Dell PowerConnect W-IAP92 Dell Instant 6.1.3.4-3.1.0.0 User Guide - Page 228

Controller. The traffic going to the corporate is send via L2 GRE tunnel from the AP itself and does not have to be forwarded through the Virtual Controller. NOTE: By default, the Per-AP tunnel option is disabled. 4. Enter the IP address or fully qualified domain name for the main VPN/GRE endpoint in the Primary host field. 5. Enter the IP address or fully qualified domain name for the backup VPN endpoint in the Backup host field. This entry is optional. 6. Select Enabled from the Preemption drop-down list to switch back to the primary host when and if it becomes available again. This step is optional. 7. Click Next to continue. Routing Profile Configuration Instant can terminate VPN connections on Dell Mobility Controllers. The Routing profile defines the corporate subnets which need to be tunneled through the IPSec tunnel. Figure 207 Tunneling- Routing Use the Routing Table to specify policy based on routing into the VPN tunnel. Each routing table entry has a destination, network mask, and default gateway. 8. Click New and update the following parameters.  Destination- Specify the destination network to be routed into the VPN tunnel.  Netmask- Specify the network mask of the network to be routed into the VPN tunnel.  Gateway- Specify the default gateway to which traffic should be routed. This IP address should be the 'controller-ip' of the controller on which the VPN connection is terminated. See "Controller Configuration for VPN" on page 241 for more information. In the example above, 10.0.0.0/8 network is configured as the corporate destination and is routed through the controller-ip of the primary controller. 9. Click Next to continue. 10. The DHCP Server window appears. Use this table to define DHCP pools of different types based on your deployment modes as described in the following section. 228 | VPN Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.4-3.1.0.0 | User Guide