Dell PowerConnect W-IAP3WN Dell Instant 6.1.3.1-3.0.0.0 User Guide
Dell PowerConnect W-IAP3WN Manual
View all Dell PowerConnect W-IAP3WN manuals
Add to My Manuals
Save this manual to your list of manuals |
Dell PowerConnect W-IAP3WN manual content summary:
- Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 1
Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 2
Mobility Management System®. Dell™, the DELL™ logo, and PowerConnect™ are trademarks of Dell Inc. All rights reserved. Specifications in this manual are subject to change on behalf of those vendors. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide 0511129-01 | May 2012 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 3
Contents About this Guide ...15 Dell PowerConnect W-Instant Access Point Overview 15 Supported Devices...15 Objective ...15 Intended Audience...15 Conventions...16 Contacting Support ...16 Chapter 1 Initial Configuration...17 Initial Setup...17 Pre-Installation Checklist...17 Connecting the IAP - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 4
Server 85 Image management using Dell PowerConnect W-AirWave 85 Automatic Firmware Image Check and Upgrade 85 Upgrading to New Version...86 Manual ...86 Automatic ...87 NTP IP Address for the Virtual Controller 91 Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 5
Instant RADIUS 97 RADIUS Server Authentication with VSA 97 List of supported VSA ...97 Management Authentication Settings 100 Captive Portal...101 Internal Role...119 Creating Role Assignment Rules 120 Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Contents | 5 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 6
TCP Service to a Particular Network 131 Allow PoP3 Service to a Particular Server 132 Deny FTP Service except to a Particular Server 133 Deny bootp Service except for IAP...153 SNMP Traps ...155 Ethernet Downlink ...157 Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 7
WIDS) Event Reporting to Dell PowerConnect WAirWave ...166 RF Visualization Support for Dell Instant 167 Configuring Dell PowerConnect W-AirWave 167 Creating Types and Management 189 Alert Types...189 Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Contents | 7 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 8
...193 Types of Client Blacklisting...194 Manual Blacklisting ...194 Adding a Client to the Manual Blacklist 194 Dynamic Blacklisting ...194 Authentication 210 Abbreviations ...213 Abbreviations ...213 8 | Contents Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 9
PEF ...28 WIP ...29 VPN ...29 Maintenance Link - Default View 30 Support Window...31 Support commands ...34 Help Link...34 Monitoring on Instant UI ...35 Info Section a Guest Network - Access Rules Tab 65 Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Figures | 9 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 10
111 Loading Certificates ...112 New Certificate...113 Loading Certificate via Dell PowrConnect W-AirWave 113 CA Certificate ...114 Server Certificate ...114 Selecting the Group ...114 Virtual Controller Certificate...115 Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 11
options for Dell PowerConnect W-AirWave- Scope Options 171 Vendor Specific DHCP options...172 Dell PowerConnect W-AirWave - New Group 173 Dell PowerConnect W-AirWave -Monitor 173 Virtual Controller View...175 Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Figures - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 12
Users for Internal Server...192 Roles ...193 Client Blacklisting...193 Manual Blacklisting ...194 Dynamic Blacklisting ...195 Enabling ALG Protocols...195 User ...203 Specifying a Country Code ...205 12 | Figures Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 13
Supported IAP platforms and minimal AOS version for IAP to RAP Conversion 80 WPA and WPA2 Features ...118 Recommended Authentication and Encryption Combinations 118 Network Service List of abbreviations...213 Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Tables | 13 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 14
14 | Tables Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 15
describes the various features supported by Dell Instant and provides detailed instructions for setting up and configuring a Dell Instant network. Intended Audience This guide is intended for customers who will be configuring and using Dell Instant. Dell PowerConnect W-Series Instant Access Point - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 16
loss of data. WARNING: Indicates a risk of personal injury or death. Contacting Support Website Support Main Website Support Website Dell Documentation dell.com support.dell.com support.dell.com/manuals 16 | About this Guide Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 17
the IAP is connected to. Typically if a switch is in place and does not support PoE, midspan power injectors are used. NOTE: A DNS server functions as a phonebook to a Power Source" on page 18 Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Initial Configuration | 17 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 18
so that when the DHCP service recovers, the IAP gets a valid IP address and reboots. In addition, you can manually assign a static IP without the support of DHCP after it comes wired network. 18 | Initial Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 19
navigate to instant.dell-pcw.com (or any URL or web address). In the login screen, enter the following credentials: Username- admin Password- admin Figure 3 Instant User Interface Login Screen Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Initial Configuration - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 20
code for the IAP-ROW APs installed. For the complete list of the countries that are supported in the IAP-ROW variant type, see "Regulatory Domain" on page 205. Figure 4 71 for more information. 20 | Initial Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 21
JavaScript must be enabled on the web browser to view the Instant UI. Supported browsers are: Internet Explorer 7 or higher Safari Google Chrome sections. Figure 5 Instant UI Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface | 21 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 22
Tab This tab displays a list of Wi-Fi networks that are configured in the Dell Instant network. The network names appear as links. The expanded view displays the following and Expanded View 22 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 23
This tab displays a list of clients that are connected to the Dell Instant network. The client names appear as links. The expanded view Signal strength. Speed (mbps)- Data transfer speed. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface | 23 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 24
WIP VPN Maintenance Support Help Logout Monitoring Alerts IDS Configuration Language Dell PowerConnect W-AirWave Setup Pause/Resume if a new image version is available on the image server and Dell PowerConnect W-AirWave is not configured. For more information about the New - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 25
AeroScout real-time asset location (RTLS) server. Specify the IP address and port number of the AeroScout server to which location reports should be sent. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface | 25 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 26
settings. See Chapter 17, "SNMP" for more information. OpenDNS- Instant supports OpenDNS business solutions which requires an OpenDNS (opendns.com) account comprising a more information. 26 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 27
- View or configure radio settings for 2.4GHz and the 5GHz radio profiles. For information about Radio, see "Configuring Radio Profiles in Instant" on page 145. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface | 27 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 28
on page 119. Blacklisting- Use this window to manually blacklist clients. See "Client Blacklisting" on page 193 Use this window to enable/disable gateway filters supporting address and port translation for various protocols. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 29
- Displays the current configuration of the network. Clear Configuration- Click to delete or clear the current configuration of the network and reset to provisioning configuration. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface | 29 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 30
, see "Migrating from a Virtual Controller Managed Network to Mobility Controller Managed Network" on page 79. Figure 16 Maintenance Link - Default View 30 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 31
following steps: 1. At the top right corner of Instant UI, click Support. The Support window appears. 2. Select the required option from the Command drop-down list of CPU for the selected IAP. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface | 31 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 32
disable status and allowed AP list of the selected IAP. VC Application Services- Displays the details of application services of the selected IAP, which includes protocol number, port number. 32 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 33
of the selected IAP. Tech Support Dump- Displays the technical support dump logs of the selected IAP. selected IAP. BSSID Table- Displays the Basic Service Set (BSS) table of the selected IAP. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 34
Configuration and Status- Displays configuration and status about open dns server. Figure 18 Support commands Help The Help link at the top right corner of the Instant UI Usage Trends 34 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 35
21 Info Section in the Monitoring Pane RF Dashboard Allows you to view trouble spots in the network. It displays the following information: Figure 22 RF strength is more than 20 decibels. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface | 35 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 36
is more than 50 percent of the maximum speed supported by the client. Orange- Data transfer speed is between 25-50 percent of the maximum speed supported by the client. Red- Data transfer . 36 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 37
Chapter 21, "Monitoring" . Alerts Alerts are generated when a user faces problems while accessing or connecting to the Wi-Fi network. The Alerts link appears a short description of the alert. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface | 37 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 38
number of sequence. Cleared by- Displays the module which cleared this fault. Description- Displays the event details. Figure 26 Fault History 38 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 39
. Type- Displays the Wi-Fi type of the foreign client. Last seen- Displays the time when the foreign client was last detected in the network. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface | 39 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 40
the Set Up Now link to set up the AirWave. The Settings window appears with Admin tab selected. For information to configure AirWave, see "Configuring Dell PowerConnect W-AirWave" on page 167. 40 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 41
client that you want to monitor. Client view for that client appears. For more information on the graphs and the views, see Chapter 21, "Monitoring" . Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface | 41 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 42
42 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 43
based or 802.1X based authentication methods are supported on this network type. Employees can access the protected data of an enterprise through the employee network after successful authentication. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 43 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 44
send/receive data. Each user- Indicates the throughput for any single user on this Network. The throughput value is specified in kbps. 44 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 45
. c. Transmit Rates- Indicates the ability to configure the basic and supported rates per SSID for Dell Instant. Select to set the minimum and maximum legacy (non-802.11n configuring the DHCP server. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 45 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 46
Personal. The available options are Enterprise, Personal, and Open which are described in the following tables. Figure 33 Employee Security Tab- Enterprise 46 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 47
of the PEF window. 7. Click Upload Certificate and browse to upload a certificate file for the internal server. See "Certificates" on page 111 for more information. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 47 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 48
. 10. Click Upload Certificate and browse to upload a certificate file for the internal server. See "Certificates" on page 111 for more information. 48 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 49
Figure 34 Employee Security Tab- Personal Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 49 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 50
203. 7. Click Upload Certificate and browse to upload a certificate file for the internal server. See "Certificates" on page 111 for more information. 50 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 51
a New User Role" on page 119 for more information. 3. Unrestricted- Select this to set no restrictions on access based on destination or type of traffic. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 51 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 52
tab. Voice Network Use the Voice network type when you want devices that provide only voice services like handsets or only applications that require voice-like prioritization need connectivity. 52 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 53
- Indicates the aggregate amount of throughput each radio (some AP models have multiple radios) is allowed to provide for all clients connected to that radio. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 53 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 54
power saving. c. Transmit Rates- Indicates the ability to configure the basic and supported rates per SSID for Dell Instant. Select to set the minimum and maximum legacy (non-802.11n) tables. 54 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 55
Figure 38 Voice Security Tab- Enterprise Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 55 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 56
203. 8. Click Upload Certificate and browse to upload a certificate file for the internal server. See "Certificates" on page 111 for more information 56 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 57
" on page 203. 10. Click Upload Certificate and browse to upload a certificate file for the internal server. See "Certificates" on page 111 for more information. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 57 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 58
" on page 119 for more information. Unrestricted- Select this to set no restrictions on access based on destination or type of traffic. 58 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 59
network. Typically, a guest network is an unencrypted network. However, you can specify encryption settings in the Security tab (see step 10 of the following procedure). Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 59 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 60
amount of throughput each radio (some AP models have multiple radios) is allowed to provide for all clients connected to that radio. 60 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 61
. c. Transmit Rates- Indicates the ability to configure the basic and supported rates per SSID for Dell Instant. Select to set the minimum and maximum legacy (non-802. 6. Click Next to continue. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 61 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 62
information, see "Walled Garden Access" on page 110. Select this option if you do not want to set the captive portal authentication. 62 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 63
either an alphanumeric or a hexadecimal string. Ensure that the hexadecimal string must be exactly 64 digits in length. c. Passphrase - Enter a pre-shared key (PSK) passphrase. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 63 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 64
" on page 119 for more information. Unrestricted- Select this to set no restrictions on access based on destination or type of traffic. 64 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 65
tab, click the network which you want to delete. A x link appears against the network to be deleted. 2. Click x. A delete confirmation window appears. 3. Click Delete Now. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 65 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 66
66 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 67
functionality is supported only on services set identifier (MSSID/ mesh cluster name) to advertise the mesh network service to other IAP mesh points in that instant network. This is not configurable and is transparent to Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 68
receive. Hence over-the-air provisioning is not supported on ROW IAPs at this time. This section provides instructions on how to create a simple mesh network 4. Type instant.dell-pcw.com in the browser. 68 | Mesh Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 69
that you want to deploy as Mesh Points from the switch and place the IAPs at the desired location. The wired IAPs are Mesh Portals. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Mesh Network | 69 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 70
point will get an IP address from the same DHCP pool as the portal, and this DHCP request goes through the portal. 70 | Mesh Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 71
Auto join mode, Terminal Access, LED display, and Syslog server features in Dell Instant. In addition, the chapter provides procedures for adding and removing IAPs, the Auto join mode drop-down list. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Managing IAPs | 71 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 72
where LEDs can be a distraction. Figure 49 LED Display NOTE: The LED display is always in Enabled mode while rebooting the IAP. 72 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 73
Terminal Access To enable or disable the telnet access to the IAP's CLI, go to Settings > Advanced > Terminal access. Figure 50 Terminal Access NOTE: Instant does not support configuration using CLI. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Managing IAPs | 73 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 74
, select one of the logging levels from the standard list of syslog levels. The default value is Notice. Figure 52 Syslog Server 74 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 75
to add an IAP to the network: 1. In the Access Points tab, click the New link. Figure 53 Adding an IAP to the Instant Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Managing IAPs | 75 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 76
an IAP from the Network An IAP can be manually removed from the network only if the Auto Join Mode feature is disabled. To manually remove an IAP from the network, perform the Editing IAP Settings 76 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 77
. 2. Enter the netmask of the network in the Netmask text box. 3. Enter the IP address of the default gateway in the Default gateway text box. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Managing IAPs | 77 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 78
the IAP. Configuring Adaptive Radio Management Adaptive Radio Management (ARM) is enabled in Dell Instant by default. However, if ARM is disabled, perform the following steps to - Access 5. Click OK. 78 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 79
AOS version for IAP to CAP/RAP conversion. Table 12 Supported IAP Platforms and Minimal AOS Version for IAP to CAP Conversion IAP Platform AOS Version W-IAP92 6.1.x W-IAP93 6.1.x W-IAP104 6.1.x Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Managing IAPs | 79 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 80
W-IAP175P W-IAP3WN W-IAP3WNP AOS Version TBD TBD TBD TBD TBD TBD TBD TBD TBD TBD To convert an IAP to RAP, follow the instructions below: 1. Navigate to the Maintenance tab in the top right corner of the Instant UI. 2. Click the Convert tab. 80 | Managing IAPs Dell PowerConnect W-Series Instant - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 81
the IAPs. 5. Click Convert Now to complete the conversion. Figure 62 Confirm Access Point Conversion 6. The IAP will reboot and begin operating in RAP mode. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Managing IAPs | 81 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 82
ensure that you configure the Instant AP in the controller white-list and enable the FTP service on the controller. Converting an IAP to CAP To convert an IAP to Campus AP, do . 2. Click the Convert tab 82 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 83
any problem with the IAPs, you can reboot all IAPs or selected IAPs in a network using the Instant UI. To reboot an IAP: 1. Click the Maintenance link. The Maintenance window appears. 2. Click the Reboot tab. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Managing - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 84
reboot was initiated message will appear. Figure 68 Reboot Successful 7. Click OK to close the window and re-login to the system. 84 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 85
its products. Upgrade using Dell PowerConnect W-AirWave and Image Server Dell Instant supports mixed AP-class instant deployment with W-IAP3WN/3WNP, W-IAP104, W- default. If Dell PowerConnect W-AirWave is configured, then the automatic image check is automatically disabled, use the manual image check - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 86
fails. Upgrading to New Version To manually check for a new firmware image version, perform the following steps: Manual Navigate to Maintenance > Firmware to select and manually upgrade the image file. 86 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 87
Check for New Version to automatically check for images on the Dell image server in the cloud. The field is replaced with the When the upgrading is successful. Upgrade fail- When the upgrading fails. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Managing IAPs | 87 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 88
88 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 89
usage, and troubleshoot network issues. Map event on one network element to a corresponding event on another. Maintain accurate time for billing services and similar. . Figure 72 Configuring NTP Server Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide NTP Server | 89 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 90
90 | NTP Server Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 91
can specify a single static IP address that can be used to manage a multi-AP Dell Instant network. This IP address is automatically provisioned on a shadow interface on the IAP in the Name text box. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Virtual Controller | 91 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 92
time from the drop-down list next to Lease time. Figure 74 Configuring the DHCP Server 7. Click Ok to apply the changes. 92 | Virtual Controller Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 93
Layer Security method supports the termination of EAP-TLS security using the internal RADIUS server. The EAP-TLS requires both server and certification authority (CA) certificates installed onto the IAP.The client certificate is verified on the Virtual Dell PowerConnect W-Series Instant Access - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 94
. EAP-Microsoft Challenge Authentication Protocol version 2 (MS-CHAPv2)- This EAP method is widely supported by Microsoft clients.A RADIUS server must be used as the backend authentication server. 94 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 95
the external RADIUS server. Auth port- Enter the authorization port number of the external RADIUS server. The port number is set to 1812 by default. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 95 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 96
server with users. For information about adding a user, see "Adding a User" on page 203. 10. Click Next to continue and then click Finish. 96 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 97
user is placed into the management role specified by the VSA. List of supported VSA Instant supports the following types of VSA's: AP-Group AP-Name ARAP- -Multi-Session-Id Acct-Output-Gigawords Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 97 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 98
-Program Exec-Program-Wait Expiration Fall-Through Filter-Id Framed-AppleTalk-Link Framed-AppleTalk-Network Framed-AppleTalk-Zone Framed-Compression Framed-IP-Address 98 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 99
Rad-Code Rad-Id Rad-Length Reply-Message Revoke-Text Server-Group Server-Name Service-Type Session-Timeout Simultaneous-Use State Strip-User-Name Suffix Termination-Action Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 99 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 100
. If there is no response from the RADIUS server (RADIUS server timeout), the authentication will switch to Internal. Figure 77 Management Authentication Settings 100 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 101
are supported on Dell Instant: Internal Captive Portal External Captive Portal Internal Captive Portal In the Internal Captive Portal type, an internal server is used to host the captive portal service Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 102
the following options for the splash page type: a. Internal - Authenticated b. Internal - Acknowledged c. External d. None See "Guest Network" on page 59 for more information. 102 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 103
New to add a RADIUS server. For information on configuring external RADIUS server, see "External RADIUS Server" on page 94. 6. Click Next and then click Finish. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 103 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 104
a splash page, perform the following steps: NOTE: The current release does not support per SSID splash page. When multiple SSIDs are configured to use customized splash page, exceed 255 characters. 104 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 105
for the network appears. 3. Navigate to Security tab and select None from the Splash page type drop-down list. Figure 82 Disabling Captive Portal Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 105 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 106
Click Next and then click Finish. External Captive Portal Dell Instant supports external captive portal authentication. The external portal can be after a certain number of authentication failures. 106 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 107
and authenticated clients. 8. Accounting- When enabled, the Access Points will post accounting information as RADIUS START and RADIUS STOP accounting records to the RADIUS server. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 107 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 108
are able to provide a customized graphical login page for visitors accessing the network. Refer to the RADIUS Services chapter in the Dell PowerConnect W-ClearPass GuestConnect Deployment Guide for information on setting up the RADIUS Web Login feature. Configuring the RADIUS Server in Instant To - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 109
filtering. MAC authentication requires that the MAC address of a machine must match a manually defined list of addresses. This form of authentication does not scale past a 5. Click OK to continue. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 109 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 110
up for Internet service can view "allowed" websites (typically hotel property websites). The website names must be DNS-based (not IP address based) and support the option to unauthenticated users. 110 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 111
can ensure that the certificate is real. Dell Instant supports the following certificate files: Server certificate: PEM or PKCS#12 format with passphrase (PSK) CA certificate: PEM or DER format Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 111 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 112
W-AirWave for further instructions. Loading Certificates using Instant WebUI To load a certificate in the Instant UI, perform the following steps: 1. Navigate to the Maintenance > Certificates page. Figure 87 Loading Certificates 112 | Authentication Dell PowerConnect W-Series Instant Access - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 113
certificate. The Certificate window will appear. 2. Enter the certificate Name, and click Choose File to browse and upload the certificate. Figure 89 Loading Certificate via Dell PowrConnect W-AirWave Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 113 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 114
the Instant Web UI. Refer Entering the Organization String and AMP Information into the IAP for further information. Figure 92 Selecting the Group 114 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 115
Certificate 6. Click Save to apply the changes only to Dell PowrConnect W-AirWave. Click Save and Apply to apply the changes to the Instant AP. 7. Click Revert to unselect the certificate options. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 115 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 116
116 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 117
encryption is supported. Encryption Recommendations Recommendations for encryption on Wi-Fi networks are as follows: WEP -Not recommended TKIP- Not recommended AES- Recommended for all deployments Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Encryption | 117 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 118
devices 802.1X AES Captive Portal None 802.1X or PSK as supported by the device AES if possible, TKIP or WEP if necessary (combine with restricted policy enforcement firewall (PEF) user role). 118 | Encryption Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 119
Chapter 10 Role Derivation Every client in a Dell Instant network is associated with a user role, which determines the client's network New Rule window appears. Enter the name of the new user role. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Role Derivation | 119 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 120
role - This is the case of a Windows machine with no user logged in. The device supports machine authentication and has a valid RADIUS account, but a user has not yet logged in and user role. 120 | Role Derivation Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 121
the operator from the Operator drop-down list. The following types of operators are supported: contains-To check if the attribute contains the operand value. Is 96 Creating Role Assignment Rules Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Role Derivation | 121 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 122
122 | Role Derivation Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 123
. The IAP can analyze the return message and get the value as VLAN to assign the user. Figure 97 Radius Access-Accept packets with VSA Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide User VLAN Derivation | 123 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 124
the radius server may return reply message for authentication. If the radius server support return attributes, and set attribute value to reply message, IAP can analyze the Rule window appears. 124 | User VLAN Derivation Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 125
button under the Access rules. 6. Select the Rule type as VLAN assignment. 7. Enter the ID of the VLAN in the VLAN id textbox. 8. Click OK. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide User VLAN Derivation | 125 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 126
. 9. Select the role to be assigned from the Role textbox. 10. Click OK. Figure 102 To Use a Defined User VLAN Role 126 | User VLAN Derivation Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 127
client VLAN assignment. 3. Enter the ID of the VLAN in the VLAN ID textbox. 4. Click OK. Figure 103 Configuring VLAN Derivation Rules Using SSID Profile Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide User VLAN Derivation | 127 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 128
128 | User VLAN Derivation Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 129
allow or deny traffic with the specified service type and destination. Log- Select this checkbox when this rule is triggered. Instant firewall supports firewall based logging function. Firewall logs on Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant Firewall | 129 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 130
Basic Input/Output System-Session Service Network Time Protocol Point of Access for Providers of Information Post Office Protocol 3 Point-to-Point Tunneling Protocol Real Time Streaming Protocol 130 | Instant Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 131
TCP Service to a Particular Network 1. Click the New link in the Networks tab. To define the access rule to an existing network, click the network. The edit link appears. Click the edit link and navigate to the Access tab. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 132
window appears. b. Select Allow from the Action drop-down list. c. Select custom from the Service drop-down list. Select TCP from the Protocol drop-down list. Enter appropriate port continue. 132 | Instant Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 133
default. This rule allows traffic to all destinations. To define deny FTP service access rule except to a particular server, perform the following steps: 1. Click New, the New Rule window appears. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant Firewall | 133 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 134
bootp from the Service drop-down list. 4. Select except to a network from the Destination drop-down list. Enter the appropriate IP address in the IP text box. Enter the appropriate netmask in the Netmask text box. 5. Click OK. 134 | Instant Firewall Dell PowerConnect W-Series Instant Access - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 135
6. Click Finish. Figure 108 Defining Rule - Deny bootp Service Except to a Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant Firewall | 135 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 136
136 | Instant Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 137
Dell Instant uses OpenDNS to implement the Content Filtering feature. OpenDNS is a Domain Name System (DNS) resolution service four domain names can be configured manually. When enabled, all DNS Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Content Filtering | 137 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 138
Dell Instant network and the service is enabled or disabled globally across all the wireless networks that are configured in the Dell to OpenDNS. Figure 110 Enterprise Domains To manually add or delete a domain, perform the Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 139
Windows XP Windows ME OS-X iPhone iPAD Android Blackberry Linux In the following image, the OS of the client is Windows 7. Figure 111 OS Fingerprinting Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide OS Fingerprinting | 139 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 140
140 | OS Fingerprinting Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 141
more channels on the 5 GHz band than on the 2.4 GHz band. Band steering supports the following three different band steering modes: Prefer 5Ghz- If you configure the IAP the 5Ghz band has Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Adaptive Radio Management | 141 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 142
configure the ARM channels in the channel width window. The valid channels will automatically show in the static channel assignment window. 142 | Adaptive Radio Management Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 143
is configured for a Min Tx EIRP setting it cannot support, this value will be reduced to the highest supported power setting. The default value is18 dBm. Max the current RF health state. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Adaptive Radio Management | 143 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 144
ARM on the 2.4 GHz and 5 GHz bands and set the channel and power manually if desired. 5. Select Administrator assigned in 2.4 GHz and 5 GHz band sections. band sections. 8. Click OK. 144 | Adaptive Radio Management Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 145
Configuring Radio Profiles in Instant Dell Instant supports radio profile configuration. The radio settings are available for both the by the access point. The default value is 100 msec. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Adaptive Radio Management | 145 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 146
maintained. NOTE: Ensure to reboot the IAP after configuring the radio profile settings in order for the changes to take effect. 146 | Adaptive Radio Management Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 147
Detection and Classification The most important IDS functionality offered in the Dell Instant network is the ability to detect rogue APs, interfering APs ) these options accordingly. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Intrusion Detection System | 147 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 148
networks using VALID SSID- Valid SSID list will be auto-configured based on Instant AP configuration Detect Malformed Frame- Large Duration 148 | Intrusion Detection System Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 149
Save DOS Attack Detect EAP Rate Anomaly Detect Rate Anomaly Detect Chop Chop Attack Detect TKIP Replay Attack IDS Signature- Air Jack IDS Signature- ASLEAP Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Intrusion Detection System | 149 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 150
Client Protection Policies Detection Level Detection Policy Off All detection policies are disabled Low Protect Valid Station High Protect Windows Bridge 150 | Intrusion Detection System Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 151
network. Instant supports the following types of containment mechanisms: Wired containment- When enabled, Dell PowerConnect W-Series Instant contained. Figure 118 Containment Methods Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Intrusion Detection System | 151 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 152
152 | Intrusion Detection System Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 153
Dell Instant supports versions 1, 2c, and 3 of Simple Network Management Protocol (SNMP) for reporting purposes only. In other words, SNMP cannot be used for setting values in a Dell the string and click Delete. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide SNMP | 153 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 154
edit the details for a particular user, select the user and click Edit. 10. To delete a particular user, select the user and click Delete. 154 | SNMP Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 155
supports the configuration of external trap receivers in the Instant UI. Only the IAP acting as the Virtual Controller will generate traps. The OID of the traps is 1.3.6.1.4.1.14823.2.3.3.1.200.2.X. Figure 121 SNMP Traps Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 156
) describe the objects that can be managed using SNMP. See the Dell PowerConnect W-Series Instant Access Point MIB Reference Guide for information about the Dell PowerConnect W-Series and Aruba MIBs and SNMP traps. 156 | SNMP Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 157
printers (which support only wired manually. When enabled, the system passes electric power along with the data on the ethernet cable. NOTE: The Power Sourcing Equipment (PSE) functionality is available only for the Ethernet port2 on W-RAP3WNP. Displays the status of the admin. Dell PowerConnect - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 158
downlink profile to Ethernet 2 port, select the profile from the Ethernet 2 drop down list Figure 123 Assigning a Profile to the Ethernet Port 158 | Ethernet Downlink Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 159
Configuration Uplink Configuration Overview The Dell PowerConnect W-Instant supports 3G USB modems for the corporate support in two ways- Manually provisioning and automatically provisioning. NOTE: W-IAP3WN and W-IAP3WNP, which will be available soon, support 3G. Types of Modems Instant supports - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 160
The following table lists the types of supported 3G modems: Table 25 List of Supported 3G Modems Modem Type Supported 3G Modems True Auto Detect True Auto 320 Longcheer WM72 U600(3G mode) 160 | Uplink Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 161
Table 25 List of Supported 3G Modems (Continued) Modem Type Supported 3G Modems Auto-detect + ISP/country No auto-detect uplink manually: 1. In the settings tab, click the show advanced settings hyperlink. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Uplink - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 162
modem parameters manually. Uplink Switchover The default priority list is eth0, 3G. The IAP has the ability to switch to the lower priority uplink if the current uplink is down. NOTE: IAP reboot is not required for uplink swtichover process. 162 | Uplink Configuration Dell PowerConnect W-Series - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 163
-down list. Figure 127 Uplink Preference NOTE: The user can force to use one uplink manually, so that the IAP use that uplink, switchover and preemption does not work under this configuration. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Uplink Configuration | 163 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 164
164 | Uplink Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 165
problems from any Internet connection. Dell IAPs communicate with AirWave using the HTTPS protocol. This allows an AirWave server to be deployed in the cloud across a NAT device such as a router. Dell PowerConnect is completed without the necessity to manually monitor the devices. The following - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 166
events for devices that have experienced the most instances in the prior 24 hours, and provides links to support additional analysis or configuration in response. 166 | Dell PowerConnect W-AirWave Integration and Management Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 167
Support for Dell Instant Dell PowerConnect W-AirWave supports RF visualization for Dell Dell PowerConnect W-AirWave This section describes how to configure Dell PowerConnect W-AirWave. Before configuring the AirWave, you need the following: IP address of the AirWave server. Shared key for service - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 168
The Shared Secret key is used by the administrator to manually authorize the first Virtual Controller for an organization. Any string is acceptable. Entering the Organization String and AMP Information into the IAP 1. Click the Dell PowerConnect W-AirWave Set Up Now link in the bottom-middle region - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 169
will set the value globally. Use options in a per scope basis to override the global options). 5. Right click on Server Options and select configure options. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Dell PowerConnect W-AirWave Integration and Management | 169 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 170
Info and enter a value for airwave-orgn, airwave-ip, airwave-key in the ASCII field (for example: tme-instant-store1, 10.169.240.8, Dell123). 170 | Dell PowerConnect W-AirWave Integration and Management Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 171
clients info about certain services such as PXE to the DHCP clients. In such an environment, it is not possible to use the standard DHCP option 60 and 43 for Dell APs. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Dell PowerConnect W-AirWave Integration and Management - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 172
Dell PowerConnect W-AirWave, the IAP shows up as a new device and a group called tme-store4 has been created. Go to APs/Devices > New > Group to view this group. 172 | Dell PowerConnect W-AirWave Integration and Management Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 173
Figure 138 Dell PowerConnect W-AirWave - New Group Figure 139 Dell PowerConnect W-AirWave -Monitor Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Dell PowerConnect W-AirWave Integration and Management | 173 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 174
174 | Dell PowerConnect W-AirWave Integration and Management Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 175
Controller view is the default view.This view allows you to monitor the Dell Instant network. The following Instant UI elements are available in this view: sections. Figure 140 Virtual Controller View Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Monitoring | 175 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 176
" on page 180. Usage Trends The Usage Trends section displays the following graphs for the Virtual Controller: Clients Graph Figure 141 Clients Graph 176 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 177
for the last 15 minutes. To see the exact number of clients in the Dell Instant network at a particular time, hover the cursor over the graph line. To check the IDS link, see "IDS" on page 39. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Monitoring | 177 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 178
Network View All Wi-Fi networks in the Dell Instant network are listed in the Networks tab. Click the network that you Security level- The type of user authentication and data encryption for this network. 178 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 179
Controller for the last 15 minutes. To see the exact number of clients in the Dell Instant network at a particular time, hover the cursor over the graph line. To check selected network at 12:00 hours Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Monitoring | 179 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 180
the selected network at 12:03 hours. Instant Access Point View All IAPs in the Dell Instant network are listed in the Access Points tab. Click the IAP that you want Figure 146 Instant Access Point View 180 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 181
that band: Utilization 2.4 GHz Frames Figure 147 2.4 GHz Frames Graph Noise Floor Errors To see the graphs for the 5 GHz band, click the 5 GHz link. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Monitoring | 181 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 182
Noise column in the RF Dashboard pane to see the Noise graph for the selected IAP. The rectangle icon is seen as follows: 182 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 183
. 3. Study the Throughput graph in the Usage Trends pane. For example, the graph on the left shows 4.0 kbps incoming traffic throughput at 12:08 hours. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Monitoring | 183 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 184
Client View In the Virtual Controller view, all clients in the Dell Instant network are listed in the Clients tab. Click the IP address of the information for the IAP to which the client is connected to. 184 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 185
RF Trends The RF Trends section displays the following graphs for the selected client: Signal Figure 149 Signal Graph Frames Figure 150 Frames Graph Speed Figure 151 Speed Graph Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Monitoring | 185 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 186
in the RF Trends pane. For example, the graph on the left shows 4.0 frames per second for the client at 12:27 hours. 186 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 187
graph in the RF Trends pane. For example, the graph on the left shows 1.0 kbps outgoing traffic throughput for the client at 12:30 hours. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Monitoring | 187 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 188
with which the client was associated. NOTE: Mobility information about the client is reset each time it roams from one IAP to another. 188 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 189
alerts enable you to troubleshoot the problems. The alerts that are generated on Dell Instant can be categorized this client to associate because it does not support the 802.11 rate requested by this client. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Alert Types and Management - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 190
did not receive a response to Check the status of the DHCP server in its DHCP request in time. the network. 190 | Alert Types and Management Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 191
for a wireless network. See "Configuring an External RADIUS Server" on page 95 for more information. 2. Click OK to apply the changes. Figure 153 Authentication Server Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Policy Enforcement Firewall | 191 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 192
role with the same name as the network is automatically defined for each network. These roles cannot be deleted or renamed. 192 | Policy Enforcement Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 193
a client is connected to the network when it is blacklisted, a deauthentication message will be send to force the client to disconnect. Figure 156 Client Blacklisting Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Policy Enforcement Firewall | 193 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 194
are removed from the blacklist. Adding a Client to the Manual Blacklist To add a client to the blacklist manually using the MAC address of the client, perform the following steps an IAP. 194 | Policy Enforcement Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 195
158 Dynamic Blacklisting PEF Settings Firewall ALG Configuration Instant firewall now supports the ALG (Application Layer Gateway) functions such as SIP, Figure 159 Enabling ALG Protocols Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Policy Enforcement Firewall | 195 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 196
the changes take effect. Firewall-based Logging Instant firewall now supports firewall based logging function. The firewall logs on the Instant APs are generated as syslog messages. 196 | Policy Enforcement Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 197
Chapter 24 VPN Configuration The IAP supports termination of a VPN tunnel on the Dell PowerConnect W controller. VPN features are ideal for: enterprises with host field. This entry is optional. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide VPN Configuration | 197 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 198
addition to allocating IP subnets to each branch. The following modes of DHCP server are supported: Local Subnet- In this mode, the VC assigns an IP address from a tunnel or through the uplink. 198 | VPN Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 199
way as the Distributed L2 mode. L3 Routing Mode- In this mode, Instant supports L3 routing mode of connection to corporate. VC assigns an IP addresses from the defines the lease time for client. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide VPN Configuration | 199 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 200
Client count- This along with network and mask determines how many branches can be supported. For the current phase of IAP, it is important that this value is configured apply these changes. 200 | VPN Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 201
Client count- This along with network and mask determines how many branches can be supported. For the current phase of IAP, it is important that this value is configured OK to apply these changes. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide VPN Configuration | 201 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 202
in the SSID configuration to make use of this subnet. 2. Click OK to apply these changes. Figure 166 Centralized L2 DHCP Configuration 202 | VPN Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 203
password for the user. The login credentials for these users are provided outside the Dell Instant system. A guest user can be a visitor who will be temporarily using users are listed in the Users list. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide User Database | 203 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 204
All. NOTE: Deleting a user only removes the user record from the user database, and won't disconnect the online user under this username. 204 | User Database Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 205
requires you to specify the country code for the country in which the Dell Instant will operate. This configuration sets the regulatory domain for the radio frequencies Specifying a Country Code Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Regulatory Domain | 205 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 206
) China France Hong Kong Singapore Taiwan Brazil Israel Saudi Arabia Lebanon United Arab Emirates South Africa Argentina Australia Austria Bolivia Chile Greece 206 | Regulatory Domain Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 207
Rico SK Slovak Republic SI Slovenia TH Thailand UY Uruguay PA Panama RU Russia EG Egypt TT Trinidad and Tobago TR Turkey CR Costa Rica Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Regulatory Domain | 207 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 208
Republic GT Guatemala PH Philippines LK Sri Lanka SV El Salvador TN Tunisia PK Islamic Republic of Pakistan QA Qatar DZ Algeria 208 | Regulatory Domain Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 209
a lower case entry without any delimiter. (ArubaW-3400) #local-userdb-ap add mac-address 00:11:22:33:44:55 ap-group test (ArubaW-3400) # Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Controller Configuration for VPN | 209 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 210
any src-nat (ArubaW-3400) (config-sess-iaprole)#any any any permit (ArubaW-3400) (config-sess-iaprole)#! 210 | Controller Configuration for VPN Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 211
-group default (ArubaW-3400) (VPN Authentication Profile "default-iap") #default-role iaprole (ArubaW-3400) (VPN Authentication Profile "default-iap") #! (ArubaW-3400) (config) # Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Controller Configuration for VPN | 211 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 212
212 | Controller Configuration for VPN Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 213
Server Network Address Translation Name Server Network Time Protocol Protected Extensible Authentication Protocol Privacy Enhanced Mail Power over Ethernet Remote Authentication Dial In User Service Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Abbreviations | 213 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 214
Table 33 List of abbreviations (Continued) Abbreviation Expansion VC VSA WLAN Virtual Controller Vendor-Specific Attributes Wireless Local Area Network 214 | Abbreviations Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide
Dell PowerConnect W-Series
I
nstant Access Point
6.1.3.1-3.0.
0.0
User Guide