server
certificates to the W-IAP database.
Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide About Dell W-Instant | 29
Table 3:
New Features in 6.3.1.1-4.0
Feature Description
Provisioning a W-IAP as
a master W-IAP
Support for Automatic
Configuration of the GRE
Tunnel
DHCP Relay Support Dell W-Instant now supports the Centralized DHCP scope to serve the L3 clients. When
W-IAP Provisioning
Enhancements
Support for HTTP Proxy
Configuration
AirGroup Enhancements
Dynamic RADIUSProxy
(DRP) IP address
configuration
Dell W-Instant now allows you to manually provision a W-IAP as a master W-IAP, based
on network-specific parameters such as the physical location of the Virtual Controller.
Dell W-Instant now allows the automatic configuration of GRE tunnel from a W-IAP to Dell
Mobility Controller. By using an IPsec connection, the W-IAPs can now set up a GRE
tunnel with the controller. This feature eliminates the need for the manual configuration of
tunnel interface on the controller.
this feature is enabled, the W-IAP relays all DHCP request packets to the DHCP server
and acts as gateway for the centralized DHCP scope serving L3 clients.
For option DHCP 43, besides the old format <organization>,<ams-ip>,<ams-key>, Dell
W-Instant now supports a new format <organization>,<ams-domain>. Also, the W-IAP
now performs a certificate-based authentication with W-AirWave Management server,
instead of the current PSK-based login process.
Dell W-Instant now supports HTTP proxy configuration. The HTTP proxy enables the WIAP to download the image from the cloud server.
Dell W-Instant now supports different AirGroup services such as iTunes, Sharing, Chat,
and so on. You can either allow all services or customize the required services.
Dell W-Instant allows the configuration of separate IP address and VLAN details, which
can be used as source IP address and VLAN for RADIUS packets. When the dynamic
RADIUS proxy IP address and VLANare configured, the clients associated with a W-IAP
can be authenticated with multiple RADIUS servers, across different geographical areas,
networks, and VLANs.
Restricted access
management
Uplink VLANmonitoring
and detection on
upstream devices
Telnet access to the Dell
W-Instant CLI
Table 4:
New Hardware Platforms introduced in this release
W-IAP
Platform
W-IAP224/225
W-IAP114/115
Dell W-Instant allows you to configure management subnets and restrict access to the
corporate network in order to prevent unauthorized users from accessing the corporate
network.
The Dell W-Instant UI now displays an alert message when a client connects to an SSID
or wired interface with a VLANID that is not allowed on the upstream device. The alert
message notifies the users about the mismatch in the VLAN configuration on the W-IAP
or the upstream device of a W-IAP.
Dell W-Instant now supports Telnet access to the Dell W-Instant CLI.
Description
The W-IAP224 and W-IAP225 wireless access points support the IEEE 802.11ac standard for highperformance WLAN. These APs use MIMO (Multiple-in, Multiple-out) technology and other highthroughput mode techniques to deliver high-performance, 802.11n 2.4 GHz and 802.11ac 5 GHz
functionality while simultaneously supporting existing legacy wireless services. The W-IAP220
Series support 802.11ac on the 5GHz band using 80 MHz channels. For more information about this
product, visit dell.com/support.
The W-IAP114 and W-IAP115 are dual radio, dual-band wireless access points that support the
IEEE 802.11n standard for high-performance WLAN. These APs use MIMO (Multiplein, Multiple-out)
technology and other high-throughput mode techniques to deliver high-performance, 802.11n 2.4
GHz and 5 GHz functionality while simultaneously supporting existing 802.11a/b/g wireless
services. For more information about this product, visit dell.com/support.
30 | AboutDellW-Instant Dell Networking W-Series Instant 6.3.1.1-4.0 | User Guide
Loading...