Dell PowerConnect W-IAP3WN Dell Instant 6.1.3.4-3.1.0.0 User Guide
Dell PowerConnect W-IAP3WN Manual
View all Dell PowerConnect W-IAP3WN manuals
Add to My Manuals
Save this manual to your list of manuals |
Dell PowerConnect W-IAP3WN manual content summary:
- Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 1
Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 2
Mobility Management System®. Dell™, the DELL™ logo, and PowerConnect™ are trademarks of Dell Inc. All rights reserved. Specifications in this manual are subject to on behalf of those vendors. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide 0511129-02 | September 2012 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 3
Contents About this Guide ...11 Dell PowerConnect W-Instant Access Point Overview 11 Supported Devices...11 Objective ...11 Intended Audience...11 Conventions...12 Contacting Support ...12 Chapter 1 Initial Configuration...13 Initial Setup...13 Pre-Installation Checklist...13 Connecting the IAP - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 4
Dell PowerConnect W-AirWave and Image Server 89 Image management using Cloud Server 89 Image management using Dell PowerConnect W-AirWave 89 Automatic Firmware Image Check and Upgrade 89 Upgrading to New Version...90 Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 5
7 Chapter 8 Chapter 9 Chapter 10 Manual ...90 Automatic ...92 Layer-3 Mobility Server Authentication with VSA 113 List of supported VSA ...113 Management Authentication Settings 116 Dell PowerConnect W-ClearPass Guest- Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 6
151 Deny FTP Service except to a Particular Server 152 Deny bootp Service except to a Particular Network 153 Content Filtering...155 Enabling Content Filtering ...155 Enterprise Domains...156 OS Fingerprinting...157 Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 7
...187 Dell PowerConnect W-AirWave Integration and Management 189 Dell PowerConnect W-AirWave Features 189 Image Management...189 IAP and Client Monitoring...189 Template-based Configuration 190 Trending Reports ...190 Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 8
to Dell PowerConnect WAirWave ...190 RF Visualization Support for Dell Instant 191 Configuring Dell PowerConnect W- Client Blacklisting...224 Manual Blacklisting ...224 Adding a Client to the Manual Blacklist 224 Dynamic Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 9
Configuration if the Controller is acting as the Whitelist Entry 241 VPN Local Pool Configuration 242 IAP VPN Profile Configuration 242 Abbreviations ...245 Abbreviations ...245 Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Contents | 9 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 10
10 | Contents Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 11
Objective This user guide describes the various features supported by Dell Instant and provides detailed instructions for setting up and configuring a Dell Instant network. Intended Audience This guide is intended for customers who configure and use Dell Instant. Dell PowerConnect W-Series Instant - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 12
loss of data. WARNING: Indicates a risk of personal injury or death. Contacting Support Website Support Main Website Support Website Dell Documentation dell.com support.dell.com support.dell.com/manuals 12 | About this Guide Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 13
IAP is connected to. Typically if a switch is in place and does not support PoE, midspan power injectors are used. NOTE: A DNS server functions as a to a Provisioning Wi-Fi Network" on page 14 Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Initial Configuration | 13 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 14
run so that when the DHCP service recovers, the IAP gets a valid IP address and reboots. In addition, you can manually assign a static IP without the support of DHCP, after the IAP wired network. 14 | Initial Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 15
1 None 5. In the apboot mode, use the following commands to disable the provisioning network: apboot> factory_reset apboot> setenv disable_prov_ssid 1 apboot> saveenv apboot> reset Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Initial Configuration | 15 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 16
for the IAP-ROW APs installed. For the complete list of the countries that are supported in the IAP-ROW variant type, see "Regulatory Domain" on page 237. Figure 4 Specifying the Country Code 16 | Initial Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 17
from one cluster to another requires a factory reset of the IAP that is being moved. See Chapter 5, "Managing IAPs" on page 71 for more information. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Initial Configuration | 17 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 18
18 | Initial Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 19
JavaScript must be enabled on the web browser to view the Instant UI. Supported browsers are: Internet Explorer 7 or higher Safari Google Chrome sections. Figure 5 Instant UI Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Instant User Interface | 19 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 20
Tab This tab displays a list of Wi-Fi networks that are configured in the Dell Instant network. The network names appear as links. The expanded view displays the following and Expanded View 20 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 21
Tab This tab displays a list of clients that are connected to the Dell Instant network. The client names appear as links. The expanded view displays client. Signal- Indicates Signal strength. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Instant User Interface | 21 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 22
WIP VPN Maintenance Support Help Logout Monitoring Alerts IDS Configuration Language Dell PowerConnect W-AirWave Setup Pause/Resume New a new image version is available on the image server and Dell PowerConnect W-AirWave is not configured. For more information about the New - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 23
AeroScout real-time asset location (RTLS) server. Specify the IP address and port number of the AeroScout server to which location reports should be sent. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Instant User Interface | 23 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 24
- Instant supports OpenDNS business solutions which requires an OpenDNS (opendns.com) account comprising a username and a password. These credentials will be used by Instant to access OpenDNS to provide enterprise-level content filtering. 24 | Instant User Interface Dell PowerConnect W-Series - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 25
-3 mobility settings. See "Layer-3 Mobility" on page 93 for more information. RF This link displays the configuration parameters Adaptive Radio Management (ARM) and Radio features. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Instant User Interface | 25 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 26
to configure an external RADIUS server for a wireless network. See "Configuring an External RADIUS Server" on page 110 for more information. 26 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 27
page 137. Blacklisting- Use this window to manually blacklist clients. See "Client Blacklisting" on window to enable/disable gateway filters supporting address and port translation for various Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Instant User Interface | 27 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 28
Configuration- Use this feature to create local Instant configuration backup. Click Backup Configuration to save the configuration file named instant.cfg. 28 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 29
managed network to a Dell Mobility Controller managed network. For more information, see "Migrating to a Mobility Controller Managed Network" on page 83. Figure 17 Maintenance Link - Default View Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Instant User Interface - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 30
the supported time zones of Instant. AP ARM Channels- Displays channels of ARM in the selected IAP. AP ARM Configuration- Displays configuration of ARM in the selected IAP. AP Country Codes- Displays country code for the selected IAP. 30 | Instant User Interface Dell PowerConnect W-Series - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 31
type, build time of image, image version. VC Allowed AP Table- Displays allowed AP enable/disable status and allowed AP list of the selected IAP. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Instant User Interface | 31 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 32
logs of the selected IAP. Tech Support Dump- Displays the technical support dump logs of the selected IAP. the selected IAP. BSSID Table- Displays the Basic Service Set (BSS) table of the selected IAP. IDS Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 33
and Status- Displays configuration and status about open dns server. Figure 19 Support commands Help The Help link at the top right corner of the Instant UI RF Dashboard Usage Trends Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Instant User Interface | 33 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 34
Figure 22 Info Section in the Monitoring Pane RF Dashboard Allows you to view trouble spots in the network. It displays the following information: Figure 23 RF Dashboard more than 20 decibels. 34 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 35
more than 50 percent of the maximum speed supported by the client. Orange- Data transfer speed is between 25-50 percent of the maximum speed supported by the client. Red- Data 15 minutes. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Instant User Interface | 35 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 36
a spectrum monitor for the 2.4 GHz radio band. The data displayed includes percentage of Quality, Availability, Wi-Fi utilization, and Interference utilization. 36 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 37
data from the one channel they are monitoring. Figure 28 Channel Details Information For more information on spectrum monitoring, see "Spectrum Monitor" on page 97. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Instant User Interface | 37 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 38
Alerts Alerts are generated when a user faces problems while accessing or connecting to the Wi-Fi network. The Alerts link appears connected. Details- Provides complete details of the alert. 38 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 39
consists of the following fields: Time- Displays the system time when an event occurs. Number- Indicates the number of sequence. Description- Displays the event details. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Instant User Interface | 39 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 40
the pushpin icon to view the information. For more information on the intrusion detection feature, see Chapter 18, "Intrusion Detection System" . 40 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 41
the Set Up Now link to set up the AirWave. The Settings window appears with Admin tab selected. For information to configure AirWave, see "Configuring Dell PowerConnect W-AirWave" on page 191. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Instant User Interface | 41 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 42
Figure 35 Dell PowerConnect W-AirWave Setup Link - Dell PowerConnect W-AirWave Configuration Pause/Resume The Pause/Resume link is located at and the views, see Chapter 24, "Monitoring" . 42 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 43
based or 802.1X based authentication methods are supported on this network type. Employees can access the protected data of an enterprise through the employee network after successful authentication. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Wireless Network | 43 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 44
bands. Multicast traffic can be sent at up to 24 mbps when this option is enabled. This option is disabled by default. 44 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 45
radio. c. Transmit Rates- Indicates the ability to configure the basic and supported rates per SSID for Dell Instant. Select to set the minimum and maximum legacy (non-802. Employee Network- VLAN Tab Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Wireless Network | 45 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 46
Personal. The available options are Enterprise, Personal, and Open which are described in the following tables. Figure 38 Employee Security Tab- Enterprise 46 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 47
of the PEF window. 7. Click Upload Certificate and browse to upload a certificate file for the internal server. See "Certificates" on page 129 for more information. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Wireless Network | 47 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 48
. 10. Click Upload Certificate and browse to upload a certificate file for the internal server. See "Certificates" on page 129 for more information. 48 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 49
a User" on page 235. 7. Click Upload Certificate and browse to upload a certificate file for the internal server. See "Certificates" on page 129 for more information. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Wireless Network | 49 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 50
" on page 137 for more information. 3. Unrestricted- Select this to set no restrictions on access based on destination or type of traffic. 50 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 51
tab. Voice Network Use the Voice network type when you want devices that provide only voice services like handsets or only applications that require voice-like prioritization need connectivity. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Wireless Network | 51 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 52
over the wireless link. DMO enhances the quality and reliability of streaming video, while preserving the bandwidth available to non-video clients. 52 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 53
radio. c. Transmit Rates- Indicates the ability to configure the basic and supported rates per SSID for Dell Instant. Select to set the minimum and maximum legacy (non-802.11n in the following tables. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Wireless Network | 53 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 54
Figure 43 Voice Security Tab- Enterprise 54 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 55
is 10. NOTE: Navigate to PEF > Blacklisting in the WebUI to specify the duration of the blacklisting on the Blacklisting tab of the PEF window. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Wireless Network | 55 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 56
. 10. Click Upload Certificate and browse to upload a certificate file for the internal server. See "Certificates" on page 129 for more information. 56 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 57
a New User Role" on page 137 for more information. Unrestricted- Select this to set no restrictions on access based on destination or type of traffic. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Wireless Network | 57 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 58
, a guest network is an unencrypted network. However, you can specify encryption settings in the Security tab (see step 5 of the following procedure). 58 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 59
into unicast streams over the wireless link. DMO enhances the quality and reliability of streaming video, while preserving the bandwidth available to non-video clients. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Wireless Network | 59 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 60
saving. c. Transmit Rates- Indicates the ability to configure the basic and supported rates per SSID for Dell Instant. Select to set the minimum and maximum legacy (non-802.11n) Next to continue. 60 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 61
either an alphanumeric or a hexadecimal string. Ensure that the hexadecimal string must be exactly 64 digits in length. 3. Passphrase- Enter a pre-shared key (PSK) passphrase. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Wireless Network | 61 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 62
information, see "Walled Garden Access" on page 128. Select this option if you do not want to set the captive portal authentication. 62 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 63
either an alphanumeric or a hexadecimal string. Ensure that the hexadecimal string must be exactly 64 digits in length. c. Passphrase - Enter a pre-shared key (PSK) passphrase. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Wireless Network | 63 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 64
" on page 137 for more information. Unrestricted- Select this to set no restrictions on access based on destination or type of traffic. 64 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 65
create up to six networks or WLANs. You can enable the Extended SSID option and create up to 16 WLANs. W-IAP175, W-IAP104, and W-IAP105 devices support up to 8 SSIDs and W-IAP3WN, W- Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Wireless Network | 65 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 66
IAP92, W-IAP93, W-IAP134, and W-IAP135 devices support up to 16 SSIDs. After you enable this option, the number of SSIDs that link and mesh are disabled automatically. Figure 49 Enabling Extended SSID 66 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 67
functionality is supported only on services set identifier (MSSID/ mesh cluster name) to advertise the mesh network service to other IAP mesh points in that instant network. This is not configurable and is transparent to Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 68
services (such as client connectivity, intrusion detection system (IDS) capabilities, user role association, and Quality of Service is not supported on ROW IAPs at this time. This section provides instructions on how to Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 69
4. Type instant.dell-pcw.com in the browser. 5. Click I understand the risks and Add exception to ignore the the IAPs at the desired location. The IAPs with valid uplink connections are the mesh portal. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Mesh Network | 69 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 70
point will get an IP address from the same DHCP pool as the portal, and this DHCP request goes through the portal. 70 | Mesh Network Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 71
Auto join mode, Terminal Access, LED display, and Syslog server features in Dell Instant. In addition, the chapter provides procedures for adding and removing IAPs, the Auto join mode drop-down list. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Managing IAPs | 71 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 72
Figure 54 Disabling Auto Join Mode 3. Click OK. Terminal Access To enable or disable the telnet access to the IAP's CLI, navigate to Settings > Advanced > Terminal access. 72 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 73
Figure 55 Terminal Access NOTE: Instant does not support configuration using CLI. LED Display Administrators have the ability to turn . Use this option in environments where LEDs can be a distraction. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Managing IAPs | 73 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 74
Figure 56 LED Display NOTE: The LED display is always in Enabled mode while rebooting the IAP. TFTP Dump Server Enter the IP address of a TFTP server to store core dump files. 74 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 75
be created by enabling the extended SSID option. To enable this feature, navigate to Settings > General and click Show advanced options in the Instant UI. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Managing IAPs | 75 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 76
you to deny local routing traffic between clients which are connected to the same IAP or are on the same Instant network. 76 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 77
To enable or disable the telnet access to the IAP's CLI, go to Settings > Advanced > Terminal access. Figure 60 Terminal Access NOTE: Instant does not support configuration using CLI. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Managing IAPs | 77 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 78
default value is Notice. Figure 61 Syslog Server Syslog Facility Levels Dell Instant supports facility-based logging levels. Syslog Facility is an information field associated error. Error conditions. 78 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 79
an IAP from the Network An IAP can be manually removed from the network only if the Auto Join Mode feature is disabled. To manually remove an IAP from the network: 1. In from the Virtual Controller. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Managing IAPs | 79 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 80
for which you want to change the IP address. The edit link appears. 2. Click the edit link. The Edit AP window appears. 80 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 81
(ARM) is enabled in Dell Instant by default. However, if ARM is disabled, perform the following steps to enable it. 1. In the Access Points tab, click the IAP for which you want to configure ARM. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Managing IAPs | 81 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 82
ARM, see "Adaptive Radio Management" on page 159. Configuring Uplink Management VLAN Instant supports a management VLAN for the uplink traffic on an IAP. After an IAP is Bridging drop box. 5. Click OK. 82 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 83
in the firmware image cloud server, the IAP gets Dell PowerConnect WAirWave server information from the cloud server and downloads configuration from Dell PowerConnect WAirWave to operate in IAP mode. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Managing IAPs | 83 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 84
W-IAP135 W-IAP175AC W-IAP175P W-IAP3WN W-IAP3WNP 6.1.4 or later 6.1.4 or later 6.1.4 or later 6.1.4 or later 6.1.4 or later 6.1.4 or later 6.1.4 or later 6.1.4 or later 6.1.4 or later 6.1.4 or later 84 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 85
To convert an IAP to RAP, follow the instructions below: 1. Navigate to the Maintenance tab in the top right corner of the Access Point Conversion 6. The IAP will reboot and begin operating in RAP mode. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Managing IAPs | 85 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 86
FTP service on the controller. NOTE: If the VPN setup fails and an error message pops up, please click OK, copy the error logs and share them with your Dell support engineer. . 2. Click the Convert tab. 86 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 87
any problem with the IAPs, you can reboot all IAPs or selected IAPs in a network using the Instant UI. To reboot an IAP: 1. Click the Maintenance link. The Maintenance window appears. 2. Click the Reboot tab. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Managing - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 88
after reboot was initiated message appears. Figure 78 Reboot Successful 7. Click OK to close the window and re-login to the system. 88 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 89
its products. Upgrade using Dell PowerConnect W-AirWave and Image Server Dell Instant supports mixed AP-class instant deployment with W-IAP3WN/3WNP, W-IAP104, W- default. If Dell PowerConnect W-AirWave is configured, then the automatic image check is automatically disabled, use the manual image check - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 90
fail -When the upgrading fails. Upgrading to New Version To manually check for a new firmware image version: Manual 1. Navigate to Maintenance > Firmware to select and manually upgrade the image file. 90 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 91
.8/DellInstant_Cassiopeia_6.1.3.4-3.1.0.0_xxxx URL for W-IAP105/92/93: tftp://10.64.147.8/DellInstant_Orion_6.1.3.4-3.1.0.0_xxxx FTP: ftp://10.64.147.8/DellInstant_Cassiopeia_6.1.3.4-3.1.0.0_xxxx Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Managing IAPs | 91 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 92
. Automatic 1. Click Check for New Version to automatically check for images on the Dell image server in the cloud. The field is replaced with the Image Check in Progress When the upgrading fails. 92 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 93
network to which it first connected (home network) to another Instant network supporting the same WLAN access parameters (foreign network) and continue its existing sessions traffic between these APs. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Layer-3 Mobility | 93 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 94
the mask in the Subnet mask text box. c. Enter the VLAN ID in the home network in the VLAN ID text box. 94 | Layer-3 Mobility Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 95
d. Enter the home VC IP address for this subnet in the Virtual Controller IP text box. Figure 85 Add Subnets Information 6. Click OK. Figure 86 Example Layer-3 Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Layer-3 Mobility | 95 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 96
then click L3 Mobility. 3. Select Enabled from the Home agent load balancing drop-down list. Figure 87 Home Agent Load Balancing Enabled 96 | Layer-3 Mobility Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 97
the procedure below to convert IAPs in an Dell Instant network to hybrid mode: 1. Click the RF link at the top right corner of the Instant WebUI. 2. Click Show advanced options to view the Radio tab. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Spectrum Monitor | 97 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 98
tab. 4. From the Access Mode drop-down list, select Spectrum Monitor. 5. Click OK. 6. Reboot the IAP for the changes to take effect. 98 | Spectrum Monitor Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 99
monitor by selecting Lower, Middle, or Higher from the Standalone spectrum band drop-down list. d. Click OK. Figure 90 Monitor Middle Band for 5 GHz Radio Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Spectrum Monitor | 99 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 100
assign a unique spectrum ID per device type. Center frequency of the signal sent from the device. Channel bandwidth used by the device. 100 | Spectrum Monitor Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 101
similar environments. Some industrial, healthcare or manufacturing environments may also have other equipment that behave like a microwave and may also be classified as a Microwave device. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Spectrum Monitor | 101 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 102
Wi-Fi devices. The percentage of the channel currently being used by non-Wi-Fi interference + Wi-Fi ACI (Adjacent Channel Interference) 102 | Spectrum Monitor Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 103
device ID, device type, IP address of the spectrum monitor or hybrid AP, and the timestamp. Virtual Controller reports the detailed device information to AMP. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Spectrum Monitor | 103 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 104
104 | Spectrum Monitor Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 105
usage, and troubleshoot network issues. Map event on one network element to a corresponding event on another. Maintain accurate time for billing services and similar. . Figure 94 Configuring NTP Server Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide NTP Server | 105 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 106
106 | NTP Server Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 107
can specify a single static IP address that can be used to manage a multi-AP Dell Instant network. This IP address is automatically provisioned on a shadow interface on the IAP the Name text box. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Virtual Controller | 107 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 108
you need to provide simultaneous access to more number of clients. The largest address pool supported is 2048. To configure the domain name, DNS server, and lease time for the DHCP the changes. 108 | Virtual Controller Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 109
Layer Security method supports the termination of EAP-TLS security using the internal RADIUS server. The EAP-TLS requires both server and certification authority (CA) certificates installed onto the IAP.The client certificate is verified on the Virtual Dell PowerConnect W-Series Instant Access - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 110
Challenge Authentication Protocol version 2 (MS-CHAPv2)- This EAP method is widely supported by Microsoft clients.A RADIUS server must be used as the backend authentication 2. Click Next to continue. 110 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 111
a key in search for the LDAP server. For Active Directory, the value is sAMAccountName. Timeout- Enter a value between 1 and 30 seconds. The default value is 5. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Authentication | 111 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 112
RADIUS servers. You must set the Virtual Controller IP address as a NAS client in the RADIUS server if Dynamic RADIUS Proxy is enabled. 112 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 113
user is placed into the management role specified by the VSA. List of supported VSA Instant supports the following types of VSA's: AP-Group AP-Name ARAP Terminate-Cause Acct-Tunnel-Packets-Lost Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Authentication | 113 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 114
-AppleTalk-Zone Framed-Compression Framed-IP-Address Framed-IP-Netmask Framed-IPX-Network Framed-MTU Framed-Protocol Framed-Route Framed-Routing Full-Name 114 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 115
-Name Service-Type Session-Timeout Simultaneous-Use State Strip-User-Name Suffix Termination-Action Termination-Menu Tunnel-Assignment-Id Tunnel-Client-Auth-Id Tunnel-Client-Endpoint Tunnel-Connection-Id Tunnel-Medium-Type Tunnel-Preference Dell PowerConnect W-Series - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 116
supports captive portal authentication method for a Guest network type. In this method, a web page is displayed to a guest user who tries to access the internet. The user has to authenticate or accept 116 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 117
supported on Dell Instant: Internal Captive Portal External Captive Portal Internal Captive Portal In the Internal Captive Portal type, an internal server is used to host the captive portal service . Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Authentication - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 118
. Configuring Internal Captive Portal Authentication when Editing a Guest Network To configure internal captive portal authentication when editing a guest network, perform the following steps: 118 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 119
-down list to authenticate user credentials at run time. If there is no external RADIUS server in the drop-down list, click New to add a Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Authentication | 119 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 120
a splash page, perform the following steps: NOTE: The current release does not support per SSID splash page. When multiple SSIDs are configured to use customized splash page, exceed 255 characters. 120 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 121
the edit link. The Edit window for the network appears. 3. Navigate to Security tab and select None from the Splash page type drop-down list. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Authentication | 121 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 122
4. Click Next and then click Finish. External Captive Portal Dell Instant supports external captive portal authentication. The external portal can be on request and redirect them to another URL. 122 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 123
authentication failures- Users who fail to authenticate the number of times specified here will be dynamically blacklisted. The maximum value for this entry is 10. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Authentication | 123 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 124
external splash page server. d. Auth text: Enter the authentication text. This indicates the text string returned by the external server after a successful authentication. 124 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 125
URL for the external splash page server. c. Port: Enter the number of the port to be used for communicating with the external splash page server. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Authentication | 125 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 126
are able to provide a customized graphical login page for visitors accessing the network. Refer to the RADIUS Services chapter in the Dell PowerConnect W-ClearPass GuestConnect Deployment Guide for information on setting up the RADIUS Web Login feature. Configuring the RADIUS Server in Instant To - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 127
filtering. MAC authentication requires that the MAC address of a machine must match a manually defined list of addresses. This form of authentication does not scale past a Finish to apply the changes. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Authentication | 127 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 128
up for internet service can view "allowed" websites (typically hotel property websites). The website names must be DNS-based (not IP address based) and support the option to define a URL specified in 128 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 129
not support WEP, instructions. 2. Dell PowrConnect W-AirWave: Navigate to Device Setup > Certificate and then click Add New Certificate. Refer Loading Certificates using Dell PowrConnect W-AirWave for further instructions. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 130
. The default password is whatever. 6. Click Browse and select the appropriate certificate file, and click Upload Certificate.The Certificate Successfully Installed window appears. 130 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 131
right format and saves it on the RADIUS server. To load a certificate in Dell PowrConnect W-AirWave, perform the following steps: 1. Navigate to Device Setup > Certificate to upload a CA certificate. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Authentication | 131 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 132
Instant Web UI. Refer to Entering the Organization String and AMP Information into the IAP for further information. Figure 115 Selecting the Group 132 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 133
Certificate 6. Click Save to apply the changes only to Dell PowrConnect W-AirWave. Click Save and Apply to apply the changes to the Instant AP. NOTE: To unselect the certificate options, click Revert. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Authentication | 133 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 134
134 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 135
encryption is supported. Encryption Recommendations Recommendations for encryption on Wi-Fi networks are as follows: WEP -Not recommended TKIP- Not recommended AES- Recommended for all deployments Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Encryption | 135 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 136
devices 802.1X AES Captive Portal None 802.1X or PSK as supported by the device AES if possible, TKIP or WEP if necessary (combine with restricted policy enforcement firewall (PEF) user role). 136 | Encryption Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 137
Chapter 12 Role Derivation Every client in a Dell Instant network is associated with a user role, which determines the client's network . To delete a user role, select the user role and click Delete. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Role Derivation | 137 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 138
role - This is the case of a Windows machine with no user logged in. The device supports machine authentication and has a valid RADIUS account, but a user has not yet logged in and user role. 138 | Role Derivation Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 139
3. Select the operator from the Operator drop-down list. The following types of operators are supported: contains-To check if the attribute contains the operand value. Is the role- 3C426C61636B4265727279 Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Role - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 140
role assignment rule based on RADIUS attributes, a DHCP option, and 802.1Xauthenticationtype, the first matching rule in the rule list is applied. 140 | Role Derivation Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 141
. The IAP can analyze the return message and get the value as VLAN to assign the user. Figure 120 Radius Access-Accept packets with VSA Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide User VLAN Derivation | 141 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 142
the radius server may return reply message for authentication. If the radius server support return attributes, and set attribute value to reply message, IAP can analyze the Rule window appears. 142 | User VLAN Derivation Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 143
button under the Access rules. 6. Select the Rule type as VLAN assignment. 7. Enter the ID of the VLAN in the VLAN id textbox. 8. Click OK. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide User VLAN Derivation | 143 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 144
. 9. Select the role to be assigned from the Role textbox. 10. Click OK. Figure 125 To Use a Defined User VLAN Role 144 | User VLAN Derivation Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 145
client VLAN assignment. 3. Enter the ID of the VLAN in the VLAN ID textbox. 4. Click OK. Figure 126 Configuring VLAN Derivation Rules Using SSID Profile Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide User VLAN Derivation | 145 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 146
146 | User VLAN Derivation Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 147
allow or deny traffic with the specified service type and destination. Log- Select this checkbox when this rule is triggered. Instant firewall supports firewall based logging function. Firewall logs on Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Instant Firewall | 147 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 148
tcp h323-udp http-proxy2 http-proxy3 http https icmp Access is allowed or denied to all services. Available options are TCP, UDP, and Other. If you select the TCP or UDP Control Message Protocol 148 | Instant Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 149
Input/Output System-Datagram Service Network Basic Input/Output System-Name Service Network Basic Input/Output System-Session Service Network Time Protocol allowed or denied to all destinations. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Instant Firewall | 149 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 150
window appears. b. Select Allow from the Action drop-down list. c. Select custom from the Service drop-down list. Select TCP from the Protocol drop-down list. Enter appropriate port text box. 150 | Instant Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 151
Select pop3 from the Service drop-down list. d. Select to a particular server from the Destination drop-down list and enter appropriate IP address in the IP text box. e. Click OK. 6. Click Finish. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Instant Firewall | 151 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 152
ftp from the Service drop-down list. d. Select except to a particular server from the Destination drop-down list and enter appropriate IP address in the IP text box. e. Click OK. 6. Click Finish. 152 | Instant Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 153
c. Select bootp from the Service drop-down list. d. Select except to a network from the Destination drop-down list. Enter the appropriate IP address in the IP text box. Enter the appropriate netmask in the Netmask text box. e. Click OK. 6. Click Finish. Dell PowerConnect W-Series Instant Access - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 154
Figure 131 Defining Rule - Deny bootp Service Except to a Network 154 | Instant Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 155
on per SSID, and up to four domain names can be configured manually. When enabled, all DNS requests to non-corporate domains on this wireless Content Filtering. Figure 132 Enabling Content Filtering Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Content Filtering | 155 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 156
Dell Instant network and the service is enabled or disabled globally across all the wireless networks that are configured in the Dell to OpenDNS. Figure 133 Enterprise Domains To manually add or delete a domain, perform the Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 157
Windows XP Windows ME OS-X iPhone iPAD Android Blackberry Linux In the following image, the OS of the client is Windows 7. Figure 134 OS Fingerprinting Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide OS Fingerprinting | 157 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 158
158 | OS Fingerprinting Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 159
channels on the 5 GHz band than on the 2.4 GHz band. Band steering supports the following three different band steering modes: Prefer 5Ghz- If you configure the band operates in 20MHz. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Adaptive Radio Management | 159 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 160
can configure the ARM channels in the channel width window. The valid channels automatically show in the static channel assignment window. 160 | Adaptive Radio Management Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 161
is configured for a Max Tx EIRP setting it cannot support, this value is reduced to the highest supported power setting. Default value: 127 dBm Client Aware When current RF health state. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Adaptive Radio Management | 161 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 162
and power manually if desired. services to clients. AP functions as a dedicated full-spectrum RF monitor, scanning all channels to detect interference, whether from neighboring APs or from non-WiFi devices such as microwaves and cordless phones. 162 | Adaptive Radio Management Dell PowerConnect - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 163
Operation AP does not provide access service to clients. 5. Select Administrator assigned Configuring Radio Profiles in Instant Dell Instant supports radio profile configuration. The radio Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Adaptive Radio Management | 163 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 164
is enabled, the APs in access mode continue to provide normal access service to clients, while performing additional function of monitoring RF interference (from both changes to take effect. 164 | Adaptive Radio Management Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 165
Detection and Classification The most important IDS functionality offered in the Dell Instant network is the ability to detect rogue APs, interfering APs ) these options accordingly. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Intrusion Detection System | 165 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 166
networks using VALID SSID- Valid SSID list will be auto-configured based on Instant AP configuration Detect Malformed Frame- Large Duration 166 | Intrusion Detection System Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 167
Save DOS Attack Detect EAP Rate Anomaly Detect Rate Anomaly Detect Chop Chop Attack Detect TKIP Replay Attack IDS Signature- Air Jack IDS Signature- ASLEAP Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Intrusion Detection System | 167 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 168
Client Protection Policies Detection Level Detection Policy Off All detection policies are disabled Low Protect Valid Station High Protect Windows Bridge 168 | Intrusion Detection System Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 169
network. Instant supports the following types of containment mechanisms: Wired containment- When enabled, Dell PowerConnect W-Series Instant contained. Figure 141 Containment Methods Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Intrusion Detection System | 169 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 170
170 | Intrusion Detection System Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 171
Dell Instant supports versions 1, 2c, and 3 of Simple Network Management Protocol (SNMP) for reporting purposes only. In other words, SNMP cannot be used for setting values in a Dell the string and click Delete. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide SNMP | 171 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 172
. To edit the details for a particular user, select the user and click Edit. To delete a particular user, select the user and click Delete. 172 | SNMP Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 173
supports the configuration of external trap receivers in the Instant UI. Only the IAP acting as the Virtual Controller will generate traps. The OID of the traps is 1.3.6.1.4.1.14823.2.3.3.1.200.2.X. Figure 144 SNMP Traps Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 174
) describe the objects that can be managed using SNMP. See the Dell PowerConnect W-Series Instant Access Point MIB Reference Guide for information about the Dell PowerConnect W-Series and Aruba MIBs and SNMP traps. 174 | SNMP Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 175
(called the root AP) acts as the wired device for the network, provides DHCP service and an L3 connection to the ISP uplink with NAT. The root AP is always Figure 145 Hierarchical Deployment Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Hierarchical Deployment | 175 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 176
176 | Hierarchical Deployment Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 177
devices such as VOIP phones or printers (which support only wired connection) to connect to the should change the speed and duplex parameters manually. When enabled, the system passes electric power Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Ethernet Downlink | - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 178
the profile (default). Enable- Enable MAC Authentication on the profile. The following figure displays the security parameters of the Ethernet profile configuration: 178 | Ethernet Downlink Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 179
Action Service Destination Options Access Control Allow- Allow users based on the access rule. Deny- Deny users based on the access rule. Type of service. Specify the destination. Disable or enable logging. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Ethernet - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 180
Ethernet downlink profile to Ethernet 2 port, select the profile from the 0/2 drop down list. Figure 151 Assigning a Profile to the Ethernet Port 180 | Ethernet Downlink Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 181
is enabled as an uplink port by default. NOTE: Instant does not support configuration of an Eth0 uplink. View the type of uplink and the status of the uplink in the Instant UI in the Info tab. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Uplink Configuration | 181 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 182
Instant UI under Info tab. Figure 154 Uplink Status 3G/4G Uplink Instant now supports the use of 3G/4G USB modems to provide internet backhaul to an Instant the types of supported 3G modems: 182 | Uplink Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 183
Table 36 List of Supported 3G Modems Modem Type Supported 3G Modems True Auto Detect True Auto Detect (continued) USBConnect 881 ( E173s-1 Sierra 320 Longcheer WM72 U600(3G mode) Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Uplink Configuration | 183 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 184
Table 36 List of Supported 3G Modems (Continued) Modem Type Supported 3G Modems Auto-detect + ISP/country No auto- manually: 1. In the settings tab, click the show advanced settings hyperlink. 184 | Uplink Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 185
. NOTE: This release of Instant supports only the Pantech UML 290 4G card manually. If the user cannot view the list of country or ISP from the drop-down list, then the user has to configure the modem parameters manually. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 186
detected, and the uplink preference is none). Uplink Switching based on VPN Status Instant supports switching uplinks based on the VPN status when deploying mixed uplinks (Eth0, 3G/ -down list. 186 | Uplink Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 187
services where the client connects to the DSL modem. You can use PPPoE for your uplink connectivity in both normal IAP and VPN IAP deployments. PPPoE is supported configuration to take effect. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Uplink Configuration | 187 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 188
Figure 159 PPPoE Settings 188 | Uplink Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 189
Dell PowerConnect W-AirWave provides real-time monitoring, proactive alerts, historical reporting, and fast, efficient troubleshooting completed without requiring you to manually monitor the devices. The Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Dell PowerConnect - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 190
events for devices that have experienced the most instances in the prior 24 hours, and provides links to support additional analysis or configuration in response. 190 | Dell PowerConnect W-AirWave Integration and Management Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 191
Support for Dell Instant Dell PowerConnect W-AirWave supports RF visualization for Dell Dell PowerConnect W-AirWave This section describes how to configure Dell PowerConnect W-AirWave. Before configuring the AirWave, you need the following: IP address of the AirWave server. Shared key for service - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 192
The Shared Secret key is used by the administrator to manually authorize the first Virtual Controller for an organization. Any string is acceptable. Entering the Organization String and AMP Information into the IAP 1. Click the Dell PowerConnect W-AirWave Set Up Now link in the bottom-middle region - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 193
sets the value globally. Use options on a per-scope basis to override the global options.) 5. Right click on Server Options and select the configuration options. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Dell PowerConnect W-AirWave Integration and Management | 193 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 194
Info and enter a value for airwave-orgn, airwave-ip, airwave-key in the ASCII field (for example: tme-instant-store1, 10.169.240.8, Dell123). 194 | Dell PowerConnect W-AirWave Integration and Management Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 195
clients info about certain services such as PXE to the DHCP clients. In such an environment, it is not possible to use the standard DHCP option 60 and 43 for Dell APs. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Dell PowerConnect W-AirWave Integration and Management - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 196
shows up as a new device in Dell PowerConnect W-AirWave, and a new group called tme-store4 is created. Navigate to APs/Devices > New > Group to view this group. 196 | Dell PowerConnect W-AirWave Integration and Management Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 197
Figure 170 Dell PowerConnect W-AirWave - New Group Figure 171 Dell PowerConnect W-AirWave -Monitor Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Dell PowerConnect W-AirWave Integration and Management | 197 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 198
198 | Dell PowerConnect W-AirWave Integration and Management Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 199
- Monitoring, Client Alerts, and IDS. These links allow you to monitor the Dell Instant network. For detailed information about the sections in these links and how they . Figure 172 Virtual Controller View Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Monitoring | 199 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 200
"Instant Access Point View" on page 204. Usage Trends The Usage Trends section displays the following graphs for the Virtual Controller: Clients Graph 200 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 201
for the last 15 minutes. To see the exact number of clients in the Dell Instant network at a particular time, hover the cursor over the graph line. To check Virtual Controller at 11:43 hours. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Monitoring | 201 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 202
IDS link, see "IDS" on page 40. Network View All Wi-Fi networks in the Dell Instant network are listed in the Networks tab. Click the network that you want to monitor network: Info Usage Trends 202 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 203
data encryption for this network. Usage Trends The Usage Trends section displays the following graphs for the selected network: Clients Figure 176 Clients Graph Throughput Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Monitoring | 203 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 204
Controller for the last 15 minutes. To see the exact number of clients in the Dell Instant network at a particular time, hover the cursor over the graph line. To check IAP: Info RF Dashboard 204 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 205
the common RF metrics for the selected access point over the last 15 minutes. The following graphs are displayed for the selected IAP: Neighboring APs Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Monitoring | 205 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 206
CPU Utilization Figure 180 CPU Utilization Graph Neighboring Clients Figure 181 Neighboring Clients Graph Memory Free (MB) Figure 182 Memory free Graph Clients 206 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 207
by the selected IAP: Valid APs: An AP that is part of the enterprise providing WLAN service. Interfering APs: An AP that is seen in the RF environment but is not connected to IAP is 30% at 12:09 hours. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Monitoring | 207 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 208
at 12:08 hours. The Overview section also has two links- 2.4 GHz and 5 GHz. The following graphs are displayed for each band: Utilization 208 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 209
) Figure 186 2.4 GHz Frames (fps) Graph Drops (fps) Figure 187 Drops (fps) Graph Noise Floor (dBm) Figure 188 Noise Floor (dBm) Graph 2.4 GHz Mgmt Frames Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Monitoring | 209 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 210
Utilization column in the RF Dashboard pane to see the Utilization graph for the selected IAP. The rectangle icon is seen as follows: 210 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 211
view appears. 3. Study the 2.4 GHz Mgmt Frames graph. For example, the graph shows that 3 management frames were out of the radio at 13:50 hours. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Monitoring | 211 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 212
the selected IAP. Client View In the Virtual Controller view, all clients in the Dell Instant network are listed in the Clients tab. Click the IP address of the client Usage Trends Figure 191 Client View 212 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 213
. RF Trends The RF Trends section displays the following graphs for the selected client: Signal Figure 192 Signal Graph Frames Figure 193 Frames Graph Speed Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Monitoring | 213 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 214
Trends pane. For example, the graph on the left shows that signal strength for the client is 54.0 dB at 12:23 hours. 214 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 215
graph in the RF Trends pane. For example, the graph on the left shows 1.0 kbps outgoing traffic throughput for the client at 12:30 hours. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Monitoring | 215 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 216
with which the client was associated. NOTE: Mobility information about the client is reset each time it roams from one IAP to another. 216 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 217
alerts enable you to troubleshoot the problems. The alerts that are generated on Dell Instant can be categorized this client to associate because it does not support the 802.11 rate requested by this client. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Alert Types and Management - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 218
did not receive a response to Check the status of the DHCP server in its DHCP request in time. the network. 218 | Alert Types and Management Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 219
for a wireless network. See "Configuring an External RADIUS Server" on page 110 for more information. 2. Click OK to apply the changes. Figure 196 Authentication Server Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Policy Enforcement Firewall | 219 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 220
role with the same name as the network is automatically defined for each network. These roles cannot be deleted or renamed. 220 | Policy Enforcement Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 221
ACLs. If, however, the control signaling packets are encrypted, the IAP cannot determine which dynamic ports are used for voice or video traffic. In these Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Policy Enforcement Firewall | 221 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 222
-16402 TCP/UDP TCP UDP TCP UDP UDP The following screenshots are configuration examples for Microsoft OCS and Apple Facetime applications. 222 | Policy Enforcement Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 223
in the network. If a client is connected to the network when it is blacklisted, a deauthentication message will be send to force the client to disconnect. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Policy Enforcement Firewall | 223 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 224
2. Click on the New button under the Manual Blacklisting window. 3. Enter the MAC address of the client to be blacklisted in the MAC address to add textbox. Figure 203 Manual Blacklisting 224 | Policy Enforcement Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 225
from the manual blacklist, select the MAC Address of the client under the Manual Blacklisting Firewall ALG Configuration Instant firewall now supports the ALG (Application Layer Gateway) Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Policy Enforcement Firewall | 225 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 226
the changes take effect. Firewall-based Logging Instant firewall now supports firewall based logging function. The firewall logs on the Instant APs are generated as syslog messages. 226 | Policy Enforcement Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 227
Chapter 27 VPN Configuration The IAP supports termination of a VPN tunnel on the Dell PowerConnect W controller. VPN features are ideal for: enterprises with many AP that is acting as the Virtual Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide VPN Configuration | 227 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 228
Next to continue. Routing Profile Configuration Instant can terminate VPN connections on Dell Mobility Controllers. The Routing profile defines the corporate subnets which need to following section. 228 | VPN Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 229
way as the Distributed L2 mode. L3 Routing Mode- In this mode, Instant supports L3 routing mode of connection to corporate. VC assigns an IP addresses from the this is a NAT mode DHCP subnet. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide VPN Configuration | 229 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 230
branches can be supported. For the current phase of IAP, it is important that this value is configured consistent across all branches. DNS server- An optional field which defines the DNS server. 230 | VPN Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 231
Client count- This along with network and mask determines how many branches can be supported. For the current phase of IAP, it is important that this value is configured OK to apply these changes. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide VPN Configuration | 231 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 232
used by the Apple Facetime Application DHCP Relay Option82 Behavior Enabled Enabled DHCP packet relayed with the ALU-specific Option 82 string 232 | VPN Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 233
DHCP packet not relayed, but broadcasted without the ALU-specific Option 82 string 2. Click OK to apply these changes. Figure 212 Centralized L2 DHCP Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide VPN Configuration | 233 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 234
234 | VPN Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 235
password for the user. The login credentials for these users are provided outside the Dell Instant system. A guest user can be a visitor who will be temporarily using users are listed in the Users list. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide User Database | 235 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 236
All. NOTE: Deleting a user only removes the user record from the user database, and won't disconnect the online user under this username. 236 | User Database Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 237
requires you to specify the country code for the country in which the Dell Instant will operate. This configuration sets the regulatory domain for the radio frequencies Specifying a Country Code Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Regulatory Domain | 237 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 238
) China France Hong Kong Singapore Taiwan Brazil Israel Saudi Arabia Lebanon United Arab Emirates South Africa Argentina Australia Austria Bolivia Chile Greece 238 | Regulatory Domain Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 239
Rico SK Slovak Republic SI Slovenia TH Thailand UY Uruguay PA Panama RU Russia EG Egypt TT Trinidad and Tobago TR Turkey CR Costa Rica Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Regulatory Domain | 239 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 240
Republic GT Guatemala PH Philippines LK Sri Lanka SV El Salvador TN Tunisia PK Islamic Republic of Pakistan QA Qatar DZ Algeria 240 | Regulatory Domain Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 241
an external whitelist is being used, the AP MAC address needs to be saved in the RADIUS server as a lower-case entry without any delimiter. Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Controller Configuration for VPN | 241 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 242
any src-nat (ArubaW-3400) (config-sess-iaprole)#any any any permit (ArubaW-3400) (config-sess-iaprole)#! 242 | Controller Configuration for VPN Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 243
-group default (ArubaW-3400) (VPN Authentication Profile "default-iap") #default-role iaprole (ArubaW-3400) (VPN Authentication Profile "default-iap") #! (ArubaW-3400) (config) # Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Controller Configuration for VPN | 243 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 244
244 | Controller Configuration for VPN Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 245
Server Network Address Translation Name Server Network Time Protocol Protected Extensible Authentication Protocol Privacy Enhanced Mail Power over Ethernet Remote Authentication Dial In User Service Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide Abbreviations | 245 - Dell PowerConnect W-IAP3WN | Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 246
Table 46 List of abbreviations (Continued) Abbreviation Expansion VC VSA WLAN Virtual Controller Vendor-Specific Attributes Wireless Local Area Network 246 | Abbreviations Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide
Dell PowerConnect W-Series
I
nstant Access Point
6.1.3.4-3.1.
0.0
User Guide