Dell PowerConnect W-IAP92 Dell Instant 6.1.3.1-3.0.0.0 User Guide
Dell PowerConnect W-IAP92 Manual
View all Dell PowerConnect W-IAP92 manuals
Add to My Manuals
Save this manual to your list of manuals |
Dell PowerConnect W-IAP92 manual content summary:
- Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 1
Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 2
Mobility Management System®. Dell™, the DELL™ logo, and PowerConnect™ are trademarks of Dell Inc. All rights reserved. Specifications in this manual are subject to change on behalf of those vendors. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide 0511129-01 | May 2012 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 3
About this Guide ...15 Dell PowerConnect W-Instant Access Point Overview 15 Supported Devices...15 Objective ...15 Intended Audience...15 Conventions...16 Contacting Support ...16 Chapter 1 Initial Configuration...17 Initial Setup...17 Pre-Installation Checklist...17 Connecting the IAP to a Power - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 4
the IAP...83 Firmware Image Server in Cloud Network 85 Upgrade using Dell PowerConnect W-AirWave and Image Server 85 Image management using Cloud Server 85 Image management using Dell PowerConnect W-AirWave 85 Automatic Firmware Image Check and Upgrade 85 Upgrading to New Version...86 Manual - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 5
92 Authentication...93 Authentication Methods in Dell Instant 93 802.1X Authentication ...93 Internal RADIUS Server...93 External RADIUS Server...94 Authentication Terminated on IAP Role Assignment Rules 120 Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Contents | 5 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 6
Service to a Particular Network 131 Allow PoP3 Service to a Particular Server 132 Deny FTP Service except to a Particular Server 133 Deny bootp Service Parameters for IAP...153 SNMP Traps ...155 Ethernet Downlink ...157 Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 7
Reporting to Dell PowerConnect WAirWave ...166 RF Visualization Support for Dell Instant 167 Configuring Dell PowerConnect W-AirWave 167 Creating your Organization String 167 About Shared Key...168 Entering the Organization String and AMP Information into the IAP 168 Dell PowerConnect W-AirWave - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 8
Types of Client Blacklisting...194 Manual Blacklisting ...194 Adding a Client to the Manual Blacklist 194 Dynamic Blacklisting ... IAP VPN Profile Configuration 210 Abbreviations ...213 Abbreviations ...213 8 | Contents Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 9
PEF ...28 WIP ...29 VPN ...29 Maintenance Link - Default View 30 Support Window...31 Support commands ...34 Help Link...34 Monitoring on Instant UI ...35 Info Section a Guest Network - Access Rules Tab 65 Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Figures | 9 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 10
89 Figure 90 Figure 91 Figure 92 Figure 93 Open Instant SSID ...68 Untrusted Dell PowrConnect W-AirWave 113 CA Certificate ...114 Server Certificate ...114 Selecting the Group ...114 Virtual Controller Certificate...115 Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 11
...159 Provisioning 3G Uplink- Manually 162 Provisioning 3G Uplink- Automatically 162 Uplink Preference...163 Template-based Configuration...166 Adding an IAP in VisualRF...167 Configuring Dell PowerConnect W-AirWave 168 Instant and DHCP options for Dell PowerConnect W-AirWave- Set Predefined - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 12
Users for Internal Server...192 Roles ...193 Client Blacklisting...193 Manual Blacklisting ...194 Dynamic Blacklisting ...195 Enabling ALG Protocols...195 User ...203 Specifying a Country Code ...205 12 | Figures Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 13
IAP to CAP Conversion 79 Supported IAP platforms and minimal AOS version for IAP to RAP Conversion 80 WPA and WPA2 Features ...118 Recommended Authentication and Encryption Combinations 118 Network Service Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Tables | 13 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 14
14 | Tables Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 15
W-IAP135, and W-IAP175 support an unlimited number of IAPs on Layer 2 networks. W-IAP92/93 supports 16 IAPs. Objective This user guide describes the various features supported by Dell Instant and provides detailed instructions for setting up and configuring a Dell Instant network. Intended Audience - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 16
loss of data. WARNING: Indicates a risk of personal injury or death. Contacting Support Website Support Main Website Support Website Dell Documentation dell.com support.dell.com support.dell.com/manuals 16 | About this Guide Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 17
capabilities of the switch that the IAP is connected to. Typically if a switch is in place and does not support PoE, midspan power injectors are used "Connecting the IAP to a Power Source" on page 18 Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Initial Configuration - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 18
IAP. The DHCP client still continues to run so that when the DHCP service recovers, the IAP gets a valid IP address and reboots. In addition, you can manually assign a static IP without the support | Initial Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 19
navigate to instant.dell-pcw.com (or any URL or web address). In the login screen, enter the following credentials: Username- admin Password- admin Figure 3 Instant User Interface Login Screen Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Initial Configuration - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 20
by a Virtual Controller. NOTE: Moving an IAP from one cluster to another requires a factory reset of the IAP that is being moved. See Chapter 5, "Managing IAPs" on page 71 for more information. 20 | Initial Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 21
JavaScript must be enabled on the web browser to view the Instant UI. Supported browsers are: Internet Explorer 7 or higher Safari Google Chrome sections. Figure 5 Instant UI Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface | 21 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 22
displays the company name, logo, and Virtual Controller's name. Search Administrators can search an IAP, client, or a network using a simple Search window in the Instant UI. This Search View 22 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 23
IAP. Mode- Mode of the IAP. Clients- Number of clients that are connected to the IAP. Type- Model number of the IAP. Mesh Role- Role of the mesh IAP Channel- Channel the IAP speed. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface | 23 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 24
WIP VPN Maintenance Support Help Logout Monitoring Alerts IDS Configuration Language Dell PowerConnect W-AirWave Setup Pause/Resume if a new image version is available on the image server and Dell PowerConnect W-AirWave is not configured. For more information about the New - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 25
IAP. See Chapter 18, "Ethernet Downlink" for more information. RTLS- View or edit the RTLS server settings. Dell RTLS- Enable this to integrate with Dell PowerConnect reports should be sent. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface | 25 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 26
settings. See Chapter 17, "SNMP" for more information. OpenDNS- Instant supports OpenDNS business solutions which requires an OpenDNS (opendns.com) account comprising a more information. 26 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 27
- View or configure radio settings for 2.4GHz and the 5GHz radio profiles. For information about Radio, see "Configuring Radio Profiles in Instant" on page 145. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface | 27 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 28
on page 119. Blacklisting- Use this window to manually blacklist clients. See "Client Blacklisting" on page 193 Use this window to enable/disable gateway filters supporting address and port translation for various protocols. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 29
tabs: About- Displays the Build Time, IAP model name, Dell Instant OS version, Web address of Dell and Copyright information. Configuration- Displays the reset to provisioning configuration. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface | - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 30
information, see"Upgrading to New Version" on page 86. Reboot - Displays the IAPs in the network and provides an option to reboot the required access point or all access Link - Default View 30 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 31
- Displays configuration of ARM in the selected IAP. AP Country Codes- Displays country code for the selected IAP. AP CPU Utilization- Displays utilization of CPU for the selected IAP. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface | 31 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 32
disable status and allowed AP list of the selected IAP. VC Application Services- Displays the details of application services of the selected IAP, which includes protocol number, port number. 32 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 33
selected IAP. BSSID Table- Displays the Basic Service Set (BSS) table of the selected IAP. IAP. ARM History- Displays the channel history and power changes due to Adaptive Radio Management (ARM) for the selected IAP. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 34
IAP. ARM Scan Times- Displays AM channel scan times for the selected IAP. OpenDNS Configuration and Status- Displays configuration and status about open dns server. Figure 18 Support Trends 34 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 35
information of the selected IAP or the client. Figure 21 Info Section in the Monitoring Pane RF Dashboard Allows you to view trouble spots in the network. strength is more than 20 decibels. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface | 35 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 36
Virtual Controller in the last 15 minutes. In the Network or IAP view, this graph displays the incoming and outgoing throughput traffic for the selected network or IAP in the last 15 minutes. 36 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 37
Chapter 21, "Monitoring" . Alerts Alerts are generated when a user faces problems while accessing or connecting to the Wi-Fi network. The Alerts link appears a short description of the alert. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface | 37 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 38
Access Points- Displays the IP address of the IAP to which the client is connected. Details- Provides complete details of Description- Displays the event details. Figure 26 Fault History 38 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 39
foreign AP was last detected in the network. Where- Provides information about the IAP that detected the foreign AP. Click the pushpin icon to view the information. detected in the network. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface | 39 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 40
Where- Provides information about the IAP that detected the foreign client. Click the pushpin For information to configure AirWave, see "Configuring Dell PowerConnect W-AirWave" on page 167. 40 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 41
clicked, the Instant UI displays information about the Virtual Controller, Wi-Fi networks, IAPs, or the clients in the Info section. The views on the Instant UI see Chapter 21, "Monitoring" . Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface | 41 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 42
42 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 43
based or 802.1X based authentication methods are supported on this network type. Employees can access the protected data of an enterprise through the employee network after successful authentication. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 43 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 44
send/receive data. Each user- Indicates the throughput for any single user on this Network. The throughput value is specified in kbps. 44 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 45
IAP at every beacon. You may choose to configure a larger DTIM value for power saving. c. Transmit Rates- Indicates the ability to configure the basic and supported rates per SSID for Dell server. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 45 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 46
the wired network. Default- The client gets the IP address in the same subnet as the IAPs. Static- Select to specify a VLAN for all clients on this network. Dynamic- Select Tab- Enterprise 46 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 47
Enable this option to terminate the EAP portion of 802.1x authentication on the IAP instead of the RADIUS server. For more information, see "External RADIUS Server" on page 111 for more information. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 47 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 48
. 10. Click Upload Certificate and browse to upload a certificate file for the internal server. See "Certificates" on page 111 for more information. 48 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 49
Figure 34 Employee Security Tab- Personal Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 49 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 50
203. 7. Click Upload Certificate and browse to upload a certificate file for the internal server. See "Certificates" on page 111 for more information. 50 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 51
a New User Role" on page 119 for more information. 3. Unrestricted- Select this to set no restrictions on access based on destination or type of traffic. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 51 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 52
tab. Voice Network Use the Voice network type when you want devices that provide only voice services like handsets or only applications that require voice-like prioritization need connectivity. 52 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 53
- Indicates the aggregate amount of throughput each radio (some AP models have multiple radios) is allowed to provide for all clients connected to that radio. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 53 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 54
IAP at every beacon. You may choose to configure a larger DTIM value for power saving. c. Transmit Rates- Indicates the ability to configure the basic and supported rates per SSID for Dell tables. 54 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 55
Figure 38 Voice Security Tab- Enterprise Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 55 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 56
- Enable this option to terminate the EAP portion of 802.1x authentication on the IAP instead of the RADIUS server. For more information, see "External RADIUS Server" on 111 for more information 56 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 57
" on page 203. 10. Click Upload Certificate and browse to upload a certificate file for the internal server. See "Certificates" on page 111 for more information. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 57 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 58
" on page 119 for more information. Unrestricted- Select this to set no restrictions on access based on destination or type of traffic. 58 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 59
network. Typically, a guest network is an unencrypted network. However, you can specify encryption settings in the Security tab (see step 10 of the following procedure). Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 59 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 60
amount of throughput each radio (some AP models have multiple radios) is allowed to provide for all clients connected to that radio. 60 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 61
IAP at every beacon. You may choose to configure a larger DTIM value for power saving. c. Transmit Rates- Indicates the ability to configure the basic and supported rates per SSID for Dell continue. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 61 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 62
information, see "Walled Garden Access" on page 110. Select this option if you do not want to set the captive portal authentication. 62 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 63
either an alphanumeric or a hexadecimal string. Ensure that the hexadecimal string must be exactly 64 digits in length. c. Passphrase - Enter a pre-shared key (PSK) passphrase. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 63 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 64
" on page 119 for more information. Unrestricted- Select this to set no restrictions on access based on destination or type of traffic. 64 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 65
tab, click the network which you want to delete. A x link appears against the network to be deleted. 2. Click x. A delete confirmation window appears. 3. Click Delete Now. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 65 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 66
66 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 67
portals to support redundant mesh services set identifier (MSSID/ mesh cluster name) to advertise the mesh network service to other IAP mesh points in that instant network. This is not configurable and is transparent to Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 68
when only one Dell Instant mesh network is being advertised and it will not work for ROW version of IAPs. The ROW IAP must have a the country code set in order to transmit/receive. Hence over-the-air provisioning is not supported on ROW IAPs at this time. This section provides instructions on how to - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 69
up on the Virtual Controller as shown in Figure 47. Disconnect the IAPs that you want to deploy as Mesh Points from the switch and place the IAPs at the desired location. The wired IAPs are Mesh Portals. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Mesh Network | 69 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 70
for several minutes after booting. An IAP mesh point in factory default state IAP mesh point will get an IP address from the same DHCP pool as the portal, and this DHCP request goes through the portal. 70 | Mesh Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 71
the Settings link. The Settings window appears. 1. In the Settings window, click the General tab. 2. Select Disabled from the Auto join mode drop-down list. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Managing IAPs | 71 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 72
Click OK. LED Display Administrators have the ability to turn off LED for all IAPs in an Instant network. Go to Settings > Advanced > LED Display to enable in Enabled mode while rebooting the IAP. 72 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 73
Terminal Access To enable or disable the telnet access to the IAP's CLI, go to Settings > Advanced > Terminal access. Figure 50 Terminal Access NOTE: Instant does not support configuration using CLI. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Managing IAPs | 73 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 74
configuration, select one of the logging levels from the standard list of syslog levels. The default value is Notice. Figure 52 Syslog Server 74 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 75
. If the Auto Join Mode is not enabled, then perform the following steps to add an IAP to the network: 1. In the Access Points tab, click the New link. Figure 53 Adding an IAP to the Instant Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Managing IAPs | 75 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 76
Controller Managed Network Changing IAP Name To change the IAP name, perform the following steps: 1. In the Access Points tab, click on the IAP that you want to rename. Figure 55 Editing IAP Settings 76 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 77
the new IP address for the IAP in the IP address text box. 2. Enter the netmask of the network in the Netmask text box. 3. Enter the IP address of the default gateway in the Default gateway text box. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Managing IAPs | 77 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 78
edit link. An Edit AP window appears. 3. In the Edit AP window, select the Radio tab. 4. Select Adaptive radio management assigned. Figure 59 Configuring IAP Radio Settings Mode - Access 5. Click OK. 78 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 79
AOS version for IAP to CAP/RAP conversion. Table 12 Supported IAP Platforms and Minimal AOS Version for IAP to CAP Conversion IAP Platform AOS Version W-IAP92 6.1.x W-IAP93 6.1.x W-IAP104 6.1.x Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Managing IAPs | 79 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 80
TBD TBD TBD TBD TBD TBD TBD TBD TBD TBD To convert an IAP to RAP, follow the instructions below: 1. Navigate to the Maintenance tab in the top right corner of the Instant UI. 2. Click the Convert tab. 80 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 81
Controller IP Address is reachable by the IAPs. 5. Click Convert Now to complete the conversion. Figure 62 Confirm Access Point Conversion 6. The IAP will reboot and begin operating in RAP mode. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Managing IAPs | 81 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 82
AP in the controller white-list and enable the FTP service on the controller. Converting an IAP to CAP To convert an IAP to Campus AP, do the following: 1. Navigate to the UI. 2. Click the Convert tab 82 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 83
problem with the IAPs, you can reboot all IAPs or selected IAPs in a network using the Instant UI. To reboot an IAP: 1. Click the Maintenance link. The Maintenance window appears. 2. Click the Reboot tab. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Managing IAPs - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 84
after reboot was initiated message will appear. Figure 68 Reboot Successful 7. Click OK to close the window and re-login to the system. 84 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 85
Server Dell Instant supports mixed AP-class instant deployment with W-IAP3WN/3WNP, W-IAP104, W-IAP175P/ 175AC, W-IAP92/93, W-IAP105, and W-IAP134/135 as part of the same Virtual Controller cluster. Image management using Cloud Server If the multi-class IAP network is not managed by Dell PowerConnect - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 86
fails. Upgrading to New Version To manually check for a new firmware image version, perform the following steps: Manual Navigate to Maintenance > Firmware to select and manually upgrade the image file. 86 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 87
Now button becomes available and displays the version number. 3. Click Upgrade Now. The IAP downloads the image from the server, saves it to flash and reboots. Depending fail- When the upgrading fails. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Managing IAPs | 87 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 88
88 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 89
usage, and troubleshoot network issues. Map event on one network element to a corresponding event on another. Maintain accurate time for billing services and similar. . Figure 72 Configuring NTP Server Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide NTP Server | 89 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 90
90 | NTP Server Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 91
they roam between different IAPs. Master Election Protocol The Master Election Protocol enables the Dell Instant network to dynamically elect an IAP to take on Controller in the Name text box. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Virtual Controller | 91 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 92
for the lease time from the drop-down list next to Lease time. Figure 74 Configuring the DHCP Server 7. Click Ok to apply the changes. 92 | Virtual Controller Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 93
based on their MAC addresses. The following authentication methods are supported in Dell Instant: 802.1X Authentication Captive Portal MAC IAP.The client certificate is verified on the Virtual Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 93 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 94
option for the network, the authenticator on the IAP sends a RADIUS packet to the local IP address supported by Microsoft clients.A RADIUS server must be used as the backend authentication server. 94 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 95
the external RADIUS server. Timeout- Indicates the timeout for one radius request. The IAP will retry to send the request several times (as configured in the "Retry count") set to 1812 by default. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 95 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 96
server with users. For information about adding a user, see "Adding a User" on page 203. 10. Click Next to continue and then click Finish. 96 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 97
network users and returns to the IAP the vendor-specific attribute (VSA) that management role specified by the VSA. List of supported VSA Instant supports the following types of VSA's: AP-Group Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 97 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 98
-Program Exec-Program-Wait Expiration Fall-Through Filter-Id Framed-AppleTalk-Link Framed-AppleTalk-Network Framed-AppleTalk-Zone Framed-Compression Framed-IP-Address 98 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 99
Rad-Code Rad-Id Rad-Length Reply-Message Revoke-Text Server-Group Server-Name Service-Type Session-Timeout Simultaneous-Use State Strip-User-Name Suffix Termination-Action Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 99 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 100
. If there is no response from the RADIUS server (RADIUS server timeout), the authentication will switch to Internal. Figure 77 Management Authentication Settings 100 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 101
are supported on Dell Instant: Internal Captive Portal External Captive Portal Internal Captive Portal In the Internal Captive Portal type, an internal server is used to host the captive portal service Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 102
the following options for the splash page type: a. Internal - Authenticated b. Internal - Acknowledged c. External d. None See "Guest Network" on page 59 for more information. 102 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 103
New to add a RADIUS server. For information on configuring external RADIUS server, see "External RADIUS Server" on page 94. 6. Click Next and then click Finish. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 103 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 104
a splash page, perform the following steps: NOTE: The current release does not support per SSID splash page. When multiple SSIDs are configured to use customized splash page, exceed 255 characters. 104 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 105
for the network appears. 3. Navigate to Security tab and select None from the Splash page type drop-down list. Figure 82 Disabling Captive Portal Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 105 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 106
Click Next and then click Finish. External Captive Portal Dell Instant supports external captive portal authentication. The external portal can be after a certain number of authentication failures. 106 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 107
and authenticated clients. 8. Accounting- When enabled, the Access Points will post accounting information as RADIUS START and RADIUS STOP accounting records to the RADIUS server. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 107 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 108
are able to provide a customized graphical login page for visitors accessing the network. Refer to the RADIUS Services chapter in the Dell PowerConnect W-ClearPass GuestConnect Deployment Guide for information on setting up the RADIUS Web Login feature. Configuring the RADIUS Server in Instant To - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 109
filtering. MAC authentication requires that the MAC address of a machine must match a manually defined list of addresses. This form of authentication does not scale past a 5. Click OK to continue. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 109 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 110
up for Internet service can view "allowed" websites (typically hotel property websites). The website names must be DNS-based (not IP address based) and support the option to unauthenticated users. 110 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 111
can ensure that the certificate is real. Dell Instant supports the following certificate files: Server certificate: PEM or PKCS#12 format with passphrase (PSK) CA certificate: PEM or DER format Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 111 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 112
W-AirWave for further instructions. Loading Certificates using Instant WebUI To load a certificate in the Instant UI, perform the following steps: 1. Navigate to the Maintenance > Certificates page. Figure 87 Loading Certificates 112 | Authentication Dell PowerConnect W-Series Instant Access - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 113
an HTTPS message and sends it to the Virtual Controller of the IAP network. Once the Virtual Controller receives this message, it draws the 89 Loading Certificate via Dell PowrConnect W-AirWave Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 113 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 114
, only if you have entered the Organization name in the Instant Web UI. Refer Entering the Organization String and AMP Information into the IAP for further information. Figure 92 Selecting the Group 114 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 115
93 Virtual Controller Certificate 6. Click Save to apply the changes only to Dell PowrConnect W-AirWave. Click Save and Apply to apply the changes to the Instant AP. 7. Click Revert to unselect the certificate options. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 116
116 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 117
encryption is supported. Encryption Recommendations Recommendations for encryption on Wi-Fi networks are as follows: WEP -Not recommended TKIP- Not recommended AES- Recommended for all deployments Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Encryption | 117 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 118
devices 802.1X AES Captive Portal None 802.1X or PSK as supported by the device AES if possible, TKIP or WEP if necessary (combine with restricted policy enforcement firewall (PEF) user role). 118 | Encryption Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 119
Chapter 10 Role Derivation Every client in a Dell Instant network is associated with a user role, which determines the client's network New Rule window appears. Enter the name of the new user role. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Role Derivation | 119 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 120
role - This is the case of a Windows machine with no user logged in. The device supports machine authentication and has a valid RADIUS account, but a user has not yet logged in and user role. 120 | Role Derivation Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 121
the operator from the Operator drop-down list. The following types of operators are supported: contains-To check if the attribute contains the operand value. Is 96 Creating Role Assignment Rules Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Role Derivation | 121 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 122
122 | Role Derivation Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 123
then carried in Access-Accept packet from the radius server. The IAP can analyze the return message and get the value as VLAN to assign the user. Figure 97 Radius Access-Accept packets with VSA Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide User VLAN Derivation | 123 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 124
message for authentication. If the radius server support return attributes, and set attribute value to reply message, IAP can analyze the return message and match attributes Rule window appears. 124 | User VLAN Derivation Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 125
VLAN to be assigned. 4. Click OK. Figure 100 Configuring VLAN Derivation Rules on an IAP User Role If the VSA and VLAN derivation rules are not matched the user VLAN can textbox. 8. Click OK. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide User VLAN Derivation | 125 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 126
. 9. Select the role to be assigned from the Role textbox. 10. Click OK. Figure 102 To Use a Defined User VLAN Role 126 | User VLAN Derivation Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 127
Configuring VLAN Derivation Rules Using SSID Profile To configure VLAN derivation rules on an IAP, perform the following steps: 1. Select a network on the Instant UI and Using SSID Profile Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide User VLAN Derivation | 127 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 128
128 | User VLAN Derivation Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 129
or deny traffic with the specified service type and destination. Log- Select this checkbox triggered. Instant firewall supports firewall based logging function. Firewall logs on IAP are generated as Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant Firewall | 129 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 130
Basic Input/Output System-Session Service Network Time Protocol Point of Access for Providers of Information Post Office Protocol 3 Point-to-Point Tunneling Protocol Real Time Streaming Protocol 130 | Instant Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 131
TCP Service to a Particular Network 1. Click the New link in the Networks tab. To define the access rule to an existing network, click the network. The edit link appears. Click the edit link and navigate to the Access tab. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 132
window appears. b. Select Allow from the Action drop-down list. c. Select custom from the Service drop-down list. Select TCP from the Protocol drop-down list. Enter appropriate port continue. 132 | Instant Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 133
default. This rule allows traffic to all destinations. To define deny FTP service access rule except to a particular server, perform the following steps: 1. Click New, the New Rule window appears. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant Firewall | 133 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 134
bootp from the Service drop-down list. 4. Select except to a network from the Destination drop-down list. Enter the appropriate IP address in the IP text box. Enter the appropriate netmask in the Netmask text box. 5. Click OK. 134 | Instant Firewall Dell PowerConnect W-Series Instant Access - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 135
6. Click Finish. Figure 108 Defining Rule - Deny bootp Service Except to a Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant Firewall | 135 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 136
136 | Instant Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 137
Dell Instant uses OpenDNS to implement the Content Filtering feature. OpenDNS is a Domain Name System (DNS) resolution service configured manually. On startup, the IAP learns the default 92 for DHCP server configuration. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 138
IAPs in the Dell Instant network and the service is enabled or disabled globally across all the wireless networks that are configured in the Dell . Figure 110 Enterprise Domains To manually add or delete a domain, perform Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 139
Windows XP Windows ME OS-X iPhone iPAD Android Blackberry Linux In the following image, the OS of the client is Windows 7. Figure 111 OS Fingerprinting Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide OS Fingerprinting | 139 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 140
140 | OS Fingerprinting Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 141
steering mode, the IAP tries to balance the clients across the two radios in order to best utilize the available 2.4G bandwidth. This feature takes into account the fact that the 5Ghz band has Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Adaptive Radio Management - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 142
channels in the IAP. Here, the administrator can configure the ARM channels in the channel width window. The valid channels will automatically show in the static channel assignment window. 142 | Adaptive Radio Management Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 143
it cannot support, this value will be reduced to the highest supported power setting. IAP RF environment. Each IAP gathers other metrics on their ARM-assigned channel to provide a snapshot of the current RF health state. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 144
IAP Adaptive Radio Management (ARM) is enabled on Dell Instant by default. It automatically assigns appropriate channel and power settings for the IAPs. To manually sections. 8. Click OK. 144 | Adaptive Radio Management Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 145
Radio Profiles in Instant Dell Instant supports radio profile configuration. The IAP in msec. This indicates how often the 802.11 beacon management frames are transmitted by the access point. The default value is 100 msec. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 146
improving performance by eliminating the time the IAP would spend on PHY processing. Channel switch IAP after configuring the radio profile settings in order for the changes to take effect. 146 | Adaptive Radio Management Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 147
network for the presence of unauthorized IAPs and clients. It also logs information about the unauthorized IAPs and clients, and generates reports based disable) these options accordingly. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Intrusion Detection System | 147 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 148
networks using VALID SSID- Valid SSID list will be auto-configured based on Instant AP configuration Detect Malformed Frame- Large Duration 148 | Intrusion Detection System Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 149
Save DOS Attack Detect EAP Rate Anomaly Detect Rate Anomaly Detect Chop Chop Attack Detect TKIP Replay Attack IDS Signature- Air Jack IDS Signature- ASLEAP Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Intrusion Detection System | 149 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 150
Client Protection Policies Detection Level Detection Policy Off All detection policies are disabled Low Protect Valid Station High Protect Windows Bridge 150 | Intrusion Detection System Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 151
network. Instant supports the following types of containment mechanisms: Wired containment- When enabled, Dell PowerConnect W-Series Instant contained. Figure 118 Containment Methods Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Intrusion Detection System | 151 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 152
152 | Intrusion Detection System Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 153
and SNMPV2 box. 3. Enter the string in the New Community String text box. 4. Click OK. To delete a community string, select the string and click Delete. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide SNMP | 153 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 154
edit the details for a particular user, select the user and click Edit. 10. To delete a particular user, select the user and click Delete. 154 | SNMP Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 155
supports the configuration of external trap receivers in the Instant UI. Only the IAP acting as the Virtual Controller will generate traps. The OID of the traps is 1.3.6.1.4.1.14823.2.3.3.1.200.2.X. Figure 121 SNMP Traps Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 156
) describe the objects that can be managed using SNMP. See the Dell PowerConnect W-Series Instant Access Point MIB Reference Guide for information about the Dell PowerConnect W-Series and Aruba MIBs and SNMP traps. 156 | SNMP Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 157
printers (which support only wired manually. When enabled, the system passes electric power along with the data on the ethernet cable. NOTE: The Power Sourcing Equipment (PSE) functionality is available only for the Ethernet port2 on W-RAP3WNP. Displays the status of the admin. Dell PowerConnect - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 158
downlink profile to Ethernet 2 port, select the profile from the Ethernet 2 drop down list Figure 123 Assigning a Profile to the Ethernet Port 158 | Ethernet Downlink Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 159
Configuration Uplink Configuration Overview The Dell PowerConnect W-Instant supports 3G USB modems for the corporate support in two ways- Manually provisioning and automatically provisioning. NOTE: W-IAP3WN and W-IAP3WNP, which will be available soon, support 3G. Types of Modems Instant supports - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 160
The following table lists the types of supported 3G modems: Table 25 List of Supported 3G Modems Modem Type Supported 3G Modems True Auto Detect True Auto 320 Longcheer WM72 U600(3G mode) 160 | Uplink Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 161
Table 25 List of Supported 3G Modems (Continued) Modem Type Supported 3G Modems Auto-detect + ISP/country No auto-detect uplink manually: 1. In the settings tab, click the show advanced settings hyperlink. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Uplink - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 162
modem parameters manually. Uplink Switchover The default priority list is eth0, 3G. The IAP has the ability to switch to the lower priority uplink if the current uplink is down. NOTE: IAP reboot is not required for uplink swtichover process. 162 | Uplink Configuration Dell PowerConnect W-Series - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 163
-down list. Figure 127 Uplink Preference NOTE: The user can force to use one uplink manually, so that the IAP use that uplink, switchover and preemption does not work under this configuration. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Uplink Configuration | 163 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 164
164 | Uplink Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 165
IAPs, and diagnose problems from any Internet connection. Dell IAPs communicate with AirWave using the HTTPS protocol. This allows an AirWave server to be deployed in the cloud across a NAT device such as a router. Dell PowerConnect completed without the necessity to manually monitor the devices. The - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 166
events for devices that have experienced the most instances in the prior 24 hours, and provides links to support additional analysis or configuration in response. 166 | Dell PowerConnect W-AirWave Integration and Management Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 167
. Figure 129 Adding an IAP in VisualRF Configuring Dell PowerConnect W-AirWave This section describes how to configure Dell PowerConnect W-AirWave. Before configuring the AirWave, you need the following: IP address of the AirWave server. Shared key for service authorization- This is assigned - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 168
The Shared Secret key is used by the administrator to manually authorize the first Virtual Controller for an organization. Any string is acceptable. Entering the Organization String and AMP Information into the IAP 1. Click the Dell PowerConnect W-AirWave Set Up Now link in the bottom-middle region - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 169
will set the value globally. Use options in a per scope basis to override the global options). 5. Right click on Server Options and select configure options. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Dell PowerConnect W-AirWave Integration and Management | 169 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 170
Info and enter a value for airwave-orgn, airwave-ip, airwave-key in the ASCII field (for example: tme-instant-store1, 10.169.240.8, Dell123). 170 | Dell PowerConnect W-AirWave Integration and Management Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 171
clients info about certain services such as PXE to the DHCP clients. In such an environment, it is not possible to use the standard DHCP option 60 and 43 for Dell APs. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Dell PowerConnect W-AirWave Integration and Management - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 172
Dell PowerConnect W-AirWave, the IAP shows up as a new device and a group called tme-store4 has been created. Go to APs/Devices > New > Group to view this group. 172 | Dell PowerConnect W-AirWave Integration and Management Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 173
Figure 138 Dell PowerConnect W-AirWave - New Group Figure 139 Dell PowerConnect W-AirWave -Monitor Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Dell PowerConnect W-AirWave Integration and Management | 173 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 174
174 | Dell PowerConnect W-AirWave Integration and Management Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 175
Chapter 21 Monitoring Monitor the Dell Instant network, IAPs, Wi-Fi networks, and clients in the network for various parameters Alerts Link , Configuration Link sections. Figure 140 Virtual Controller View Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Monitoring | 175 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 176
the link to monitor the IAP. For more information, see "Instant Access Point View" on page 180. Usage Trends The Usage Trends section displays the following graphs for the Virtual Controller: Clients Graph Figure 141 Clients Graph 176 | Monitoring Dell PowerConnect W-Series Instant Access Point - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 177
at 11:43 hours. The Throughput graph shows the throughput of all networks and IAPs associated with the Virtual Controller for the last 15 minutes. Outgoing traffic - the IDS link, see "IDS" on page 39. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Monitoring | 177 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 178
Network View All Wi-Fi networks in the Dell Instant network are listed in the Networks tab. Click the network that you Security level- The type of user authentication and data encryption for this network. 178 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 179
Controller for the last 15 minutes. To see the exact number of clients in the Dell Instant network at a particular time, hover the cursor over the graph line. To check selected network at 12:00 hours Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Monitoring | 179 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 180
tabs- Networks, Access Points, and Clients. The following sections in the Instant UI provide information about the selected IAP: Info RF Dashboard RF Trends Figure 146 Instant Access Point View 180 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 181
It lists the IP address of the clients that are associated with the selected IAP if the signal strength or the data transfer speed of the client is low. graphs for the 5 GHz band, click the 5 GHz link. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Monitoring | 181 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 182
IAP at 22:38 hours is -82.0 dBm. NOTE: You can also click the rectangle icon the Noise column in the RF Dashboard pane to see the Noise graph for the selected IAP. The rectangle icon is seen as follows: 182 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 183
IAP for which you want to monitor the throughput. The IAP view appears. 3. Study the Throughput graph in the Usage Trends pane. For example, the graph on the left shows 4.0 kbps incoming traffic throughput at 12:08 hours. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 184
client. Network- Network to which the client is connected to. Access Point- IAP to which the client is connected to. Channel- Channel that the client is using IAP to which the client is connected to. 184 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 185
RF Trends The RF Trends section displays the following graphs for the selected client: Signal Figure 149 Signal Graph Frames Figure 150 Frames Graph Speed Figure 151 Speed Graph Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Monitoring | 185 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 186
in the RF Trends pane. For example, the graph on the left shows 4.0 frames per second for the client at 12:27 hours. 186 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 187
graph in the RF Trends pane. For example, the graph on the left shows 1.0 kbps outgoing traffic throughput for the client at 12:30 hours. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Monitoring | 187 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 188
-IAP association for the last 15 minutes. Access Point- IAP name with which the client was associated. NOTE: Mobility information about the client is reset each time it roams from one IAP to another. 188 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 189
IAP is temporarily blocking the 802.1X authentication request from this client because the credentials provided have been rejected by the RADIUS server too many times. Identify the client and check its 802.1X credentials. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 190
of the client and on the IAP. received message (MIC) has failed. This client did not receive a response to Check the status of the DHCP server in its DHCP request in time. the network. 190 | Alert Types and Management Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 191
for a wireless network. See "Configuring an External RADIUS Server" on page 95 for more information. 2. Click OK to apply the changes. Figure 153 Authentication Server Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Policy Enforcement Firewall | 191 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 192
role with the same name as the network is automatically defined for each network. These roles cannot be deleted or renamed. 192 | Policy Enforcement Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 193
with the IAP in the network. If a client is connected to the network when it is blacklisted, a deauthentication message will be send to force the client to disconnect. Figure 156 Client Blacklisting Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Policy Enforcement - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 194
removed from the blacklist. Adding a Client to the Manual Blacklist To add a client to the blacklist manually using the MAC address of the client, perform the blacklisted by an IAP. 194 | Policy Enforcement Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 195
158 Dynamic Blacklisting PEF Settings Firewall ALG Configuration Instant firewall now supports the ALG (Application Layer Gateway) functions such as SIP, Figure 159 Enabling ALG Protocols Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Policy Enforcement Firewall | 195 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 196
the changes take effect. Firewall-based Logging Instant firewall now supports firewall based logging function. The firewall logs on the Instant APs are generated as syslog messages. 196 | Policy Enforcement Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 197
Chapter 24 VPN Configuration The IAP supports termination of a VPN tunnel on the Dell PowerConnect W controller. VPN features are ideal for: enterprises with host field. This entry is optional. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide VPN Configuration | 197 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 198
addition to allocating IP subnets to each branch. The following modes of DHCP server are supported: Local Subnet- In this mode, the VC assigns an IP address from a tunnel or through the uplink. 198 | VPN Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 199
L3 Routing Mode- In this mode, Instant supports L3 routing mode of connection to corporate. VC assigns scope of the subnet is local to the IAP and forwards traffic through the IPSec tunnel or through Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide VPN Configuration | 199 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 200
This along with network and mask determines how many branches can be supported. For the current phase of IAP, it is important that this value is configured consistent across all apply these changes. 200 | VPN Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 201
along with network and mask determines how many branches can be supported. For the current phase of IAP, it is important that this value is configured consistent across all to apply these changes. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide VPN Configuration | 201 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 202
in the SSID configuration to make use of this subnet. 2. Click OK to apply these changes. Figure 166 Centralized L2 DHCP Configuration 202 | VPN Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 203
password for the user. The login credentials for these users are provided outside the Dell Instant system. A guest user can be a visitor who will be temporarily using users are listed in the Users list. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide User Database | 203 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 204
All. NOTE: Deleting a user only removes the user record from the user database, and won't disconnect the online user under this username. 204 | User Database Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 205
the specified country code. You cannot change the country code for the IAPs designated for US, Japan, and Israel. Improper country code assignment can disrupt Figure 168 Specifying a Country Code Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Regulatory Domain | 205 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 206
) China France Hong Kong Singapore Taiwan Brazil Israel Saudi Arabia Lebanon United Arab Emirates South Africa Argentina Australia Austria Bolivia Chile Greece 206 | Regulatory Domain Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 207
Rico SK Slovak Republic SI Slovenia TH Thailand UY Uruguay PA Panama RU Russia EG Egypt TT Trinidad and Tobago TR Turkey CR Costa Rica Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Regulatory Domain | 207 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 208
Republic GT Guatemala PH Philippines LK Sri Lanka SV El Salvador TN Tunisia PK Islamic Republic of Pakistan QA Qatar DZ Algeria 208 | Regulatory Domain Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 209
On the controller, the following configuration is needed to setup an IAP. Whitelist DB Configuration if the Controller is acting as the Whitelist :44:55 ap-group test (ArubaW-3400) # Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Controller Configuration for VPN | 209 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 210
endip> (ArubaW-3400) # IAP VPN Profile Configuration This will define the server used to authenticate the IAP (internal or an external server) and the role for IAP user. This role is 210 | Controller Configuration for VPN Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 211
-group default (ArubaW-3400) (VPN Authentication Profile "default-iap") #default-role iaprole (ArubaW-3400) (VPN Authentication Profile "default-iap") #! (ArubaW-3400) (config) # Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Controller Configuration for VPN | 211 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 212
212 | Controller Configuration for VPN Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 213
abbreviations used in this user guide. Table 33 List of abbreviations Abbreviation Expansion ARM ARP BSS BSSID CA CLI DHCP DMZ DNS EAP-TLS EAP-TTLS IAP IDS IEEE ISP Instant Dial In User Service Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Abbreviations | 213 - Dell PowerConnect W-IAP92 | Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 214
Table 33 List of abbreviations (Continued) Abbreviation Expansion VC VSA WLAN Virtual Controller Vendor-Specific Attributes Wireless Local Area Network 214 | Abbreviations Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide
Dell PowerConnect W-Series
I
nstant Access Point
6.1.3.1-3.0.
0.0
User Guide