Dell W-IAP3WN User Manual

Dell PowerConnect W-Series

Instant Access Point

6.2.0.0-3.2.0.0

User Guide

January 2013 | 0511129-03 Dell PowerConnect W-Series Instant Access Poi nt 6.2.0.0-3.2.0.0 | User Guide

Copyright

Networks®, Aruba Wireless Networks®, the registered Aruba the Mobile Edge Company logo,

and Aruba Mobility Management System®. Dell™, the DELL™ logo, and PowerConnect™ are

trademarks of Dell Inc.

Originated in the USA. All other trademarks are the property of their respective owners.

Open Source Code

Certain Aruba products include Open Source software code developed by third parties, including

software code subject to the GNU General Public License (GPL), GNU Lesser General Public

License (LGPL), or other Open Source Licenses. The Open Source code used can be found at this

site:

http://www.arubanetworks.com/open_source

Legal Notice

The use of Aruba Networks, Inc. switching platforms and software, by all individuals or

corporations, to terminate other vendors’ VPN client devices constitutes complete acceptance of

liability by that individual or corporation for this action and indemnifies, in full, Aruba Networks,

Inc. from any and all legal actions that might be taken against it with respect to infringement of

copyright on behalf of those vendors.

3 | Contents Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide

About This Guide

Dell PowerConnect W-Instant Access Point Overview

Thank you for choosing Dell PowerConnect W-Instant Access Point6.2.0.0-3.2.0.0. Dell

PowerConnect W-Instant Access Point virtualizes Dell PowerConnect W-Series

MobilityController capabilities on 802.11n access points (APs), creating a feature-rich enterprise-

grade wireless LAN (WLAN) that combines affordability and configuration simplicity.

Dell W-Instant is a simple, easy to deploy turn-key WLAN solution consisting of one or more

access points. An Ethernet port with routable connectivity to the Internet or a self-enclosed

network, is used to deploy an Instant Wireless Network. An Instant Access Point (W-IAP) can be

installed at a single site or deployed across multiple geographically-dispersed locations. Designed

specifically for easy deployment, and proactive management of networks, Instant is ideal for small

customers or remote locations without any on-site IT administrator.

DellW-Instant consists of an Instant Access Point (W-IAP) and a Virtual Controller (VC). The

Virtual Controller resides within one of the access points. In an Dell W-Instant deployment, only

the first W-IAP needs to be configured. After the first W-IAP is deployed, the subsequent W-IAPs

inherit all the required information from the Virtual Controller.

Supported Devices

The following is a list of Instant devices supported by Dell:

l W-IAP92

l W-IAP93

l W-IAP104

l W-IAP105

l W-IAP134

l W-IAP135

l W-IAP175P/175AC

l W-IAP3WN/3WNP

l W-IAP108

l W-IAP109

NOTE: All APs support an unlimited number of W-IAPs, however W-IAP92 and W-IAP93

support up to 16 W-IAPs only.

Objective

This user guide describes the various features supported by DellW-Instant and provides detailed

instructions for setting up and configuring an DellW-Instant network.

16 | About ThisGuide Dell PowerConnec t W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide

Intended Audience

This guide is intended for customers who configure and use DellW-Instant.

Conventions

The following conventions are used throughout this manual to emphasize important concepts:

Type Style Description

Italics

This style is used to emphasize important

terms and provide cross-references to

other books.

Screen input and output

This style is used to illustrate:

l Screen output

l On screen system prompt

l Filenames, software devices, and

specific commands

Bold

This style is used to emphasize Instant UI

elements. For example, name of a text box

or the name of a drop-down list.

Table 1 -

Conventions

The following informational icons are used throughout this guide:

NOTE: Indicates helpful suggestions, pertinent information, and important things to

remember.

CAUTION: Indicates a risk of damage to your hardware or loss of data.

WARNING: Indicates a risk of personal injury or death.

Contacting Support

Web Site Support

Main Website dell.com

Support Website dell.com/support

Documentation Website dell.com/support/manuals

Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 17 | InitialConfiguration

Chapter 2

Initial Configuration

This section provides information required to setup DellW-Instant and access the Dell W-Series

Instant User Interface.

Initial Setup

This section provides a pre-installation checklist and describes the initial procedures required to

set up DellW-Instant.

Pre-Installation Checklist

Before installing the Instant Access Point (W-IAP), make sure that you have the following:

l Ethernet cable of required length to connect the W-IAP to the home router.

l One of the following power sources:

n IEEE 802.3af/at-compliant Power over Ethernet (PoE) source. The PoE source can be any

power source equipment (PSE) switch or a midspan PSE device.

n Dell power adapter kit (this kit is sold separately).

NOTE: PoE is a method of delivering power on the same physical Ethernet wire that is used

for data communication. Power for devices is provided in one of the following two ways:

Endspan— The switch that the W-IAP is connected to can provide power.

Midspan— A device can sit between the switch and the W-IAP.

The choice of endspan or midspan depends on the capabilities of the switch to which the

IAP is connected. Typically if a switch is in place and does not support PoE, midspan power

injectors are used.

NOTE: A DNS server functions as a phonebook for the internet and internet users. It converts

human readable computer hostnames into IP addresses and vice-versa. A DNS server stores

several records for a domain name, such as an address 'A' record, name server (NS), and

mail exchanger (MX) records. The Address 'A' record is the most important record that is

stored in a DNS server because it provides the required IP address for a network peripheral

or element.

The Dynamic Host Configuration Protocol (DHCP) is an auto-configuration protocol used on

IP networks. Computers or any network peripherals that are connected to IP networks must

be configured before they can communicate with other computers on the network. DHCP

allows a computer to be configured automatically, eliminating the need for a network

administrator. DHCP also provides a central database to keep a track of computers

connected to the network. This database helps in preventing any two computers from being

configured with the same IP address.

To complete the initial setup, perform the following tasks in the given order:

1. "Connecting aW-IAP" on page 18

18 | Initial Configuration Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide

2. "Assigning an IP Address to the W-IAP" on page 18

3. "Connecting to a Provisioning Wi-Fi Network" on page 18

4. "Log in to the Dell W-Series Instant UI" on page 21

5. "Specifying a Country Code " on page 21 — Skip this step if you are installing the W-IAP in

the United States or Japan.

Connecting aW-IAP

Based on the type of the power source that is used, perform one of the following steps to connect

the W-IAP to the power source:

l PoE switch— Connect the ENET 0 port of the W-IAP to the appropriate port on the PoE

switch.

l PoE midspan— Connect the ENET 0 port of W-IAP to the appropriate port on the PoE

midspan.

l AC to DC power adapter— Connect the 12V DC power jack socket to the AC to DC power

adapter.

Assigning an IP Address to the W-IAP

The W-IAP needs an IP address for network connectivity. When you connect the W-IAP to a

network, the W-IAP receives an IP address from a DHCP server.

To get an IP address for aW-IAP:

1. Connect the ENET 0 port of W-IAP to a switch or router using an Ethernet cable. Ensure that

the DHCP service is enabled on the network.

2. Connect the W-IAP to a power source. The W-IAP receives an IP address provided by the

switch or router.

NOTE: If there is no DHCP service on the network, the W-IAP can be assigned a static IP

address. If that doesn't happen, the W-IAP will get auto-assigned an IP within the 169.254

subnet.

Connecting to a Provisioning Wi-Fi Network

To connect to a provisioning Wi-Fi network:

1. Connect a wireless enabled client to a provisioning Wi-Fi network. The provisioning network

is called instant.

2. In the Microsoft Windows operating system, click the wireless network connection icon in the

system tray.

The Wireless Network Connection window appears.

3. Click on the instant network and click Connect.

4. In the Mac OS, click the AirPort icon. A list of available Wi-Fi networks is displayed.

5. Click on the instant network.

NOTE: Instant SSIDs are only broadcasted in 2.4 GHz.

NOTE: While connecting to the provisioning Wi-Fi network, ensure that the client is not

connected to any wired network.

Figure 1 - Connecting to a provisioning Wi-Fi Network — Microsoft Windows

Figure 2 - Connecting to a provisioning Wi-Fi Network — Mac OS

Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 19 | InitialConfiguration

20 | Initial Configuration Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide

Disabling the Provisioning Wi-Fi Network

The provisioning network is enabled by default. Instant provides the option to disable the

provisioning network in APBoot through console. Use this option when you do not want the

default SSID instant to appear in your network.

To disable the provisioning network:

1. Connect a terminal or PC/workstation running a terminal emulation program to the Console

port on the W-IAP.

2. Configure the terminal or terminal emulation program to use the following communication

settings.

3. Power on the W-IAP. You see an autoboot countdown prompt that allows you to interrupt

the normal startup process and access APBoot.

4. Click Enter before the timer expires. The W-IAP goes into apboot mode through console.

Baud Rate Data Bits Parity Stop Bits Flow Control

9600 8 None 1 None

Table 2 - Terminal Communication Settings

5. In the apboot mode, use the following commands to disable the provisioning network:

n apboot> factory_reset

n apboot> setenv disable_prov_ssid 1

n apboot> saveenv

n apboot> reset

Assigning a Static IP

To assign a static IP to aW-IAP using APBoot:

1. Connect a terminal or PC/workstation running a terminal emulation program to the Console

port on the W-IAP.

2. Configure the terminal or terminal emulation program to use the following communication

settings.

3. Power on the W-IAP. You see an autoboot countdown prompt that allows you to interrupt

the normal startup process and access APBoot.

4. Click Enter before the timer expires. The W-IAP goes into apboot mode through console.

5. In the apboot mode, use the following commands to assign a static IP to aW-IAP.

Hit <Enter> to stop autoboot: 0

apboot>

apboot> setenv ipaddr 10.1.1.1

apboot> setenv netmask 255.255.255.0

apboot> setenv gatewayip 10.1.1.254

apboot> save

Saving Environment to Flash...

Un-Protected 1 sectors

.done

Erased 1 sectors

Writing

Use the printenv command to view the configuration.

apboot> printenv

Log in to the Dell W-Series Instant UI

Launch a web browser and enter instant.dell-pcw.com. In the login screen, enter the following

credentials:

n Username— admin

n Password— admin

Figure 3 - Dell W-Series Instant UI Login Screen

When you use a provisioning Wi-Fi network to connect to the Internet, all browser requests are

directed to the Dell W-Series Instant UI. For example, if you enter www.example.com in the

address field, you are directed to the Instant user interface. You can change the default login

credentials after you log in for the first time.

Specifying a Country Code

NOTE: Skip this section if you are installing the W-IAP in the United States or Japan.

DellW-Instant Access Points are shipped in three variants:

n W-IAP-US (United States)

n W-IAP-JP (Japan)

n W-IAP-ROW (Rest of World)

After you successfully log in to the Dell W-Series Instant User Interface, the Country Code

window appears if W-IAP-ROW APs are installed. Select the country code for the W-IAP-ROW

APs installed.

For the complete list of the countries that are supported in the W-IAP-ROW variant type, see

"Regulatory Domain" on page 271.

Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 21 | InitialConfiguration

22 | Initial Configuration Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide

Figure 4 - Specifying a Country Code

W-IAP Cluster

W-IAPs in the same VLAN automatically find each other and form a single functioning network

managed by a Virtual Controller.

CAUTION: Moving a W-IAP from one cluster to another requires a factory reset of the W-IAP

that is being moved. See "Managing W-IAPs" on page 71 for more information

Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 23 | DellW-Instant User Interface

Chapter 3

DellW-Instant User Interface

The Dell W-Series Instant User Interface (UI) provides a standard web based interface that allows

you to configure and monitor a Wi-Fi network. It is accessible through a standard web browser

from a remote management console or workstation. JavaScript must be enabled on the web

browser to view the Dell W-Series Instant UI.

Supported browsers are:

l Internet Explorer 8.0.7601.17514 and 9.0.11

l Safari 6.0.2

l Google Chrome 23.0.1271.95 m

l Mozilla Firefox 17.0

NOTE: The Dell W-Series Instant UI logs out automatically if the window is inactive for

fifteen minutes.

Understanding the Dell W-Series Instant UI Layout

The Dell W-Series Instant UI consists of the following elements:

l "Banner" on page 24

l "Search" on page 24

l "Tabs" on page 24

l "Links" on page 26

l "Views" on page 41

These elements are explained in the following sections.

Figure 5 - Dell W-Series Instant UI Interface

24 | DellW-Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide

Banner

The banner is a horizontal grey rectangle that appears at the top left corner of the Dell W-Series

Instant UI. It displays the company name, logo, and Virtual Controller's name.

Search

Administrators can search aW-IAP, client, or a network using a simple Search window in the Dell

W-Series Instant UI. This Search option helps fill in the blank when you type in a word and

suggested matches are automatically displayed in a dynamic list. The list is more relevant and

detailed when more number of keywords are typed in. This is similar to the auto-complete feature

of Google Search.

Tabs

The Dell W-Series Instant UI consists of the following tabs:

l Networks— Provides information about the Wi-Fi networks in the DellW-Instant network.

l Access Points— Provides information about the W-IAPs in the W-Instant network.

l Clients— Provides information about the clients in the W-Instant network.

Each tab appears in a compressed view by default. A number, specifying the number of networks,

W-IAPs, or clients in the network precedes the tab names. Click on the tabs to see the expanded

view and click again to compress the expanded view. Items in each tab are associated with a

triangle icon. Click on the triangle icon to sort the data in increasing or decreasing order. Each tab

is explained in the following sections.

Networks Tab

This tab displays a list of Wi-Fi networks that are configured in the DellW-Instant network. The

network names appear as links. The expanded view displays the following information about each

Wi-Fi network:

l Name (SSID)— Name of the network.

l Clients— Number of clients that are connected to the network.

l Type— Network type: Employee, Guest, or Voice.

l Band— Band in which the network is broadcast: 2.4 GHz band, 5 GHz band, or both.

l Authentication Method— Authentication method required to connect to the network.

l Key Management— Authentication key type.

l IP Assignment

—

Source of IP address for the client.

To add a Wi-Fi network, click the New link in the Networks tab. For more information about a

wireless network and the procedure to add a wireless network, see "Wireless Network" on page 43.

An edit link appears on clicking the network name in the Networks tab. For information about

editing a wireless network, see "Network Types" on page 43. To delete a network, click on the link

x located next to the edit link.

Figure 6 - Networks Tab— Compressed View and Expanded View

Access Points Tab

If the Auto Join Mode feature is enabled, a list of enabled and active W-IAPs in the DellW-

Instant network is displayed in the Access Points tab. The W-IAP names are displayed as links.

If the Auto Join Mode feature is disabled, a New link appears. Click on this link to add a new W-

IAP to the network. If aW-IAP is configured and not active, its MAC Address is displayed in red.

The expanded view displays the following information about each W-IAP:

l Name— Name of the access point.

l IP Address— IP address of the W-IAP.

l Mode— Mode of the W-IAP.

n Access— In this mode, the AP serves clients and scans the home channel for spectrum

analysis while monitoring channels for rogue APs in the background

n Monitor — In this mode, the AP acts as a dedicated Air Monitor (AM), scanning all

channels for rogue APs and Clients.

l Spectrum— When enabled, the AP functions as a dedicated full-spectrum RF monitor,

scanning all channels to detect interference, whether from neighboring APs or from non Wi-Fi

devices such as microwaves and cordless phones. When Spectrum is enabled, the AP does not

provide access services to clients.

l Clients— Number of clients that are connected to the W-IAP.

l Type— Model number of the W-IAP.

l Channel— Channel the W-IAP is currently broadcasting on.

l Power (dB)— Maximum transmit EIRP of the radio.

l Utilization (%)— Percentage of time that the channel is utilized.

l Noise (dBm)— Noise floor of the channel.

An edit link appears on clicking the W-IAP name. For details about editing W-IAP settings see

"Editing W-IAP Settings" on page 75.

Figure 7 - Access Points Tab— Compressed View and Expanded View

Clients Tab

This tab displays a list of clients that are connected to the DellW-Instant network. The client

names appear as links. The expanded view displays the following information about each client:

l Name— User name of the client or guest users if available.

l IP Address— IP address of the client.

l MAC Address— MAC address of the client.

Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 25 | DellW-Instant User Interface

26 | DellW-Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide

l OS— Operating system that runs on the client.

l Network— The network to which the client is connected.

l Access Point— W-IAP to which the client is connected.

l Channel — The client operating channel.

l Type— Wi-Fi type of the client: A, G, AN, or GN.

l Role— Role assigned to the client.

l Signal— Signal strength of the client, as detected by the AP.

l Speed (mbps)— Current PHY rate.

Figure 8 - Client Tab— Compressed View and Expanded View

Links

The following links allow you to configure the features and settings for the W-Instant network.

Each of these links are explained in the subsequent sections.

l "New Version Available" on page 27

l "Settings" on page 27

l "RF" on page 29

l "PEF" on page 30

l "WIP" on page 30

l "VPN" on page 31

l "Wired" on page 31

l "Maintenance" on page 32

l "Support" on page 32

l "Help" on page 32

l "Logout" on page 33

l "Monitoring" on page 33

l "Spectrum" on page 36

l "Alerts" on page 37

l "IDS" on page 39

l "Configuration" on page 39

l "AirGroup" on page 40

l "Language" on page 40

l "Dell PowerConnect W-AirWave Setup" on page 40

l "Pause/Resume" on page 41

New Version Available

This link appears in the top right corner of Dell W-Series Instant UI only if a new image version is

available on the image server and Dell PowerConnect W-AirWave is not configured. For more

information about the New version available link and its functions, see "Firmware Image Server in

Cloud Network" on page 86.

Settings

This link displays the Settings window. The Settings consists of the following tabs:

Figure 9 - Settings Link - Default View

NOTE: Use the Show/Hide Advanced option on the bottom-left of the Settings window to

view or hide the advanced options.

l General— View or edit the Name, IP address, NTP Server, and DHCP server settings of the

Virtual Controller.

n For information about Virtual Controller settings and NTP Server, see "Virtual Controller"

on page 109 and "Time Management" on page 107.

n For information about Auto join mode, Terminal Access, LED display, TFTP Dump

Server, and Deny inter user bridging see "Managing W-IAPs" on page 71.

l Admin— View or edit the admin credentials for access to the Virtual Controller Management

User Interface. See "802.1X Authentication" on page 111 for more information. You can also

configure Dell PowerConnect W-AirWave in this tab. See "Configuring Dell PowerConnect

W-AirWave" on page 207 for more information.

l RTLS— View or edit the Real-Time Location Server (RTLS) settings.

n Dell RTLS— Enable this to integrate DellW-Instant with Dell PowerConnect W-

AirWave Management platform, Ekahau Real-Time Location Server and Nearbuy Real

Time Location Server. Specify the IP address and port number of the server (to which

Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 27 | DellW-Instant User Interface

28 | DellW-Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide

location reports are sent), a shared secret key, and the frequency at which packets are sent

to the server.

l Aeroscout— Enable this option to send the RFID tag information to an AeroScout RTLS.

Specify the IP address and port number of the AeroScout server, to which location reports

should be sent.

l Include unassociated stations— Enable this option to send mobile unit reports to the

Aeroscout and the Dell RTLS servers for the client stations that are not associated to any W-

IAP (unassociated stations).

Figure 10 - RTLS

l SNMP— View or specify SNMP agent settings. See "SNMP" on page 183 for more

information.

l OpenDNS— Instant supports OpenDNS business solutions which requires an OpenDNS

(www.opendns.com) account comprising a username and a password.

These credentials are used by W-Instant to access OpenDNS to provide enterprise-level

content filtering.

NOTE: For OpenDNS to work, enable Content Filtering feature while creating a new network.

Click New in the Networks tab and then select Enabled from the Content filtering drop-down

list.

NOTE: If the network firewall setup already has openDNS integration, do not configure it on

the W-IAP.

l Uplink— View or configure uplink settings. See "Uplink Configuration" on page 195 for more

information.

l Enterprise Domains— This tab indicates (displays) the DNS domain names that are valid in

the enterprise network. The domain names are used for determining the procedure for routing

Content Filtering is enabled for a network, the domain names that do not match the names

in the list are sent to OpenDNS server.

l Walled Garden— The Walled Garden directs the user’s navigation within particular areas to

allow access to a selection of websites and/or prevent access to other websites. For more

information, see "Walled Garden Access" on page 134.

l Syslog— View or specify a Syslog Server for sending syslog messages to the external servers. See

"Syslog Server" on page 73 for more information.

l L3 Mobility— View or configure the Layer-3 mobility settings. See "Layer-3 Mobility" on page

91 for more information.

l AirGroup — View or configure the AirGroup settings. See "AirGroup" on page 215 for more

information.

l WISPr — View or configure the WISPr settings. See "WISPr Authentication" on page 132 for

more information.

RF

This link displays the configuration parameters Adaptive Radio Management (ARM) and Radio

features.

Figure 11 - RF

ARM — View or assign channel and power settings for all the W-IAPs in the network. For

information about ARM (Adaptive Radio Management), see "ARM Features" on page 169.

Radio — View or configure radio settings for 2.4 GHz and the 5 GHz radio profiles. For

information about Radio, see "Configuring Radio Profiles in Instant" on page 173.

Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 29 | DellW-Instant User Interface

30 | DellW-Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide

PEF

This link displays the following features.

Figure 12 - PEF

Authentication Servers— Use this window to configure an external RADIUS server for a wireless

network. See "802.1X Authentication" on page 111 for more information.

Users for Internal Server— Use this window to populate the system’s internal authentication

server with users. This list is used by networks for which per-user authorization is specified using

the Virtual Controller’s internal authentication server. For more information about users, see "User

Database" on page 269.

Roles— This window displays all the roles defined for all the Networks. The Access Rules part

indicates the permissions for each role. For more information, see "User Roles" on page 145.

Blacklisting— Use this window to manually blacklist clients. See "Client Blacklisting" on page 255

for more information.

Policy Enforcement Firewell (PEF) Settings— Use this window to enable/disable Application

Layer Gateway (ALG) supporting address and port translation for various protocols. See "Policy

Enforcement Firewall" on page 251 for more information.

WIP

Wireless Intrusion Protection (WIP) offers a wide selection of intrusion detection and protection

features to protect the network against wireless threats. Use this window to specify desired levels

of threat detection. See "Rogue AP Detection and Classification" on page 177 for more

information.