All rights reserved. Specifications in this manual are subject to change without notice.
Originated in the USA. All other trademarks are the property of their respective owners.
Open Source Code
This product includes code licensed under the GNU General Public License, the GNU Lesser General Public
License, and/or certain other open source licenses. A complete machine-readable copy of the source code
corresponding to such code is available upon request. This offer is valid to anyone in receipt of this information
and shall expire three years following the date of the final distribution of this product version by HewlettPackard Enterprise Company. To obtain such source code, send a check or money order in the amount of US
$10.00 to:
Hewlett-Packard Enterprise Company
Attn: General Counsel
3000 Hanover Street
Palo Alto, CA 94304
USA
Please specify the product and version for which you are requesting source code.
Revision 01 | December 2016Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide
Contents
About this Guide9
Intended Audience9
Related Documents9
Conventions9
Contacting Dell10
About Instant11
Instant Overview11
What is New in this Release14
Setting up a W-IAP16
Setting up Instant Network16
Provisioning a W-IAP17
Logging in to the Instant UI19
Accessing the Instant CLI20
Automatic Retrieval of Configuration24
Managed Mode Operations24
Prerequisites24
Configuring Managed Mode Parameters25
Verifying the Configuration26
Instant User Interface28
Login Screen28
Main Window29
Initial Configuration Tasks56
Configuring System Parameters56
Changing Password62
Customizing W-IAP Settings63
Modifying the W-IAP Host Name63
Configuring Zone Settings on a W-IAP63
Specifying a Method for Obtaining IP Address64
Configuring External Antenna65
Configuring Radio Profiles for a W-IAP66
Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide| 3
Configuring Uplink VLANfor a W-IAP68
Changing the W-IAP Installation Mode68
Changing USB Port Status69
Master Election and Virtual Controller70
Adding a W-IAP to the Network71
Removing a W-IAP from the Network72
VLAN Configuration73
VLAN Pooling73
Uplink VLAN Monitoring and Detection on Upstream Devices73
IPv6 Support74
IPv6 Notation74
Enabling IPv6 Support for W-IAP Configuration74
Firewall Support for IPv676
Debugging Commands76
Wireless Network Profiles77
Configuring Wireless Network Profiles77
Configuring Fast Roaming for Wireless Clients97
Configuring Modulation Rates on a WLAN SSID100
Multi-User-MIMO101
Management Frame Protection102
Disabling Short Preamble for Wireless Client102
Editing Status of a WLAN SSID Profile102
Editing a WLAN SSID Profile103
Deleting a WLAN SSID Profile103
Wired Profiles104
Configuring a Wired Profile104
Assigning a Profile to Ethernet Ports109
Editing a Wired Profile109
Deleting a Wired Profile110
Link Aggregation Control Protocol110
Understanding Hierarchical Deployment111
Captive Portal for Guest Access113
Understanding Captive Portal113
Configuring a WLANSSID for Guest Access114
4 |Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide
Configuring Wired Profile for Guest Access120
Configuring Internal Captive Portal for Guest Network122
Configuring External Captive Portal for a Guest Network125
Configuring Facebook Login131
Configuring Guest Logon Role and Access Rules for Guest Users132
Configuring Captive Portal Roles for an SSID134
Configuring Walled Garden Access137
Authentication and User Management139
Managing W-IAP Users139
Supported Authentication Methods143
Supported EAP Authentication Frameworks145
Configuring Authentication Servers146
Understanding Encryption Types160
Configuring Authentication Survivability161
Configuring 802.1X Authentication for a Network Profile163
Enabling 802.1X Supplicant Support165
Configuring MAC Authentication for a Network Profile166
Configuring MAC Authentication with 802.1X Authentication168
Configuring MAC Authentication with Captive Portal Authentication170
Configuring WISPr Authentication171
Blacklisting Clients172
Uploading Certificates175
Roles and Policies178
Firewall Policies178
Content Filtering191
Configuring User Roles195
Configuring Derivation Rules197
Using Advanced Expressions in Role and VLAN Derivation Rules203
DHCP Configuration207
Configuring DHCP Scopes207
Configuring the Default DHCP Scope for Client IP Assignment214
Configuring Time-Based Services217
Time Range Profiles217
Configuring a TimeRange Profile217
Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide| 5
Applying a Time Range Profile to a WLAN SSID218
Verifying the Configuration219
Dynamic DNS Registration221
Enabling Dynamic DNS221
Configuring Dynamic DNSUpdates for Clients222
Verifying the Configuration223
VPN Configuration224
Understanding VPN Features224
Configuring a Tunnel from a W-IAP to a Mobility Controller225
Configuring Routing Profiles236
IAP-VPN Deployment238
Understanding IAP-VPN Architecture238
Configuring W-IAP and Controller for IAP-VPN Operations241
Adaptive Radio Management249
ARM Overview249
Configuring ARM Features on a W-IAP250
Configuring Radio Settings256
Deep Packet Inspection and Application Visibility261
Deep Packet Inspection261
Enabling Application Visibility261
Application Visibility262
Enabling URL Visibility267
Configuring ACL Rules for Application and Application Categories267
Configuring Web Policy Enforcement Service270
Voice and Video273
Wi-Fi Multimedia Traffic Management273
Media Classification for Voice and Video Calls276
Enabling Enhanced Voice Call Tracking277
Services279
Configuring AirGroup279
Configuring a W-IAP for RTLSSupport288
Configuring a W-IAP for Analytics and Location Engine Support289
Managing BLEBeacons290
Clarity Live291
6 |Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide
Configuring OpenDNS Credentials293
Integrating a W-IAP with Palo Alto Networks Firewall293
Integrating a W-IAP with an XMLAPIInterface295
CALEA Integration and Lawful Intercept Compliance298
Cluster Security304
Overview304
Enabling Cluster Security305
Cluster Security Debugging Logs305
Verifying the Configuration306
W-IAP Management and Monitoring307
Managing a W-IAP from W-AirWave307
Uplink Configuration318
Uplink Interfaces318
Uplink Preferences and Switching323
Intrusion Detection328
Detecting and Classifying Rogue W-IAPs328
OS Fingerprinting328
Configuring Wireless Intrusion Protection and Detection Levels329
Configuring IDS334
Mesh W-IAP Configuration335
Mesh Network Overview335
Setting up Instant Mesh Network336
Configuring Wired Bridging on Ethernet 0 for Mesh Point336
Mobility and Client Management338
Layer-3 Mobility Overview338
Configuring L3-Mobility339
Spectrum Monitor341
Understanding Spectrum Data341
Configuring Spectrum Monitors and Hybrid W-IAPs347
W-IAP Maintenance349
Upgrading a W-IAP349
Backing up and Restoring W-IAP Configuration Data352
Converting a W-IAP to a Remote AP and Campus AP353
Resetting a Remote AP or Campus AP to a W-IAP359
Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide| 7
Rebooting the W-IAP359
Monitoring Devices and Logs361
Configuring SNMP361
Configuring a Syslog Server365
Configuring TFTP Dump Server366
Running Debug Commands367
Uplink Bandwidth Monitoring371
Hotspot Profiles373
Understanding Hotspot Profiles373
Configuring Hotspot Profiles375
Sample Configuration386
ClearPass Guest Setup389
Configuring ClearPass Guest389
Verifying ClearPass Guest Setup392
Troubleshooting392
IAP-VPN Deployment Scenarios394
Scenario 1—IPsec: Single Datacenter Deployment with No Redundancy395
Scenario 2—IPsec: Single Datacenter with Multiple Controllers for Redundancy399
Scenario 3—IPsec: Multiple Datacenter Deployment with Primary and Backup Controllers for
Redundancy403
Scenario 4—GRE: Single Datacenter Deployment with No Redundancy408
Glossary411
Acronyms and Abbreviations416
Glossary431
8 |Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide
Chapter 1
About this Guide
This User Guide describes the features supported by Dell Networking W-Series Instant Access Point (W-IAP)
and provides detailed instructions for setting up and configuring the Instantnetwork.
Intended Audience
This guide is intended for administrators who configure and use W-IAPs.
Related Documents
In addition to this document, the Dell W-IAP product documentation includes the following:
l Dell Networking W-Series Instant Access Point Installation Guides
l Dell Networking W-Series Instant Quick Start Guide
l Dell Networking W-Series Instant CLI Reference Guide
l Dell Networking W-Series Instant MIB Reference Guide
l Dell Networking W-Series Instant Syslog Messages Reference Guide
l Dell Networking W-Series Instant Release Notes
Conventions
The following conventions are used throughout this manual to emphasize important concepts:
Table 1: Typographical Conventions
Style TypeDescription
Italics
System items
Commands
This style is used to emphasize important terms and to mark the titles of
books.
This fixed-width font depicts the following:
l Sample screen output
l System prompts
l Filenames, software devices, and specific commands when mentioned in
the text.
In the command examples, this style depicts the keywords that must be
typed exactly as shown.
Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User GuideAbout this Guide | 9
Table 1: Typographical Conventions
Style TypeDescription
<Arguments>In the command examples, italicized text within angle brackets represents
items that you should replace with information appropriate to your specific
situation. For example:
# send <text message>
In this example, you would type “send” at the system prompt exactly as
shown, followed by the text of the message you wish to send. Do not type
the angle brackets.
[Optional]
{Item A |
Item B}
Command examples enclosed in square brackets are optional. Do not type
the square brackets.
In the command examples, items within curly brackets and separated by a
vertical bar represent the available choices. Enter only one choice. Do not
type the curly brackets or bars.
The following informational icons are used throughout this guide:
Indicates helpful suggestions, pertinent information, and important things to remember.
Indicates a risk of damage to your hardwareor loss of data.
Indicates a risk of personal injury or death.
Contacting Dell
Table 2: Support Information
Support
Main Websitedell.com
Contact Informationdell.com/contactdell
Support Websitedell.com/support
Documentation Website
10 | About this GuideDell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide
dell.com/support/manuals
Chapter 2
About Instant
This chapter provides the following information:
l Instant Overview on page 11
l What is New in this Release on page 14
Instant Overview
Instant virtualizes Dell Networking W-Series Mobility Controller capabilities on 802.1--capable access points
(APs), creating a feature-rich enterprise-grade wireless LAN (WLAN) that combines affordability and
configuration simplicity.
Instant is a simple, easy to deploy turnkey WLAN solution consisting of oneor more W-IAPs. An Ethernet port
with routable connectivity to the Internet or a self-enclosed network is used for deploying an Instant Wireless
Network. A Dell Networking W-Series Instant Access Point (W-IAP) can be installed at a single site or deployed
across multiple geographically dispersed locations. Designed specifically for easy deployment and proactive
management of networks, Instant is ideal for small customers or remote locations without requiring any onsite IT administrator.
Instant consists of a W-IAP and a Virtual Controller (VC). The VC resides within one of the W-IAPs. In a Instant
deployment scenario, only the first W-IAP needs to be configured. After the first W-IAP is configured, the other
W-IAPs inherit all the required configuration information from the VC. Instant continually monitors the
network to determine the W-IAP that should function as a VC at any time, and the VC will move from one W-IAP
to another as necessary without impacting network performance.
Supported W-IAP Platforms
The following table provides a list of W-IAP platforms that support Instant software:
Table 3: Supported W-IAP Platforms
W-IAP PlatformMinimum Required Instant Software Version
W-IAP PlatformMinimum Required Instant Software Version
W-IAP103
W-IAP274/275
W-IAP114/115
W-IAP224/225
W-IAP155/155PInstant 6.2.1.0-3.3.0.0 or later
W-IAP108/109Instant 6.2.0.0-3.2.0.0 or later
Instant 6.4.0.2-4.1.0.0 or later
Instant 6.3.1.1-4.0.0.0 or later
Each W-IAP model has a minimum required Instant software version as shown in Table 3. When a new W-IAP
is added into an existing cluster, it can join the cluster only if the existing cluster is running at least the
minimum required version of that W-IAP. If the existing cluster is running a version prior to the minimum
required version of the new W-IAP, new W-IAP will not come up and may reboot with the reason Image syncfail. To recover from this condition, upgrade the existing cluster to at least the minimum required version of
the new W-IAP first, and add the new W-IAP.
Dell recommends that networks with more than 128 W-IAPs be designed as multiple, smaller VC networks
with Layer-3 mobility enabled between these networks.
Dell W-IAPs are available in the following variants:
l US (United States)
l JP (Japan)
l RW
The following table provides the variants supported for each W-IAPplatform:
Table 4: Supported W-IAP Variants
W-IAP###-
RW
(Rest of the
World
except
W-IAPModel (Reg
Domain)
W-IAP###-
US
(US only)
W-IAP###-
JP (Japan
only)
US/JP)
W-IAP334/335YesYesYes
W-IAP314/315YesYesYes
W-IAP324/325YesYesYes
W-IAP277YesYesYes
12 | About InstantDell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide
Table 4: Supported W-IAP Variants
W-IAPModel (Reg
US
Domain)
(US only)
W-IAP274/275YesYesYes
W-IAP228YesYesYes
W-IAP###-
W-IAP###-
JP (Japan
only)
W-IAP###-
RW
(Rest of the
World
except
US/JP)
W-IAP224/225YesYes
W-IAP214/215YesYesYes
W-IAP205HYesYesYes
W-IAP204/205YesYesYes
W-IAP155/155P
W-IAP114/115YesYes
W-IAP108/109YesYesNo
W-IAP103
YesYesNo
YesYesYes
Yes
Yes
For information on regulatory domains and the list of countries supported by the W-IAP###-RW type, see the
Specifying Country Code section in Logging in to the Instant UI on page 19
Instant UI
The Instant User Interface (UI) provides a standard web-based interface that allows you to configure and
monitor a Wi-Fi network. Instant is accessible through a standard web browser from a remote management
console or workstation and can be launched using the following browsers:
l Microsoft Internet Explorer 11 or earlier
l Apple Safari 6.0 or later
l Google Chrome 23.0.1271.95 or later
l Mozilla Firefox 17.0 or later
If the Instant UI is launched through an unsupported browser, a warning message is displayed along with a list
of recommended browsers. However, the users are allowed to log in using the Continue login link on theLogin page.
To view the Instant UI, ensure that JavaScript is enabled on the web browser.
The Instant UI logs out automatically if the window is inactive for 15 minutes.
The Instant Command Line Interface (CLI) is a text-based interface that is accessible through a Secure Shell
(SSH) session.
SSH access requires that you configure an IP address and a default gateway on the W-IAP and connect the WIAP to your network. This is typically performed when the Instant network on a W-IAP is set up.
What is New in this Release
The following features are introduced in Instant 6.5.1.0-4.3.1.0:
Table 5: New Features
FeatureDescription
Cluster Security
Support for RFC5997
Clarity Live
Client Match for Access
Points in a Zone
Changing the W-IAP
Installation Mode
Support for cluster security is introduced to secure control plane messages between WIAPs. Additionally, DTLS is used with cluster security for extended security facilities.
Cluster security also provides the option of logging and debugging by organizing the
logs into modules which are later used for debugging.
Starting from Instant 6.5.1.0-4.3.1.0, you can configure the RFC5997 feature on the WIAP to send a status request query to the RADIUSserver each time there is an
authentication or accounting request timeout. This helps determine if the server is
actually down before marking the server as unavailable.
Instant now supports inline monitoring through Clarity Live to identify client connectivity
issues and send the data to W-AirWave for analysis. It helps in isolating the root cause of
the connectivity issues experienced by receiving regular statistics and updates
generated by the events.
Starting from Instant 6.5.1.0-4.3.1.0, the decision to move a client from a home W-IAP to
a target W-IAP will be made at the SSID level instead of the radio level, by adding the
SSID name to the client match radio database. Client Match will check if the same SSID
(zone specific SSID on Home W-IAP) is available on the target W-IAP before it moves the
client.
Instant now allows users to change the installation type of the W-IAPs from indoor to
outdoor or vice-versa.
Support for New IAP Devices
Instant 6.5.1.0-4.3.1.0 release introduces support for the following new DellW-IAP devices. These new devices
do not interoperate with Instant versions lower than Instant 6.5.0.0-4.3.0.0. If these W-IAPs are placed into a
cluster running older Instant versions prior to Instant 6.5.1.0-4.3.1.0, the devices will reboot with the ImageSync Fail reason. To resolve this issue, upgrade the existing cluster to minimum Instant 6.5.1.0-4.3.1.0
release, and then add the new W-IAP devices.
14 | About InstantDell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide
Table 6: New Hardware Platforms
FeatureDescription
W-IAP304/305The W-IAP300 Series (W-IAP304/305) wireless access points are equipped with one
10/100/1000Base-T auto-sensing MDI/MDX Ethernet port. This port supports wirednetwork connectivity, in addition to Power over Ethernet (PoE) from IEEE 802.3af and
802.3at compliant power sources. They also have two LEDs that indicate the system and
radio status of the device and are equipped with three external antenna connectors.
W-IAP207The W-IAP207 Series access points are equipped with one 10/100/1000Base-T (RJ-45)
auto-sensing, MDI/MDX Ethernet port ENET0) for wired network connectivity. This port
supports IEEE 802.3af Power over Ethernet (PoE), as a standard defined Powered Device
(PD) from a Power Sourcing Equipment (PSE) such as a PoE midspan injector or network
infrastructure that supports PoE. The 207 Series access points have two LEDs that
indicate the system and radio status of the device.
l Ensure that you have an Ethernet cable of the required length to connect a W-IAP to the home router.
l Ensurethat you have one of the following power sources:
n IEEE 802.3af/at-compliant Power over Ethernet (PoE) source. The PoE source can be any power source
equipment (PSE) switch or a midspan PSE device.
n W-IAP power adapter kit.
Perform the following procedures to set up the Instant network:
1. Connecting a W-IAP on page 16
2. Assigning an IP address to the W-IAP on page 16
Connecting a W-IAP
Based on the type of the power source used, perform one of the following steps to connect a W-IAP to the
power source:
l PoE switch—Connect the Ethernet 0 (Enet0) port of the W-IAP to the appropriate port on the PoE switch.
l PoE midspan—Connect the Enet0 port of the W-IAP to the appropriate port on the PoE midspan.
l AC to DC power adapter—Connect the 12V DC power jack socket to the AC to DC power adapter.
W-IAP155P supports PSE for 802.3at-powered device (class 0-4) on one port (E1 or E2), or 802.3af-powered
DC IN (Power Socket) on two ports (E1 and E2).
Assigning an IP address to the W-IAP
The W-IAP needs an IP address for network connectivity. When you connect a W-IAP to a network, it receives
an IP address from a DHCP server.
To obtain an IP address for a W-IAP:
1. Ensure that the DHCP service is enabled on the network.
2. Connect the Enet0 port of W-IAP to a switch or router using an Ethernet cable.
3. Connect the W-IAP to a power source. The W-IAP receives an IP address provided by the switch or router.
If there is no DHCP service on the network, the W-IAP can be assigned a static IP address. If a static IP is not
assigned, the W-IAP obtains an IPautomatically within the 169.254 subnet.
Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User GuideSetting up a W-IAP | 16
Assigning a Static IP
To assign a static IP to a W-IAP:
1. Connect a terminal, PC, or workstation running a terminal emulation program to the Console port on the
W-IAP.
2. Turn on the W-IAP. An autoboot countdown prompt that allows you to interrupt the normal startup
process and access apboot is displayed.
3. Press Enter key before the timer expires. The W-IAP goes into the apboot mode.
4. In the apboot mode, execute the following commands to assign a static IP to the W-IAP.
Hit <Enter> to stop autoboot: 0
apboot>
apboot> setenv ipaddr 192.0.2.0
apboot> setenv netmask 255.255.255.0
apboot> setenv gatewayip 192.0.2.2
apboot> save
Saving Environment to Flash...
Un-Protected 1 sectors
.done
Erased 1 sectors
Writing
5. Use the printenv command to view the configuration.
apboot> printenv
Provisioning a W-IAP
This section provides the following information:
l Zero Touch Provisioning of W-IAPs on page 17
l Provisioning W-IAPs through W-AirWave
Zero Touch Provisioning of W-IAPs
Zero Touch Provisioning eliminates the traditional method of deploying and maintaining devices and allows
you to provision new devices in your network automatically, without manual intervention. Following are the
zero-touch provisioning methods for Instant.
In order for zero-touch provisioning to be successful, the timezone of the W-IAP must be in synchronization
with the NTPserver.
To facilitate zero-touch provisioning using the W-AirWave Management Platform (AMP), or Activate, you must
configure the firewall and wired infrastructure to either allow the NTP traffic to pool.ntp.org, or provide
alternative NTP servers under DHCP options. For more information on configuring an NTPserver, see
NTPServer.
In a scenario where the NTP server is unreachable, the connection between the W-IAP and Activate will fall back
to the unsecured status. The NTPclient process running in the back end will continuously attempt to reconnect
to the NTPserver until a secure connection is established. The NTPclient process receives a response from the
NTP server on successfully establishing a connection and notifies the CLIprocess which runs a series of checks
to ensure the NTPserver is reachable.
17 | Setting up a W-IAPDell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide
Connecting to a Provisioning Wi-Fi Network
The W-IAPs boot with factory default configuration and try to provision automatically. If the automatic
provisioning is successful, the Instant SSID will not be available. If W-AirWave and Activate are not reachable
and the automatic provisioning fails, the Instant SSID becomes availableand the users can connect to a
provisioning network by using the Instant SSID.
To connect to a provisioning Wi-Fi network:
1. Ensure that the client is not connected to any wired network.
2. Connect a wireless-enabled client to a provisioning Wi-Fi network: for example, Instant.
3. If the Windows operating system (OS) is used:
a. Click the wireless network connection icon in the system tray. The Wireless Network Connection
window is displayed.
b. Click the Instant network and then click Connect.
4. If the Mac OS system is used:
a. Click the AirPort icon. A list of available Wi-Fi networks is displayed.
b. Click the instant network.
The Instant SSIDs are broadcast in 2.4 GHz only.
W-IAP Cluster
W-IAPs in the same VLAN automatically find each other and form a single functioning network managed by a
VC.
Moving a W-IAP from one cluster to another requires a factory reset of the W-IAP.
Disabling the Provisioning Wi-Fi Network
The provisioning network is enabled by default. Instant provides the option to disable the provisioning
network through the console port. Use this option only when you do not want the default SSID Instant to be
broadcast in your network.
To disable the provisioning network:
1. Connect a terminal, PC, or workstation running a terminal emulation program to the Console port on the
W-IAP.
2. Configure the terminal or terminal emulation program to use the following communication settings:
Table 7: Terminal Communication Settings
Baud RateData BitsParityStop BitsFlow Control
96008None1None
3. Turn on the W-IAP. An autoboot countdown prompt that allows you to interrupt the normal startup
process and access apboot is displayed.
4. Click Enterkey beforethe timer expires. TheW-IAP goes into the apboot mode through console.
5. In the apboot mode, execute the following commands to disable the provisioning network:
apboot> factory_reset
apboot> setenv disable_prov_ssid 1
Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User GuideSetting up a W-IAP | 18
apboot> saveenv
apboot> reset
Provisioning W-IAPs through W-AirWave
For information on provisioning W-IAPs through W-AirWave, refer to the W-AirWave Deployment Guide.
Logging in to the Instant UI
Launch a web browser and enter instant.dell-pcw.com. In the login screen, enter the following credentials:
l Username—admin
l Password—admin
The following figure shows the Login screen:
Figure 1 Login Screen
When you use a provisioning Wi-Fi network to connect to the Internet, all browser requests are directed to the
Instant UI. For example, if you enter example.com in the address bar, you are directed to the Instant UI. You
can change the default login credentials after the first login.
Regulatory Domains
The IEEE 802.11/b/g/n Wi-Fi networks operate in the 2.4 GHz spectrum and IEEE 802.11a/n operates in the 5
GHz spectrum. The spectrum is divided into channels. The 2.4 GHz spectrum is divided into 14 overlapping,
staggered 20 MHz wireless carrier channels. These channels are spaced 5 MHz apart. The 5 GHz spectrum is
divided into more channels. The channels that can be used in a particular country vary based on the
regulations of that country.
The initial Wi-Fi setup requires you to specify the country code for the country in which the Instant operates.
This configuration sets the regulatory domain for the radio frequencies that the W-IAPs use. Within the
regulated transmission spectrum, a high-throughput 802.11ac, 802.11a, 802.11b/g, or 802.11n radio setting
can be configured. The available 20 MHz, 40 MHz, or 80 MHz channels are dependent on the specified country
code.
You cannot change the country code for the W-IAPs in the restricted regulatory domains such as US or Japan
for most of the W-IAP models. For W-IAP-RW variants, you can select from the list of supported regulatory
domains. If the supported country code is not in the list, contact your Dell Support team to know if the
required country code is supported and obtain the software that supports the required country code.
19 | Setting up a W-IAPDell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide
Improper country code assignments can disrupt wireless transmissions. Most countries impose
penalties and sanctions on operators of wireless networks with devices set to improper country
codes.
To view the country code information, run the show country-codes command.
Specifying Country Code
This procedure is applicable only to the W-IAP-RW variants. Skip this step if you are installing W-IAP in the
United States and Japan.
The Country Code window is displayed for the W-IAP-RW variants when you log in to the W-IAP UI for the first
time. The Please Specify the Country Code drop-down list displays only the supported country codes. If the
W-IAP cluster consists of multiple W-IAP platforms, the country codes supported by the master W-IAP is
displayed for all other W-IAPs in the cluster. Select a country code from the list and click OK. The W-IAP
operates in the selected country code domain.
Figure 2 Specifying a Country Code
.
You can also view the list of supported country codes for the W-IAP-RW variants using the show countrycodes command.
Accessing the Instant CLI
Instant supports the use of Command Line Interface (CLI) for scripting purposes. When you make
configuration changes on a master W-IAP in the CLI, all associated W-IAPs in the cluster inherit these changes
and subsequently update their configurations. By default, you can access the CLI from the serial port or from
an SSH session. You must explicitly enable Telnet access on the W-IAP to access the CLI through a Telnet
session.
For information on enabling SSH and Telnet access to the W-IAP CLI, see Terminal access on page 60.
Connecting to a CLI Session
On connecting to a CLI session, the system displays its host name followed by the login prompt. Use the
administrator credentials to start a CLI session. For example:
User: admin
If the login is successful, the privileged command mode is enabled and a command prompt is displayed. For
example:
(Instant AP)#
The privileged EXEC mode provides access to show, clear, ping, traceroute, and commit commands. The
configuration commands are available in the config mode. To move from Privileged EXEC mode to the
Configuration mode, enter the following command at the command prompt:
(Instant AP)# configure terminal
Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User GuideSetting up a W-IAP | 20
The configure terminal command allows you to enter the basic configuration mode and the command prompt
is displayed as follows:
(Instant AP)(config)#
The Instant CLI allows CLI scripting in several other subcommand modes to allow the users to configure
individual interfaces, SSIDs, access rules, and security settings.
You can use the question mark (?) to view the commands available in a privileged EXEC mode, configuration
mode, or subcommand mode.
Although automatic completion is supported for some commands such as configure terminal, the
complete exit and end commands must be entered at command prompt.
Applying Configuration Changes
Each command processed by the VC is applied on all the slaves in a cluster. The changes configured in a CLI
session are saved in the CLI context. The CLI does not support the configuration data exceeding the 4K buffer
size in a CLI session. Therefore, it is recommended that you configure fewer changes at a time and apply the
changes at regular intervals.
To apply and save the configuration changes at regular intervals, execute the following command in the
privileged EXEC mode:
(Instant AP)# commit apply
To apply the configuration changes to the cluster without saving the configuration, execute the following
command in the privileged EXEC mode:
(Instant AP)# commit apply no-save
To view the changes that are yet to be applied, execute the following command in the privileged EXEC mode:
(Instant AP)# show uncommitted-config
To revert to the earlier configuration, execute the following command in the privileged EXEC mode.
(Instant AP)# commit revert
Example:
To apply and view the configuration changes:
(Instant AP)(config)# rf dot11a-radio-profile
(Instant AP)(RF dot11a Radio Profile)# beacon-interval 200
(Instant AP)(RF dot11a Radio Profile)# no legacy-mode
(Instant AP)(RF dot11a Radio Profile)# dot11h
(Instant AP)(RF dot11a Radio Profile)# interference-immunity 3
(Instant AP)(RF dot11a Radio Profile)# csa-count 2
(Instant AP)(RF dot11a Radio Profile)# spectrum-monitor
(Instant AP)(RF dot11a Radio Profile)# end
21 | Setting up a W-IAPDell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide
Using Sequence-Sensitive Commands
The Instant CLI does not support positioning or precedence of sequence-sensitive commands. Therefore, it is
recommended that you remove the existing configuration before adding or modifying the configuration
details for sequence-sensitive commands. You can either delete an existing profile or remove a specific
configuration by using the no… commands.
The following table lists the sequence-sensitive commands and the corresponding no commands to remove
the configuration:
Table 8: Sequence-Sensitive Commands
Sequence-Sensitive CommandCorresponding no command
Starting from Instant 6.5.0.0-4.3.0.0, the Banner and Loginsession Configuration feature is introduced in the
W-IAP, wherein the text banner can be displayed at the login prompt when users are on a management (Telnet
or SSH) session of the CLI, and the management session can remain active even when there is no user activity
involved.
The banner command defines a text banner to be displayed at the login prompt of a CLI. Instant supports up
to 16 lines text, and each line accepts a maximum of 255 characters including spaces.
To configure a banner:
(Instant AP)(config)# banner motd <motd_text>
Example of a text banner configuration:
(Instant AP)(config)# banner motd "######welcome to login instant###########"
(Instant AP)(config)# banner motd "####please start to input admin and password#########"
(Instant AP)(config)# banner motd "###Don't leak the password###"
(Instant AP)(config)# end
(Instant AP)# commit apply
To display the banner:
(Instant AP)# show banner
Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User GuideSetting up a W-IAP | 22
The loginsession command configures the management session (Telnet or SSH) to remain active without any
user activity.
To define a timeout interval:
(Instant AP) (config) #loginsession timeout <val>
<val> can be any number of minutes from 5 to 60, or any number of seconds from 1 to 3600. You can also
specify a timeout value of 0 to disable CLI session timeouts. The users must re-login to the W-IAP after the
session times out. The session does not time out when the value is set to 0.
23 | Setting up a W-IAPDell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide
Chapter 4
Automatic Retrieval of Configuration
This chapter provides the following information:
l Managed Mode Operations on page 24
l Prerequisites on page 24
l Configuring Managed Mode Parameters on page 25
l Verifying the Configuration on page 26
Managed Mode Operations
W-IAPs support managed mode operations to retrieve the configuration file from a server through the File
Transfer Protocol (FTP) or FTP over Secure Sockets Layer (FTPS), and automatically update the W-IAP
configuration.
The server details for retrieving configuration files are stored in the basic configuration of the W-IAPs. The basic
configuration of a W-IAP includes settings specific to a W-IAP, for example, host name, static IP, and radio
configuration settings. When a W-IAP boots up, it performs a GET operation to retrieve the configuration (.cfg)
file from the associated server using the specified download method.
After the initial configuration is applied to the W-IAPs, the configuration can bechanged at any point. You can
configure a polling mechanism to fetch the latest configuration by using an FTP or FTPS client periodically. If
the remote configuration is different from the one running on the W-IAP and if a difference in the
configuration file is detected by the W-IAP, the new configuration is applied. At any given time, W-IAPs can
fetch only one configuration file, which may include the configuration details specific to a W-IAP. For
configuring polling mechanism and downloading configuration files, the users are required to provide
credentials (username and password). However, if automatic mode is enabled, the user credentials required to
fetch the configuration file areautomatically generated. To enable automatic configuration of the W-IAPs,
configure the managed mode command parameters.
Prerequisites
Perform the following checks before configuring the managed mode command parameters:
l Ensure that the W-IAP is running Instant 6.2.1.0-3.4 or later versions.
l When the W-IAPs are in the managed mode, ensure that the W-IAPs are not managed by W-AirWave.
Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User GuideAutomatic Retrieval of Configuration | 24
Configuring Managed Mode Parameters
To enable the automatic configuration, perform the steps described in the following table:
Table 9: Managed Mode Commands
StepsCommand
1. Start a CLI session to configure the
managed-mode profile for automatic
configuration.
2. Enable automatic configuration
Or
Specify the user credentials.
3. Specify the configuration file.
4. Specify the configuration file
download method.
5. Specify the name of the server or the
IP address of the server from which
the configuration file must be
downloaded.
To verify if the automatic configuration functions, perform the following checks:
1. Verify the status of configuration by running the following commands at the command prompt:
(Instant AP)# show managed-mode config
(Instant AP)# show managed-mode status
2. Verify the status of download by running the following command at the command prompt:
(Instant AP)# show managed-mode logs
Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User GuideAutomatic Retrieval of Configuration | 26
If the configuration settings retrieved in the configuration file are incomplete, W-IAPs reboot with the earlier
configuration.
27 | Automatic Retrieval of ConfigurationDell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide
This chapter describes the following Instant UI elements:
l Login Screen on page 28
l Main Window on page 29
Login Screen
The Instant login page allows you to perform the following tasks:
l View Instant Network Connectivity summary
l View the Instant UI in a specific language
l Log in to the Instant UI
Viewing Connectivity Summary
Chapter 5
Instant User Interface
The login page also displays the connectivity status to the Instant network. The users can view a summary that
indicates the status of the Internet availability, uplink, cellular modem and signal strength, VPN, and W-AirWave
configuration details before logging in to the Instant UI.
The following figure shows the information displayed in the connectivity summary:
Figure 3 Connectivity Summary
Language
The Language drop-down list contains the available languages and allows users to select their preferred
language before logging in to the Instant UI. A default language is selected based on the language preferences
in the client desktop operating system or browser. If Instant cannot detect the language, then English is used
as the default language.
You can also select the required language option from the Languages drop-down list located on the Instant
main window.
Logging into the Instant UI
To log in to the Instant UI, enter the following credentials:
l Username—admin
l Password—admin
The Instant UI main window is displayed.
Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User GuideInstant User Interface | 28
Main Window
On logging in to Instant, the Instant UI Main Window is displayed. The following figure shows the Instant main
window:
Figure 4 Instant Main Window
The main window consists of the following elements:
l Banner
l Search Text Box
l Tabs
l Links
l Views
Banner
The banner is a horizontal rectangle that appears on the Instant main window. It displays the company name,
logo, and the VC's name.
Search Text Box
Administrators can search for a W-IAP, client, or a network in the Search text box. When you type a search
text, the search function suggests matching keywords and allows you to automatically complete the search
text entry.
Tabs
The Instant main window consists of the following tabs:
n Network Tab—Provides information about the network profiles configured in the Instant network.
n Access Points Tab—Provides information about the W-IAPs configured in the Instant network.
n Clients Tab—Provides information about the clients in the Instant network.
Each tab appears in a compressed view by default. The number of networks, W-IAPs, or clients in the network
precedes the coresponding tab names. The individual tabs can be expanded or collapsed by clicking the tabs.
The list items in each tab can be sorted by clicking the triangle icon next to the heading labels.
29 | In stant User InterfaceDell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide
Network Tab
This tab displays a list of Wi-Fi networks that areconfigured in the Instant network. The network names are
displayed as links. The expanded view displays the following information about each WLAN SSID:
l Name—Name of the network.
l Clients—Number of clients that are connected to the network.
l Type—Type of network such as Employee, Guest, or Voice.
l Band—Band in which the network is broadcast: 2.4 GHz band, 5 GHz band, or both.
l Authentication Method—Authentication method required to connect to the network.
l Key Management—Authentication key type.
l IP Assignment—Source of IP address for the client.
l Zone—W-IAP zone configured on the SSID.
To add a wireless network profile, click the New link on the Network tab. To edit, click the edit link that is
displayed on clicking the network name in the Network tab. To delete a network, click the x link.
For more information on the procedure to add or modify a wireless network, see Wireless Network Profiles on
page77.
Access Points Tab
If the Auto-Join Mode feature is enabled, a list of enabled and active W-IAPs in the Instant network is displayed
on the Access Points tab. The W-IAP names are displayed as links. If the Auto Join Mode feature is disabled,
the New link is displayed. Click this link to add a new W-IAP to the network. If a W-IAP is configured and not
active, its MAC Address is displayed in red.
The expanded view of the Access Points tab displays the following information about each W-IAP:
l Name—Name of the W-IAP. If the W-IAP functions as a master W-IAP in the network, the asterisk sign "*" is
displayed next to the W-IAP.
l IP Address—IP address of the W-IAP.
l Mode—Mode of the W-IAP.
n Access—In this mode, the W-IAP serves clients and scans the home channel for spectrum analysis while
monitoring channels for rogue W-IAPs in the background.
n Monitor—In this mode, the W-IAP acts as a dedicated Air Monitor (AM), scanning all channels for rogue
W-IAPs and clients.
l Spectrum—When enabled, the W-IAP functions as a dedicated full-spectrum RF monitor, scanning all
channels to detect interference from neighboring W-IAPs or non-Wi-Fi devices such as microwaves and
cordless phones. When Spectrum is enabled, the W-IAP does not provide access services to clients.
l Clients—Number of clients that are currently associated to the W-IAP.
l Type—Model number of the W-IAP.
l Zone—W-IAP zone.
l Serial number—Serial number of the device.
l Service Tag—A unique number given to Dell W-IAPs.
l Channel—Channel on which the W-IAP is currently broadcast.
l Power (dB)—Maximum transmission Effective Isotropic Radiated Power (EIRP) of the radio.
l Utilization (%)—Percentage of time that the channel is utilized.
l Noise (dBm)—Noise floor of the channel.
An edit link is displayed on clicking the W-IAP name. For details on editing W-IAP settings, see Customizing W-
IAP Settings on page 63.
Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User GuideInstant User Interface | 30
Loading...
+ 405 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.