Dell PowerConnect W-IAP3WN/P User Manual download pdf (Page 362)

362 | IAP-VPN Deployment Scenarios Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide

Configuration Steps CLI Commands UI Procedure

NOTE: The IP range configuration on each branch will be the

same. Each W-IAP will derive a smaller subnet based on the client

count scope using the Branch ID (BID) allocated by controller.

6. Create authentication

servers for user

authentication. The

example in the next

column assumes 802.1x

SSID.

(ap)(config)# wlan auth-server server1

(ap)(Auth Server "server1")# ip 10.2.2.1

(ap)(Auth Server "server1")# port 1812

(ap)(Auth Server "server1")# acctport 1813

(ap)(Auth Server "server1")# key "presharedkey"

(ap)(Auth Server "server1")# exit

(ap)(config)# wlan auth-server server2

(ap)(Auth Server "server2")# ip 10.2.2.2

(ap)(Auth Server "server2")# port 1812

(ap)(Auth Server "server2")# acctport 1813

(ap)(Auth Server "server2")# key "presharedkey"

See

Configuring an

External Server

for

Authentication

7. Configure wired and

wireless SSIDs using the

authentication servers

and access rules created

above and enable

authentication

survivability.

Configure wired ports to operate in L3 mode and associate

distributed L3 mode VLAN 30 to the wired port profile.

(ap)(config) # wired-port-profile wired-port

(ap)(wired-port-profile "wired-port")# switchport-

mode access

(ap)(wired-port-profile "wired-port")# allowed-vlan

all

(ap)(wired-port-profile "wired-port")# native-vlan

(ap)(wired-port-profile "wired-port")# no shutdown

(ap)(wired-port-profile "wired-port")# access-rule-

name wired-port

(ap)(wired-port-profile "wired-port")# type employee

(ap)(wired-port-profile "wired-port")# auth-server

server1

(ap)(wired-port-profile "wired-port")# auth-server

server2

(ap)(wired-port-profile "wired-port")# dot1x

(ap)(wired-port-profile "wired-port")# exit

(ap)(config)# enet1-port-profile wired-port

Configure a wireless SSID to operate in L2 mode and associate

Centralized L2 mode VLAN20 to the WLAN SSID profile.

(ap)(config) # wlan ssid-profile guest

(ap)(SSID Profile "guest")# enable

(ap)(SSID Profile "guest")# type guest

(ap)(SSID Profile "guest")# essid guest

(ap)(SSID Profile "guest")# opmode opensystem

(ap)(SSID Profile "guest")# vlan 20

(ap)(SSID Profile "guest")# auth-server server1

(ap)(SSID Profile "guest")# auth-server server2

(ap)(SSID Profile "guest")# captive-portal internal

NOTE: This example uses internal captive portal use case using

external authentication server. You can also use an external

captive portal example.

NOTE: The SSID type guest is used in this example to enable

configuration of captive portal. However, corporate access through

VPN tunnel is still allowed for this SSID because the VLAN

associated to this SSID is a VPN enabled VLAN (20 in this

example).

See

Configuring a

Wired Profile

and Wireless

Network

Profiles

Table 73:

W-IAP Configuration for Scenario 2 - IPSec: Single Datacenter with Multiple controllers for Redundancy

1 2 ... 357 358 359 360 361 362 363 364 365 366 367 ... 376 377

Comments to this Manuals

No comments

Dell PowerConnect W-IAP3WN/P User Manual Page 362

Comments to this Manuals

Related products and manuals for Networking Dell PowerConnect W-IAP3WN/P