Dell W-Series 207 Instant 6.5.1.0-4.3.1.0 User Guide
Dell W-Series 207 Manual
View all Dell W-Series 207 manuals
Add to My Manuals
Save this manual to your list of manuals |
Dell W-Series 207 manual content summary:
- Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 1
Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 2
™ logo, and PowerConnect™ are trademarks of Dell Inc. All rights reserved. Specifications in this manual are subject to change without notice. Originated in the USA. All other trademarks are the property code. Revision 01 | December 2016 Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 3
Configuring Zone Settings on a W-IAP Specifying a Method for Obtaining IP Address Configuring External Antenna Configuring Radio Profiles for a W-IAP Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Contents 9 9 9 9 10 11 11 14 16 16 17 19 20 24 24 24 25 26 28 28 29 56 56 62 63 63 63 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 4
VLAN Monitoring and Detection on Upstream Devices IPv6 Support IPv6 Notation Enabling IPv6 Support for W-IAP Configuration Firewall Support for IPv6 Debugging Commands Wireless Network Profiles 109 109 110 110 111 113 113 114 4| Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 5
Management Managing W-IAP Users Supported Authentication Methods Supported EAP Authentication Frameworks Configuring IP Assignment Configuring Time-Based Services Time Range Profiles Configuring a Time Range Profile Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide 120 122 125 131 132 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 6
Traffic Management Media Classification for Voice and Video Calls Enabling Enhanced Voice Call Tracking Services Configuring AirGroup Configuring a W-IAP for RTLS Support Configuring a W-IAP for Analytics and Location Engine Support Managing BLE Beacons Clarity Live 218 219 221 221 222 223 224 224 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 7
Restoring W-IAP Configuration Data Converting a W-IAP to a Remote AP and Campus AP Resetting a Remote AP or Campus AP to a W-IAP Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide 293 293 295 298 304 304 305 305 306 307 307 318 318 323 328 328 328 329 334 335 335 336 336 338 338 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 8
Sample Configuration ClearPass Guest Setup Configuring ClearPass Guest Verifying ClearPass Guest Setup Troubleshooting IAP-VPN Deployment Scenarios Scenario 1-IPsec: Single Datacenter Deployment with No 394 395 399 403 408 411 416 431 8| Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 9
Chapter 1 About this Guide This User Guide describes the features supported by Dell Networking W-Series Instant Access Point (W-IAP) and provides detailed instructions for setting up and configuring the Instant network. Intended Audience This guide is intended for administrators who configure and - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 10
informational icons are used throughout this guide: Indicates helpful suggestions, pertinent information, Support Information Support Main Website Contact Information Support Website Documentation Website dell.com dell.com/contactdell dell.com/support dell.com/support/manuals 10 | About this Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 11
network performance. Supported W-IAP Platforms The following table provides a list of W-IAP platforms that support Instant software: Table 3: Supported W-IAP Platforms W-IAP214/215 Instant 6.4.2.0-4.1.1.0 or later Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide About Instant | 11 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 12
l US (United States) l JP (Japan) l RW The following table provides the variants supported for each W-IAP platform: Table 4: Supported W-IAP Variants W-IAP Model (Reg Domain) W-IAP###US (US only) W-IAP###JP ( Yes 12 | About Instant Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 13
No Yes Yes Yes No Yes Yes For information on regulatory domains and the list of countries supported by the W-IAP###-RW type, see the Specifying Country Code section in Logging in to the for 15 minutes. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide About Instant | 13 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 14
and debugging by organizing the logs into modules which are later used for debugging. Support for RFC5997 Starting from Instant 6.5.1.0-4.3.1.0, you can configure the RFC5997 feature on the WIAP W-IAP devices. 14 | About Instant Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 15
MDI/MDX Ethernet port. This port supports wirednetwork connectivity, in addition to Power port ENET0) for wired network connectivity. This port supports IEEE 802.3af Power over Ethernet (PoE), as PoE midspan injector or network infrastructure that supports PoE. The 207 Series access points have - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 16
to the AC to DC power adapter. W-IAP155P supports PSE for 802.3at-powered device (class 0-4) an IP address for a W-IAP: 1. Ensure that the DHCP service is enabled on the network. 2. Connect the Enet0 port of the switch or router. If there is no DHCP service on the network, the W-IAP can be assigned a - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 17
maintaining devices and allows you to provision new devices in your network automatically, without manual intervention. Following are the zero-touch provisioning methods for Instant. In order for is reachable. 17 | Setting up a W-IAP Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 18
through console. 5. In the apboot mode, execute the following commands to disable the provisioning network: apboot> factory_reset apboot> setenv disable_prov_ssid 1 Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Setting up a W-IAP | 18 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 19
Deployment Guide. supported country code is not in the list, contact your Dell Support team to know if the required country code is supported and obtain the software that supports the required country code. 19 | Setting up a W-IAP Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 20
Country Code drop-down list displays only the supported country codes. If the W-IAP cluster consists of multiple W-IAP platforms, the country codes supported by the master W-IAP is displayed for all terminal Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Setting up a W-IAP | 20 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 21
cluster. The changes configured in a CLI session are saved in the CLI context. The CLI does not support the configuration data exceeding the 4K buffer size in a CLI session. Therefore, it is recommended that you 21 | Setting up a W-IAP Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 22
banner command defines a text banner to be displayed at the login prompt of a CLI. Instant supports up to 16 lines text, and each line accepts a maximum of 255 characters including spaces. Instant AP)# show banner Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Setting up a W-IAP | 22 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 23
the session times out. The session does not time out when the value is set to 0. 23 | Setting up a W-IAP Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 24
page 25 l Verifying the Configuration on page 26 Managed Mode Operations W-IAPs support managed mode operations to retrieve the configuration file from a server through the managed by W-AirWave. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Automatic Retrieval of Configuration | 24 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 25
from which the configuration file must be downloaded. (Instant AP)(managed-mode-profile)# server 25 | Automatic Retrieval of Configuration Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 26
2. Verify the status of download by running the following command at the command prompt: (Instant AP)# show managed-mode logs Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Automatic Retrieval of Configuration | 26 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 27
If the configuration settings retrieved in the configuration file are incomplete, W-IAPs reboot with the earlier configuration. 27 | Automatic Retrieval of Configuration Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 28
in to the Instant UI, enter the following credentials: l Username-admin l Password-admin The Instant UI main window is displayed. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Instant User Interface | 28 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 29
in each tab can be sorted by clicking the triangle icon next to the heading labels. 29 | Instant User Interface Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 30
such as microwaves and cordless phones. When Spectrum is enabled, the W-IAP does not provide access services to clients. l Clients-Number of clients that are currently associated to the W-IAP. l Type- 63. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Instant User Interface | 30 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 31
information on the New version available link and its functions, see Upgrading a W-IAP on page 349. 31 | Instant User Interface Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 32
See Configuring HTTP Proxy on a W-IAP on page 349 for more information. l Time Based Services-Allows you to configure a time profile which can be assigned to the SSID configured on the W-IAP. on page 139. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Instant User Interface | 32 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 33
of Dell, and copyright information. The About tab also displays the Dell Service Tag for the Dell WIAP. This feature is not supported for some earlier W-IAP models, including W-IAP92/93, W-IAP104/105, : 33 | Instant User Interface Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 34
l VPN l IDS l Wired l Services l DHCP Server l Support VPN The VPN window allows you to define communication settings with a Dell controller or a protection levels. The following figures show the IDS window: Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Instant User Interface | 34 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 35
Figure 6 IDS Window: Intrusion Detection Figure 7 IDS Window: Intrusion Protection For more information on wireless intrusion detection and protection, see Detecting and Classifying Rogue WIAPs on page 328. 35 | Instant User Interface Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 36
Services The Services window allows you to configure services such as AirGroup, Real Time Location System (RTLS), and OpenDNS. The Services Instant. For more information, see Configuring a W-IAP for RTLS Support on page 288. The RTLS tab also allows you to | User Guide Instant User Interface | 36 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 37
9 Services Window: Default View DHCP Server The DHCP Servers window allows you to configure various DHCP modes. The following figure shows the options available in the DHCP Servers window: Figure 10 DHCP Servers Window For more information, see DHCP Configuration on page 207. Support The Support - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 38
a command is executed. l Save-Allows you to save the support command logs as an HTML or text file. For more information on support commands, see Running Debug Commands on page 367. Help The Help the client. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Instant User Interface | 38 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 39
internal guest users. l Internal User Open Slots-Displays the available slots for user configuration as supported by the W-IAP model. Info section in the Network view The Info section in the monitor. 39 | Instant User Interface Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 40
: Figure 11 RF Dashboard in the Monitoring Pane The following table describes the icons available on the RF Dashboard pane: Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Instant User Interface | 40 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 41
is between 25% and 50% of the maximum speed supported by the client. l Red-Data transfer speed is less than 25% of the maximum speed supported by the client. To view the data transfer speed graph column. 41 | Instant User Interface Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 42
and hover the mouse on a data point: Figure 12 RF Trends for Access Point Figure 13 RF Trends for Clients Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Instant User Interface | 42 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 43
Speed graph in the RF Trends pane. For example, the graph shows that the data transfer 43 | Instant User Interface Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 44
for the selected network or W-IAP in the last 15 minutes. Figure 14 Usage Trends Graphs in the Default View Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Instant User Interface | 44 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 45
, the graph shows 22.0 Kbps incoming traffic throughput for the selected network at 12:03 hours. 45 | Instant User Interface Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 46
by the selected W-IAP: l Valid W-IAPs: A W-IAP that is part of the enterprise providing WLAN service. l Interfering W-IAPs: A W-IAP that is seen in the RF environment but is not connected to Virtual Controller Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Instant User Interface | 46 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 47
over the last 15 minutes. l Access Point-The W-IAP name with which the client was associated. 47 | Instant User Interface Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 48
displayed and a graph is drawn with real-time data points for the W-IAPradio. If the W-IAP supports dual-band, you can toggle between 2.4 GHz and 5 GHz links in the Client Match graph area reported to the VC. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Instant User Interface | 48 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 49
, see Spectrum Monitor on page 341. Alerts Alerts are generated when a user encounters problems while accessing or connecting to a network. The alerts that are generated can be categorized Fault History 49 | Instant User Interface Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 50
-Displays the event details. The following figures show the client alerts, active faults, and fault history: Figure 18 Client Alerts Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Instant User Interface | 50 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 51
The W-IAP has encountered an internal error for this client. Contact the Dell customer support team. 100102 Unknown SSID in association request The W-IAP cannot allow this client try to associate again. 51 | Instant User Interface Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 52
Corrective Actions The W-IAP cannot allow this client to associate because it does not support the 802.11 rate requested by this client. Check the configuration on the WIAP credentials and log in again. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Instant User Interface | 52 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 53
client. n Last seen-Displays the time when the foreign client was last detected in the network. 53 | Instant User Interface Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 54
Name-Displays the machine name or host name of the AirGroup servers. l Service- Displays the type of services such as AirPlay or AirPrint. l VLAN-Displays VLAN details of the AirGroup Configuration link. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Instant User Interface | 54 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 55
to monitor. For more information on the graphs and the views, see Monitoring on page 38. 55 | Instant User Interface Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 56
is connected. By default, the W-IAP considers the uplink switch native VLAN value as 1. (Instant AP)(config) # enet-vlan Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Initial Configuration Tasks | 56 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 57
to: l Trace and track security gaps, monitor network usage, and troubleshoot network issues. l Validate certificates. l Map an event on one network to a corresponding event on another. l Maintain accurate time for billing services and similar tasks. To configure an NTP server: (Instant AP)(config) - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 58
can also enable daylight saving time (DST) on W-IAPs if the time zone you selected supports the daylight saving time. When enabled, the DST ensures that the W-IAPs reflect the seasonal AP)(config) # dpi Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Initial Configuration Tasks | 58 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 59
the same as the native VLAN of the W-IAP. VC VLAN, gateway, and subnet mask details. 59 | Initial Configuration Tasks Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 60
mesh in the factory default settings. l The W-IAP108/109 access points support up to 6 SSIDs with Extended SSID disabled and up to 8 SSIDs with Extended SSID enabled. l All wlan ssid-profile Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Initial Configuration Tasks | 60 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 61
. This setting helps in large networks with high client density. (Instant AP)(config) # dynamic-cpu-mgmt 61 | Initial Configuration Tasks Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 62
read-only privilege: (Instant AP)(config)# no hash-mgmt-user read-only (Instant AP)(config)# end (Instant AP)# commit apply Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Initial Configuration Tasks | 62 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 63
zone, all W-IAPs can broadcast this SSID. You can add an W-IAP zone by using the UI or the CLI. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Customizing W-IAP Settings | 63 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 64
from the client that is associated to the slave W-IAP is not affected to this behavior. 64 | Customizing W-IAP Settings Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 65
between the device and the antenna before configuring the antenna gain. To know if your W-IAP device supports external antenna connectors, refer to the Dell Networking W-Series Instant Installation Guide that is shipped along with the W-IAP device. EIRP and Antenna Gain The following formula can be - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 66
Configuring Radio Profiles for a W-IAP You can configure a radio profile on a W-IAP either manually or by using the Adaptive Radio Management (ARM) feature. ARM is enabled on Instant by mode is selected. 66 | Customizing W-IAP Settings Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 67
GHz and 5 GHz bands and set the channel and power manually if desired. The following table describes various configuration modes for In the Spectrum Monitor mode, the W-IAPs do not provide access services to clients. 4. Click OK. In the CLI To configure a Guide Customizing W-IAP Settings | 67 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 68
Privileged EXEC mode, the latest configuration takes precedence. Configuring Uplink VLAN for a W-IAP Instant supports a management VLAN for the uplink traffic on a W-IAP. You can configure an uplink edit. 68 | Customizing W-IAP Settings Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 69
usb-port-disable To view the USB port status: (Instant AP)# show ap-env Antenna Type:External usb-port-disable:1 Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Customizing W-IAP Settings | 69 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 70
the following commands: (Instant AP)# show election statistics (Instant AP)# show summary support Manual Provisioning of Master W-IAP In most cases, the master election process automatically determines . 70 | Customizing W-IAP Settings Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 71
, click the New link. 2. In the New Access Point window, enter the MAC address for the new W-IAP. 3. Click OK. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Customizing W-IAP Settings | 71 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 72
in the Instant UI. However, the master W-IAP details cannot be deleted from the VC database. 72 | Customizing W-IAP Settings Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 73
message: Figure 25 Uplink VLAN Detection To resolve this issue, ensure that there is no mismatch in the VLAN configuration. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide VLAN Configuration | 73 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 74
Support for W-IAP Configuration on page 74 l Firewall Support supports a 128-bit address to allow 2128, or approximately 3.4×1038 addresses while IPv4 supports supported only Support for W-IAP Configuration W-IAPs support IPv6 address mode for the following features: l Supported -Supports both - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 75
CLI. RADIUS over IPv6 With the address mode set to v4-prefer, the W-IAP supports an IPv6 IP address for the RADIUS server. The authentication server configuration can also include the version 2c aruba-string inform 75 | IPv6 Support Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 76
IPv4 and IPv6 allow all acl rule. Debugging Commands Use the following commands to troubleshoot issues pertaining to IPv6 configuration: l show ipv6 interface brief and show ipv6 interface details about W-IAP clients. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide IPv6 Support | 76 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 77
used by the employees in an organization and it supports passphrase-based or 802.1X-based authentication methods. Employees network profile for devices that provide only voice services-for example, devices such as handsets or Instant 6.5.1.0-4.3.1.0 | User Guide Wireless Network Profiles | 77 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 78
advanced options link. The advanced options for configuration are displayed. Specify the following parameters as required. 78 | Wireless Network Profiles Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 79
transmits radio signals. You can set the band to 2.4 GHz, 5 GHz, or All. The All option is selected by default. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Wireless Network Profiles | 79 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 80
the VHT function on W-IAP devices that support VHT. For 802.11acW-IAPs, the VHT for WMM traffic management. WMM supports voice, video, best effort, Share. To configure Differntiated Service Code Point (DSCP) mapping from applications or devices that do not support QoS. l Video WMM-For video traffic - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 81
default, all SSIDs are enabled. Out of service (OOS) Enable or disable the SSID based down The network will be out of service when selected event occurs and the after which the out-of-service operation is triggered. For example, can be configured for each Basic Service Set Identifier (BSSID) on a - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 82
that are configured separately for the SSID. UTF-8 is not supported for wired networks. Deny inter user bridging When enabled, the upstream device to make the forwarding decision. ESSID Enter the Extended Service Set Identifier (ESSID). If the value defined for ESSID value | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 83
tab of the New WLAN window, perform the following steps. The following figure displays the contents of the VLAN tab. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Wireless Network Profiles | 83 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 84
mode selected, you can configure the VLAN assignment for clients as described in the following table: 84 | Wireless Network Profiles Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 85
see Configuring Security Settings for a WLAN SSID Profile on page 86. In the CLI To manually assign VLANs for WLAN SSID users: (Instant AP)(config)# wlan ssid-profile (Instant AP)# commit apply Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Wireless Network Profiles | 85 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 86
is Personal. The following figures show the configuration options for Enterprise, Personal, and Open security settings: 86 | Wireless Network Profiles Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 87
Figure 28 Security Tab: Enterprise Figure 29 Security Tab: Personal Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Wireless Network Profiles | 87 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 88
Figure 30 Security Tab: Open 2. Based on the security level selected, specify the following parameters: 88 | Wireless Network Profiles Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 89
conducts an EAP exchange with the RADIUS server, and the W-IAP acts as a relay for this exchange. Enterprise security level Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Wireless Network Profiles | 89 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 90
number of exchange packets between the W-IAP and the authentication server. NOTE: Instant supports the configuration of primary and backup authentication servers in an EAP termination-enabled SSID. . 90 | Wireless Network Profiles Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 91
authentication fails. NOTE: If Enterprise Security level is chosen, the server used for mac Enterprise, Personal, and Open security levels. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Wireless Network Profiles | 91 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 92
available only when MAC authentication is enabled. Enterprise, Personal, and Open security levels. Uppercase support Set to Enabled to allow the W-IAP to use uppercase letters in MAC address string for . 92 | Wireless Network Profiles Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 93
)(SSID Profile )# l2-auth-failthrough (Instant AP)(SSID Profile )# auth-survivability (Instant AP)(SSID Profile )# radius-accounting Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Wireless Network Profiles | 93 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 94
SSID Profile on page 83, and Configuring Security Settings for a WLAN SSID Profile on page 86. 94 | Wireless Network Profiles Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 95
for a specific user role. For more information, see Configuring ACL Rules for Network Services on page 178. You can also configure an access rule to enforce captive portal Instant AP)# commit apply Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Wireless Network Profiles | 95 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 96
: (Instant AP)# show ap-env Antenna Type:Internal name:TechPubsAP per_ap_ssid:PCCW per_ap_vlan:vlan lacp_mode:enable 96 | Wireless Network Profiles Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 97
Management (802.11k) l BSS Transition Management (802.11v) Opportunistic Key Caching Instant now supports opportunistic key caching (OKC)-based roaming. In OKC-based roaming, the W-IAP stores one . Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Wireless Network Profiles | 97 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 98
with multiple W-IAPs in a cluster. As part of the 802.11r implementation, Instant supports the Fast BSS Transition protocol. The Fast BSS Transition mechanism reduces client roaming delay when commit apply 98 | Wireless Network Profiles Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 99
to ensure Quality of Service (QoS) and seamless continuity. Instant supports the following radio resource management information elements with 802.11k support enabled: l Power enable 802.11k profile: Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Wireless Network Profiles | 99 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 100
BSS transition management. W-IAPs support the generation of the BSS Configuring a WLAN SSID for 802.11v Support You can enable 802.11v support on a WLAN SSID by using the Instant band supports the modulation rate including 1, 2, 5, 6, 9, 11, 12, 18, 24, 36, 48, 54 Mbps and 802.11a band supports a - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 101
to multiple clients simultaneously over the same frequency spectrum. With MU-MIMO, W-IAPs can support simultaneous directional Radio Frequency (RF) links and up to four simultaneous full-rate Wi- to 2333. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Wireless Network Profiles | 101 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 102
To disable RTS/CTS, set the RTS threshold value to 0. Management Frame Protection Instant supports the IEEE 802.11w standard, also known as Management Frame Protection (MFP). MFP the modifications. 102 | Wireless Network Profiles Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 103
to delete. A x link is displayed beside the network to be deleted. 2. Click x. A delete confirmation window is displayed. 3. Click Delete Now. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Wireless Network Profiles | 103 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 104
Profile The Ethernet ports allow third-party devices such as VoIP phones or printers (which support only wired connections) to connect to the wireless network. You can also configure an as Uplink port. For more Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Wired Profiles | 104 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 105
all downlink ports, regardless of forwarding mode. STP will not operate on the uplink port and is supported only on W-IAPs with three or more ports. By default, Spanning Tree is disabled on wired in Access mode. 105 | Wired Profiles Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 106
the Employee network: 1. Configure the following parameters in the Security tab. l Port type-To support trusted ports in a W-IAP, select Trusted. When the Port type is trusted, MAC and authentication fails. The MAC Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Wired Profiles | 106 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 107
ports allow third-party devices such as Voice over Internet Protocol (VoIP) phones or printers (that support only wired connections) to connect to the wireless network. You can also configure an Access Control CLI. 107 | Wired Profiles Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 108
information on configuring access rules, see Configuring ACL Rules for Network Services on page 178. l Configure rules to assign roles for an clients based on whether the client device supports machine authentication. Select the Machine auth only 6.5.1.0-4.3.1.0 | User Guide Wired Profiles | 108 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 109
wired profile to Ethernet 0/1 port, select the profile from the 0/1 drop-down list. d. If the W-IAP supports E2, E3, and E4 ports, assign profiles to other Ethernet ports by selecting a profile from the 0/2, 0/3, . 109 | Wired Profiles Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 110
Configuration on the W-IAP There is no configuration required on the W-IAP for enabling LACP support. However, you can view the status of LACP on W-IAPs by using the following 0 0 0 1 0 0 non-wifi 2 17 Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Wired Profiles | 110 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 111
the LACP according to the static configuration. The static LACP mode is supported on W-IAP225, W-IAP275,and W-IAP325 access points. To enable the static root W-IAP) acts as the wired device for the network, provides DHCP service and an L3 connection to the ISP uplink with NAT. The root W- User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 112
Figure 31 Hierarchical Deployment Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Wired Profiles | 112 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 113
authentication, an internal server is used for hosting the captive portal service. It supports the following types of authentication: n Internal Authenticated-When Internal to access the Internet. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Captive Portal for Guest Access | 113 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 114
hotel website) and all its contents. The users who do not sign up for the Internet service can view only the "allowed" websites (typically hotel property websites). The administrators can allow or block | Captive Portal for Guest Access Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 115
transmits radio signals. You can set the band to 2.4 GHz, 5 GHz, or All. The All option is selected by default. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Captive Portal for Guest Access | 115 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 116
minimum RSSI threshold for authentication requests. Very high throughput Enables VHT function on W-IAP devices that support VHT. For 802.11acW-IAPs, the VHT function is enabled by default. However, you can Portal for Guest Access Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 117
that do not support QoS. l enabled. Out of service (OOS) Enable or disable the SSID based on the following out-of-service states of the The network will be out of service when selected event occurs and the 300 seconds, after which the out-of-service operation is triggered. For example, if the VPN - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 118
, you can configure the VLAN assignment for clients as described in the following table: 118 | Captive Portal for Guest Access Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 119
>)# multicast-rate-optimization (Instant AP)(SSID Profile )# dynamic-multicast-optimization (Instant AP)(SSID Profile )# dmo-channel-utilization-threshold Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Captive Portal for Guest Access | 119 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 120
Instant AP)(SSID Profile )# max-clients-threshold To manually assign VLANs for WLAN SSID users: (Instant AP)(config)# wlan ssid-profile forwarding mode. STP will not operate on the uplink port and is supported only on W-IAPs with three or more ports. By default Spanning Tree - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 121
profile )# set-vlan {equals|not-equals|startswith|ends-with|contains|matches-regular-expression} |value-of} Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Captive Portal for Guest Access | 121 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 122
internal server is used for hosting the captive portal service. You can configure internal captive portal authentication when This option is available only when MAC authentication is enabled. Uppercase support Set to Enabled to allow the W-IAP to use uppercase letters 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 123
to Association, the accounting starts when the client associates to the network successfully and stops when the client is disconnected. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Captive Portal for Guest Access | 123 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 124
)# end (Instant AP)# commit apply To configure internal captive portal for a wired profile: 124 | Captive Portal for Guest Access Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 125
1. Go to Security > External Captive Portal. 2. Click New. The New popup window is displayed. 3. Specify values for the following parameters: Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Captive Portal for Guest Access | 125 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 126
URL Specify a redirect URL if you want to redirect the users to another URL. 126 | Captive Portal for Guest Access Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 127
want to enable MAC authentication. For information on MAC authentication, see Configuring MAC Authentication for a Network Profile on page 166. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Captive Portal for Guest Access | 127 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 128
format is used. NOTE: This option is available only when MAC authentication is enabled. Uppercase support Set to Enabled to allow the W-IAP to use uppercase letters in MAC address string for MAC 128 | Captive Portal for Guest Access Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 129
switchip securelogin.arubanetworks.com Captive portal domain used for external captive portal authentication url http://www.google.com/ original URL Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Captive Portal for Guest Access | 129 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 130
visitors accessing the network. For more information on setting up the RADIUS web login page, refer to the RADIUS Services section in the ClearPass Guest Deployment Guide. Configuring RADIUS Server in Instant UI To configure Instant to point to ClearPass Guest as an external captive portal server - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 131
ClearPass Guest, refer to the ClearPass Guest User Guide. Configuring Facebook Login Instant supports the Facebook Wi-Fi feature that allows the . l For more information on setting up and using Facebook Wi-Fi service, see https://www.facebook.com/help/126760650808045. Configuring an SSID You can - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 132
-Fi code to gain access to the Facebook page. 5. Customize the session length and terms of service if required. 6. Click Save Settings. Accessing the Portal Page To access the portal page: 1. Connect | Captive Portal for Guest Access Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 133
For more information, see Configuring ACL Rules for Network Services on page 178. You can also configure an access information, see Configuring Derivation Rules on page 197. Instant supports role derivation based on the DHCP option for captive | User Guide Captive Portal for Guest Access | 133 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 134
an SSID profile from the Network tab. The Edit window is displayed. 134 | Captive Portal for Guest Access Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 135
color of the splash page, click the Splash page rectangle and select the required color from the Background Color palette. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Captive Portal for Guest Access | 135 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 136
the user role to which the captive portal access rule is assigned. 8. Click Finish. 136 | Captive Portal for Guest Access Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 137
not sign up for the Internet service can view the allowed websites (typically hotel property websites). The website names must be DNS-based and support the option to define wildcards. When access: Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Captive Portal for Guest Access | 137 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 138
, configure the security parameters. 5. Click Next and then click Finish to apply the changes. 138 | Captive Portal for Guest Access Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 139
.1X Authentication for a Network Profile on page 163 l Enabling 802.1X Supplicant Support on page 165 l Configuring MAC Authentication for a Network Profile on page 166 local user database only Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Authentication and User Management | 139 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 140
when a W-IAP is configured as an internal RADIUS server. The local user database of W-IAPs can support up to 512 user entries. In the Instant UI To configure users: 1. Click the Security link located | Authentication and User Management Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 141
the Instant UI or the CLI. In the Instant UI 1. Navigate to System > Admin. The Admin tab details are displayed. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Authentication and User Management | 141 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 142
server If a RADIUS or TACACS server is configured, select Authentication server for authentication. 3. Click OK. 142 | Authentication and User Management Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 143
and Password. 4. Retype the password to confirm. 5. Click OK. Supported Authentication Methods Authentication is a process of identifying a user through a valid the user's MAC addresses. The following authentication methods are supported in Instant: l 802.1X Authentication l MAC Authentication - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 144
Supported EAP Authentication Frameworks on page 145. The 802.1X authentication method allows a W-IAP to authenticate the identity of a user before providing network access to the user. The Remote Authentication Dial In User Service of a machine matches a manually defined list of addresses. This Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 145
is also authenticated on the hotspot's own ISP as per their service agreements. The W-IAP assigns the default WISPr user role to the Protocol-Transport Layer Security (EAP-TLS) method supports the termination of EAP-TLS security using the internal User Guide Authentication and User Management | 145 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 146
does not provide any resistance to network attacks. Authentication Termination on W-IAP W-IAPs support EAP termination for enterprise WLAN SSIDs. The EAP termination can reduce the number of exchange | Authentication and User Management Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 147
user. The authenticated user is placed into the management role specified by the VSA. Instant supports the following VSAs for user role and VLAN derivation rules: l AP-Group l AP-Name -IP-Address Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Authentication and User Management | 147 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 148
-User-Group l Aruba-User-Role l Aruba-User-Vlan l Aruba-WorkSpace-App-Name l Authentication-Sub-Type 148 | Authentication and User Management Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 149
l Framed-MTU l Framed-Protocol l Framed-Route l Framed-Routing l Full-Name l Group l Group-Name l Hint l Huntgroup-Name l Idle-Timeout l Location-Capable Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Authentication and User Management | 149 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 150
l Login-IP-Host l Login-IPv6-Host l Login-LAT-Node l Login-LAT-Port l Login-LAT-Service l Login-Service l Login-TCP-Port l Menu l Message-Auth l NAS-IPv6-Address l NAS-Port-Type l Operator- 150 | Authentication and User Management Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 151
associate these profiles to the user accounts to enable authentication of the management users. TACACS supports the following types of authentication: l ASCII l PAP l CHAP l ARAP l MS- the CLI. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Authentication and User Management | 151 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 152
authentication requests that are sent to the server group, and the default value is 3 requests. 152 | Authentication and User Management Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 153
choose to select either the Authentication or Accounting checkboxes or select both checkboxes to support RFC5997. NAS IP address Allows you to configure an arbitrary IP address to be table: Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Authentication and User Management | 153 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 154
seconds to indicate the timeout period for TACACS+ requests. The default value is 20 seconds. 154 | Authentication and User Management Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 155
>)# rfc3576 (Instant AP)(Auth Server )# rfc5997 {auth-only|acct-only} (Instant AP)(Auth Server )# deadtime Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Authentication and User Management | 155 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 156
clients and the RADIUS server in cloud. The following configuration conditions apply to RadSec configuration: 156 | Authentication and User Management Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 157
Separate ports are not used for authentication, accounting, and dynamic authorization changes. l Instant supports dynamic CoA (RFC 3576) over RadSec and the RADIUS server uses an existing TLS Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Authentication and User Management | 157 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 158
Enabling Dynamic RADIUS Proxy You can enable RADIUS server support using the Instant UI or the CLI. In the Instant UI To enable RADIUS server support: 1. In the Instant main window, click the . 158 | Authentication and User Management Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 159
the Wired Settings window. l To open the WLAN wizard, select an existing SSID on the Network tab, and click edit. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Authentication and User Management | 159 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 160
Encryption prevents unauthorized use of the data. Instant supports the following types of encryption: l WEP-Wired Standard (AES) encryption algorithm is a widely supported encryption type for all wireless networks that contain .11n connection supports only AES encryption. DellIt is recommended to use AES - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 161
Network Captive portal None Voice Network or Handheld devices 802.1X or PSK as supported by the device AES if possible, TKIP or WEP if necessary (combine with security is temporarily lost. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Authentication and User Management | 161 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 162
EAP within a potentially encrypted and authenticated Transport Layer Security (TLS) tunnel. The EAP-PEAP supports MS-CHAPv2 and GTC methods. l EAP-TLS: EAP-Transport Layer Security (EAP-TLS) is | Authentication and User Management Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 163
l Configuring 802.1X Authentication for Wired Profiles on page 164 The Instant network supports internal RADIUS server and external RADIUS server for 802.1X authentication. The steps click edit. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Authentication and User Management | 163 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 164
Next. 4. On the Security tab, select Enabled from the 802.1X authentication drop-down list. 164 | Authentication and User Management Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 165
only after completing the authentication as a valid client. To enable the 802.1X supplicant support on a W-IAP, ensure that the 802.1X authentication parameters are configured on all W- steps: Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Authentication and User Management | 165 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 166
You can configure MAC authentication for a wired profile in the Instant UI or the CLI. 166 | Authentication and User Management Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 167
7. To allow the W-IAP to use uppercase letters in the MAC address string, set Uppercase support to Enabled. 8. Configure other parameters as required. 9. Click Next to define access rules, and . Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Authentication and User Management | 167 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 168
with 802.1X authentication for a wireless network profile using the Instant UI or the CLI. 168 | Authentication and User Management Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 169
then click Finish to apply the changes. In the CLI To enable MAC and 802.1X authentications for a wired profile: Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Authentication and User Management | 169 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 170
: (Instant AP)(config)# wired-port-profile (Instant AP)(wired ap profile )# type 170 | Authentication and User Management Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 171
that are sent to the W-IAP. Wireless Internet Service Provider roaming (WISPr) authentication is supported only for the Internal Authenticated and External - RADIUS OK to apply the changes. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Authentication and User Management | 171 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 172
. To support Boingo clients Manually on page 172 l Blacklisting Users Dynamically on page 173 Blacklisting Clients Manually Manual to the blacklist manually using the Instant . 3. Under the Manual Blacklisting, click New manual blacklist, select the MAC Address of the client under the Manual - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 173
New and navigate to WLAN Settings > VLAN > Security > Access window, and enable the Blacklist option of the corresponding ACL rule. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Authentication and User Management | 173 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 174
To view the blacklisted clients: (Instant AP)# show blacklist-client config Blacklist Time :60 Auth Failure Blacklist Time :60 Manually Blacklisted Clients MAC Time --- ---- Dynamically Blacklisted Clients MAC Reason Timestamp Remaining time(sec) Dyn Blacklist Count :0 AP IP - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 175
authority so that a recipient can ensure that the certificate is real. Instant supports the following certificate files: l Authentication server (PEM format) l Captive portal server certificate. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Authentication and User Management | 175 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 176
either Intermediate CA or Trusted CA certificate Type, if you want to upload a CA certificate. 176 | Authentication and User Management Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 177
to W-AirWave. Click Save and Apply to apply the changes to the W- IAP. 6. To clear the certificate options, click Revert. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Authentication and User Management | 177 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 178
applications. Instant supports a role allow access based on the service or application, source or clients re-authenticate. Instant supports the following types of traffic based on network services, application, application categories, Services This section describes the procedure for configuring ACLs - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 179
based on web categories and web reputation, see Configuring Web Policy Enforcement Service on page 270. In the Instant UI To configure ACL rules for To configure a rule to control access to network services, select Network under service category and specify the following parameters: 179 | Roles - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 180
of the services based on your requirement: l any-Access is allowed or denied to all services. l custom option for the access rules for network services, applications, and application categories. You this rule is triggered. Instant supports firewall-based logging. Firewall logs on the - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 181
Table 39: Access Rule Configuration Parameters Service Category Description Blacklist Select the Blacklist check box to blacklist the client when this rule is Rule "employee")# end (Instant AP)# commit apply 181 | Roles and Policies Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 182
network IP addresses to a public address space. Instant supports the NAT mechanism to allow a routing device to use configured with Source-NAT action, the users can specify the service, protocol, or destination to which the source-NAT is applied 6.5.1.0-4.3.1.0 | User Guide Roles and Policies | 182 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 183
any destination or service to be configured Destination-NAT Access Rule Instant supports configuration of the destination- destination port. The destination-NAT configuration is supported only in the bridge mode without VPN . d. Select a service from the list of available services. e. Select the - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 184
(Instant AP)(ALG)# no ua-disable (Instant AP)(ALG)# no vocera-disable (Instant AP)(ALG)# end (Instant AP)# commit apply Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Roles and Policies | 184 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 185
attack config Current Attack Attack Status ------ ------ drop-bad-arp Enabled fix-dhcp Enabled poison-check Enabled 185 | Roles and Policies Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 186
(Instant AP)(firewall)# end (Instant AP)# commit apply To view the configuration status: Firewall -------- Type Value ---- ----- Auto topology rules disable Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Roles and Policies | 186 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 187
access through an uplink switch. To allow flexibility in firewall configuration, Instant supports the following features: l Inbound firewall rules l Configurable management subnets l the following parameters: 187 | Roles and Policies Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 188
of the source network. Destination Select a destination option for the access rules for network services, applications, and application categories. You can allow or deny access to any the Name text box. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Roles and Policies | 188 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 189
box if you want a log entry to be created when this rule is triggered. Instant supports firewall-based logging function. Firewall logs on the W-IAPs are generated as security logs. Blacklist or the CLI. 189 | Roles and Policies Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 190
CLI To configure restricted management access: (Instant AP)(config) # restrict-corp-access (Instant AP)(config) # end (Instant AP)# commit apply Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Roles and Policies | 190 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 191
. The content filtering configuration applies to all W-IAPs in the network and the service is enabled or disabled globally across the wireless or wired network profiles. Enabling Content the following steps: 191 | Roles and Policies Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 192
configure an enterprise domain through the Instant UI or the CLI. In the Instant UI To manually add a domain: 1. Navigate to System > General and click Show advanced options > Enterprise Domains drop-down list. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Roles and Policies | 192 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 193
OK. 5. To filter access based on the security ratings of the website: a. Select Web reputation under Service section. b. Move the slider to the required security rating level. c. From the Action drop-down list, 193 | Roles and Policies Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 194
1. Navigate to Security > Roles. 2. Select any WLAN SSID or Wired profile role, and click New in the Access Rules section. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Roles and Policies | 194 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 195
> {permit|deny|src-nat [vlan |tunnel]|dst-nat { |}} [] 195 | Roles and Policies Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 196
ap profile )# access-rule-name (Instant AP)(wired ap profile )# end (Instant AP) # commit apply Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Roles and Policies | 196 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 197
indicates a known user or a non-Windows device. The device does not support machine authentication or does not have a RADIUS account, but the user is on configuring access rules, see Configuring ACL Rules for Network Services on page 178. 3. Select Enforce Machine Authentication and select Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 198
370103060f775ffc2c2e2f Creating a Role Derivation Rule You can configure rules for determining the role that is assigned for each authenticated client. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Roles and Policies | 198 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 199
147. 5. Select the operator from the Operator drop-down list. The following types of operators are supported: l contains-The rule is applied only if the attribute value contains the string specified in Operand > 199 | Roles and Policies Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 200
. l The DHCP-based VLANs can be derived for captive portal authentication. Instant supports role derivation based on the DHCP option for captive portal authentication. When the captive -Accept Packets with VSA Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Roles and Policies | 200 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 201
for authentication, the RADIUS server may return a reply message for authentication. If the RADIUS server supports return attributes, and sets an attribute value to the reply message, the W-IAP can analyze 201 | Roles and Policies Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 202
4. Select the operator from the Operator drop-down list. The following types of operators are supported: l contains-The rule is applied only if the attribute value contains the string specified in in Operand. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Roles and Policies | 202 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 203
, which can be used in user role and user VLAN derivation rules: Table 42: Regular Expressions 203 | Roles and Policies Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 204
, linkdown, shutdown. \B Matches the middle of a word. For example, \Bvice matches services, devices, serviceID, deviceID, and so on. ^ Matches the characters at starting position in Rules on page 202 Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Roles and Policies | 204 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 205
> |ends-with |contains }|value-of} (Instant AP)(SSID Profile )# end 205 | Roles and Policies Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 206
(Instant AP)# commit apply Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Roles and Policies | 206 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 207
DHCP Scope for Client IP Assignment on page 214 Configuring DHCP Scopes The VC supports different modes of Dynamic Host Configuration Protocol (DHCP) address assignment. With each the following parameters: Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide DHCP Configuration | 207 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 208
Specify the type and a value for the DHCP option. You can configure the organization-specific DHCP options supported by the DHCP server. For example, 176, 242, and 161. To add multiple DHCP options, click -ID> 208 | DHCP Configuration Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 209
that must be excluded from those assigned to clients, so that they are assigned statically. Instant supports the following distributed DHCP scopes: l Distributed, L2-In this mode, the VC acts as scope. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide DHCP Configuration | 209 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 210
DHCP scope, specify the subnet mask. The subnet mask and the network determine the size of subnet. 210 | DHCP Configuration Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 211
Specify the type and a value for the DHCP option. You can configure the organization-specific DHCP options supported by the DHCP server. For example, 176, 242, 161, and so on. To add multiple DHCP L2 DHCP scope: Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide DHCP Configuration | 211 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 212
a centralized profile, select the profile type as Centralized, L2 or Centralized, L3 and configure the following parameters. 212 | DHCP Configuration Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 213
-Type l Remote Agent; X IDUE-MAC NOTE: The Option 82 string is specific to Alcatel and is not configurable. 4. Click OK. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide DHCP Configuration | 213 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 214
provide simultaneous access to more number of clients. The largest address pool supported is 2048. The default size of the IP address pool is experience problems with the Virtual Controller Assigned networks after upgrading to Dell Networking W-Series Instant 6.2.1.0-3.4.0.0 or later, manually - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 215
)(DHCP)# end (Instant AP)# commit apply To view the DHCP database: (Instant AP)# show ip dhcp database DHCP Subnet :192.0.2.0 Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide DHCP Configuration | 215 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 216
DHCP Netmask DHCP Lease Time(m) DHCP Domain Name DHCP DNS Server :255.255.255.0 :20 :example.com :192.0.2.1 216 | DHCP Configuration Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 217
for configuring time-based services. It includes the during a specific time period. W-IAPs support the configuration of both absolute and periodic -based services: l Time-based services require an to System > Show advanced options > Time Based Services . 2. Click New under Time Range Profiles. The - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 218
specified time range is 12:00-13:00, the SSID becomes available only between 12 PM and 1 PM on a given day. 218 | Configuring Time-Based Services Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 219
range profile that executes during the weekday: (Instant AP)(config)# time-range timep3 periodic weekday 10:20 to 10:35 Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Configuring Time-Based Services | 219 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 220
weekend 10:20 to 10:30 The following command removes the time range configuration: (Instant AP)(config)# no time-range testhshs12 220 | Configuring Time-Based Services Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 221
on page 223 Enabling Dynamic DNS Starting from Instant 6.4.4.4-4.2.3.0, W-IAPs support the dynamic DNS feature which enables updating the DNS records of the UI To enable dynamic DNS: 1. Navigate to Services > Dynamic DNS. 2. Select the Enable Dynamic DNS check box. Dell Networking - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 222
:arubaddns: secret key to secure the dynamic updates. 16YuLPdH21rQ6PuK9udsVLtJw3Y= The following algorithm names are supported: l hmac-md5 (used by default if algo-name is not specified) l hmac-sha1 222 | Dynamic DNS Registration Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 223
privileged execution mode in the CLI. For more information, refer to the show ddns clients command in the Dell Networking W-Series Instant 6.4.4.44.2.3.0 CLI Reference Guide. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Dynamic DNS Registration | 223 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 224
the W-IAP network does not require a physical controller to provide the configured WLAN services. However, a physical controller is required for terminating Virtual Private Networks (VPN) non-corporate networks. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide VPN Configuration | 224 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 225
between the W-IAP and controller for client traffic. W-IAPs support two types of GRE configuration: l Manual GRE-The manual GRE configuration sends unencrypted client traffic with an additional GRE on page 230 225 | VPN Configuration Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 226
, exceeding which the W-IAP can determine that the VPN connection is unavailable. The default value is 2. Figure 51 IPsec Configuration Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide VPN Configuration | 226 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 227
Tunnel This section describes the following procedures: l Configuring Manual GRE Parameters l Configuring Aruba GRE Parameters Configuring Manual GRE Parameters You can configure a GRE tunnel between the W-IAP IP. 227 | VPN Configuration Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 228
Guide. In the Instant UI To configure a GRE tunnel: 1. Click the More > VPN link located directly above the Search bar in the Instant UI. The Tunneling window is displayed. 2. Select Manual the Per-AP tunnel option is disabled. Figure 52 Manual GRE Configuration 4. Click Next to continue. When the - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 229
configuration on the W-IAP. For Aruba GRE, no manual configuration is required on the controller to create the GRE tunnel. Aruba GRE is supported only on Aruba Controllers running ArubaOS 6.4.x.x or later W-IAP. 229 | VPN Configuration Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 230
about L2TPv3 in the W-IAP context are as follows:: l Instant supports tunnel and session configuration, and uses Control Message Authentication (RFC 3931) Each L2TPv3 tunnel supports one data connection and this connection is termed as an L2TPv3 session. l Each W-IAP supports tunneling over User - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 231
primary tunnel goes down, it does not make the primary tunnel active again. L2TPV3 is not supported on W-IAP205 devices. You can configure an L2TPv3 tunnel and session profiles through the Instant UI creation. 231 | VPN Configuration Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 232
. m. Click OK. 4. Configure the session profile: a. Enter the session name to be used for session creation. Figure 56 Session Configuration Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide VPN Configuration | 232 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 233
3000 (Instant AP)(L2TPv3 Tunnel Profile "test_tunnel")# secret-key test123 (Instant AP)(L2TPv3 Tunnel Profile "test_tunnel")# end 233 | VPN Configuration Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 234
error 0 data tx packets: 6, tx bytes: 588, tx errors: 0 To view L2TPV3 tunnel status: (Instant AP)# show l2tpv3 tunnel status Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide VPN Configuration | 234 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 235
UDP checksums: OFF do pmtu discovery: OFF, mtu: 1460 framing capability: SYNC ASYNC bearer capability: DIGITAL ANALOG 235 | VPN Configuration Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 236
: 1. Click Routing in the Tunneling window. The routing details are displayed. 2. Click New. The route parameters to configure are displayed. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide VPN Configuration | 236 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 237
between the master W-IAP and the VPN tunnel, and which traffic should flow outside of the tunnel. 237 | VPN Configuration Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 238
,000 W-7210 8000 8000 64,000 W-7220 W-7240 16,000 32,000 16,000 32,000 N/A N/A 128,000 128,000 Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide IAP-VPN Deployment | 238 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 239
client traffic is not translated at source. In the Local, L2 mode, access to the corporate network is supported only in a single W-IAP cluster. The traffic to the non-corporate network is locally bridged. Local, 239 | IAP-VPN Deployment Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 240
. Either the controller or an upstream router can be the gateway for the clients. For DHCP services in Centralized, L2 mode, it is recommended that you use an external DHCP server and not from the DHCP server. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide IAP-VPN Deployment | 240 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 241
Operations A W-IAP network requires the following configurations for IAP-VPN operations. 1. Defining the VPN Host Settings 241 | IAP-VPN Deployment Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 242
from a W-IAP to a Mobility Controller on page 225. l IPsec l L2TPv3 l Manual GRE l Aruba GRE Configuring Routing Profiles The routing profile on the W-IAP determines whether l Distributed, L3 l Centralized, L2 Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide IAP-VPN Deployment | 242 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 243
for an SSID or wired port profile is not set to default as the VPN tunnel is not supported on the default VLAN. For information on how to configure an SSID or wired port profile, see Wireless branch network. 243 | IAP-VPN Deployment Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 244
controllers with IAP-VPN configuration. The IAP-VPN configuration is not supported on W-600 Series controllers. OSPF Configuration Open Shortest Path First For sample topology and configuration, refer to the ArubaOS 6.5 User Guide. To redistribute IAP-VPN routes into the OSPF process: (Instant - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 245
server to authenticate the W-IAPs using the entries in the external database or external directory server. 245 | IAP-VPN Deployment Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 246
in the branch and the controller should agree upon a subnet/IP addresses to be used for DHCP services in the branch. The process or protocol used by the master W-IAP and the controller to , avoids IP conflict) Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide IAP-VPN Deployment | 246 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 247
internal VPN IP of the branch. Assigned Subnet Displays the subnet mask assigned to the branch. 247 | IAP-VPN Deployment Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 248
or Distributed, L3 subnets. The show iap table command output does not display the Key and Bid(Subnet Name) details. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide IAP-VPN Deployment | 248 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 249
conditions change. Voice Aware Scanning The Voice Aware scanning feature prevents a W-IAP supporting an active voice call from scanning for other channels in the RF spectrum and allows RF health state. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Adaptive Radio Management | 249 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 250
-mode {| ||} (Instant AP)(ARM)# end (Instant AP)# commit apply 250 | Adaptive Radio Management Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 251
and deauthenticates the client. Legacy 802.11a/b/g access points do not support the client match feature. When client match is enabled on 802.11n , or load balancing feature. 802.11ac-capable access points do not support the legacy band steering, station handoff assist, or load balancing settings; - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 252
measures the RF health of its associated clients. In the current release, the client match feature is supported only within a W-IAP cluster. If any of the following trigger conditions is met, clients are : 252 | Adaptive Radio Management Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 253
. In the Instant UI 1. For Access Point Control, specify the following parameters in the RF > ARM > Show advanced options tab: Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Adaptive Radio Management | 253 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 254
supported by the W-IAP model, this value is reduced to the highest supported supported by the WIAP model, the value is reduced to the highest supported . 80 MHz Support Enables or disables support a very high throughput. This setting is enabled by default. NOTE: Only the W-IAPs that support - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 255
>|||} (Instant AP)(ARM)# scanning (Instant AP)(ARM)# 80mhz-support (Instant AP)(ARM)# end (Instant AP)# commit apply Verifying ARM Configuration To :75 :30 :2 :channel based :5 :5 :No Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Adaptive Radio Management | 255 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 256
settings: 1. Click the RF link located directly above the Search bar of the Instant main window. 256 | Adaptive Radio Management Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 257
announcements that must be sent before switching to a new channel. This allows associated clients to recover gracefully from a channel change. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Adaptive Radio Management | 257 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 258
Enabled to allow the W-IAPs in access mode to continue with normal access service to clients, while performing additional function of monitoring RF interference (from both neighboring -throughput-disable 258 | Adaptive Radio Management Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 259
span of time, so that the ARM is triggered to perform frequent scanning and selection of a valid channel for transmission. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Adaptive Radio Management | 259 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 260
-frequent-scan 2.4 To verify the status of ARM scanning: (Instant AP)# show ap debug am-config 260 | Adaptive Radio Management Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 261
inspection and a cloud-based Web Policy Enforcement (WPE) service that allows creating firewall policies based on types of application. analyzing client traffic flow. W-IAPs support the power of both in-device 6.5.1.0-4.3.1.0 | User Guide Deep Packet Inspection and Application Visibility | 261 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 262
Inspection (DPI) application and Web Policy Enforcement (WPE) service, which provide application traffic summary for the client devices in the All Traffic and Web Content sections provide enforcement visibility support. l Permit represents the allowed or permitted traffic on the | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 263
applications. By clicking the rectangular area, you can view the following graphs, and toggle between the chart and list views. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Deep Packet Inspection and Application Visibility | 263 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 264
Figure 62 Applications Chart: Client View Figure 63 Applications List: Client View 264 | Deep Packet Inspection and Application Visibility Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 265
between the chart and list views. Figure 65 Web Categories Chart: Client View Figure 66 Web Categories List: Client View Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Deep Packet Inspection and Application Visibility | 265 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 266
68 Web Reputation Chart: Client View Figure 69 Web Reputation List: Client View 266 | Deep Packet Inspection and Application Visibility Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 267
access rules based on web categories and web reputation, see Configuring Web Policy Enforcement Service on page 270. In the Instant UI To configure ACL rules for a access rules. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Deep Packet Inspection and Application Visibility | 267 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 268
l instant-messaging l mail-protocols l mobile-app-store l network-service l peer-to-peer l social-networking l standard l streaming to high-risk sites. If your W-IAP model does not support configuring access rules based on application or application category, you can 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 269
network services rules. Destination Select a destination option for the access rules for network services, applications a log entry when this rule is triggered. Instant supports firewall-based logging function. Firewall logs on the W-IAPs Guide Deep Packet Inspection and Application Visibility | - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 270
Service Web Policy Enforcement Service You can configure the WPE service on a W- UI or the CLI. In the Instant UI To configure WPE service: 1. Navigate to Security > Roles. 2. Select any WLAN policy based on the web category: a. Under Service, select Web category and expand the Web categories drop - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 271
access based on the security ratings of the website: a. Select Web reputation under Service. b. Move the slider to the required security rating level. Move the slider scanning Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Deep Packet Inspection and Application Visibility | 271 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 272
suspicious-sites deny (Instant AP)(Access Rule "URLFilter")# end (Instant AP)# commit apply 272 | Deep Packet Inspection and Application Visibility Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 273
the IEEE 802.11e wireless Quality of Service (QoS) standard. WMM works with 802.11a, 802.11b, 802.11g, and 802.11n physical layer standards. WMM supports the following access categories (ACs): l and voice traffic. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Voice and Video | 273 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 274
devices or traffic from applications or devices that do not support QoS. l Video WMM-Allocates bandwidth for video traffic IEEE 802.11e standard defines the mapping between WMM ACs and Differentiated Services Code Point (DSCP) tags. You can customize the mapping values 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 275
. You can also configure a combination of multiple values separated by a comma, for example, wmm-voice-dscp 46,44,42,41. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Voice and Video | 275 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 276
the station indicates the WMM Access Categories for which U-APSD is enabled. In the current release, W-IAPs support U-APSD on all WMM ACs. To disable U-APSD on an SSID: (Instant AP)(config)# wlan ssid commit apply 276 | Voice and Video Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 277
(Instant AP)(example_s4b_test)# end (Instant AP)# commit apply The Type of Service (ToS) values for calls prioritized using the above mentioned media classification types feature is not supported for L3 mobility. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Voice and Video | 277 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 278
the Master W-IAP: l VoIP Client IP Address l VoIP Client MAC Address l W-IAP MAC Address l W-IAP Name 278 | Voice and Video Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 279
This chapter provides information on how to configure the following services on a W-IAP: l Configuring AirGroup on page 279 l Configuring a W-IAP for RTLS Support on page 288 l Configuring a W-IAP for Analytics and Location Engine Support on page 289 l Managing BLE Beacons on page 290 l Clarity - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 280
Enables Personal Device Sharing AirGroup is not supported on 3G and PPPoE uplinks. Multicast DNS and Bonjour® Services Bonjour is the trade name for the same W-IAP about the other Bonjour-enabled services in the network. 280 | Services Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 281
For a list of supported Bonjour services, see AirGroup Services on page 283. DLNA UPnP Support In addition to the mDNS protocol, W-IAPs now support Universal Plug and Play discovery of the associated devices. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Services | 281 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 282
as the marketing department. l AirGroup is aware of the location of services when ClearPass Policy Manager support is enabled. For example, depending on the proximity, a user would be the client is currently connected. 282 | Services Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 283
media content on a remote device. l DLNA Print-This service is used by printers that support DLNA. In the Instant 6.4.0.2-4.1.0.0 release, it is recommended to have a maximum of upto 80 AirGroup servers in the network. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Services | 283 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 284
seamless connectivity between clients and services across VLANs and SSIDs. The following table summarizes the filtering options supported by Instant: Table 63: AirGroup Shared role-list based-policy enforcement No Yes 284 | Services Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 285
Configuration 3. To enable support for Bonjour services, select the Enable Bonjour check box and select the AirGroup services related to Bonjour as required. 4. To enable DLNA support, select the Enable > L3 Mobility tab. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Services | 285 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 286
Instant AP)(airgroup)# end (Instant AP)# commit apply To enable support for Bonjour services: (Instant AP)(config)# airgroup (Instant AP)(config)# enable services: (Instant AP)(config)# airgroupservice 286 | Services Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 287
service)# description (Instant AP)(airgroup-service)# disallow-role (Instant AP)(airgroup-service)# disallow-vlan (Instant AP)(airgroup-service Air Group window. Navigate to Services > AirGroup > Clear Pass go to Services > AirGroup Services > AirGroup > Clear - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 288
Configuring a W-IAP for RTLS Support Instant supports the real-time tracking of devices when integrated with the AMP or a airwave-rtls include-unassocsta (Instant AP)(config)# end 288 | Services Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 289
can configure a W-IAP for ALE support by using the Instant UI or the CLI. In the Instant UI Configuring ALE support: 1. Click More > Services. 2. Click the RTLS tab. 3. Select the Analytics & Location Engine check box. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Services | 289 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 290
Figure 78 Services Window-ALE AP)# show ale status Managing BLE Beacons In Instant 6.4.3.4-4.2.1.0, W-IAPs support Dell Bluetooth Low Energy (BLE) devices, such as BT-100 and and BLE operation mode feature is supported only on W-IAP334/335, WIAP314/315, W-IAP324/325, W-IAP224/225, W-IAP205H - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 291
support for Inline Monitoring support problem with the client, Radius Authentication, DHCP, DNS, or it can be delay in the network. Clarity Live is used to identify the root cause of the problem, this feature can be used. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Services - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 292
Instant UI To enable Clarity Live for generating inline monitoring statistics: 1. Click More > Services. 2. Click Clarity. The configuration options for the Clarity group are displayed. 3. statistics using the CLI: 292 | Services Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 293
Instant UI or the CLI. In the Instant UI To configure OpenDNS credentials: 1. Click More > Services > OpenDNS. 2. Enter the Username and Password to enable access to OpenDNS. 3. Click OK to Access Protocol (LDAP) server. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Services | 293 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 294
for PAN firewall integration by using the Instant UI or the CLI. In the Instant UI To configure PAN firewall integration in a W-IAP: 1. Click More > Services. 2. Click Network Integration. The PAN firewall configuration options are displayed. 294 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 295
Figure 79 Services Window: Network Integration Tab 3. Select the Enable check box to enable PAN firewall. 4. Provide the user credentials execute user management operations seamlessly on behalf of the clients or users. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Services | 295 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 296
or the CLI. W-IAP supports the configuration of up to 8 XML API server entries. In the Instant UI Enabling XML API server entries: 1. Click More > Services. 2. Click Network Integration. URL to send the XML request is: 296 | Services Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 297
to change the role of an existing 64-character string user. This option applies to user_add and user_delete commands only. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Services | 297 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 298
authorized electronic surveillance. Depending on the country of operation, the service providers (SPs) are required to support LI in their respective networks. In the United States, SPs from the W-IAP to the CALEA server. 298 | Services Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 299
routed to the CALEA server. The following figure illustrates the traffic flow from W-IAP to the CALEA server through VPN. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Services | 299 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 300
a WLAN SSID or wired profile. 3. Verify the configuration. Creating a CALEA Profile You can create a CALEA profile by using the Instant UI or the CLI. 300 | Services Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 301
Services section, click CALEA. The CALEA tab details are displayed. 3. Specify the following parameters: l IP address-Specify the IP address of the CALEA server. l Encapsulation type-Select the encapsulation type. The current release of Instant supports 6.5.1.0-4.3.1.0 | User Guide Services | 301 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 302
"Calea-Test")# essid QA-Calea-Test (Instant AP)(SSID Profile"Calea-Test")# opmode wpa2-aes (Instant AP)(SSID Profile"Calea-Test")# max-authentication-failures 0 302 | Services Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 303
Rt resolve fail : 0 Dst resolve fail: 0 Alloc failure : 0 Fragged packets : 0 Jumbo packets : 263 Total Tx fail : 0 Total Tx ok : 263 Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Services | 303 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 304
locked mode: l Execute the disable-cluster-security-dtls action command on the slave W-IAP , or l Factory reset the slave W-IAP. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Cluster Security | 304 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 305
output of the show summary command, before rebooting the cluster. Cluster security is not supported for L3 mobility. Cluster Security Debugging Logs Cluster security logging is organized into modules based issues. 305 | Cluster Security Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 306
: (Instant AP)# show cluster-security peers To view the message handler process logs: (Instant AP) # show log papi-handler Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Cluster Security | 306 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 307
historical reporting, as well as fast and efficient troubleshooting. It also offers tools that manage RF firmware updates such that updating is completed without requiring you to manually monitor the devices. The following models can be used to User Guide W-IAP Management and Monitoring | 307 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 308
WIAPs. It tracks and correlates the IDS events to provide a complete picture of network security. 308 | W-IAP Management and Monitoring Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 309
PSK-Based and Certificate-Based Authentication On the DHCP server, two formats for option 43 are supported: l ,,-If you select this format, the W-IAP authenticates . Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide W-IAP Management and Monitoring | 309 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 310
Shared Key The Shared Secret key is an optional key used by the administrator to manually authorize the first VC for an organization. Any string is acceptable. Configuring W-AirWave commit apply 310 | W-IAP Management and Monitoring Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 311
2008, navigate to Server Manager > Roles > DHCP sever > domain > DHCP Server > IPv4. 2. Right-click IPv4 and select Set Predefined Options. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide W-IAP Management and Monitoring | 311 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 312
Add. 4. Enter the following information: n Name-Instant n Data Type-String n Code-60 n Description-Instant AP 312 | W-IAP Management and Monitoring Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 313
. Use options on a per-scope basis to override the global options.) 6. Right-click Server Options and select the configuration options. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide W-IAP Management and Monitoring | 313 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 314
in the ASCII text box: l airwave-orgn, airwave-ip, airwave-key; for example: Dell,192.0.2.20, 12344567 l airwave-orgn, airwave-domain; for example: Dell, dell.support.com 314 | W-IAP Management and Monitoring Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 315
a per-scope basis. The perscope option overrides the global option. Figure 89 Instant and DHCP options for W-AirWave: Scope Options Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide W-IAP Management and Monitoring | 315 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 316
uses DHCP options 60 and 43 for other services. Some networks use DHCP standard options 60 and 43 to provide the DHCP clients information about certain services such as PXE. In such an environment, the | W-IAP Management and Monitoring Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 317
Figure 91 W-AirWave-New Group Figure 92 W-AirWave-Monitor Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide W-IAP Management and Monitoring | 317 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 318
through a wired or mesh Wi-Fi uplink: Figure 93 Uplink Types The following types of uplinks are supported on Instant: l Ethernet Uplink l Cellular Uplink l Wi-Fi Uplink Ethernet Uplink The Eth0 port client. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Uplink Configuration | 318 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 319
address of the VC. An SSID created with default VLAN is not supported with PPPoE uplink. You can also configure an alternate Ethernet uplink to the Uplink tab: a. Enter the PPPoE service name provided by your service provider in the Service name text box. b. Enter the 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 320
)(pppoe-uplink-profile)# pppoe-svcname (Instant AP)(pppoe-uplink- Service Suppressed. Cellular Uplink Instant supports the use of 3G specific region. W-IAP155/155P devices do not support the high-speed option (HSO) module. manually set the USB type to pantech-3g. To configure the - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 321
to take effect. In the CLI To configure 3G/4G uplink manually: (Instant AP)(config) # cellular-uplink-profile (Instant AP AP)(cellular-uplink-profile)# modem-isp (Instant AP)(cellular-uplink Managing Cellular SIM PIN W-IAPs now support the Subscriber Identity Module (SIM) Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 322
the PIN: (Instant AP)# pin-renew Wi-Fi Uplink The Wi-Fi uplink is supported on all the W-IAP models, except for the 802.11ac W-IAP models (W-IAP-2xx Series access points). and click OK. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Uplink Configuration | 322 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 323
the wired profiles, the W-IAP tries to find an alternate Ethernet link based on the priority configured. 323 | Uplink Configuration Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 324
Uplink Preemption The following configuration conditions apply to uplink preemption: l Preemption can be enabled only when no uplink is enforced. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Uplink Configuration | 324 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 325
the lowerpriority uplink if the current uplink is down. Switching Uplinks Based on VPN Status Instant supports switching uplinks based on the VPN status when deploying multiple uplinks (Ethernet, 3G/4G, and Wi 325 | Uplink Configuration Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 326
the master W-IAP sends the ICMP packets to 8.8.8.8 IP address only if the out-of-service operation based on Internet availability (internetdown state) is configured on the SSID. 3. Click OK AP)# commit apply Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Uplink Configuration | 326 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 327
packets :30 VPN failover timeout (secs) :180 Internet check timeout (secs) :10 Secs between test packets :30 327 | Uplink Configuration Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 328
company network. OS Fingerprinting is enabled in the Instant network by default. The following operating systems are identified by Instant: Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Intrusion Detection | 328 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 329
. The following levels of detection can be configured in the WIP Detection page: l Off l Low l Medium l High 329 | Intrusion Detection Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 330
l Detect Valid SSID Misuse l Detect Wireless Bridge l Detect 802.11 40 MHz intolerance settings l Detect Active 802.11n Greenfield Mode Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Intrusion Detection | 330 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 331
-ASLEAP The following levels of detection can be configured in the WIP Protection page: l Off l Low l High 331 | Intrusion Detection Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 332
Protection Policies Protection Level Protection Policy Off All protection policies are disabled Low Protect Valid Station High Protect Windows Bridge Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Intrusion Detection | 332 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 333
wireless containments to prevent unauthorized stations from connecting to your Instant network. Instant supports the following types of containment mechanisms: l Wired containment-When enabled, W- Methods 333 | Intrusion Detection Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 334
(Instant AP)(IDS)# protect-valid-sta (Instant AP)(IDS)# protect-windows-bridge (Instant AP)(IDS)# end (Instant AP)# commit apply Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Intrusion Detection | 334 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 335
to the mesh portal. Instant mesh functionality is supported only on dual-radio W-IAPs. On dual-radio always used for both mesh-backhaul and client traffic. Mesh service is automatically enabled on 802.11a band for dual-radio could have multiple mesh portals to support redundant mesh paths (mesh links - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 336
services such as client connectivity, intrusion detection system (IDS) capabilities, user role association, and Quality of Service (QoS) for LAN-to-mesh communication to clients and performs mesh backhaul/network connectivity. A mesh point also supports supported support supports support for - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 337
wired-profile when eth0 is used as the downlink port. For more information, see Configuring a Wired Profile on page 104. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Mesh W-IAP Configuration | 337 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 338
roaming. You can configure a list of VC IP addresses across which L3 mobility is supported. The Dell Networking W-Series Instant Layer-3 mobility solution defines a Mobility Domain as a home network Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Mobility and Client Management | 338 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 339
UI or the CLI. In the Instant UI To configure a mobility domain: 1. Click the System link on the Instant main window. 2. In the Services section, click the Show advanced options link. The advanced options are displayed. 3. Click L3 Mobility. The L3 Mobility window is displayed. 339 | Mobility - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 340
-mobility)# subnet (Instant AP)(L3-mobility)# end (Instant AP)# commit apply Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Mobility and Client Management | 340 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 341
are W-IAP radios that gather spectrum data but do not service clients. Each SM scans and analyzes the spectrum band used supported on all W-IAPs/W-IAPs with a few exceptions: l W-IAP155 does not support Spectrum from Instant 6.3.1.1-4.0.0.0 release. l W-IAP105 supports Guide Spectrum Monitor | 341 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 342
by the wireless device. Signal-strength Strength of the signal sent from the device, represented in dBm. 342 | Spectrum Monitor Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 343
-handset and 2.4 GHz for Handset-to-base). These phones may be classified as unique Frequency Hopper devices on both bands. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Spectrum Monitor | 343 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 344
all channels in the selected band, and hybrid W-IAPs display data for the channel they are monitoring. 344 | Spectrum Monitor Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 345
the maximum noise-floor and interference-signal levels, and then calculating how strong the desired signal is above this maximum. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Spectrum Monitor | 345 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 346
of the channel currently being used by non-Wi-Fi interference plus WiFi adjacent channel interference (ACI) 346 | Spectrum Monitor Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 347
to provide normal access service to clients, while providing the additional function of monitoring RF interference. If any W-IAP in the Instant network does not support the Spectrum Monitoring feature 5 GHz radio. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Spectrum Monitor | 347 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 348
Count:0 Channel Reuse Type:disable Channel Reuse Threshold:0 Background Spectrum Monitor:disable Standalone Spectrum Band:5ghz-upper 348 | Spectrum Monitor Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 349
with the latest versions of the Instant software. Upgrading a W-IAP and Image Server Instant supports mixed W-IAP-class Instant deployment with all W-IAPs as part of the same VC cluster window is displayed. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide W-IAP Maintenance | 349 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 350
of the upgrade, one of the following messages is displayed: n Upgrading-While image upgrading is in progress. 350 | W-IAP Maintenance Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 351
fails and an error message is displayed, retry upgrading the W-IAP. Upgrading to a New Version Manually If the Automatic Image Check feature is disabled, you can obtain an image file from a local -----------none Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide W-IAP Maintenance | 351 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 352
and the W-IAP reboots to load the new configuration. (Instant AP)(config)# copy config tftp://x.x.x.x/confgi.cfg 352 | W-IAP Maintenance Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 353
Y X X X Y Y X Y X Y X X X Y Y X Y X Y X X X Y Y X Y X Y X X X Y Y X Y X ArubaOS 6.5.0.0 or later ArubaOS 6.4.4.0 or later ArubaOS 6.4.3.0 or later ArubaOS 6.4.3.0 or later Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide W-IAP Maintenance | 353 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 354
6.4.2.0 or later ArubaOS 6.4.1.0 or later ArubaOS 6.4 or later ArubaOS 6.4 or later ArubaOS 6.3.1.3 or later ArubaOS 6.3.1.3 or later 354 | W-IAP Maintenance Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 355
comes up with default configuration and operates in the W-IAP mode. A mesh point cannot be converted to Remote AP, because mesh access points do not support VPN connection. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide W-IAP Maintenance | 355 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 356
if the controller is running ArubaOS 6.1.4 or later versions: The following table describes the supported W-IAP platforms and minimal ArubaOS version required for the Campus AP or Remote AP are displayed. 356 | W-IAP Maintenance Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 357
function as Remote APs, configure the W-IAP in the Remote AP whitelist and enable the FTP service on the controller. If the VPN setup fails and an error message is displayed, click OK, tab contents are displayed. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide W-IAP Maintenance | 357 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 358
contents are displayed. Figure 108 Stand-Alone W-IAP Conversion 3. Select Standalone AP from the drop-down list. 358 | W-IAP Maintenance Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 359
that the reset is completed. 4. Release the reset knob. The W-IAP reboots with the factory default settings. Rebooting the W-IAP If you encounter any problem with the W-IAPs, you can reboot all W-IAPs or a selected W-IAP in a network using the Instant UI. To reboot a W-IAP: 1. Click Maintenance in - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 360
to boot, the Unable to contact Access Points after reboot was initiated message is displayed. 5. Click OK. 360 | W-IAP Maintenance Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 361
SNMP on page 362 l Configuring SNMP Traps on page 364 SNMP Parameters for W-IAP Instant supports SNMPv1, SNMPv2, and SNMPv3 for reporting purposes only. A W-IAP cannot use Simple Network Protocol Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Monitoring Devices and Logs | 361 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 362
window that is displayed, click the Monitoring tab. Figure 110 Monitoring Tab: SNMP Configuration Parameters 362 | Monitoring Devices and Logs Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 363
)(config)# snmp-server user To view SNMP configuration: (Instant AP)# show snmp-configuration Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Monitoring Devices and Logs | 363 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 364
Address Version Name Port Inform Configuring SNMP Traps Instant supports the configuration of external trap receivers. Only the inform (Instant AP)(config)# end (Instant AP)# commit apply Instant supports SNMP Management Information Bases (MIBs) along with Dell-MIBs. For information about - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 365
application or operating system component that generates a log message. The following seven facilities are supported by Syslog: l AP-Debug-Detailed log about the W-IAP device. l Network- debugging. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Monitoring Devices and Logs | 365 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 366
a TFTP server for storing core dump files by using the Instant UI or the CLI. 366 | Monitoring Devices and Logs Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 367
to the respective command page in the Dell Networking W-Series Instant 6.5.0.0-4.3.0.0 CLI Reference Guide. (Instant AP) # show support-commands Support Commands Description ----------AP Tech Support Dump AP Tech Support Dump Supplemental AP Provisioning Status AP 3G/4G Status AP 802.1X Statistics - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 368
datapath show log l3-mobility show l3-mobility status show lacp status show log debug 368 | Monitoring Devices and Logs Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 369
-statistics termination show ap debug shaping-table show socket show ap debug stm-config show swarm state show ap debug system-status show summary support show uplink status show clients show valid-channels show version show ap virtual-beacon-report show vpn config show vpn status show vpn tunnels - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 370
About VC Active Configuration VC AirGroup Service VC AirGroup Status VC Allowed Restore Status VC Application Services VC Cloud Server Status debug cloud-restore-status show app-services show ap debug cloud-server support show log provision show radius-attributes show radius-servers support - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 371
xml-api-server show ap debug rfc3576-radius-statistics Use the support commands under the supervision of Dell technical support. Uplink Bandwidth Monitoring A W-IAP uses Iperf3 as a TCP ALE Stats Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Monitoring Devices and Logs | 371 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 372
--------Type Value ---- ----VC package 0 RSSI package 0 APPRF package 0 URLv package 0 STATE package 0 STAT package 0 UPLINK BW package 0 Total 0 372 | Monitoring Devices and Logs Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 373
Configuration on page 386 In the current release, Instant supports the hotspot profile configuration only through the CLI. clients, the client authenticates to access the network. Generic Advertisement Service (GAS) GAS is a request-response protocol, that provides Guide Hotspot Profiles | 373 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 374
supports the following IEs: l Interworking IE-Provides information about the Interworking service capabilities such as the Internet availability in a specific service provider Request l Re-Association request 374 | Hotspot Profiles Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 375
)# nai-home-realm (Instant AP)(nai-realm )# enable (Instant AP)(nai-realm )# end (Instant AP)# commit apply Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Hotspot Profiles | 375 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 376
-The associated numeric value is 2. l mschap-The associated numeric value is 3. l mschapv2-The associated numeric value is 4. 376 | Hotspot Profiles Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 377
>)# venue-lang-code (Instant AP)(venue-name )# enable (Instant AP)(venue-name )# end (Instant AP)# commit apply Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Hotspot Profiles | 377 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 378
associated numeric value is 0. l factory-The associated numeric value is 1. institutional l unspecified-The associated numeric value is 0. 378 | Hotspot Profiles Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 379
numeric value is 1. l grocery-market-The associated numeric value is 2. l auto-service-station-The associated numeric value is 3. l shopping-mall-The associated numeric value is -The associated numeric value is 6. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Hotspot Profiles | 379 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 380
as an IP address, FQDN or URL. l online-enrollment-When configured, the network supports the online enrollment. l http-redirect-When configured, additional information on the network is provided a 3GPP profile. 380 | Hotspot Profiles Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 381
is capable of operating. To configure an H2QP operating-class profile: (Instant AP)(config) # hotspot h2qp-oper-class-profile Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Hotspot Profiles | 381 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 382
-cons-oi-3 (Instant AP)(Hotspot2.0 )# venue-group (Instant AP)(Hotspot2.0 )# venue-type 382 | Hotspot Profiles Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 383
based Internet access in a coffee shop or a hotel offering chargeable in-room Internet access service. The corresponding integer value for this network type is 2. l free-public-This network is is 500 milliseconds. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Hotspot Profiles | 383 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 384
addressed frames. hessid Specify a Homogenous Extended Service Set Identifier (HESSID) in a hexadecimal support for P2P cross-connections. p2p-dev-mgmt Specify this parameter to advertise support hotspot profile. For more information about the supported venue types for each venue group, see Table - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 385
(Instant AP)(SSID Profile )# set-role-by-ssid (Instant AP)(SSID Profile )# end (Instant AP)# commit apply Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Hotspot Profiles | 385 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 386
)(connection-capabilities )# udp-voip (Instant AP)(connection-capabilities )# enable (Instant AP)(connection-capabilities )# exit 386 | Hotspot Profiles Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 387
with WLAN SSID: (Instant AP)# configure terminal (Instant AP)# wlan ssid-profile ssidProfile1 (Instant AP)(SSID Profile "ssidProfile1")# essid hsProf Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Hotspot Profiles | 387 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 388
AP)(SSID Profile "ssidProfile1")# hotspot-profile hs1 (Instant AP)(SSID Profile "ssidProfile1")# end (Instant AP)# commit apply 388 | Hotspot Profiles Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 389
389 Verifying ClearPass Guest Setup on page 392 Troubleshooting on page 392 Configuring ClearPass Guest To configure Administration > AirGroup Services. 2. Click Configure AirGroup Services. Figure 113 Configure AirGroup Services 3. Click Add 6.5.1.0-4.3.1.0 | User Guide ClearPass Guest Setup | 389 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 390
115 Create an AirGroup Administrator 4. Click Add. 5. Now click Add User to create an AirGroup Operator. 390 | ClearPass Guest Setup Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 391
is displayed. Use the AirGroup admin credentials to log in. 8. After logging in, click Create Device. Figure 118 Create a Device Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide ClearPass Guest Setup | 391 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 392
using the username that was added to the Shared With box. The OSX Mountain Lion/iOS 6 device should once again have access to the AppleTV. Troubleshooting Table 83: Troubleshooting 392 | ClearPass Guest Setup Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 393
Problem Limiting devices has no effect. Apple Macintosh running Mountain Lion can use AirPlay but iOS devices cannot. Solution Ensure IPv6 is disabled. Ensure IPv6 is disabled. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide ClearPass Guest Setup | 393 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 394
Primary and Backup Controllers for Redundancy on page 403 l Scenario 4-GRE: Single Datacenter Deployment with No Redundancy on page 408 Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide IAP-VPN Deployment Scenarios | 394 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 395
. For information on the UI procedures, see the topics referenced in the UI Procedure column. 395 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 396
AP)(config)# wlan auth-server server2 (Instant AP)(Auth Server "server2")# ip 10.2.2.2 (Instant AP)(Auth Server "server2")# port 1812 Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide IAP-VPN Deployment Scenarios | 396 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 397
")# rule any any match any any any permit For WLAN SSID: (Instant AP)(config)# wlan access-rule wireless-ssid See Configuring ACL Rules for Network Services 397 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 398
page 243. Ensure that the upstream router is configured with a static route pointing to the controller for the L3 VLAN. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide IAP-VPN Deployment Scenarios | 398 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 399
.30.0.0/16 subnet is reserved for L3 mode l Client count in each branch is 200 399 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 400
(Instant AP)(DHCP Profile "l3-dhcp")# domain-name corpdomain.com See Configuring Centralized DHCP Scopes and Configuring Distributed DHCP Scopes Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide IAP-VPN Deployment Scenarios | 400 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 401
guest (Instant AP)(SSID Profile "guest")# opmode opensystem (Instant AP)(SSID Profile "guest")# vlan 20 401 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 402
"guest")# rule any any match any any any permit See Configuring ACL Rules for Network Services NOTE: Ensure that you execute the commit apply command in the Instant CLI before saving for the L3 VLAN. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide IAP-VPN Deployment Scenarios | 402 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 403
corporate network. l 10.30.0.0/16 subnet is reserved for L3 mode -used by Employee SSID. 403 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 404
)(DHCP profile "l3-dhcp")# dns-server 10.1.1.50,10.1.1.30 See Configuring Distributed DHCP Scopes and Configuring Local DHCP Scopes Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide IAP-VPN Deployment Scenarios | 404 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 405
)(wired-port-profile "wired-port")# authserver server1 See Configuring a Wired Profile and Wireless Network Profiles 405 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 406
(Instant AP)(Access Rule "wired-port")# rule any any match any any any permit For WLAN SSID employee roles: See Configuring ACL Rules for Network Services Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide IAP-VPN Deployment Scenarios | 406 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 407
router-id (host)(config) # router ospf area 0.0.0.0 (host)(config) # router ospf redistribute rapng-vpn 407 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 408
W-Series Mobility Controller that acts as a GRE endpoint. n Manual GRE, which requires GRE tunnels to be explicitly configured on the Dell Networking W-Series Mobility Controller or any device that supports GRE termination. l Tunneling of all traffic to datacenter Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 409
GRE endpoint. Aruba GRE requires each W-IAP MAC to be present in the controller whitelist. Manual GRE requires GRE configuration for the IP of each W-IAP on the controller. (Instant AP)(config DHCP Scopes Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide IAP-VPN Deployment Scenarios | 409 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 410
AP)(SSID Profile "wireless-ssid")# authserver server1 (Instant AP)(SSID Profile "wireless-ssid")# authserver server2 410 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 411
")# rule any any match any any any permit See Configuring ACL Rules for Network Services NOTE: Ensure that you execute the commit apply command in the Instant CLI before saving used in this document. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide IAP-VPN Deployment Scenarios | 411 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 412
network, obtain a free Internet connection, and possibly gain access to company records and other resources. 412 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 413
a protocol often used when connecting a computer to the Internet. EAP can support multiple authentication mechanisms, such as token cards, smart cards, certificates, one-time electromagnetic spectrum. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide IAP-VPN Deployment Scenarios | 413 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 414
IAP is connected. Typically if a switch is in place and does not support PoE, midspan power injectors are used. Point-to-Point Protocol over Ethernet of protocols that handle remote authentication and related services for network access control through a centralized server 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 415
) using a wireless connection such as Wi-Fi. This type of ISP offers broadband service and allows subscriber computers, called stations, to access the Internet and the web from a wireless connection. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide IAP-VPN Deployment Scenarios | 415 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 416
Engine ALG Application Layer Gateway AM Air Monitor AMON Advanced Monitoring AMP AirWave Management Platform A-MPDU Aggregate MAC Protocol Data Unit A-MSDU Aggregate MAC Service Data Unit ANQP Access Network Query Protocol Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 417
Broadband Remote Access Server BRE Basic Regular Expression BSS Basic Service Set BSSID Basic Service Set Identifier BYOD Bring Your Own Device CA Certification Authority Gateway Interface 417 | Acronyms and Abbreviations Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 418
Interface CN Common Name CoA Change of Authorization CoS Class of Service CPE Customer Premises Equipment CPsec Control Plane Security CPU Central Processing DES Data Encryption Standard Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Acronyms and Abbreviations | 418 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 419
Inspection DR Designated Router DRT Downloadable Regulatory Table DS Differentiated Services DSCP Differentiated Services Code Point DSSS Direct Sequence Spread Spectrum DST Daylight Digest 5 419 | Acronyms and Abbreviations Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 420
Power EMM Enterprise Mobility Management ESI External Services Interface ESS Extended Service Set ESSID Extended Service Set Identifier EULA End User License FRER Frame Receive Error Rate Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Acronyms and Abbreviations | 420 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 421
-Speed Packet Access HT High Throughput HTTP Hypertext Transfer Protocol HTTPS Hypertext Transfer Protocol Secure IAS Internet Authentication Service ICMP Internet Control Message Protocol IdP Identity Provider IDS Intrusion Detection System IE Information Element 421 | Acronyms and - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 422
ISAKMP Internet Security Association and Key Management Protocol ISP Internet Service Provider JSON JavaScript Object Notation KBps Kilobytes per second Kbps Kilobits LED Light Emitting Diode Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Acronyms and Abbreviations | 422 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 423
MPLS Multiprotocol Label Switching MPPE Microsoft Point-to-Point Encryption MSCHAP Microsoft Challenge Handshake Authentication Protocol 423 | Acronyms and Abbreviations Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 424
Abbreviations Acronym or Abbreviation Definition MSS Maximum Segment Size MSSID Mesh Service Set Identifier MSTP Multiple Spanning Tree Protocol MTU Maximum Transmission Unit Object Identifier Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Acronyms and Abbreviations | 424 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 425
Master Key PoE Power over Ethernet POST Power On Self Test PPP Point-to-Point Protocol 425 | Acronyms and Abbreviations Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 426
Spanning Tree QoS Quality of Service RA Router Advertisement RADAR Radio Detection and Ranging RADIUS Remote Authentication Dial-In User Service RAM Random Access Memory RAP Control Protocol Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Acronyms and Abbreviations | 426 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 427
Small Computer System Interface SDN Software Defined Networking SDR Software-Defined Radio SDU Service Data Unit SD-WAN Software-Defined Wide Area Network SFTP Secure File Autoconfiguration 427 | Acronyms and Abbreviations Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 428
Protocol SoC System on a Chip SoH Statement of Health SSH Secure Shell SSID Service Set Identifier SSL Secure Sockets Layer SSO Single Sign-On STBC Space-Time Trivial File Transfer Protocol Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Acronyms and Abbreviations | 428 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 429
Protocol TLS Transport Layer Security TLV Type-length-value ToS Type of Service TPC Transmit Power Control TPM Trusted Platform Module TSF Timing Synchronization Function Networking 429 | Acronyms and Abbreviations Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 430
Wireless Intrusion Prevention System WISPr Wireless Internet Service Provider Roaming WLAN Wireless Local Area Network WME Wireless Multimedia Extensions WMI Windows Management Instrumentation Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Acronyms and Abbreviations | 430 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 431
Fi Multimedia WMS WLAN Management System WPA Wi-Fi Protected Access WSDL Web Service Description Language WWW World Wide Web WZC Wireless Zero Configuration XAuth Extended rate is 11 Mbps. 431 | Acronyms and Abbreviations Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 432
connected to the network. This database helps in preventing any two computers from being configured with the same IP address. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Acronyms and Abbreviations | 432 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 433
(PPP), a protocol often used when connecting a computer to the Internet. EAP can support multiple authentication mechanisms, such as token cards, smart cards, certificates, one-time passwords, and APs 433 | Acronyms and Abbreviations Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 434
is connected. Typically if a switch is in place and does not support PoE, midspan power injectors are used. Point-to-Point Protocol over protocols that handle remote authentication and related services for network access control through a centralized User Guide Acronyms and Abbreviations | 434 - Dell W-Series 207 | Instant 6.5.1.0-4.3.1.0 User Guide - Page 435
points) using a wireless connection such as Wi-Fi. This type of ISP offers broadband service and allows subscriber computers, called stations, to access the Internet and the web from anywhere connection. 435 | Acronyms and Abbreviations Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide
User Guide
Dell Networking W-Series
Instant
6.5.1.0-4.3.1.0