Dell PowerConnect W-IAP3WN/P User Manual Page 1

User GuideDell Networking W-Series Instant 6.4.0.2-4.1

10 | Contents Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideEditing a Wired Profile 117Deleting a Wired Profile 118Link Aggregation Control

100 | Wireless Network Profiles DellNetworking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 36 Security Tab: PersonalFigure 37 Security Tab: Open2.

Parameter DescriptionSecurity LevelTypeKeyManagementFor Enterprise security level, select any of the following options from theKey management drop-dow

102 | Wireless Network Profiles DellNetworking W-Series Instant 6.4.0.2-4.1 | User GuideParameter DescriptionSecurity LevelTypel RADIUSServerl LDAP S

Parameter DescriptionSecurity LevelTypeDelimitercharacterSpecify a character (for example, colon or dash) as a delimiter for the MACaddress string. W

104 | Wireless Network Profiles DellNetworking W-Series Instant 6.4.0.2-4.1 | User Guide(Instant AP)(SSID Profile <name>)# blacklist(Instant AP)

before defining access rules. For more information, see Configuring WLAN Settings for an SSID Profile on page 93,Configuring VLAN Settings for a WLAN

106 | Wireless Network Profiles DellNetworking W-Series Instant 6.4.0.2-4.1 | User Guide(Instant AP)(SSID Profile <name>)# end(Instant AP)# comm

Configuring a W-IAP for OKC RoamingYou can enable OKC roaming for WLANSSID by using Instant UI or CLI.In the Instant UI1. Navigate to the WLAN wizard

108 | Wireless Network Profiles DellNetworking W-Series Instant 6.4.0.2-4.1 | User GuideAs part of the 802.11r implementation, Instant supports the Fa

lExtended Capabilities IE- The extended capabilities IE carries information about the capabilities of an IEEE802.11 station.Beacon Report Requests and

Configuring Captive Portal Roles for an SSID 135In the Instant UI 135In the CLI 137Configuring Walled Garden Access 138In the Instant UI 138In the CLI

110 | Wireless Network Profiles DellNetworking W-Series Instant 6.4.0.2-4.1 | User GuideConfiguring a WLANSSID for 802.11v SupportYou can enable 802.

2. Click the edit link. The Edit network window is displayed.3. Modify the required settings. Click Next to move to the next tab.4. Click Finish to sa

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide Wired Profiles | 112Chapter 9Wired ProfilesThis chapter describes the following procedures:l

113 | Wired Profiles Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 38 New Wired Network Window: Wired Settings Window3. Click the Wi

(Instant AP)(wired ap profile <name>)# uplink-enable(Instant AP)(wired ap profile <name>)# content-filtering(Instant AP)(wired ap profile

115 | Wired Profiles Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide(Instant AP)# commit applyTo configure a new VLAN assignment rule:(Insta

Configuring Access Rules for a Wired ProfileThe Ethernet ports allow third-party devices such as VoIP phones or printers (that support only wired conn

117 | Wired Profiles Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide(Instant AP)(config)# wired-port-profile <name>(Instant AP)(wired

1. Click the Wired link under More at the top right corner of the Instant main window. The Wired window isdisplayed.2. In the Wired window, select the

119 | Wired Profiles Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide--------------------------Radio Num Enet 0 Tx Count Enet 1 Tx Count-----

12 | Contents Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide802.1X authentication with Captive Portal Role 148WISPr authentication 148Suppo

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide Captive Portal for Guest Access | 120Chapter 10Captive Portal for Guest AccessThis chapter p

121 | Captive Portal for Guest Access Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guidel External captive portal— For external captive portal

Parameters DescriptionDynamic multicast optimizationSelect Enabled to allow W-IAP to convert multicast streams into unicast streamsover the wireless l

123 | Captive Portal for Guest Access Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideParameters DescriptionBand Select a value to specify th

Client IP Assignment Client VLAN AssignmentVirtual Controller assigned If the Virtual Controller assigned is selected for client IP assignment, the Vi

125 | Captive Portal for Guest Access Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide(Instant AP)(SSID Profile <name>)# rf-band {<2

l Trunk — Select this mode to allow the port to carry packets for multiple VLANs specified as allowedVLANs.b. Specify any of the following values for

127 | Captive Portal for Guest Access Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideIn the Instant UI1. Navigate to the WLAN wizard or Wire

Parameter DescriptionDisable if uplink type is To exclude uplink, select an uplink type.Encryption(Applicable for WLAN SSIDsonly.)Select Enabled to co

129 | Captive Portal for Guest Access Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide(Instant AP)(config)# wlan captive-portal(Instant AP)(C

In the CLI 164Configuring 802.1X Authentication for Wired Profiles 164In the Instant UI 165In the CLI 165Configuring MAC Authentication for a Network

Parameter DescriptionName Enter a name for the profile.Type Select any one of the following types of authentication:l Radius Authentication - Select t

131 | Captive Portal for Guest Access Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideConfiguring an SSID or Wired Profile to Use External Ca

Parameter DescriptionWalled gardenClick the link to open the Walled Garden window. The walled garden configuration determinesaccess to the websites. F

133 | Captive Portal for Guest Access Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideCreating a Web Login page in ClearPass GuestThe ClearPa

1. In the Access Rules tab, set the slider to any of the following types of access control:l Unrestricted— Select this to set unrestricted access to t

135 | Captive Portal for Guest Access Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide(Instant AP)(SSID Profile <name># end(Instant AP)

4. Click New to add a new rule. The New Rule window is displayed.5. In the New Rule window, specify the following parameters. The following figures sh

137 | Captive Portal for Guest Access Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideField Descriptionl To change the policy text, click the

Configuring Walled Garden AccessOn the Internet, a walled garden typically controls access to Web content and services. The Walled garden accessis req

139 | Captive Portal for Guest Access Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide2. Navigate to the Security tab.3. Select None from the

14 | Contents Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideSession Firewall Based Blacklisting 172Configuring Blacklist Duration 172In the

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide Authentication and User Management | 140Chapter 11Authentication and User ManagementThis cha

141 | Authentication and User Management DellNetworking W-Series Instant 6.4.0.2-4.1 | User GuideConfiguring Authentication Parameters for Management

Parameter DescriptionIPaddressEnter the IP address of the TACACS+ server.Auth Port Enter the TCPIPport used by the server. The default port number

143 | Authentication and User Management DellNetworking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 43 Admin Tab: Management Authentication Parame

(Instant AP)(config)# mgmt-auth-server <authentication_server2>(Instant AP)(config)# mgmt-auth-server-load-balancing(Instant AP)(config)# mgmt-a

145 | Authentication and User Management DellNetworking W-Series Instant 6.4.0.2-4.1 | User Guide2. Click Users for Internal Server. The following fig

(Instant AP)# commit applyTo configure a guest user:(Instant AP)(config)# user <username> <password> portal(Instant AP)(config)# end(Insta

147 | Authentication and User Management DellNetworking W-Series Instant 6.4.0.2-4.1 | User GuideUnderstanding Authentication MethodsAuthentication is

l L2 authentication fall-through - Allows you to enable the l2-authentication-fallthrough mode. When this optionis enabled, the 802.1X authentication

149 | Authentication and User Management DellNetworking W-Series Instant 6.4.0.2-4.1 | User GuideController (the client certificate must be signed by

Example 185Configuring Management Subnets 185In the Instant UI 185In the CLI 186Configuring Restricted Access to Corporate Network 186In the Instant U

Internal RADIUS ServerEach W-IAP has an instance of free RADIUS server operating locally. When you enable the internal RADIUS serveroption for the net

151 | Authentication and User Management DellNetworking W-Series Instant 6.4.0.2-4.1 | User Guidel Acct-Output-Packetsl Acct-Session-Idl Acct-Session-

l Aruba-User-Vlanl Aruba-WorkSpace-App-Namel Authentication-Sub-Typel Authentication-Typel CHAP-Challengel Callback-Idl Callback-Numberl Chargeable-Us

153 | Authentication and User Management DellNetworking W-Series Instant 6.4.0.2-4.1 | User Guidel Huntgroup-Namel Idle-Timeoutl Location-Capablel Loc

l Tunnel-Connection-Idl Tunnel-Medium-Typel Tunnel-Preferencel Tunnel-Private-Group-Idl Tunnel-Server-Auth-Idl Tunnel-Server-Endpointl Tunnel-Typel Us

155 | Authentication and User Management DellNetworking W-Series Instant 6.4.0.2-4.1 | User GuideCertification Authentication EncryptionWPA l PSKl IEE

When the authentication survivability feature is enabled, the following authentication process is used:1. The client associates to a W-IAP and authent

157 | Authentication and User Management DellNetworking W-Series Instant 6.4.0.2-4.1 | User Guide(Instant AP)(config)# auth-survivability cache-time-o

Figure 46 New Authentication Server Window3. Configure any of the following types of server:l RADIUS Server — To configure a RADIUSserver, specify th

159 | Authentication and User Management DellNetworking W-Series Instant 6.4.0.2-4.1 | User GuideParameter DescriptionRetry countSpecify a number betw

16 | Contents Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideUnderstanding Role Assignment Rule 192RADIUS VSA Attributes 192MAC-Address Attr

Parameter DescriptionFilterSpecify the filter to apply when searching for a user in the LDAP database. Thedefault filter string is (objectclass=*).Key

161 | Authentication and User Management DellNetworking W-Series Instant 6.4.0.2-4.1 | User Guide(Instant AP)(Auth Server <profile-name>)# nas-i

1. In the Instant main window, click the System link. The System window is displayed.2. In the General tab of System window, select Enabled from the D

163 | Authentication and User Management DellNetworking W-Series Instant 6.4.0.2-4.1 | User Guidel To open the WLAN wizard, select an existing SSID in

Configuring 802.1X Authentication for a Wireless Network ProfileYou can configure 802.1X authentication for a wireless network profile in the Instant

165 | Authentication and User Management DellNetworking W-Series Instant 6.4.0.2-4.1 | User GuideIn the Instant UITo enable 802.1X authentication for

5. If the internal authentication server is used, perform the following steps to allow MAC address basedauthentication:a. Click the Users link against

167 | Authentication and User Management DellNetworking W-Series Instant 6.4.0.2-4.1 | User Guide6. If the internal authentication server is used, per

5. Select the checkbox MAC authentication fail-thru to use 802.1X authentication even when the MACauthentication fails.6. Click Next and then click Fi

169 | Authentication and User Management DellNetworking W-Series Instant 6.4.0.2-4.1 | User GuideConfiguring MAC Authentication with Captive Portal Au

In the CLI 205Configuring Local and Local,L3 DHCP Scopes 206In the Instant UI 206In the CLI 207Configuring the Default DHCP Scope for Client IP Assign

(Instant AP)# commit applyConfiguring WISPr AuthenticationInstant supports the following smart clients:n iPassn BoingoThese smart clients enable clien

171 | Authentication and User Management DellNetworking W-Series Instant 6.4.0.2-4.1 | User Guide(Instant AP)(WISPr)# wispr-location-id-ac(Instant AP)

Blacklisting Users DynamicallyThe clients can be blacklisted dynamically when they exceed the authentication failure threshold or when ablacklisting r

173 | Authentication and User Management DellNetworking W-Series Instant 6.4.0.2-4.1 | User GuideUploading CertificatesA certificate is a digital file

8. Click Browse and select the appropriate certificate file, and click Upload Certificate. The CertificateSuccessfully Installed message is displayed.

175 | Authentication and User Management DellNetworking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 50 Server Certificate4. After you upload the c

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide Roles and Policies | 176Chapter 12Roles and PoliciesThis chapter describes the procedures fo

177 | Roles and Policies Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guidel Configuring Web Policy Enforcement on page 249Configuring AccessR

ServiceCategoryDescriptionthe IP address and netmask for the destination network.l except to a network—Access is allowed or denied to networks other t

179 | Roles and Policies Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideConfiguring Network Address Translation RulesNetwork Address Transla

18 | Contents Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideL2 Switching Mode 224Distributed L2 Mode 224Centralized L2 Mode 224L3 Routing M

Configuring Source-Based RoutingTo allow different forwarding policies for different SSIDs, you can configure source-based routing. The source-basedro

181 | Roles and Policies Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideConfiguring ALG ProtocolsYou can enable or disable protocols for App

In the Instant UITo configure firewall settings:1. Click the Security link at the top right corner of Instant main window.2. Clickthe Firewall Settin

183 | Roles and Policies Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideManaging Inbound TrafficInstant now supports an enhanced inbound fir

Parameter DescriptionActionSelect any of following actions:l Select Allow to allow access users based on the access rule.l Select Deny to deny access

185 | Roles and Policies Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideParameter Descriptionl Voice: Priority 6 (Internetwork Control)Disab

Figure 55 FirewallSettings—Management Subnets2. To add a new management subnet:l Enter the subnet address in Subnet.l Enter the subnet mask in Mask.l

187 | Roles and Policies Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideWith content filter, you can:l Allow all DNS requests to the non-cor

3. Click Edit. The Edit Wired Network window is displayed.4. In the Wired Settings tab, select Enabled from the Content Filtering drop-down list and c

189 | Roles and Policies Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 56b. Select the categories to which you want to deny or allow

In the Instant UI 233In the CLI 233Airtime Fairness Mode 233In the Instant UI 234In the CLI 234Client Match 234In the Instant UI 235In the CLI 236Acce

Configuring User RolesEvery client in the Instant network is associated with a user role, which determines the client’s network privileges,the frequen

191 | Roles and Policies Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideIn the Instant UI1. Click the Security at the top right corner of In

1. In the Access tab of the WLAN (New WLAN or Edit <WLAN-profile>) or Wired Network configuration (NewWired Network or Edit Wired Network) windo

193 | Roles and Policies Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideRoles Based on Client AuthenticationThe user role can be the default

4. Select the attribute from the Attribute drop-down list that the rule it matches against. The list of supportedattributes includes RADIUS attributes

195 | Roles and Policies Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guidel The user VLANs can be derived from the default roles configured fo

VLAN Assignment Based on Derivation RulesWhen an external RADIUS server is used for authentication, the RADIUS server may return a reply message forau

197 | Roles and Policies Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guidel To configure VLAN derivation rule for a WLAN SSID profile, Click N

To configure a VLAN assignment rule for a wired profile:(Instant AP)(config)# wired-port-profile <nname>(Instant AP)(wired ap profile <name&g

199 | Roles and Policies Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideOperator Description+ Matches the declared element one or more times

0511581-01 | June 2014 Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideCopyright© 2014 Aruba Networks, Inc. Aruba Networks trademarks include

20 | Contents Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideExample 250Voice and Video 251Wi-Fi Multimedia Traffic Management 251Configurin

Assigning User VLAN Roles to a Network ProfileYou can configure user VLAN roles for a network profile using Instant UI or CLI.In the Instant UITo assi

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide DHCP Configuration | 201Chapter 13DHCP ConfigurationThis chapter provides the following info

202 | DHCP Configuration DellNetworking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 62 New DHCP Scope: Distributed DHCP Mode3. Based on the type o

Name DescriptionLease Time Specify a lease time for the client in minutes.IP Address RangeSpecify a range of IP addresses to use. To add another range

204 | DHCP Configuration DellNetworking W-Series Instant 6.4.0.2-4.1 | User Guide(Instant AP)(DHCP Profile <profile-name>)# server-vlan <vlan

Name DescriptionEnabling split tunnel allows a VPN user to access a public network and a local LAN orWAN network at the same time through the same phy

206 | DHCP Configuration DellNetworking W-Series Instant 6.4.0.2-4.1 | User Guide(Instant AP)(DHCP Profile <profile-name>)# server-vlan <vlan

Name DescriptionNameEnter a name for the DHCP scope.TypeSelect any of the following options:l Local— On selecting Local, the DHCP server for local bra

208 | DHCP Configuration DellNetworking W-Series Instant 6.4.0.2-4.1 | User Guide(Instant AP)(DHCP Profile <profile-name>)# subnet <IP-addres

4. Enter the duration of the DHCP lease in the Lease time text box.5. Select Minutes, Hours, or Days for the lease time from the drop-down list next t

ALE with Instant 265Enabling ALE Support on a W-IAP 265In the Instant UI 265In the CLI 266Verifying ALE Configuration on a W-IAP 266Configuring OpenDN

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide VPN Configuration | 210Chapter 14VPN ConfigurationThis chapter describes the following VPN c

211 | VPN Configuration Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide2. Select Aruba IPSec from the Protocol drop-down list.3. Enter the I

(Instant AP)(config)# vpn monitor-pkt-lost-cnt <count>(Instant AP)(config)# vpn reconnect-user-on-failover(Instant AP)(config)# vpn reconnect-ti

213 | VPN Configuration Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guidea. To allow the VPN tunnel to switch back to the primary host when it

In the CLITo enable automatic configuration of the GRE tunnel:(Instant AP)(config)# vpn gre-outside(Instant AP)(config)# vpn primary <name/IP-addre

215 | VPN Configuration Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 66 Manual GRE Configuration4. Click Next to continue. When the

n Preemptive: In this mode, if the primary comes up when the backup is active, the backup tunnel is deleted andthe primary tunnel resumes as an active

217 | VPN Configuration Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 68 Tunnel Configurationb. Enter the primary server IP address.

d. Select the cookie length and enter a cookie value corresponding to the length. By default, the cookie length isnot set.e. Specify the remote end ID

219 | VPN Configuration Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide(Instant AP)(config) # l2tpv3 session test_session(Instant AP)(L2TPv3

22 | Contents Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideW-IAP Management and Monitoring 275Managing a W-IAP from W-AirWave 275Image Man

administrative name: 'test_tunnel' (primary)created by admin: YES, tunnel mode: LAC, persist: YESlocal host name: Instant-C4:42:98peer tunne

221 | VPN Configuration Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guideuse tiebreaker: OFFpeer profile: NOT SETsession profile: NOT SETtrace

Figure 70 Tunneling— Routing3. Update the following parameters:l Destination— Specify the destination network that is reachable through the VPN tunnel

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide IAP-VPN Deployment | 223Chapter 15IAP-VPN DeploymentThis section provides the following info

224 | IAP-VPN Deployment Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guidel L3 mode and NAT mode users—The number of trusted users supported o

DHCP server and not the DHCP server on the controller. Client traffic destined to datacenter resources is forwardedby the master W-IAP (through the IP

226 | IAP-VPN Deployment Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guidel IPSecl Aruba GREl Manual GREConfiguring Routing ProfilesThe routin

configured in the DHCP profiles, the IAP-VPN operations are affected. For example, if a local DHCP profile isconfigured with a VLAN ID of 200, the VLA

228 | IAP-VPN Deployment Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideTo redistribute IAP-VPN routes into the OSPF process, use the follow

V 12.12.2.0/24 [10/0] ipsec mapV 12.12.12.0/25 [10/0] ipsec mapV 12.12.12.32/27 [10/0] ipsec mapV 50.40.40.0/24 [10/0] ipsec mapV 51.41.41.128/25 [10/

Enforcing Uplinks 292In the Instant UI 292In the CLI 293Setting an Uplink Priority 293In the Instant UI 293In the CLI 293Enabling Uplink Preemption 29

230 | IAP-VPN Deployment Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideVPN Local Pool ConfigurationThe VPN local pool is used to assign an

Key Bid(Subnet Name)--- ----------------b3c65c...b3c65c...b3c65c... 2(10.15.205.0-10.15.205.250,5),1(10.15.206.1-10.15.206.252,5)a2a65c... 0b3c65c...

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide Adaptive Radio Management | 232Chapter 16Adaptive Radio ManagementThis chapter provides the

233 | Adaptive Radio Management Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideConfiguring ARM Features on a W-IAPThis section describes the

In the Instant UI1. For Airtime fairness mode configuration, specify any of the following values in the RF>ARM >Showadvanced options tab:Param

235 | Adaptive Radio Management Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guidel Band Steering: W-IAPs using the client match feature monito

In the CLI(Instant AP)(config)# arm(Instant AP)(ARM)# client-match calc-interval <seconds>(Instant AP)(ARM)# client-match calc-threshold <thr

237 | Adaptive Radio Management Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideParameter DescriptionScanningSelect Enabled so that the W-IAP

----------------Channel Status------- ------1 enable2 disable3 disable4 disable5 disable6 enable7 disable8 disable9 disable10 disable11 enable12 disab

239 | Adaptive Radio Management Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide3. Click the Radio tab.4. Under the channel 2.4.GHz or 5GHz o

24 | Contents Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideHome Agent Load Balancing 307Configuring a Mobility Domain for Instant 307In th

(Instant AP)# commit applyTo configure 5 GHz radio settings:(Instant AP)(config)# rf dot11a-radio-profile(Instant AP)(RF dot11a Radio Profile)# beacon

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide Deep Packet Inspection and Application Visibility | 241Chapter 17Deep Packet Inspection and

242 | Deep Packet Inspection and Application Visibility Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideApplication VisibilityThe AppRF graph

Figure 73 Application Categories List - Client ViewFigure 74 Application Category Chart - AP ViewApplication ChartsThe application chart displays deta

244 | Deep Packet Inspection and Application Visibility Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 75 Application Chart - Client

Web Categories ChartsThe web categories chart displays details about the client traffic to the web categories. On clicking in the rectanglearea, you c

246 | Deep Packet Inspection and Application Visibility Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 81 Web Reputation Chart - Clie

1. Navigate to Security > Roles tab. The Roles tab contents are displayed.You can also configure access rules for a wired or wireless client throug

248 | Deep Packet Inspection and Application Visibility Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideServiceCategoryDescription1. Select t

(Instant AP)# commit applyExample(Instant AP)(config)# wlan access-rule employee(Instant AP)(Access Rule "employee")# rule any any match app

Restoring Configuration 320Converting a W-IAP to a Remote AP and Campus AP 320Regulatory Domain Restrictions for W-IAP to RAP or CAP Conversion 320Con

250 | Deep Packet Inspection and Application Visibility Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guiden Low risk - These are benign sites a

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide Voice and Video | 251Chapter 18Voice and VideoThis chapter the steps required to configure v

252 | Voice and Video Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideIn the Instant UI1. Navigate to the WLAN wizard (click Network>New o

By customizing WMM AC mappings, all packets received are matched against the entries in the mapping table andprioritized accordingly. The mapping tabl

254 | Voice and Video Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideThe following table lists the ports used by Apple Facetime. Facetime us

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide Services | 255Chapter 19ServicesThis chapter provides information on how to configure follow

256 | Services Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideThe following figure illustrates how AirGroup enables personal sharing of Appl

Figure 86 Bonjour Services and AirGroup ArchitectureFor a list of supported Bonjour services, see AirGroup Services on page 259.DLNA UPnP SupportIn ad

258 | Services Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 87 DLNAUPnPServices and AirGroup ArchitectureFor a list of supported

Figure 88 AirGroup in a Higher-Education EnvironmentWhen AirGroup discovers a new device, it interacts with CPPM to obtain the shared attributes such

26 | Contents Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideInformation Elements (IEs) and Management Frames 339NAI Realm List 339Configuri

260 | Services Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideAirGroup ComponentsAirGroup leverages key elements of the Dell solution portfo

Configuring AirGroup and AirGroup Services on a W-IAPYou can configure AirGroup services, using the Instant UI or CLI.In the Instant UITo enable AirGr

262 | Services Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guidemarked as disallowed are prevented from accessing the correspondingAirGroup s

Configuring AirGroup and CPPM interface in InstantConfigure the Instant and CPPM interface to allow an AirGroupW-IAP and CPPM to exchange information

264 | Services Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide2. Click the RTLS tab. The following figure shows the contents of the RTLS tab

Configuring a W-IAP for Analytics and Location Engine SupportThe Analytics and Location Engine (ALE) is designed to gather client information from the

266 | Services Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 91 Services Window —ALE Integration4. Specify the ALE server name or IP

In the CLITo configure OpenDNS credentials:(Instant AP)(config)# opendns <username <password>(Instant AP)(config)# end(Instant AP)# commit ap

268 | Services Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 92 Services Window - Network Integration Tab3. Select the Enable checkb

Integration with InstantThe XML API interface allows users to send specific XML commands to a W-IAP from an external server. TheseXMLcommands can be

Datacenter Configuration 363Scenario 3 - IPSec: Multiple Datacenter Deployment with Primary and Backup Controllers for Redundancy 364Topology 364AP Co

270 | Services Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideCALEA Integration and Lawful Intercept ComplianceLawful Intercept (LI) allows

Traffic Flow from IAP to CALEA Server through VPNYou can also deploy the CALEA server with the controller and configure an additional IPSec tunnel for

272 | Services Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide2. If a replication role must be assigned through the RADIUS VSA, create an ac

1. To add the CALEA access rule to an existing profile, select an existing wireless (Networks tab > edit) or wired(More > Wired > Edit) profi

274 | Services Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide(Instant AP)(SSID Profile"Calea-Test")# type employee(Instant AP)(SS

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide W-IAP Management and Monitoring | 275Chapter 20W-IAP Management and MonitoringThis chapter p

276 | W-IAP Management and Monitoring Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 96 Template-based ConfigurationTrending ReportsW

Figure 97 Adding aW-IAP in VisualRFPSK-based and Certificate-based AuthenticationOn the DHCP server, two formats for option 43 are supported:l <or

278 | W-IAP Management and Monitoring Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideShared KeyThe Shared Secret key is an optional field us

Configuring for W-AirWave Discovery through DHCPThe W-AirWave can be discovered through DHCP server. You can configure this only if W-AirWave was notc

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide About this Guide | 28Chapter 1About this GuideThis User Guide describes the features support

280 | W-IAP Management and Monitoring Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 100 Instant and DHCP options for W-AirWave: Pred

Figure 101 Instant and DHCP options for W-AirWave: Server Options7. Select 060 DellInstant AP in the Server Options window and enter DellInstantAP in

282 | W-IAP Management and Monitoring Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 103 Instant and DHCP options for W-AirWave— 043

Alternate Method for Defining Vendor-Specific DHCP OptionsThis section describes how to add vendor-specific DHCP options forInstant APs in a network

284 | W-IAP Management and Monitoring Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 106 W-AirWave — New GroupFigure 107 W-AirWave —M

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide Uplink Configuration | 285Chapter 21Uplink ConfigurationThis chapter provides the following

286 | Uplink Configuration Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 109 Uplink StatusEthernet uplink supports the following typ

4. To set a local interface for the PPPoE uplink connections, select a value from the Local interface drop-down list.The selected DHCP scope will be u

288 | Uplink Configuration Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guidel Aircard 250U (Sierra)l USB 598 (Sierra)l U300 (Franklin wireless

l Novatel MiFi 2200 (Verizon Mifi 2200)l Huawei E272, E170, E220 (ATT)l Huawei E169, E180,E220,E272 (Vodafone/SmarTone (HK))l Huawei E160 (O2(UK))l Hu

29 | About this Guide Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideThe following informational icons are used throughout this guide:Indica

290 | Uplink Configuration Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guidel Huawei D33HW (EMOBILE(Japan))l Huawei GD01 (EMOBILE(Japan))l Hua

(Instant AP)(cellular-uplink-profile)# usb-dial <dial-parameter>(Instant AP)(cellular-uplink-profile)# usb-modeswitch <usb-modem>(Instant

292 | Uplink Configuration Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide9. Enter a pre-shared key (PSK) passphrase in the Passphrase text

4. Click OK. The selected uplink is enforced on the W-IAP.In the CLITo enforce an uplink:(Instant AP)(config)# uplink(Instant AP)(uplink)# enforce {ce

294 | Uplink Configuration Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide(Instant AP)(uplink)# end(Instant AP)# commit applySwitching Uplin

n Secs between test packets— The frequency at which ICMP test packets are sent.You canspecify a value within the range of 1—3600 seconds.n Internet ch

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide Intrusion Detection | 296Chapter 22Intrusion DetectionThe Intrusion Detection System (IDS) i

297 | Intrusion Detection Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guidel Windows Vistal Windows Serverl Windows XPl Windows MEl OS-Xl iPho

Figure 111 Wireless Intrusion DetectionThe following table describes the detection policies enabled in the Infrastructure Detection Custom settings fi

299 | Intrusion Detection Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideDetection Level Detection Policyl Detect Malformed Frame— HT IEl De

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide Contents | 3ContentsContents 3About this Guide 28Intended Audience 28Related Documents 28Con

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide About Instant | 30Chapter 2About InstantThis chapter provides the following information:l In

Figure 112 Wireless Intrusion ProtectionThe following table describes the protection policies that are enabled in the Infrastructure Protection Custom

301 | Intrusion Detection Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideContainment MethodsYou can enable wired and wireless containments t

(Instant AP)(IDS)# wireless-containment <type>(Instant AP)(IDS)# wired-containment(Instant AP)(IDS)# detect-ap-spoofing(Instant AP)(IDS)# detect

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide Mesh W-IAP Configuration | 303Chapter 23Mesh W-IAP ConfigurationThis chapter provides the fo

304 | Mesh W-IAP Configuration Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideThe mesh portal broadcasts a mesh services set identifier (MSS

In the Instant UITo configure Ethernet bridging:1. In the Access Points tab, click the W-IAP to modify. The edit link is displayed.2. Click the edit l

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide Mobility and Client Management | 306Chapter 24Mobility and Client ManagementThis chapter pro

307 | Mobility and Client Management Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideWhen a client first connects to an Instant network, a me

Figure 115 L3 Mobility Window4. Select Enabled from the Home agent load balancing drop-down list. By default, home agent load balancing isdisabled.5.

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide Spectrum Monitor | 309Chapter 25Spectrum MonitorThis chapter provides the following informat

31 | About Instant DellNetworking W-Series Instant 6.4.0.2-4.1 | User GuideThe following table provides the variants supported for each IAPmodel:W-IA

310 | Spectrum Monitor Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 116 Device ListDevice Summary and Channel Information shows the

Non Wi-FiInterfererDescriptionBluetooth Any device that uses the Bluetooth protocol to communicate in the 2.4 GHz band is classifiedas aBluetoothdevic

312 | Spectrum Monitor Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideNon Wi-FiInterfererDescriptionMicrowave Common residential microwave o

Column DescriptionWi-Fi (%) The percentage of the channel currently being used by Wi-Fi devices.Type Device type.Total nonwifi (%) The percentage of t

314 | Spectrum Monitor Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 119 Channel Metrics for the 5 GHz Radio ChannelChannel Metrics

In the Instant UITo convert aW-IAP to a hybrid W-IAP:1. Click the RF link at the top right corner of the Instant UI.2. Click Show advanced options to

316 | Spectrum Monitor Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide(Instant AP)# wifi0-mode {<access>|<monitor>|<spectrum-

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide W-IAP Maintenance | 317Chapter 26W-IAP MaintenanceThis section provides information on the f

318 | W-IAP Maintenance Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 120 Proxy Configuration Window2. Enter the HTTP proxy server&a

Upgrading to a New Version ManuallyIf the automatic image check feature is disabled, you can use obtain an image file from a local file system or from

SSH access requires that you configure an IP address and a default gateway on the W-IAP and connect the W-IAPto your network. This is typically perfor

320 | W-IAP Maintenance Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guidel In the UI, navigate to Maintenance > Configuration > Current

The following table describes the regulatory domain restrictions that apply for the W-IAP to ArubaOS AP conversion:ArubaOSversion onControllerControll

322 | W-IAP Maintenance Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideConverting a W-IAP to a Remote APFor Remote AP conversion, the Virtua

1. Click the Maintenance link in the Instant main window.2. Click the Convert tab. The Convert tab is displayed.Figure 121 Maintenance — Convert Tab3.

324 | W-IAP Maintenance Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 122 Converting a W-IAP to Campus AP3. Select Campus APs manage

Converting a W-IAP using CLITo convert a W-IAP(Instant AP)# convert-aos-ap <mode> <controller-IP-address>Resetting a Remote AP or Campus A

326 | W-IAP Maintenance Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide3. In the W-IAP list, select the W-IAP that you want to reboot and cl

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide Monitoring Devices and Logs | 327Chapter 27Monitoring Devices and LogsThis chapter provides

328 | Monitoring Devices and Logs Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideConfiguring SNMPThis section describes the procedure for co

Figure 126 SNMPv3 User4. Enter the name of the user in the Name text box.5. Select the type of authentication protocol from the Auth protocol drop-dow

33 | About Instant DellNetworking W-Series Instant 6.4.0.2-4.1 | User GuideWhat is New in Instant 6.4.0.2-4.1The following features are added in the I

330 | Monitoring Devices and Logs Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideConfiguring SNMP TrapsInstant supports the configuration of

Figure 127 Syslog Server4. In the Syslog server text box, enter the IP address of the server to which you want to send system logs.5. Select the requi

332 | Monitoring Devices and Logs Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideLogging Level DescriptionWarning Warning messages.Notice Si

Running Debug Commands from the UITo run the debugging commands from the UI:1. Navigate to More>Support at the top right corner of the Instant main

334 | Monitoring Devices and Logs Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guidel AP Captive Portal Auto White List—Displays details about

l AP IAP-VPN Retry Counters—Displays IAP-VPN tunnel details.l AP Interface Counters— Displays information about the Ethernet interface packet counters

336 | Monitoring Devices and Logs Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guidel AP Monitor Status— Displays the configuration and status

l VC AMP Single Sign-on Key— Displays single sign-on key details for W-AirWave.l VC Application Services— Displays the details of application services

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide Hotspot Profiles | 338Chapter 28Hotspot ProfilesThis chapter describes the following procedu

339 | Hotspot Profiles Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideAccess Network Query Protocol (ANQP)ANQP provides a range of informati

Feature DescriptionXMLAPI Integration The Instant UI allows users to integrate an XML API Interface with a W-IAP. The users canuse the XML API interf

3. Associate the required ANQP and H2QP advertisement profiles created in step 1 to the hotspot profile created instep 2.4. Create a SSID Profile with

341 | Hotspot Profiles Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guidel eap-ttls—To use EAP-Tunneled Transport Layer Security. The associate

Configuring a Venue Name ProfileYou configure a venue name profile to send venue information as an ANQP IE in a GAS query response. Toconfigure a venu

343 | Hotspot Profiles Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideVenue Group Associated Venue Type ValueThe associated numeric value is

l http-redirect—When configured, additional information on the network is provided through HTTP/HTTPSredirection.l dns-redirect—When configured, addit

345 | Hotspot Profiles Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide(Instant AP)(domain-name <name>)# end(Instant AP)# commit applyC

l Downlink load— Indicates the percentage of the WAN downlink currently utilized. The default value of 0indicates that the downlink speed is unknown o

347 | Hotspot Profiles Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideParameter Descriptionaccess-network-type <type>Specify any of th

Parameter Descriptionquery-response-length-limitSpecify this parameter to set the maximum length of the GAS query response, in octets. You canspecify

349 | Hotspot Profiles Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideParameter Descriptionadvertisement-profileSpecify the advertisement pr

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide Setting up a W-IAP | 35Chapter 3Setting up a W-IAPThis chapter describes the following proce

(Instant AP)(network-auth "na1")# nwk-auth-type accept-term-and-cond(Instant AP)(network-auth "na1")# url www.nwkauth.com(Instant

351 | Hotspot Profiles Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide(Instant AP)(Hotspot2.0 "hs1")# advertisement-profile h2qp-w

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide ClearPass Guest Setup | 352ClearPass Guest SetupTo configure ClearPass Guest:1. On ClearPass

353 | ClearPass Guest Setup Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 130 Create an AirGroup Administrator4. In this example, th

Figure 132 Local Users UI Screen7. Navigate to the ClearPass Guest UI and click Logout. The ClearPass Guest Login page is displayed. Use theAirGroup a

355 | ClearPass Guest Setup Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide9. Click Register Shared Device.TestingTo verify the setup:1. Dis

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide IAP-VPN Deployment Scenarios | 356IAP-VPN Deployment ScenariosThis section describes the mos

357 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideScenario 1 - IPSec: Single Datacenter Deployment with NoRe

Configuration Steps CLI Commands UI Procedure1. Configure the primaryhost for VPN with thePublic VRRP IP addressof the controller.(ap)(config)# vpn pr

359 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideConfiguration Steps CLI Commands UI Procedureabove and ena

36 | Setting up a W-IAP Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideAssigning a Static IPTo assign a static IP to a W-IAP:1. Connect a te

360 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideScenario 2 - IPSec: Single Datacenter with Multiple Contro

l 10.2.2.0/24 is a branch owned subnet, which needs to override global routing profilel 199.127.104.32 is used an example IP address of the W-AirWave

362 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideConfiguration Steps CLI Commands UI ProcedureNOTE: The IP

Configuration Steps CLI Commands UI Procedure8. Create access rule forwired and wirelessauthentication. In thisexample, the rule permitsall traffic.Fo

364 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideScenario 3 - IPSec: Multiple Datacenter Deployment with Pr

l 172.16.20.0/24 subnet is used for NAT mode – used for wired network.l Client count in each branch is 200.l Contractors are only permitted to reach 1

366 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideConfiguration Steps CLI Commands UI Procedure(ap)(config)#

Configuration Steps CLI Commands UI Procedure(ap)(SSID Profile "wireless-ssid")# essid wireless-ssid(ap)(SSID Profile "wireless-ssid&qu

368 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideAP Connected Switch ConfigurationClient VLANs defined in t

369 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideScenario 4 - GRE: Single Datacenter Deployment with No Red

Disabling the Provisioning Wi-Fi NetworkThe provisioning network is enabled by default. Instant provides the option to disable the provisioning networ

Configuration Steps CLI Commands UI Procedure1. Configure Aruba GRE ormanual GREl Aruba GRE uses anIPSec tunnel to facilitatecontroller configurationa

371 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideConfiguration Steps CLI Commands UI Procedureand access ru

(host)(config-tunnel)# description <Description>(host)(config-tunnel)# tunnel mode gre <ID>(host)(config-tunnel)# tunnel source <contro

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide Terminology | 373TerminologyAcronyms and AbbreviationsThe following table lists the abbrevia

374 | Terminology DellNetworking W-Series Instant 6.4.0.2-4.1 | User GuideAbbreviation ExpansionPEAP Protected Extensible Authentication ProtocolPEM P

Term DefinitionAP An access point (AP) connects users to other users within the network andalso can serve as the point of interconnection between the

376 | Terminology DellNetworking W-Series Instant 6.4.0.2-4.1 | User GuideTerm Definitionfixed wireless Wireless devices or systems in fixed locations

Term DefinitionW-CDMA Officially known as IMT-2000 direct spread; ITU standard derived fromCode-Division Multiple Access (CDMA). Wideband code-divisio

38 | Setting up a W-IAP Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideWhen you use a provisioning Wi-Fi network to connect to the Internet,

Code Country NameCS Serbia and MontenegroCY CyprusCZ Czech RepublicDE GermanyDK DenmarkDO Dominican RepublicDZ AlgeriaEC EcuadorEE EstoniaEG EgyptES S

4 | Contents Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideInstant User Interface 44Login Screen 44Logging into the Instant UI 44Viewing Co

40 | Setting up a W-IAP Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideCode Country NameKW KuwaitLB LebanonLI LiechtensteinLI LiechtensteinL

Code Country NameSV El SalvadorTH ThailandTN TunisiaTR TurkeyTT Trinidad and TobagoTW TaiwanUA UkraineUS United StatesUY UruguayVE VenezuelaVN Vietnam

42 | Setting up a W-IAP Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideConnecting to a CLI SessionOn connecting to a CLI session, the system

(Instant AP)# show uncommitted-configrf dot11a-radio-profileno legacy-modebeacon-interval 200no dot11hinterference-immunity 3csa-count 1no spectrum-mo

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide Instant User Interface | 44Chapter 4Instant User InterfaceThis chapter describes the followi

45 | Instant User Interface Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideYou can also select the required language option from the Languag

Networks TabThis tab displays a list of Wi-Fi networks that are configured in the Instant network. The network names aredisplayed as links. The expand

47 | Instant User Interface Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideClients TabThis tab displays a list of clients that are connected

SystemThis link displays the System window. The System window consists of the following tabs:Use the Show/Hide Advanced option at the bottom of the S

49 | Instant User Interface Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 5 System WindowRFThe RFlink displays a window for configu

Client Match 66AppRF 67Spectrum 67Alerts 67IDS 71AirGroup 72Configuration 72W-AirWave Setup 73Pause/Resume 73Views 73Initial Configuration Tasks 74Bas

Figure 6 RF WindowSecurityThe Security link displays a window with the following tabs:l Authentication Servers— Use this tab to configure an external

51 | Instant User Interface Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 7 Security Window - Default ViewMaintenanceThe Maintenance

Figure 8 Maintenance Window - Default ViewMoreThe More link allows you to select the following options:l VPNl IDSl Wiredl Servicesl DHCP Serverl Suppo

53 | Instant User Interface Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 9 VPN window for IPSec ConfigurationIDSThe IDSwindow allo

Figure 11 IDS Window: Intrusion ProtectionFor more information on wireless intrusion detection and protection, see Detecting and Classifying Rogue APs

55 | Instant User Interface Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guidel RTLS — Allows you to integrate W-AirWave Management platform or

Figure 14 DHCP Servers WindowFor more information, see DHCP Configuration on page 201.SupportThe Support consists of the following fields:l Command— A

57 | Instant User Interface Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 15 Support WindowHelpThe Help link allows you to view a sh

Name DescriptionInfo section in VirtualController viewThe Info section in the Virtual Controller view displays the following information:l Name— Displ

59 | Instant User Interface Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideName Descriptionl IP Address— Displays IP address of the client.l

6 | Contents Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideIn the Instant UI 77In the CLI 77Additional Configuration Tasks 78Configuring Vi

Icon Name Description1 SignalIconDisplays the signal strength of the client. Depending on the signal strength of the client, the colorof the lines on

61 | Instant User Interface Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 18 RF Trends for ClientsUsage TrendsThe Usage Trends displ

The following table describes the graphs displayed in the Network view:Graph Name Description Monitoring ProcedureClients The Clients graph shows the

63 | Instant User Interface Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideThe following table describes the graphs displayed in the Access

GraphNameDescription Monitoring ProcedureMemory free(MB)The memory free graph displays thememory availability of the W-IAP in MB.To see the free memor

65 | Instant User Interface Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideThe following table describes the RF trends graphs available in t

GraphNameDescription Monitoring Procedureincoming traffic is displayed in blue.Incoming traffic is shown below themedian line.To see an enlarged view,

67 | Instant User Interface Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideThe following figure shows the client view heatmap for an AP radi

Figure 22 Alerts LinkThe Alerts link displays the following types of alerts:l Client Alertsl Active Faultsl Fault HistoryType of Alert Description Inf

69 | Instant User Interface Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideFigure 23 Client AlertsFigure 24 Fault HistoryFigure 25 Active Fa

Customizing W-IAP Settings 84Modifying the W-IAP Hostname 84In the Instant UI 84In the CLI 84Configuring Zone Settings on a W-IAP 84In the Instant UI

TypeCodeDescription Details Corrective Actions100101 Internal error The W-IAP has encounteredan internal error for this client.Contact the Dell custom

71 | Instant User Interface Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideTypeCodeDescription Details Corrective Actions100309 RADIUS serve

Figure 26 Intrusion DetectionFor more information on the intrusion detection feature, see Intrusion Detection on page 296.AirGroupThis AirGroup link p

73 | Instant User Interface Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideW-AirWave SetupW-AirWave is a solution for managing rapidly chang

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide Initial Configuration Tasks | 74Chapter 5Initial Configuration TasksThis chapter describes t

75 | Initial Configuration Tasks Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideIn the Instant UI1. Navigate to System>General.2. Specify

Configuring Virtual Controller IP AddressYou can specify a single static IP address that can be used to manage a multi-AP Instant network. This IP add

77 | Initial Configuration Tasks Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guidel Maintain accurate time for billing services and similar.Th

Additional Configuration TasksThis section describes the following additional tasks that can be performed after a W-IAP is set up:l Configuring Virtua

79 | Initial Configuration Tasks Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideIn the Instant UI1. Navigate to System>General> Show a

8 | Contents Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideAdding a W-IAP to the Network 91Removing a W-IAP from the Network 91VLAN Configu

(Instant AP)(config)# end(Instant AP)# commit applyConfiguring Terminal AccessWhen terminal access is enabled, you can access the Instant CLI through

81 | Initial Configuration Tasks Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideConfiguring LED DisplayThe LED display is always in the Enab

4. Reboot the W-IAP to apply the changes. After you enable the option and reboot the W-IAP, the Wi-Fi and meshlinks are disabled automatically.In the

83 | Initial Configuration Tasks Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideIn the CLITo disable local routing:(Instant AP)(config)# den

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide Customizing W-IAP Settings | 84Chapter 6Customizing W-IAP SettingsThis chapter describes the

85 | Customizing W-IAP Settings Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideIn the Instant UI1. In the Access Points tab, click the W-IAP

In the CLITo configure a static IP address:(Instant AP)# ip-address <IP-address> <subnet-mask> <NextHop-IP> <DNS-IP-address> &

87 | Customizing W-IAP Settings Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide2. In the Edit Access Point window, select External Antenna t

Mode DescriptionAccess In Access mode, the AP serves clients, while also monitoring for rogue APs in thebackground.If the Access mode is selected, per

89 | Customizing W-IAP Settings Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide2. Click the edit link. The edit window for modifying W-IAP d

Beacon Report Requests and Probe Responses 109Configuring a WLANSSID for 802.11k Support 109In the Instant UI 109In the CLI 109Example 109BSS Transit

Preference to a W-IAP with Non-Default IPThe Master Election Protocol prefers a W-IAP with non-default IP, when electing a Virtual Controller for the

91 | Customizing W-IAP Settings Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideIap_master:1Adding a W-IAP to the NetworkTo add a W-IAP to th

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide VLAN Configuration | 92Chapter 7VLAN ConfigurationVLAN configuration is required for network

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide Wireless Network Profiles | 93Chapter 8Wireless Network ProfilesThis chapter provides the fo

94 | Wireless Network Profiles Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideIn the Instant UITo configure WLAN settings:1. In the Networks

Parameter DescriptionBroadcast filteringSelect any of the following values:l All—When set to All, the W-IAP drops all broadcast and multicast frames e

96 | Wireless Network Profiles Dell Networking W-Series Instant 6.4.0.2-4.1 | User GuideParameter DescriptionWi-Fi Multimedia(WMM) trafficmanagementCo

(Instant AP)(SSID Profile <name>)# zone <zone>(Instant AP)(SSID Profile <name>)# bandwidth-limit <limit>(Instant AP)(SSID Prof

98 | Wireless Network Profiles Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide2. Select any for the following options for Client IP assignme

(Instant AP)# commit applyTo create a new VLAN assignment rule:(Instant AP)(config)# wlan ssid-profile <name>(Instant AP)(SSID Profile <name&