Dell W-Series 207 Instant 6.4.3.1-4.2 User Guide
Dell W-Series 207 Manual
 |
View all Dell W-Series 207 manuals
Add to My Manuals
Save this manual to your list of manuals |
Dell W-Series 207 manual content summary:
- Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 1
Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 2
logo, and PowerConnect™ are trademarks of Dell Inc. All rights reserved. Specifications in this manual are subject to change without notice. Originated in the USA. All other trademarks are the vendors. 0511793-01 | August 2015 Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 3
About this Guide Intended Audience Related Documents Conventions Contacting Dell About Instant Instant Overview Supported AP Platforms Instant UI Instant CLI What is New in this Release Support for New W-IAP Devices No Support for W-IAP92/93 Setting up a W-IAP Setting up Instant Network Connecting a - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 4
Main Window Banner Search Tabs Networks Tab Access Points Tab Clients Tab Links New Version Available System RF Security Maintenance More VPN IDS Wired Services DHCP Server Support Help Logout Monitoring Info RF Dashboard RF Trends 4| 43 44 45 45 47 47 47 47 47 48 48 48 48 49 49 50 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 5
an NTP Server 79 In the Instant UI 80 In the CLI 80 Enabling AppRF Visibility 80 Changing Password 80 Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide |5 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 6
Management 86 In the Instant UI 86 In the CLI 87 Customizing W-IAP Settings 88 Modifying the W-IAP Hostname 88 6| Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 7
Configuring ARM Assigned Radio Profiles for a W-IAP 91 Configuring Radio Profiles Manually for W-IAP 91 In the CLI 92 Configuring Uplink VLAN for a W-IAP with Non-Default IP 94 Viewing Master Election Details 94 Manual Provisioning of Master W-IAP 94 Provisioning a W-IAP as a Master W- - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 8
Fast BSS Transition (802.11r Roaming) 114 Configuring a W-IAP for 802.11r support 115 In the Instant UI 115 In the CLI 115 Example 115 Radio Resource Management Probe Responses 116 Configuring a WLAN SSID for 802.11k Support 116 In the Instant UI 116 In the CLI 116 Example 116 8| - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 9
Management (802.11v) Configuring a WLAN SSID for 802.11v Support In the Instant UI In the CLI Example Editing Status of Portal for Guest Access Understanding Captive Portal Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide 116 116 117 117 117 117 117 117 117 118 119 119 119 119 120 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 10
Guest Logon Role and Access Rules for Guest Users 145 In the Instant UI 145 In the CLI 146 10 | Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 11
Configuring Authentication Servers Supported Authentication Servers Internal RADIUS Server External RADIUS Server RADIUS Server Authentication with VSA TACACS Servers Dynamic Load Balancing between Two Authentication Servers Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide 146 147 147 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 12
In the CLI 177 Configuring MAC Authentication for a Network Profile 177 Configuring MAC Authentication for Wireless Network Profiles 178 12 | Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 13
In the Instant UI In the CLI Blacklisting Clients Blacklisting Clients Manually Adding a Client to the Blacklist In the Instant UI In Certificates Loading Certificates through W-AirWave Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide 178 178 179 179 179 179 180 180 180 180 180 181 181 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 14
Roles and Policies Firewall Policies Access Control List Rules Configuring ACL Rules for Network Services In the Instant UI In the CLI Example Configuring Network Address Translation Rules Configuring a 199 199 200 200 200 200 200 14 | Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 15
VSA Attributes MAC-Address Attribute Roles Based on Client Authentication DHCP Option and DHCP Fingerprinting Creating a Role Derivation Rule Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide 201 201 201 201 201 201 201 202 202 202 203 203 203 203 203 203 203 203 204 204 204 204 204 205 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 16
214 214 214 214 214 215 215 215 215 216 217 218 219 220 220 222 222 223 223 16 | Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 17
Supported VPN Protocols Configuring a Tunnel from a W-IAP to Dell Networking W-Series Mobility Controller Configuring an IPSec Tunnel In the Instant UI In the CLI Example Configuring an L2-GRE Tunnel Configuring Manual Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide 225 225 226 226 227 227 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 18
247 248 248 250 250 250 250 250 250 250 251 251 251 251 252 252 252 252 253 18 | Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 19
In the Instant UI In the CLI Example Configuring Web Policy Enforcement Service In the Instant UI In the CLI Example Voice and Video Wi- Mapping In the Instant UI In the CLI Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide 254 254 254 256 256 257 257 258 260 260 260 260 260 261 261 262 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 20
Services AirGroup Configuration Multicast DNS and Bonjour® Services DLNA UPnP Support AirGroup Features AirGroup Services AirGroup Components CPPM and ClearPass Guest Features Configuring AirGroup and AirGroup Services 288 288 288 20 | Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 21
(WIDS) Event Reporting to W-AirWave RF Visualization Support for Instant PSK-based and Certificate-based Authentication Communication Configuring Organization String Shared Key Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide 289 289 290 290 290 290 290 291 291 291 292 292 292 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 22
311 312 312 313 313 314 314 314 314 314 314 315 315 315 315 315 315 316 316 22 | Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 23
Spectrum Alerts Configuring Spectrum Monitors and Hybrid W-IAPs Converting a W-IAP to a Hybrid W-IAP In the Instant UI In the CLI Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide 318 318 318 319 323 324 326 326 326 326 327 327 327 328 328 329 329 330 330 330 330 331 332 332 332 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 24
UI In the CLI Upgrading a W-IAP Using Automatic Image Check Upgrading to a New Version Manually Upgrading an Image Using CLI Backing up and Restoring W-IAP Configuration Data Viewing Current Configuration Backing 352 352 353 353 354 24 | Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 25
the UI Hotspot Profiles Understanding Hotspot Profiles Generic Advertisement Service (GAS) Access Network Query Protocol (ANQP) Hotspot Associating Hotspot Profile Sample Configuration Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide 354 354 355 355 356 356 356 357 357 361 361 361 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 26
ClearPass Guest Setup Testing Troubleshooting IAP-VPN Deployment Scenarios Scenario 1-IPSec: Single Datacenter Deployment with No Redundancy Topology AP Configuration AP Connected Switch 390 393 393 394 394 395 397 397 398 398 399 26 | Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 27
Chapter 1 About this Guide This User Guide describes the features supported by Dell Networking W-Series Instant Access Point (W-IAP) and provides detailed instructions for setting up and configuring the Instant network. Intended Audience This guide is intended for administrators who configure and - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 28
informational icons are used throughout this guide: Indicates helpful suggestions, pertinent information, Support Information Support Main Website Contact Information Support Website Documentation Website dell.com dell.com/contactdell dell.com/support dell.com/support/manuals 28 | About this Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 29
network performance. Supported AP Platforms The following table provides a list of AP platforms that support Instant software: Table 3: Supported AP Platforms W- later W-IAP155/155P 6.2.1.0-3.3.0.0 or later Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide About Instant | 29 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 30
Layer-3 mobility enabled between these networks. The following table provides the variants supported for each W-IAP platform: Table 4: Supported W-IAP Variants W-IAP Model (Reg Domain) W-IAP###US (US only No Yes No 30 | About Instant Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 31
No Yes W-IAP104/105 Yes Yes No Yes For information on regulatory domains and the list of countries supported by the W-IAP-RW type, see Country Code on page 36. Instant UI The Instant User for 15 minutes. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide About Instant | 31 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 32
user. Dell service tag for Dell WIAPs The Instant UI now displays the Dell Service Tag for Dell W-IAPs. NOTE: This feature is not supported for some wlan ssidprofile command in Dell Networking W-Series Instant 6.4.3.x-4.2 CLI Reference Guide. Enable or disable 3G/4G USB You can now enable or - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 33
on an W-IAP. These server entries can be edited or deleted if required. Frame overlay prevention support for external captive portal users The Prevent frame overlay field is added to enable displaying of a the Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide About Instant | 33 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 34
For more information, see the web-server command in the Dell Networking W-Series Instant 6.4.3.x-4.2 CLI Reference Guide Support for New W-IAP Devices Instant 6.4.3.1-4.2.0.0 release introduces support for the following new W-IAP devices. These new devices do not interoperate with Instant versions - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 35
.11ac 5 GHz functionality, while simultaneously supporting existing 802.11a/b/g/n wireless services. W-IAP277 The W-IAP277 is an manually downgrade W-IAPs to an Instant 4.0 or 4.1 release, without losing the existing configuration. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 36
to the AC to DC power adapter. W-IAP155P supports PSE for 802.3at powered device (class 0-4) an IP address for a W-IAP: 1. Ensure that the DHCP service is enabled on the network. 2. Connect the ENET 0 port the switch or router. If there is no DHCP service on the network, the W-IAP can be assigned a - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 37
by a Virtual Controller. Moving a W-IAP from one cluster to another requires a factory reset of the W-IAP. 37 | Setting up a W-IAP Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 38
login screen, enter the following credentials: l Username- admin l Password- admin The following figure shows the Login screen: Figure 1 Login Screen Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Setting up a W-IAP | 38 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 39
down list displays only the supported country codes. If the W-IAP cluster consists of multiple AP platforms, the country codes supported by the master W-IAP Specifying a Country Code . You can also view the list of supported country codes for the W-IAP-RW variants using the show countrycodes command - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 40
The changes configured in a CLI session are saved in the CLI context. The CLI does not support the configuration data exceeding the 4K buffer size in a CLI session. Therefore, it is recommended uncommitted-config Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Setting up a W-IAP | 40 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 41
Access Point# commit apply Using Sequence Sensitive Commands The Instant CLI does not support positioning or precedence of sequence-sensitive commands. Therefore, it is recommended that you -of} no set-vlan 41 | Setting up a W-IAP Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 42
Table 8: Sequence-Sensitive Commands Sequence-Sensitive Command auth-server Corresponding no command no auth-server Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Setting up a W-IAP | 42 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 43
Managed Mode Parameters l Verifying the Configuration Managed Mode Operations W-IAPs support managed mode operations to retrieve the configuration file from a server through managed by W-AirWave. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Automatic Retrieval of Configuration | 43 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 44
from which the configuration file must be downloaded. (Instant AP)(managed-mode-profile)# server 44 | Automatic Retrieval of Configuration Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 45
2. Verify the status of download by running the following command at the command prompt: (Instant AP)# show managed-mode logs Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Automatic Retrieval of Configuration | 45 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 46
If the configuration settings retrieved in the configuration file are incomplete, W-IAPs reboot with the earlier configuration. 46 | Automatic Retrieval of Configuration Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 47
in to the Instant UI, enter the following credentials: l Username- admin l Password- admin The Instant UI main window is displayed. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Instant User Interface | 47 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 48
in each tab can be sorted by clicking the triangle icon next to the heading labels. 48 | Instant User Interface Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 49
devices such as microwaves and cordless phones. When Spectrum is enabled, the AP does not provide access services to clients. l Clients-Number of clients that are currently associated to the W-IAP. l Type 88. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Instant User Interface | 49 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 50
information about the New version available link and its functions, see Upgrading a W-IAP on page 340. 50 | Instant User Interface Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 51
specified using the Virtual Controller's internal authentication server. For more information about users, see Managing W-IAP Users on page 152. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Instant User Interface | 51 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 52
of Dell, and Copyright information. The About tab also displays the Dell Service Tag for the Dell WIAP. This feature is not supported for some earlier W-IAP models, including W-IAP92/93, W-IAP104/105, : 52 | Instant User Interface Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 53
l VPN l IDS l Wired l Services l DHCP Server l Support VPN The VPN window allows you to define communication settings with a remote Controller. See levels. The following figures show the IDS window: Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Instant User Interface | 53 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 54
. See Wired Profiles on page 119 for more information. The following figure shows the Wired window: 54 | Instant User Interface Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 55
AirGroup-Allows you to configure the AirGroup and AirGroup services. For more information, see AirGroup Configuration on Instant. For more information, see Configuring a W-IAP for RTLS Support on page 284. The RTLS tab also allows you to integrate | User Guide Instant User Interface | 55 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 56
9 Services Window: Default View DHCP Server The DHCP Servers window allows you to configure various DHCP modes. The following figure shows the contents of the DHCP Servers window: Figure 10 DHCP Servers Window For more information, see DHCP Configuration on page 215. Support The Support consists - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 57
a command is executed. l Save- Allows you to save the support command logs as an HTML or text file. For more information on support commands, see Running Debug Commands from the UI on page 357. the client. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Instant User Interface | 57 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 58
internal guest users. l Internal User Open Slots- Displays the available slots for user configuration as supported by the W-IAP model. Info section in Network view The Info section in the Network the W-IAP. 58 | Instant User Interface Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 59
: Figure 11 RF Dashboard in the Monitoring Pane The following table describes the icons available on the RF Dashboard pane: Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Instant User Interface | 59 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 60
speed is between 25-50 percent of the maximum speed supported by the client. l Red- Data transfer speed is less than 25 percent of the maximum speed supported by the client. To view the data transfer speed 60 | Instant User Interface Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 61
, this graph displays the incoming and outgoing throughput traffic for the selected network or W-IAP in the last 15 minutes. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Instant User Interface | 61 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 62
Figure 14 Usage Trends Graphs in the Default View 62 | Instant User Interface Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 63
Trends pane. For example, the graph shows 22.0 Kbps incoming traffic throughput for the selected network at 12:03 hours. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Instant User Interface | 63 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 64
APs heard by the selected WIAP: l Valid APs: An AP that is part of the enterprise providing WLAN service. l Interfering APs: An AP that is seen in the RF environment but is not connected to the network view. 64 | Instant User Interface Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 65
displayed. 3. Study the Throughput graph. For example, the graph shows 44.03 Kbps incoming traffic throughput at 12:08 hours. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Instant User Interface | 65 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 66
speed. The client view is displayed. 3. Study the Speed graph in the RF Trends pane. For 66 | Instant User Interface Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 67
displayed and a graph is drawn with real-time data points for the AP radio. If the AP supports dual band, you can toggle between 2.4GHz and 5 GHz links in the client match graph area to channels are displayed. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Instant User Interface | 67 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 68
, interference and the Signal-to-Noise and Interference Ratio (SNIR). Spectrum monitors display spectrum analysis data 68 | Instant User Interface Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 69
see Spectrum Monitor on page 332. Alerts Alerts are generated when a user encounters problems while accessing or connecting to a network. The alerts that are generated can be Active Faults l Fault History Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Instant User Interface | 69 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 70
. The following figures show the client alerts, fault history, and active faults: Figure 18 Client Alerts 70 | Instant User Interface Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 71
Actions 100101 Internal error The AP has encountered an Contact the Dell customer support internal error for this client. team. 100102 Unknown SSID in association request and try to associate again. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Instant User Interface | 71 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 72
failure Details Corrective Actions The AP cannot allow this client to associate because it does not support the 802.11 rate requested by this client. Check the configuration on the WIAP to log in again. 72 | Instant User Interface Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 73
- Displays the channel in which the foreign client is operating. n Type- Displays the Wi-Fi type of the foreign client. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Instant User Interface | 73 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 74
l Host Name-Displays the machine name or hostname of the AirGroup servers. l Service- Displays the type of the services such as AirPlay or AirPrint. l VLAN- Displays VLAN details of the AirGroup servers link. 74 | Instant User Interface Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 75
tab. Click the name of the W-IAP that you want to monitor. Access Point view for that W-IAP is displayed. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Instant User Interface | 75 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 76
is displayed. For more information on the graphs and the views, see Monitoring on page 57. 76 | Instant User Interface Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 77
page 159. Modifying the W-IAP Name You can change the name of a W-IAP by using the Instant UI or CLI. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Initial Configuration Tasks | 77 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 78
) messages with the static IP address and its MAC address to update the network ARP cache. 78 | Initial Configuration Tasks Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 79
you selected supports the daylight saving time. If the time zone selected does not support DST, security gaps, network usage, and troubleshoot network issues. l Validate certificates. l Maintain accurate time for billing services. The Network Time Protocol (NTP Guide Initial Configuration Tasks | 79 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 80
association, run the show clock and show process commands. Enabling AppRF Visibility If your W-IAP supports the AppRF feature, you can enable AppRF visibility to view the AppRF statistics for a WIAP or 80 | Initial Configuration Tasks Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 81
is in a different subnet. In the Instant UI 1. Navigate to System>General> Show advanced options. The advanced options are displayed. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Initial Configuration Tasks | 81 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 82
the Instant UI or CLI. In the Instant UI To enable or disable auto join mode: 82 | Initial Configuration Tasks Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 83
disabled, the W-IAP console cannot be accessed through the serial port. 3. Click OK. In the CLI To enable console access: Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Initial Configuration Tasks | 83 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 84
The following table describes the number of SSIDs supported on each platform: W-IAP Platform No. of SSIDs supported with Extended SSID disabled W-IAP175P/175AC, /175AC, W-IAP104/105, and W-IAP108/109) No. of SSIDs supported with Extended SSID enabled 8 16 84 | Initial Configuration Tasks Dell - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 85
AP) (SSID Profile )# deny-inter-user-bridging (Instant AP) (SSID Profile )# end (Instant AP)# commit apply Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Initial Configuration Tasks | 85 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 86
the default and recommended option. n Always disabled on all APs-When selected, this setting manually disables CPU management on all APs, typically for small networks. This setting protects user experience 86 | Initial Configuration Tasks Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 87
In the CLI (Instant AP)(config)# dynamic-cpu-mgmt {auto| enable| disable} Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Initial Configuration Tasks | 87 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 88
the Access Points tab, click the W-IAP for which you want to set the zone. The edit link is displayed. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Customizing W-IAP Settings | 88 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 89
or calculate additional attenuation between the device and antenna before configuring the antenna gain. To know if your AP device supports external antenna connectors, see the Install Guide that is shipped along with the AP device. EIRP and Antenna Gain The following formula can be used to calculate - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 90
antenna gain value. This option is available only for access points that support external antennas, for example, W-IAP134. 3. Enter the antenna gain can configure a radio profile on a W-IAP either manually or by using the Adaptive Radio Management (ARM) feature Guide Customizing W-IAP Settings | 90 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 91
Manually for W-IAP When radio settings are assigned manually by the administrator, the ARM is disabled. To manually and 5 GHz bands and set the channel and power manually if desired. The following table describes various configuration modes access services to clients. 91 | Customizing W- - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 92
-power> (Instant AP)# g-channel Configuring Uplink VLAN for a W-IAP Instant supports a management VLAN for the uplink traffic on a W-IAP. You can configure an uplink VLAN when a CLI. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Customizing W-IAP Settings | 92 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 93
network is elected as the Virtual Controller to replace it and the previous Virtual Controller reboots. 93 | Customizing W-IAP Settings Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 94
following commands: (Instant AP)# show election statistics (Instant AP)# show summary support Manual Provisioning of Master W-IAP In most cases, the master election process automatically determines OK. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Customizing W-IAP Settings | 94 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 95
the Instant UI. However, the master W-IAP details cannot be deleted from the Virtual Controller database. 95 | Customizing W-IAP Settings Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 96
message: Figure 26 Uplink VLAN Detection To resolve this issue, ensure that there is no mismatch in the VLAN configuration. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide VLAN Configuration | 96 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 97
used by the employees in an organization and it supports passphrase-based or 802.1X based authentication methods. network profile for devices that provide only voice services such as handsets or applications that require voice Instant 6.4.3.1-4.2.0.0 | User Guide Wireless Network Profiles | 97 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 98
advanced options link. The advanced options for configuration are displayed. Specify the following parameters as required. 98 | Wireless Network Profiles Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 99
created on that W-IAP. For more information on configuring zone details, see Configuring Zone Settings on a W-IAP on page 88. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Wireless Network Profiles | 99 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 100
effort traffic such as traffic from legacy devices or traffic from applications or devices that do not support QoS. l Video WMM-For video traffic generated from video streaming. l Voice WMM- For default. 100 | Wireless Network Profiles Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 101
(Instant AP)(SSID Profile )# wmm-best-effort-share (Instant AP)(SSID Profile )# wmm-video-dscp Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Wireless Network Profiles | 101 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 102
Virtual Controller. l Network assigned-On selecting this option, the IP address is obtained from the network. 102 | Wireless Network Profiles Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 103
see Configuring Security Settings for a WLAN SSID Profile on page 104. In the CLI To manually assign VLANs for WLAN SSID users: (Instant AP)(config)# wlan ssid-profile (Instant ssid-profile Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Wireless Network Profiles | 103 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 104
is Personal. The following figures show the configuration options for Enterprise, Personal, and Open security settings: 104 | Wireless Network Profiles Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 105
Figure 29 Security Tab: Enterprise Figure 30 Security Tab: Personal Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Wireless Network Profiles | 105 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 106
Figure 31 Security Tab: Open 2. Based on the security level specified, specify the following parameters: 106 | Wireless Network Profiles Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 107
of the EAP protocol, only relaying the innermost layer to the external RADIUS server. It can also Enterprise security level Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Wireless Network Profiles | 107 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 108
NOTE: If you are using LDAP for authentication, ensure that AP termination is configured to support EAP. Authentication server 1 and Authentication server 2 Select any of the following options from the . 108 | Wireless Network Profiles Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 109
format is used. NOTE: This option is available only when MAC authentication is enabled. Enterprise , Personal, and Open security levels. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Wireless Network Profiles | 109 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 110
WLAN Security Settings in an Employee or Voice Network Parameter Description Security Level Type Uppercase support Set to Enabled to allow the W-IAP to use uppercase letters in MAC address >)# blacklist 110 | Wireless Network Profiles Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 111
and configure VLAN and security parameters, before defining access rules. For more information, see Configuring WLAN Settings for an SSID Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Wireless Network Profiles | 111 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 112
rules for a specific user role. For more information, see Configuring ACL Rules for Network Services on page 189. You can also configure an access rule to enforce captive portal authentication for apply 112 | Wireless Network Profiles Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 113
) does not support this feature, a complete 802.1X authentication is required whenever a client roams to a new AP. Configuring a W-IAP for OKC Roaming You can enable OKC roaming for WLAN SSID by using Instant UI or CLI. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Wireless Network - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 114
authenticate with multiple APs in a cluster. As part of the 802.11r implementation, Instant supports the Fast BSS Transition protocol. The Fast BSS Transition mechanism reduces client roaming delay when a 114 | Wireless Network Profiles Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 115
to ensure Quality of Service (QoS) and seamless continuity. Instant supports the following radio resource management information elements with 802.11k support enabled: l Power of an IEEE 802.11 station. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Wireless Network Profiles | 115 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 116
seconds. Configuring a WLAN SSID for 802.11k Support You can enable 802.11k support on a WLAN SSID by using the Instant UI including BSS transition management. W-IAPs support the generation of the BSS transition a WLAN SSID for 802.11v Support You can enable 802.11v support on a WLAN SSID by using - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 117
link. The Edit network window is displayed. 3. Modify the settings as required. Click Next to move to the next tab. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Wireless Network Profiles | 117 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 118
displayed against the network to be deleted. 2. Click x. A delete confirmation window is displayed. 3. Click Delete Now. 118 | Wireless Network Profiles Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 119
Profile The Ethernet ports allow third-party devices such as VoIP phones or printers (which support only wired connections) to connect to the wireless network. You can also configure an as Uplink port. For more Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Wired Profiles | 119 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 120
downlink ports, regardless of forwarding mode. STP will not operate on the uplink port and is supported only on W-IAPs with three or more ports. By default Spanning Tree is disabled on wired Trunk mode is selected: 120 | Wired Profiles Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 121
only when both MAC authentication and 802.1X authentication are Enabled. l Select any of the following options for Authentication server 1: Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Wired Profiles | 121 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 122
Wired Profile The Ethernet ports allow third-party devices such as VoIP phones or printers (that support only wired connections) to connect to the wireless network. You can also configure an Access rule parameters. 122 | Wired Profiles Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 123
information on configuring access rules, see Configuring ACL Rules for Network Services on page 189. l Configure rules to assign roles for an clients based on whether the client device supports machine authentication. Select the Machine auth only 6.4.3.1-4.2.0.0 | User Guide Wired Profiles | 123 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 124
profile to Ethernet 0/1 port, select the profile from the 0/1 drop down list. d. If the W-IAP supports E2, E3 and E4 ports, assign profiles to other Ethernet ports by selecting a profile from the 0/2, 0/3, profile: 124 | Wired Profiles Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 125
to provide additional bandwidth or link redundancy between two devices. W-IAP supports link aggregation using either standard port-channel (configuration based) or Link Count 0 0 0 1 0 0 non-wifi 2 17 Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Wired Profiles | 125 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 126
APs. This AP (called the root AP) acts as the wired device for the network, provides DHCP service and an L3 connection to the ISP uplink with NAT. The root AP is always the master of the 32 Hierarchical Deployment 126 | Wired Profiles Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 127
authentication, an internal server is used for hosting the captive portal service. It supports the following types of authentication: n Internal Authenticated- When Internal to access the Internet. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Captive Portal for Guest Access | 127 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 128
hotel website) and all its contents. The users who do not sign up for the Internet service can view only the "allowed" websites (typically hotel property websites). The administrators can allow or block | Captive Portal for Guest Access Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 129
and maximum transmission rate. The default value for minimum transmission rate is 6 Mbps and maximum transmission rate is 54 Mbps. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Captive Portal for Guest Access | 129 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 130
best effort traffic such as traffic from legacy devices or traffic from applications or devices that do not support QoS. l Video WMM-For video traffic generated from video streaming. l Voice WMM- For voice Captive Portal for Guest Access Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 131
type client IP assignment mode selected, you can configure the VLAN assignment for clients as described in the following table: Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Captive Portal for Guest Access | 131 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 132
)# g-max-tx-rate (Instant AP)(SSID Profile )# g-min-tx-rate 132 | Captive Portal for Guest Access Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 133
thresh (Instant AP)(SSID Profile )# max-clients-threshold To manually assign VLANs for WLAN SSID users: (Instant AP)(config)# wlan ssid-profile (Instant Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Captive Portal for Guest Access | 133 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 134
ports, regardless of forwarding mode. STP will not operate on the uplink port and is supported only on W-IAPs with three or more ports. By default Spanning Tree is disabled on | value-of} 134 | Captive Portal for Guest Access Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 135
server is used for hosting the captive portal service. You can configure internal captive portal authentication option is available only when MAC authentication is enabled. Uppercase support Set to Enabled to allow the W-IAP to use uppercase letters User Guide Captive Portal for Guest Access | 135 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 136
of 0-60, to allow APs to periodically post accounting information to the RADIUS server. 136 | Captive Portal for Guest Access Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 137
)# type (Instant AP) (wired ap profile )# captive-portal {| } exclude-uplink {3G|4G|Wifi|Ethernet} Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Captive Portal for Guest Access | 137 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 138
New. The New pop-up window is displayed. 3. Specify values for the following parameters: 138 | Captive Portal for Guest Access Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 139
an external captive portal profile: (Instant AP)(config)# wlan external-captive-portal [profile_name] (Instant AP)(External Captive Portal)# server Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Captive Portal for Guest Access | 139 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 140
format is used. NOTE: This option is available only when MAC authentication is enabled. 140 | Captive Portal for Guest Access Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 141
Table 27: External Captive Portal Configuration Parameters Parameter Description Uppercase support Set to Enabled to allow the W-IAP to use (Instant AP)(SSID Profile )# blacklist Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Captive Portal for Guest Access | 141 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 142
in the server response and RADIUS server (either ClearPass Guest or a different RADIUS server). 142 | Captive Portal for Guest Access Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 143
web login page, see the RADIUS Services section in the ClearPass Guest Deployment Guide. Configuring RADIUS Server in Instant UI To specified used while configuring the RADIUS server. Configuring Facebook Login Instant supports the Facebook Wi-Fi feature that allows the captive portal clients using - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 144
help available at https://www.facebook.com/help l Setting up and using Facebook Wi-Fi service, see https://www.facebook.com/help/126760650808045 Configuring an SSID You can a configure guest network | Captive Portal for Guest Access Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 145
gain access to the Facebook page. 5. Customize the session length and terms of service if required. 6. Click Save Settings. Accessing the Portal Page To access the portal role. For more information, see Configuring ACL Rules for Network Services on page 189. You can also configure an access rule to - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 146
role assignment rule. For more information, see Configuring Derivation Rules on page 206. Instant supports role derivation based on the DHCP option for captive portal authentication. When the captive portal Portal for Guest Access Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 147
. 5. In the New Rule window, specify the following parameters. The following figures show the parameters for captive portal role configuration: Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Captive Portal for Guest Access | 147 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 148
box, and click OK. Ensure that the policy text does not exceed 255 characters. 148 | Captive Portal for Guest Access Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 149
AP)(Access Rule )# captive-portal {external [profile ]|internal} (Instant AP)(Access Rule )# end (Instant AP)# commit apply Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Captive Portal for Guest Access | 149 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 150
who do not sign up for the Internet service can view the allowed websites (typically hotel property websites). The website names must be DNS-based and support the option to define wildcards. This works | Captive Portal for Guest Access Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 151
keys for authorized access. 4. If required, configure the security parameters. 5. Click Next and then click Finish to apply the changes. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Captive Portal for Guest Access | 151 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 152
information: l Managing W-IAP Users on page 152 l Supported Authentication Methods on page 156 l Supported Authentication Servers on page 159 l Understanding Encryption Types user database only Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Authentication and User Management | 152 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 153
used when a W-IAP is configured as an internal RADIUS server. The local user database of APs can support up to 512 user entries. In the Instant UI To configure users: 1. Click the Security at the 153 | Authentication and User Management Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 154
through the Instant UI or CLI. In the Instant UI 1. Navigate to System > Admin. The Admin tab details are displayed. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Authentication and User Management | 154 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 155
] To configure guest management administrator credentials: (Instant AP)(config)# mgmt-user [password] guest-mgmt 155 | Authentication and User Management Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 156
a Username and Password. 4. Retype the password to confirm. 5. Click OK. Supported Authentication Methods Authentication is a process of identifying a user by through a valid user authentication Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Authentication and User Management | 156 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 157
Supported EAP Authentication Frameworks on page 158. 802.1X authentication method allows a W-IAP to authenticate the identity of a user before providing network access to the user. The Remote Authentication Dial In User Service of a machine matches a manually defined list of addresses. This Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 158
is also authenticated on your hotspot's own ISP as per their service agreements. The W-IAP assigns the default WISPr user role to the Protocol-Transport Layer Security (EAP-TLS) method supports the termination of EAP-TLS security using the Guide Authentication and User Management | 158 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 159
EAP-Microsoft Challenge Authentication Protocol version 2 (MS-CHAPv2)- This EAP method is widely supported by Microsoft clients. A RADIUS server must be used as the back-end authentication server. 159 | Authentication and User Management Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 160
to the RADIUS packet. Instant supports the following external authentication servers: l RADIUS (Remote Authentication Dial-In User Service) l LDAP (Lightweight Directory Access Tunnel-Packets-Lost Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Authentication and User Management | 160 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 161
l Aruba-User-Role l Aruba-User-Vlan l Aruba-WorkSpace-App-Name l Authentication-Sub-Type l Authentication-Type 161 | Authentication and User Management Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 162
l Framed-Protocol l Framed-Route l Framed-Routing l Full-Name l Group l Group-Name l Hint l Huntgroup-Name l Idle-Timeout l Location-Capable l Location-Data Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Authentication and User Management | 162 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 163
l Login-IP-Host l Login-IPv6-Host l Login-LAT-Node l Login-LAT-Port l Login-LAT-Service l Login-Service l Login-TCP-Port l Menu l Message-Auth l NAS-IPv6-Address l NAS-Port-Type l Operator- Id 163 | Authentication and User Management Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 164
these profiles to the user accounts to enable authenticatication of the management users. TACACS+ supports the following types of authentication: l ASCII l PAP l CHAP l ARAP l server: Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Authentication and User Management | 164 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 165
Attribute 4, NAS IP Address, without changing source IP Address in IP header of RADIUS packet. 165 | Authentication and User Management Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 166
). Admin password Enter a password for administrator. Base-DN Enter a distinguished name for the node that contains the entire user database. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Authentication and User Management | 166 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 167
CoA (Change of Authorization), select the CoA only checkbox. The RADIUS server is automatically selected. 167 | Authentication and User Management Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 168
>)# base-dn (Instant AP)(LDAP Server )# filter (Instant AP)(LDAP Server )# key-attribute Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Authentication and User Management | 168 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 169
RadSec. Separate ports are not used for authentication, accounting and dynamic authorization changes. l Instant supports dynamic CoA (RFC 3576) over RadSec and the RADIUS server uses an existing TLS connection opened and User Management Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 170
> (Instant AP)(wired ap profile )# auth-server (Instant AP)(wired ap profile )# end (Instant AP)# commit apply Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Authentication and User Management | 170 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 171
. Enabling Dynamic RADIUS Proxy You can enable RADIUS Server Support using the Instant UI or CLI. In the Instant UI To enable RADIUS server support: 1. In the Instant main window, click the System 171 | Authentication and User Management Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 172
Configuring Security Settings for a Wired Profile on page 121. In the CLI To associate an authentication server to a WLAN SSID: Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Authentication and User Management | 172 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 173
integrity check (MIC). l AES-The Advanced Encryption Standard (AES) encryption algorithm a widely supported encryption type for all wireless networks that contain any confidential data. AES in Wi-Fi Authentication and User Management Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 174
within a potentially encrypted and authenticated Transport Layer Security (TLS) tunnel. The EAP-PEAP supports the MSCHAPv2 and GTC methods. l EAP-TLS: EAP-Transport Layer Security (EAP-TLS . Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Authentication and User Management | 174 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 175
-survivability cached-info To view logs for debugging: (Instant AP)# show auth-survivability debug-log 175 | Authentication and User Management Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 176
Configuring 802.1X Authentication for a Network Profile The Instant network supports internal RADIUS server and external RADIUS server for 802.1X authentication. click Finish to apply the changes. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Authentication and User Management | 176 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 177
that you do not use the MAC-based authentication. This section describes the following procedures: 177 | Authentication and User Management Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 178
To allow the W-IAP to use uppercase letters in the MAC address string, set Uppercase support to Enabled. 8. Configure other parameters as required. 9. Click Next to define access config)# end Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Authentication and User Management | 178 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 179
on page 180 l Configuring MAC and 802.1X Authentication for Wired Profiles on page 180 179 | Authentication and User Management Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 180
Enabled from the 802.1X authentication drop-down list. l Select Enabled from the MAC authentication fail-thru drop-down list. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Authentication and User Management | 180 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 181
] [exclude-uplink ]} (Instant AP)(SSID Profile )# set-role-mac-auth 181 | Authentication and User Management Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 182
ap profile )# end (Instant AP)# commit apply Configuring WISPr Authentication Instant supports the following smart clients: n iPass n Boingo These smart clients enable client is used. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Authentication and User Management | 182 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 183
. To support Boingo clients Manual Blacklisting, and then click Delete. In the CLI To blacklist a client: (Instant AP)(config)# blacklist-client (Instant AP)(config)# end 183 | Authentication and User Management Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 184
(Instant AP)(config)# end (Instant AP)# commit apply To view the blacklisted clients: (Instant AP)# show blacklist-client config Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Authentication and User Management | 184 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 185
Blacklist Time :60 Auth Failure Blacklist Time :60 Manually Blacklisted Clients MAC Time --- ---Dynamically Blacklisted Clients MAC Reason Timestamp Remaining time(sec) AP IP Dyn Blacklist Count :0 185 | Authentication and User Management Dell Networking W- - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 186
so that a recipient can ensure that the certificate is real. Instant supports the following certificate files: l Authentication server (PEM format) l Captive or captive portal certificate: Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Authentication and User Management | 186 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 187
either Intermediate CA or Trusted CA certificate Type, if you want to upload a CA certificate. 187 | Authentication and User Management Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 188
to W-AirWave. Click Save and Apply to apply the changes to the W- IAP. 6. To clear the certificate options, click Revert. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Authentication and User Management | 188 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 189
the frequency at which clients re-authenticate. Instant supports the following types of ACLs: l ACLs that Services This section describes the procedure for configuring ACLs to control access to network services. For information on: Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 190
l Configuring access rules based on web categories and web reputation, see Configuring Web Policy Enforcement Service on page 269. In the Instant UI To configure ACL rules for a user role: 1. this option, 190 | Roles and Policies Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 191
Access Rule Configuration Parameters Service Category Description specify the a log entry to be created when this rule is triggered. Instant supports firewall based logging. Firewall logs on the W-IAPs are generated as security Series Instant 6.4.3.1-4.2.0.0 | User Guide Roles and Policies | 191 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 192
private network IP addresses to a public address space. Instant supports the NAT mechanism to allow a routing device to use is configured with Source NAT action, the users can specify the service, protocol, or destination to which the source NAT is applied. Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 193
any destination or service to be configured Destination NAT Access Rule Instant supports configuration of the destination NAT destination port. Destination-NAT configuration is supported only in the bridge mode without VPN . d. Select a service from the list of available services. e. Select the - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 194
ua-disable (Instant AP)(ALG)# no vocera-disable (Instant AP)(ALG)# end (Instant AP)# commit apply 194 | Roles and Policies Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 195
status: (Instant AP)# show attack config Current Attack Attack Status drop-bad-arp Enabled fix-dhcp Enabled poison-check Enabled Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Roles and Policies | 195 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 196
poison check counter 0 garp send check counter 0 Managing Inbound Traffic Instant now supports an enhanced inbound firewall by allowing the configuration of firewall rules and management subnets, is displayed. 196 | Roles and Policies Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 197
of the source network. Destination Select a destination option for the access rules for network services, applications, and application categories. You can allow or deny access to any the of the destination Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Roles and Policies | 197 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 198
checkbox if you want a log entry to be created when this rule is triggered. Instant supports firewall based logging function. Firewall logs on the W-IAPs are generated as security logs. Blacklist 631 permit 198 | Roles and Policies Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 199
To configure restricted corporate access: 1. Navigate to Security > Inbound Firewall. The Inbound Firewall (see Figure 44) tab contents are displayed. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Roles and Policies | 199 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 200
Instant. The content filtering configuration applies to all W-IAPs in the network and the service is enabled or disabled globally across the wireless or wired network profiles. Enabling Content page 98. 200 | Roles and Policies Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 201
can configure an enterprise domain through the Instant UI or CLI. In the Instant UI To manually add a domain: 1. Navigate to System > General, click Show advanced options > Enterprise Instant AP)# commit apply Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Roles and Policies | 201 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 202
type as Access Control. 4. To set an access policy based on the web category: a. Under Services, select Web category and expand the Web categories drop-down. Figure 45 b. Select the categories to -rule>")# end 202 | Roles and Policies Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 203
> (Instant AP) (Access Rule "")# dpi-error-page-url (Instant AP) (Access Rule "")# end (Instant AP)# commit apply Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Roles and Policies | 203 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 204
bandwidth configuration per SSID will be treated as a per-user downstream bandwidth contract for that SSID. 204 | Roles and Policies Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 205
User Auth only role-This indicates a known user or a non-Windows device. The device does not support machine authentication or does not have a RADIUS account, but the user is logged in and authenticated. CLI. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Roles and Policies | 205 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 206
the rule. For more information on configuring access rules, see Configuring ACL Rules for Network Services on page 189. 3. Select Enforce Machine Authentication and select the Machine auth only and User a2. 206 | Roles and Policies Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 207
New under Wired Networks to create a new network or click Edit to select an existing profile. 2. Click the Access tab. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Roles and Policies | 207 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 208
160. 5. Select the operator from the Operator drop-down list. The following types of operators are supported: l contains- The rule is applied only if the attribute value contains the string specified in Operand . 208 | Roles and Policies Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 209
. l The DHCP-based VLANs can be derived for captive portal authentication. Instant supports role derivation based on the DHCP option for captive portal authentication. When the captive -Accept packets with VSA Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Roles and Policies | 209 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 210
for authentication, the RADIUS server may return a reply message for authentication. If the RADIUS server supports return attributes, and sets an attribute value to the reply message, the W-IAP can analyze 210 | Roles and Policies Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 211
. 4. Select the operator from the Operator drop-down list. The following types of operators are supported: l contains- The rule is applied only if the attribute value contains the string specified in in Operand. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Roles and Policies | 211 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 212
. [ ] Matches any one character listed between the brackets. For example, [bc]lock matches block and clock. 212 | Roles and Policies Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 213
, linkdown, shutdown. \B Matches the middle of a word. For example, \Bvice matches services, devices, serviceID, deviceID, and so on. ^ Matches the characters at starting position in Profile on page 214 Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Roles and Policies | 213 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 214
> | contains }|value-of} (Instant AP)(SSID Profile )# end (Instant AP)# commit apply 214 | Roles and Policies Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 215
for Client IP Assignment on page 222 Configuring DHCP Scopes The virtual controller supports different modes of DHCP address assignment. With each DHCP address assignment mode, various Scope window is displayed. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide DHCP Configuration | 215 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 216
minutes. The default value is 720 minutes. Option Specify the type and a value for the DHCP option. You can configure the organization-specific DHCP options supported by the DHCP server. For example, 176, 242, and 161. To add multiple DHCP options, click the + icon. 4. Click OK. In the CLI To - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 217
be excluded from those assigned to clients, so that they are assigned statically. Instant supports the following distributed DHCP scopes: l Distributed, L2-In this mode, the Virtual Controller scope. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide DHCP Configuration | 217 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 218
DHCP scope, specify the subnet mask. The subnet mask and the network determine the size of subnet. 218 | DHCP Configuration Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 219
Specify the type and a value for the DHCP option. You can configure the organization-specific DHCP options supported by the DHCP server. For example, 176, 242, 161, and so on. To add multiple -router Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide DHCP Configuration | 219 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 220
,L2 profile, select the profile type as Centralized,L2 or Centralized,L3 and configure the following parameters. 220 | DHCP Configuration Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 221
-Type l Remote Agent; X IDUE-MAC NOTE: The Option 82 string is specific to Alcatel and is not configurable. 4. Click OK. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide DHCP Configuration | 221 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 222
access to more number of clients. The largest address pool supported is 2048. The default size of the IP address pool is you experience problems with the Virtual Controller Assigned networks after upgrading to Dell Networking W-Series Instant 6.2.1.0-3.4 or later, manually configure - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 223
(Instant AP)(DHCP)# subnet-mask To view the DHCP database: (Instant AP)# show ip dhcp database Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide DHCP Configuration | 223 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 224
DHCP Subnet :192.0.2.0 DHCP Netmask :255.255.255.0 DHCP Lease Time(m) :20 DHCP Domain Name :example.com DHCP DNS Server :192.0.2.1 224 | DHCP Configuration Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 225
the W-IAP network does not require a physical controller to provide the configured WLAN services. However, a physical controller is required for terminating Virtual Private Networks (VPN) non-corporate networks. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide VPN Configuration | 225 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 226
server. Dell GRE reduces manual configuration when Per-AP tunnel configuration is required and supports failover between two GRE end-points. NOTE: W-IAPs support manual and Dell GRE configuration only on page 231 226 | VPN Configuration Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 227
, after which the W-IAP can determine that the VPN connection is unavailable. The default value is 2. Figure 52 IPSec Configuration Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide VPN Configuration | 227 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 228
Tunnel This section describes the following procedures: l Configuring Manual GRE Parameters l Configuring Dell GRE Parameters Configuring Manual GRE Parameters To configure a GRE tunnel between the W- W-IAP IP. 228 | VPN Configuration Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 229
the GRE tunnel configuration on the controller, see ArubaOSUser Guide. In the Instant UI To configure a GRE tunnel in the UI: 1. Click the More > VPN link at the top right corner of the Instant UI. The Tunneling window is displayed. 2. Select Manual GRE from the Protocol drop-down list. 3. Specify - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 230
configuration on the W-IAP. For Dell GRE, no manual configuration is required on the controller to create the GRE tunnel. DellGRE is supported only on Dellcontrollers running ArubaOS 6.4.x.x or later versions IAP. 230 | VPN Configuration Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 231
Authentication (RFC 3931) for tunnel and session establishment. Each L2TPv3 tunnel supports one data connection and this connection is termed as an L2TPv3 session. l Each W-IAP supports tunneling over UDP only. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide VPN Configuration | 231 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 232
primary tunnel goes down, it does not make the primary tunnel active again. l L2TPV3 is not supported on W-IAP205 devices. You can configure an L2TPv3 tunnel and session profiles through the Instant UI or . 232 | VPN Configuration Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 233
corresponding network mask and VLAN ID. This is required to reach an AP from a corporate network. For example, SNMP polling. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide VPN Configuration | 233 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 234
(Instant AP)(L2TPv3 Tunnel Profile "test_tunnel")# end (Instant AP) # commit apply (Instant AP)(config) # l2tpv3 session test_session 234 | VPN Configuration Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 235
.11.29 to 10.13.11.157:state: ESTABLISHED created at: Jul 2 04:58:25 2013 administrative name: 'test_tunnel' (primary) Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide VPN Configuration | 235 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 236
do pmtu discovery: OFF, mtu: 1460 framing capability: SYNC ASYNC bearer capability: DIGITAL ANALOG use tiebreaker: OFF 236 | VPN Configuration Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 237
: 1. Click Routing in the Tunneling window. The routing details are displayed. 2. Click New. The route parameters to configure are displayed. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide VPN Configuration | 237 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 238
(Instant AP)(Routing-profile)# route (Instant AP)(Routing-profile)# end (Instant AP)# commit apply 238 | VPN Configuration Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 239
W-3600 8000 8000 64000 W-6000M3 8000 8000 64000 W-7210 8000 8000 64000 W-7220 W-7240 16000 32000 16000 32000 N/A N/A 128000 128000 Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide IAP-VPN Deployment | 239 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 240
client traffic is not translated at source. In the local l2 mode, access to the corporate network is supported only in a single WIAP cluster. The traffic to the non-corporate network is locally bridged. Local L3 240 | IAP-VPN Deployment Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 241
. Either the controller or an upstream router can be the gateway for the clients. For DHCP services in centralized L2 mode, it is recommended that you use an external DHCP server and not the from the DHCP server. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide IAP-VPN Deployment | 241 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 242
the VPN host settings 2. Configuring Routing Profiles 3. Configuring DHCP Profiles 4. Configuring an SSID or Wired Port 242 | IAP-VPN Deployment Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 243
IAP to Dell Networking W-Series Mobility Controller on page 226. l IPSec l Aruba GRE l Manual GRE Configuring Routing Profiles The routing profile on the W-IAP determines whether the traffic destined to mode of Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide IAP-VPN Deployment | 243 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 244
for an SSID or wired port profile is not set to default as the VPN tunnel is not supported on the default VLAN. For information on how to configure an SSID or wired port profile, see l Branch-ID Allocation 244 | IAP-VPN Deployment Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 245
for the IAP-VPN configuration. The IAP-VPN configuration is not supported on W-600 Series controllers. OSPF Configuration Open Shortest Path First ( work independently. For sample topology and configuration, see ArubaOS User Guide. To redistribute IAP-VPN routes into the OSPF process, use - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 246
. 1. Add the MAC addresses for all the W-IAPs in the Active Directory of the RADIUS server: 246 | IAP-VPN Deployment Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 247
in the branch and the controller should agree upon a subnet/IP addresses to be used for DHCP services in the branch. The process or protocol used by the master AP and the controller to determine the IAP cluster Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide IAP-VPN Deployment | 247 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 248
internal VPN IP of the branch. Assigned Subnet Displays the subnet mask assigned to the branch. 248 | IAP-VPN Deployment Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 249
L2 or L3 subnets. The show iap table command output does not display the Key and Bid(Subnet Name) details. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide IAP-VPN Deployment | 249 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 250
RF conditions change. Voice Aware Scanning The Voice Aware scanning feature prevents a W-IAP supporting an active voice call from scanning for other channels in the RF spectrum and allows RF health state. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Adaptive Radio Management | 250 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 251
-mode {| ||} (Instant AP)(ARM)# end (Instant AP)# commit apply 251 | Adaptive Radio Management Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 252
and deauthenticates the client. Legacy 802.11a/b/g access points do not support the client match feature. When client match is enabled on 802.11n assist or load balancing features. 802.11ac-capable access points do not support the legacy band steering, station hand off or load balancing settings, so - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 253
measures the RF health of its associated clients. In the current release, the client match feature is supported only within a W-IAP cluster. If any of the following trigger conditions is met, clients are 253 | Adaptive Radio Management Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 254
. In the Instant UI 1. For Access Point Control, specify the following parameters in the RF > ARM >Show advanced options tab: Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Adaptive Radio Management | 254 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 255
supported by the AP model, this value is reduced to the highest supported supported by the AP model, the value is reduced to the highest supported transmission. 80 MHz Support Enables or disables the support a very high throughput. This setting is enabled by default. NOTE: Only the APs that support - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 256
-5ghz Client Aware :enable Scanning :enable Wide Channel Bands :5ghz 80Mhz Support :enable Air Time Fairness Mode :fair-access Client Match :disable CM NB disable 4+ disable 5+ disable 6+ disable 7+ enable Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Adaptive Radio Management | 256 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 257
. You can specify a value within the range of 60-500. The default value is 100 milliseconds. 257 | Adaptive Radio Management Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 258
Select Enabled to allow the APs in access mode to continue with normal access service to clients, while performing additional function of monitoring RF interference (from both Profile)# max-tx-power Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Adaptive Radio Management | 258 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 259
Channel Reuse Type:disable Channel Reuse Threshold:0 Background Spectrum Monitor:disable Standalone Spectrum Band:5ghz-upper 259 | Adaptive Radio Management Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 260
deep packet inspection and a cloud-based Web Policy Enforcement service that allows creating firewall policies based on types of application for analyzing client traffic flow. W-IAPs support both the power of in-device packet flow | User Guide Deep Packet Inspection and Application Visibility | 260 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 261
Deep Packet Inspection (DPI) application and Web Policy Enforcement service, which provides application traffic summary for the client devices usage trend in the last 15 minutes. The application charts are not supported on W-IAP104/105, W-IAP134/135, W-IAP175P/175AC, and WIAP3WN/3WNP | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 262
. On clicking in the rectangle area, you can view the following graphs and toggle between the chart and list views. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Deep Packet Inspection and Application Visibility | 262 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 263
Figure 63 Application Chart - Client View Figure 64 Application List - Client View 263 | Deep Packet Inspection and Application Visibility Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 264
between the chart and list views. Figure 66 Web Categories Chart - Client View Figure 67 Web Categories List - Client View Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Deep Packet Inspection and Application Visibility | 264 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 265
69 Web Reputation Chart - Client View Figure 70 Web Reputation List - Client View 265 | Deep Packet Inspection and Application Visibility Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 266
and application category is not supported on W-IAP104/105, W-IAP134/135, and W-IAP3WN/3WNP platforms. 6. Based on the selected service category, configure the following parameters: Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Deep Packet Inspection and Application Visibility - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 267
l instant-messaging l mail-protocols l mobile-app-store l network-service l peer-to-peer l social-networking l standard l streaming to high risk sites. If your W-IAP model does not support configuring access rules based on application or application category, you can 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 268
network services rules. Destination Select a destination option for the access rules for network services, applications log entry when this rule is triggered. Instant supports firewall based logging function. Firewall logs on the W- Guide Deep Packet Inspection and Application Visibility | 268 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 269
rule type as Access Control. 4. To set an access policy based on the web category: a. Under Services, select Web category and expand the Web categories drop-down. Figure 72 b. Select the categories to which and Application Visibility Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 270
about each of these categories, visit the BrightCloud® Security Services web page at http://www.brightcloud.com/tools/change-request- be created when this rule is triggered. Instant supports firewall based logging function. Firewall logs on the Guide Deep Packet Inspection and Application Visibility | - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 271
(Instant AP) (Access Rule "URLFilter")# end (Instant AP)# commit apply 271 | Deep Packet Inspection and Application Visibility Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 272
based on the IEEE 802.11e wireless Quality of Service (QoS) standard. WMM works with 802.11a, b, g, and n physical layer standards. WMM supports the following access categories (ACs): l Voice l and voice traffic. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Voice and Video | 272 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 273
devices or traffic from applications or devices that do not support QoS. l Video WMM-Allocates bandwidth for video traffic .11e standard defines the mapping between WMM ACs and Differentiated Services Codepoint (DSCP) tags.You can customize the mapping values Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 274
analysis of the actual traffic. Instant identifies and prioritizes voice and video traffic from applications such as Microsoft Office Lync. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Voice and Video | 274 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 275
5061 permit log classify-media (Instant AP)(example_lync_test)#rule any any match any any any permit 275 | Voice and Video Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 276
services from mobile devices in an efficient manner. Zero configuration networking enables service specific VLAN cannot discover service that resides on another AirGroup services that solution supports both services. W-IAP queries CPPM to map each device's access privileges to the available services - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 277
Enables Personal Device Sharing AirGroup is not supported on a 3G and PPPoE uplinks. Multicast DNS and Bonjour® Services Bonjour is the trade name for the W-IAP about the other Bonjour-enabled services in the network. 277 | Services Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 278
of supported Bonjour services, see AirGroup Services on page 280. DLNA UPnP Support In addition to the mDNS protocol, W-IAPs now support Universal figure illustrates DLNA UPnP Services and AirGroup Architecture. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Services | 278 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 279
such as the marketing department. l AirGroup is aware of the location of services when CPPM support is enabled. For example, depending on proximity, a user would be , and personal services available to mobile devices. 279 | Services Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 280
do not support the enforcement of shared location policy. AirGroup Services AirGroup supports zero configuration services. The services are pre- services, see Configuring AirGroup and AirGroup Services on a W-IAP on page 282. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Services - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 281
options offered by the AirGroup services. The components that make up services across VLANs and SSIDs. The following table summarizes the filtering options supported service policy Yes Yes enforcement User-role based AirGroup service CPPM and ClearPass Guest support the following features: - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 282
, select the Enable Bonjour checkbox and select the AirGroup services related to Bonjour as required. 4. To enable DLNA support, select the Enable DLNA checkbox and select the DLNA services. 5. To allow the users to use Bonjour services enabled in a guest VLAN, select Enable Guest Bonjour multicast - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 283
: (Instant AP)(config)# airgroup (Instant AP)(airgroup)# enable dlna-only (Instant AP)(airgroup)# end (Instant AP)# commit apply To enable support for Bonjour services: (Instant AP)(config)# airgroup (Instant AP)(config)# enable mdns-only (Instant AP)(airgroup)# end (Instant AP)# commit apply To - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 284
create a CoA only server in the Services > AirGroup > Clear Pass Settings > CoA server window. Configuring a W-IAP for RTLS Support Instant supports the real-time tracking of devices when configure Aruba RTLS: Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Services | 284 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 285
link at the top right corner of the Instant main window. The Services window is displayed. 2. Click the RTLS tab. The following figure shows the > include-unassoc-sta (Instant AP)(config)# end (Instant AP)# commit apply 285 | Services Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 286
ALE support using the Instant UI or CLI. In the Instant UI 1. Click More > Services. The Services window is displayed. 2. Click the RTLS tab. The tab details are displayed. 3. Select the Analytics & Location Engine checkbox. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Services - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 287
Figure 79 Services Window -ALE Integration 4. Specify the ALE server name or IP address. 5. the Instant UI or CLI. In the Instant UI To configure OpenDNS credentials: 1. Click More > Services > OpenDNS. The OpenDNS tab contents are displayed. 2. Enter the Username and Password to enable access - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 288
can configure a W-IAP for PAN firewall integration using the Instant UI or CLI. In the Instant UI 1. Click More > Services. The Services window is displayed. 2. Click Network Integration. The PAN firewall configuration options are displayed. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 289
Figure 80 Services Window - Network Integration Tab 3. Select the Enable checkbox to enable PAN firewall. 4. Specify the user create and execute user management operations seamlessly on behalf of the clients or users. 289 | Services Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 290
user or a client. The user authentication is supported only for users authenticated by captive portal authentication support the configuration of up to 4 XML API server entries. In the Instant UI 1. Click More > Services. The Services , the service providers (SPs) are required to support LI in - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 291
if lawful interception is authorized by a law enforcement agency. CALEA Server Integration To support CALEA integration and ensure LI compliance, you can configure the W-IAPs to replicate a to the CALEA server through VPN. 291 | Services Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 292
wired profile. 3. Verify the configuration. Creating a CALEA Profile You can create a CALEA profile by using the Instant UI or CLI. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Services | 292 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 293
the CALEA server. l Encapsulation type- Specify the encapsulation type. The current release of Instant supports GRE only. l GRE type- Specify the GRE type. l MTU- Specify a size Rule window is displayed. 4. Select CALEA. 293 | Services Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 294
-Test")# rf-band 5.0 (Instant AP)(SSID Profile"Calea-Test")# captive-portal disable (Instant AP)(SSID Profile"Calea-Test")# dtim-period 1 Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Services | 294 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 295
AP)# show calea statistics Rt resolve fail : 0 Dst resolve fail: 0 Alloc failure : 0 Fragged packets : 0 Jumbo packets : 263 Total Tx fail : 0 Total Tx ok : 263 295 | Services Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 296
proactive alerts, historical reporting, and fast, efficient troubleshooting. It also offers tools that manage RF updates such that updating is completed without requiring you to manually monitor the devices. The following models can be used to User Guide W-IAP Management and Monitoring | 296 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 297
Detection System (WIDS) Event Reporting to W-AirWave W-AirWave supports Wireless Intrusion Detection System (WIDS) Event Reporting, which is to-use tool for automatic detection of unauthorized wireless devices. It supports multiple methods of rogue detection and uses authorized wireless APs to report - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 298
-based and Certificate-based Authentication On the DHCP server, two formats for option 43 are supported: l ,,- If you choose this format, the W-IAP 63:60# commit apply Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide W-IAP Management and Monitoring | 298 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 299
Shared Key The Shared Secret key is an optional field used by the administrator to manually authorize the first Virtual Controller for an organization. Any string is acceptable. Configuring . 299 | W-IAP Management and Monitoring Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 300
> IPv4. 2. Right-click IPv4 and select Set Predefined Options. Figure 85 Instant and DHCP options for W-AirWave: Set Predefined Options Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide W-IAP Management and Monitoring | 300 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 301
basis to override the global options.) 6. Right-click Server Options and select the configuration options. 301 | W-IAP Management and Monitoring Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 302
the following in ASCII field: l airwave-orgn, airwave-ip, airwave-key; for example: Dell,192.0.2.20, 12344567 l airwave-orgn, airwave-domain; for example: Dell, dell.support.com Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide W-IAP Management and Monitoring | 302 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 303
option overrides the global option. Figure 90 Instant and DHCP options for W-AirWave: Scope Options 303 | W-IAP Management and Monitoring Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 304
DHCP options 60 and 43 for other services. Some networks use DHCP standard options 60 and 43 to provide the DHCP clients information about certain services such as PXE. In such an view this group. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide W-IAP Management and Monitoring | 304 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 305
Figure 92 W-AirWave-New Group Figure 93 W-AirWave -Monitor 305 | W-IAP Management and Monitoring Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 306
-Fi Uplink on page 312 l Uplink Preferences and Switching on page 313 Uplink Interfaces Instant network supports Ethernet, 3G and 4G USB modems, and the Wi-Fi uplink to provide access to the corporate a client. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Uplink Configuration | 306 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 307
Virtual Controller. An SSID created with default VLAN is not supported with PPPoE uplink. You can also configure an alternate Ethernet PPPoE section: a. Enter the PPPoE service name provided by your service provider in the Service name field. b. In the CHAP Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 308
-uplink-profile (Instant AP)(pppoe-uplink-profile)# pppoe-svcname (Instant AP)(pppoe-uplink-profile)# pppoe-username - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 309
&T's Shockwave) l Compass 597(Sierra) (Sprint) l U597 (Sierra) (Verizon) l Tstick C597(Sierra) (Telecom(NZ)) l Ovation U727 (Novatel) (Sprint) 309 | Uplink Configuration Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 310
Israel) l Huawei E180, E1692,E1762 (Optus (Aus)) l Huawei E1731 (Airtel-3G (India)) l Huawei E3765 (Vodafone (Aus)) l Huawei E3765 (T-Mobile (Germany) Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Uplink Configuration | 310 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 311
Germany)) l Huawei D41HW l ZTE AC2726 The following table lists the supported 4G modems. l Netgear U340 l Netgear Aircard 341u l Fraklin IAP for changes to affect. In the CLI To configure 3G/4G uplink manually: (Instant AP)(config) # cellular-uplink-profile (Instant AP)(cellular-uplink- Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 312
AP)(cellular-uplink-profile)# modem-isp (Instant AP)(cellular-uplink (Instant AP)# show cellular config Wi-Fi Uplink The Wi-Fi uplink is supported on all the W-IAP models, except for the 802.11ac AP models (IAP- Instant 6.4.3.1-4.2.0.0 | User Guide Uplink Configuration | 312 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 313
the current uplink fails, the W-IAP tries to find an available uplink based on the priority configured. 313 | Uplink Configuration Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 314
a higher priority uplink even if the current uplink is active. You can enable uplink preemption using Instant UI or CLI. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Uplink Configuration | 314 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 315
lower priority uplink if the current uplink is down. Switching Uplinks Based on VPN Status Instant supports switching uplinks based on the VPN status when deploying multiple uplinks (Ethernet, 3G/4G, and . 315 | Uplink Configuration Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 316
LOAD 6 No 3G/4G INIT 7 No Internet failover :disable Max allowed test packet loss:10 Secs between test packets :30 Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Uplink Configuration | 316 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 317
:disable Max allowed test packet loss:10 Secs between test packets :30 VPN failover timeout (secs) :180 317 | Uplink Configuration Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 318
company network. OS Fingerprinting is enabled in the Instant network by default. The following operating systems are identified by Instant: Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Intrusion Detection | 318 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 319
. The following levels of detection can be configured in the WIP Detection page: l Off l Low l Medium l High 319 | Intrusion Detection Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 320
Networks l Detect Valid SSID Misuse l Detect Wireless Bridge l Detect 802.11 40MHz intolerance settings l Detect Active 802.11n Greenfield Mode Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Intrusion Detection | 320 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 321
Signature- ASLEAP The following levels of detection can be configured in the WIP Protection page: l Off l Low 321 | Intrusion Detection Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 322
l Protect AP Impersonation The following table describes the detection policies that are enabled in the Client Protection Custom settings field. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Intrusion Detection | 322 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 323
wireless containments to prevent unauthorized stations from connecting to your Instant network. Instant supports the following types of containment mechanisms: l Wired containment- When enabled, contained. 323 | Intrusion Detection Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 324
(Instant AP)(IDS)# detect-cts-rate-anomaly (Instant AP)(IDS)# detect-rts-rate-anomaly (Instant AP)(IDS)# detect-invalid-addresscombination Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Intrusion Detection | 324 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 325
)# protect-valid-sta (Instant AP)(IDS)# protect-windows-bridge (Instant AP)(IDS)# end (Instant AP)# commit apply 325 | Intrusion Detection Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 326
to the mesh portal. Instant mesh functionality is supported only on dual radio W-IAPs only. On 2.4 GHz radio is always used for client traffic. Mesh service is automatically enabled on 802.11a band for dual-radio could have multiple mesh portals to support redundant mesh paths (mesh links between - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 327
service services such as client connectivity, intrusion detection system (IDS) capabilities, user role association, and Quality of Service (QoS) for LAN-to-mesh communication to clients and performs mesh backhaul/network connectivity. Mesh point also supports supported support supports support - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 328
-profile when eth0 is used as the downlink port. For more information, see the Configuring a Wired Profile on page 119 Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Mesh W-IAP Configuration | 328 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 329
from the Instant network to which it first connected (home network) to another network supporting the same WLAN access parameters (foreign network) and continue its existing sessions. Layer-3 Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Mobility and Client Management | 329 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 330
link. The advanced options are displayed. 3. Click L3 Mobility. The L3 Mobility window is displayed. 330 | Mobility and Client Management Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 331
-mobility)# subnet (Instant AP)(L3-mobility)# end (Instant AP)# commit apply Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Mobility and Client Management | 331 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 332
interference. The spectrum monitor software modules on WIAPs that support this feature are able to examine the radio frequency monitors (SMs) are W-IAP radios that gather spectrum data but do not service clients. Each SM scans and analyzes the spectrum band used by the SM Guide Spectrum Monitor | 332 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 333
affected by the wireless device. Signal-strength Strength of the signal sent from the device, in dBm. 333 | Spectrum Monitor Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 334
-handset and 2.4 GHz for Handset-to-base). These phones may be classified as unique Frequency Hopper devices on both bands. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Spectrum Monitor | 334 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 335
channels in the selected band, and hybrid APs display data from the one channel they are monitoring. 335 | Spectrum Monitor Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 336
can display data for all channels in their selected band, hybrid APs display data for their one monitored channel only. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Spectrum Monitor | 336 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 337
spectrum monitor or hybrid AP, and the timestamp. Virtual Controller reports the detailed device information to AMP. 337 | Spectrum Monitor Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 338
provide normal access service to clients, while providing the additional function of monitoring RF interference. If any W-IAP in the Instant network does not support the spectrum monitoring a spectrum monitor: Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Spectrum Monitor | 338 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 339
Count:0 Channel Reuse Type:disable Channel Reuse Threshold:0 Background Spectrum Monitor:disable Standalone Spectrum Band:5ghz-upper 339 | Spectrum Monitor Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 340
loaded with latest versions of Instant software. Upgrading a W-IAP and Image Server Instant supports mixed AP-class instant deployment with all APs as part of the same Virtual Controller window is displayed. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide W-IAP Maintenance | 340 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 341
upgrading is in progress. n Upgrade successful-When the upgrading is successful. n Upgrade failed-When the upgrading fails. 341 | W-IAP Maintenance Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 342
an image file: 1. Navigate to Maintenance>Firmware. The Firmware window is displayed. 2. Under Manual section, perform the following steps: l Select the Image file option. This method is only when required. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide W-IAP Maintenance | 342 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 343
Configuration to confirm restoration. The configuration is restored and the W-IAP reboots to load the new configuration. 343 | W-IAP Maintenance Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 344
IL Y X X X Y Y Y X X X Y Y Y X X X Y Y Y X X X Y Y Y X X X Y Y Y X X X Y Y 6.4.3.0 or later 6.4.3.0 or later 6.4.3.0 or later 6.4.2.0 or later 6.4.1.0 or later 6.4 or later Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide W-IAP Maintenance | 344 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 345
W-IAP then establishes an IPSEC connection with the controller and begins operating in the Remote AP mode. 345 | W-IAP Maintenance Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 346
page 340. A mesh point cannot be converted to Remote AP, because mesh access points do not support VPN connection. A W-IAP can be converted to a Campus AP and Remote AP only if the tab contents are displayed. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide W-IAP Maintenance | 346 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 347
IAPs to function as Remote APs, configure the W-IAP in the Remote AP whitelist and enable the FTP service on the controller. If the VPN setup fails and an error message is displayed, click OK, copy is displayed. 347 | W-IAP Maintenance Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 348
link in the Instant main window. 2. Click the Convert tab. The Convert tab is displayed. Figure 109 Standalone AP Conversion Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide W-IAP Maintenance | 348 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 349
APs have a reset button, except IAP-175P/175AC. Contact Dell support for resetting these W-IAPs. Rebooting the W-IAP If you encounter any problem with the W-IAPs, you can reboot all W-IAPs or a the Reboot tab. 349 | W-IAP Maintenance Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 350
the system fails to boot, the Unable to contact Access Points after reboot was initiated message is displayed. 5. Click OK. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide W-IAP Maintenance | 350 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 351
SNMP on page 352 l Configuring SNMP Traps on page 354 SNMP Parameters for W-IAP Instant supports SNMPv1, SNMPv2c, and SNMPv3 for reporting purposes only. A W-IAP cannot use SNMP to set Protocol Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Monitoring Devices and Logs | 351 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 352
SNMP configuration parameters displayed in the Monitoring tab. Figure 111 Monitoring Tab: SNMP Configuration Parameters 352 | Monitoring Devices and Logs Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 353
)(config)# snmp-server user To view SNMP configuration: (Instant AP)# show snmp-configuration Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Monitoring Devices and Logs | 353 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 354
Version Name Port Inform Configuring SNMP Traps Instant supports the configuration of external trap receivers. Only the inform (Instant AP)(config)# end (Instant AP)# commit apply Instant supports SNMP Management Information Bases (MIBs) along with Dell-MIBs. For information about MIBs - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 355
an application or operating system component that generates a log message. The following seven facilities are supported by Syslog: l AP-Debug- Detailed log about the AP device. l Network- Log about . Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Monitoring Devices and Logs | 355 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 356
link. The System window is displayed. 2. Click Show advanced options to display the advanced options. 356 | Monitoring Devices and Logs Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 357
information on these commands, see the respective command page in the Dell Networking W-Series Instant CLI Reference Guide. Support Commands Description ----------AP Tech Support Dump AP Tech Support Dump Supplemental AP Provisioning Status AP 3G/4G Status AP 802.1X Statistics AP Access Rule Table - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 358
show log convert show log driver show log kernel show log network show log pppd 358 | Monitoring Devices and Logs Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 359
show ap debug stm-config show swarm state show ap debug system-status show summary support show uplink status show clients show valid-channels show version show ap virtual-beacon-report channel-summa Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Monitoring Devices and Logs | 359 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 360
Active Configuration VC AirGroup Service VC AirGroup Status VC Status VC Application Services VC Cloud Server -restore-st show app-services show ap debug cloud support show log provision show radius-attributes show radius-servers support support commands under the supervision of Dell technical support - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 361
Configuration on page 374 In the current release, Instant supports the hotspot profile configuration only through the CLI. Understanding address, and IP address availability using the Generic Advertisement Service (GAS) action frames. l Based on the response User Guide Hotspot Profiles | 361 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 362
supports the following IEs: l Interworking IE-Provides information about the Interworking service capabilities such as the Internet availability in a specific service provider Request l Re-Association request 362 | Hotspot Profiles Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 363
)# nai-home-realm (Instant AP)(nai-realm )# enable (Instant AP)(nai-realm )# end (Instant AP)# commit apply Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Hotspot Profiles | 363 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 364
-The associated numeric value is 2. l mschap-The associated numeric value is 3. l mschapv2-The associated numeric value is 4. 364 | Hotspot Profiles Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 365
)# end (Instant AP)# commit apply You can specify any of the following venue groups and the corresponding venue types: Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Hotspot Profiles | 365 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 366
The associated numeric value is 5. l unspecified-The associated numeric value is 0. l hospital-The associated numeric value is 1. 366 | Hotspot Profiles Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 367
numeric value is 1. l grocery-market-The associated numeric value is 2. l auto-service-station-The associated numeric value is 3. l shopping-mall-The associated numeric value is -The associated numeric value is 6 Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Hotspot Profiles | 367 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 368
as an IP address, FQDN or URL. l online-enrollment-When configured, the network supports the online enrollment. l http-redirect-When configured, additional information on the network is provided a 3GPP profile. 368 | Hotspot Profiles Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 369
class profile: (Instant AP)(config) # hotspot h2qp-oper-class-profile (Instant AP)(operator-class )# op-class Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Hotspot Profiles | 369 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 370
>)# venue-type (Instant AP)(Hotspot2.0 )# enable (Instant AP)(Hotspot2.0 )# end (Instant AP)#commit apply 370 | Hotspot Profiles Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 371
based Internet access in a coffee shop or a hotel offering chargeable in-room Internet access service. The corresponding integer value for this network type is 2. l free-public -This network groupaddressed frames. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Hotspot Profiles | 371 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 372
Description hessid Specify a Homogenous Extended Service Set Identifier (HESSID) in support for P2P Cross Connections. p2p-dev-mgmt Specify this parameter to advertise support with this hotspot profile. For more information about the supported venue types for each venue group, see Table 71. - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 373
-by-ssid (Instant AP)(SSID Profile )# hotspot-profile (Instant AP)(SSID Profile # end (Instant AP)# commit apply Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Hotspot Profiles | 373 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 374
-cons-len-1 3 (Instant AP)(Hotspot2.0 "hs1")# roam-cons-oi-1 123456 (Instant AP)(Hotspot2.0 "hs1")# roam-cons-len-2 3 374 | Hotspot Profiles Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 375
-by-ssid (Instant AP)(SSID Profile "ssidProfile1")# hotspot-profile hs1 (Instant AP)(SSID Profile "ssidProfile1")# end (Instant AP)# commit apply Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Hotspot Profiles | 375 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 376
ClearPass Guest, navigate to Administration > AirGroup Services. 2. Click Configure AirGroup Services. Figure 114 Configure AirGroup Services 3. Click Add a new controller. Users Selection 2. Click Add User. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide ClearPass Guest Setup | 376 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 377
. The AirGroup Administrator and AirGroup Operator IDs will be displayed in the Local Users UI screen. 377 | ClearPass Guest Setup Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 378
- Register Shared Device For this test, add your AppleTV device name and MAC address but leave all other fields empty. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide ClearPass Guest Setup | 378 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 379
Table 74: Troubleshooting Problem Limiting devices has no effect. Apple Macintosh running Mountain Lion can use AirPlay but iOS devices cannot. Solution Ensure IPv6 is disabled. Ensure IPv6 is disabled. 379 | ClearPass Guest Setup Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 380
Primary and Backup Controllers for Redundancy on page 389 l Scenario 4-GRE: Single Datacenter Deployment with No Redundancy on page 394 Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide IAP-VPN Deployment Scenarios | 380 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 381
information on the UI procedures, see the topics referenced in the UI Navigation Details column. 381 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 382
ports to operate in L2 mode and associate centralized L2 mode VLAN 20 to the wired port profile. See Configuring a Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide IAP-VPN Deployment Scenarios | 382 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 383
"wireless-ssid")# rule any any match any any any permit See Configuring ACL Rules for Network Services NOTE: Ensure that you execute the commit apply command in the Instant CLI before saving the 383 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 384
page 244. Ensure that the upstream router is configured with a static route pointing to the controller for the L3 VLAN. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide IAP-VPN Deployment Scenarios | 384 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 385
.30.0.0/16 subnet is reserved for L3 mode l Client count in each branch is 200 385 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 386
Routing Profiles See Configuring Routing Profiles See Configuring Enterprise Domains See Configuring Centralized DHCP Scopes and Configuring Distributed DHCP Scopes Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide IAP-VPN Deployment Scenarios | 386 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 387
internal captive portal use case using external authentication server. You can also use an external 387 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 388
"guest")# rule any any match any any any permit See Configuring ACL Rules for Network Services NOTE: Ensure that you execute the commit apply command in the Instant CLI before saving for the L3 VLAN. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide IAP-VPN Deployment Scenarios | 388 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 389
corporate network. l 10.30.0.0/16 subnet is reserved for L3 mode -used by Employee SSID. 389 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 390
.1.1.30 (ap)(DHCP profile "l3-dhcp")# domain-name corpdomain.com See Configuring Distributed DHCP Scopes and Configuring Local DHCP Scopes Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide IAP-VPN Deployment Scenarios | 390 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 391
(ap)(config)# enet1-port-profile wired-port See Configuring a Wired Profile and Wireless Network Profiles 391 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 392
any any match any any any permit For WLAN SSID contractor roles: (ap)(config)# wlan access-rule wireless-ssidcontractor See Configuring ACL Rules for Network Services Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide IAP-VPN Deployment Scenarios | 392 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 393
router-id (host)(config) # router ospf area 0.0.0.0 (host)(config) # router ospf redistribute rapng-vpn 393 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 394
W-Series Mobility Controller that acts as a GRE endpoint. n Manual GRE, which requires GRE tunnels to be explicitly configured on the Dell Networking W-Series Mobility Controller or any device that supports GRE termination. l Tunneling of all traffic to datacenter Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 395
used, or GRE configuration for the IP of the each W-IAP on the controller for Manual GRE. (ap)(config)# gre per-ap-tunnel See Enabling Automatic Configuration of GRE Tunnel and Centralized DHCP Scopes Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide IAP-VPN Deployment Scenarios | 395 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 396
-port")# rule any any match any any any permit See Configuring ACL Rules for Network 396 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 397
ssid (ap)(Access Rule "wireless-ssid")# rule any any match any any any permit Services NOTE: Ensure that you execute the commit apply command in the Instant CLI before )# tunnel vlan Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide IAP-VPN Deployment Scenarios | 397 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 398
Layer Security W-IAP Instant Access Point IDS Intrusion Detection System IEEE Institute of Electrical and Electronics Engineers ISP Internet Service Provider LEAP Lightweight Extensible Authentication Protocol MX Mail Exchanger MAC Media Access Control NAS Network Access Server NAT - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 399
Enhanced Mail PoE Power over Ethernet RADIUS Remote Authentication Dial In User Service VC Virtual Controller VSA Vendor-Specific Attributes WLAN Wireless Local Area Network data transfer rate is 11 Mbps. 399 | Terminology Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 400
connected to the network. This database helps in preventing any two computers from being configured with the same IP address. Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Terminology | 400 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 401
(PPP), a protocol often used when connecting a computer to the Internet. EAP can support multiple authentication mechanisms, such as token cards, smart cards, certificates, one-time passwords, the switch and APs 401 | Terminology Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 402
is connected. Typically if a switch is in place and does not support PoE, midspan power injectors are used. Point-to-Point Protocol over Ethernet of protocols that handle remote authentication and related services for network access control through a centralized server | User Guide Terminology | 402 - Dell W-Series 207 | Instant 6.4.3.1-4.2 User Guide - Page 403
points) using a wireless connection such as Wi-Fi. This type of ISP offers broadband service and allows subscriber computers, called stations, to access the Internet and the web from anywhere a wireless connection. 403 | Terminology Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
-
340
-
341
-
342
-
343
-
344
-
345
-
346
-
347
-
348
-
349
-
350
-
351
-
352
-
353
-
354
-
355
-
356
-
357
-
358
-
359
-
360
-
361
-
362
-
363
-
364
-
365
-
366
-
367
-
368
-
369
-
370
-
371
-
372
-
373
-
374
-
375
-
376
-
377
-
378
-
379
-
380
-
381
-
382
-
383
-
384
-
385
-
386
-
387
-
388
-
389
-
390
-
391
-
392
-
393
-
394
-
395
-
396
-
397
-
398
-
399
-
400
-
401
-
402
-
403
 |
 |
User Guide
Dell Networking W-Series
Instant
6.4.3.1-4.2.0.0