Dell PowerConnect W-IAP92 Dell Instant 6.2.0.0-3.2.0.0 User Guide
Dell PowerConnect W-IAP92 Manual
View all Dell PowerConnect W-IAP92 manuals
Add to My Manuals
Save this manual to your list of manuals |
Dell PowerConnect W-IAP92 manual content summary:
- Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 1
Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 2
Aruba Mobility Management System®. Dell™, the DELL™ logo, and PowerConnect™ are trademarks of Dell Inc. All rights reserved. Specifications in this manual are subject to change those vendors. January 2013 | 0511129-03 Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 3
3 About This Guide 15 Dell PowerConnect W-Instant Access Point Overview 15 Supported Devices 15 Objective 15 Intended Audience 16 Conventions 16 Contacting Support 16 Initial Configuration 17 Initial Setup 17 Pre-Installation Checklist 17 Connecting a W-IAP 18 Assigning an - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 4
Alerts Client Alerts Fault History Active Faults IDS Configuration AirGroup Language Dell PowerConnect W-AirWave Setup Pause/Resume Views Wireless Network Network Types Employee Network Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 27 29 30 30 31 31 32 32 32 33 33 - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 5
VLAN 79 Configuring Wired Bridging on Ethernet 0 79 Migrating to a Dell PowerConnect W-Series Mobility Controller Managed Network 80 Converting a W-IAP to RAP Mode 80 Converting a W-IAP to CAP 83 5 | Contents Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 6
Configuring an NTP Server Daylight Saving Time Enabling Daylight Saving Time Virtual Controller Master Election Protocol Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 83 84 84 86 86 86 86 87 88 88 90 91 91 92 95 97 97 97 98 100 100 101 103 104 105 107 107 107 108 108 - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 7
IAP 112 Configuring an External RADIUS Server 113 Enabling RADIUS Server Support 115 Authentication Survivability 115 RADIUS Server Authentication with VSA 118 List of Supported Authentication 132 7 | Contents Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 8
IAP Certificates Loading Certificates using Dell W-Series Instant UI Loading Certificates using Dell PowerConnect W-AirWave Encryption Encryption Types Supported in Dell VLAN Derivation Rules on a W-IAP Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 133 134 134 134 136 - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 9
TCP Service to a Particular Network 158 Allow POP3 Service to a Particular Server 159 Deny FTP Service except to a Particular Server 160 Deny bootp Service except Monitoring the Network with ARM 172 9 | Contents Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 10
SNMP SNMP Parameters for W-IAP SNMP Traps Ethernet Downlink Ethernet of Modems Provisioning 3G/4G Uplink Manually Provisioning 3G Uplink Automatically Provisioning Uplink Switching Based on VPN Status Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 172 172 173 177 177 - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 11
to Dell PowerConnect W-AirWave 206 RF Visualization Support for Dell W-Instant 207 Configuring Dell PowerConnect W-AirWave 207 Creating your Organization String 207 About Shared Key 208 Entering the Organization String and AMP Information into the W-IAP 208 Dell PowerConnect W-AirWave - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 12
Change of Authorization (CoA) AirGroup Monitoring Troubleshooting and Log Messages Monitoring Virtual Controller View Monitoring Mobility Trail Alert Types and Management Alert Types Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 220 221 222 223 223 224 225 225 - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 13
255 Types of Client Blacklisting 256 Manual Blacklisting 256 Adding a Client to the Manual Blacklist 256 Dynamic Blacklisting 257 Authentication 270 Deleting a User 270 Regulatory Domain 271 13 | Contents Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 14
Configuration 287 Radius Proxy for VPN Connected IAPs 287 Viewing Branch Status 288 Example 288 Troubleshooting 289 Viewing Logs 289 Support Commands 289 Abbreviations 295 Abbreviations 295 Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 14 | Contents - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 15
unlimited number of W-IAPs, however W-IAP92 and W-IAP93 support up to 16 W-IAPs only. Objective This user guide describes the various features supported by Dell W-Instant and provides detailed instructions for setting up and configuring an Dell W-Instant network. Dell PowerConnect W-Series Instant - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 16
of data. WARNING: Indicates a risk of personal injury or death. Contacting Support Web Site Support Main Website Support Website Documentation Website dell.com dell.com/support dell.com/support/manuals 16 | About This Guide Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 17
the capabilities of the switch to which the IAP is connected. Typically if a switch is in place and does not support PoE, midspan power injectors are used. NOTE 1. "Connecting a W-IAP" on page 18 Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 17 | Initial Configuration - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 18
. NOTE: If there is no DHCP service on the network, the W-IAP can be assigned a static IP address. If that doesn't happen, the W-IAP will get auto-assigned an IP within on the instant network. 18 | Initial Configuration Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 19
is not connected to any wired network. Figure 1 - Connecting to a provisioning Wi-Fi Network - Microsoft Windows Figure 2 - Connecting to a provisioning Wi-Fi Network - Mac OS Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 19 | Initial Configuration - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 20
and access APBoot. 4. Click Enter before the timer expires. The W-IAP goes into apboot mode through console. Table 2 - Terminal Communication Settings the configuration. apboot> printenv 20 | Initial Configuration Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 21
if W-IAP-ROW APs are installed. Select the country code for the W-IAP-ROW APs installed. For the complete list of the countries that are supported in the W-IAP-ROW variant type, see "Regulatory Domain" on page 271. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 21 - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 22
by a Virtual Controller. CAUTION: Moving a W-IAP from one cluster to another requires a factory reset of the W-IAP that is being moved. See "Managing W-IAPs" on page 71 for more information 22 | Initial Configuration Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 23
be enabled on the web browser to view the Dell W-Series Instant UI. Supported browsers are: l Internet Explorer 8.0.7601.17514 sections. Figure 5 - Dell W-Series Instant UI Interface Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 23 | Dell W-Instant User Interface - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 24
a compressed view by default. A number, specifying the number of networks, W-IAPs, or clients in the network precedes the tab names. Click on the tabs - Compressed View and Expanded View 24 | Dell W-Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 25
access services to clients. l Clients- Number of clients that are connected to the W-IAP. l Type- Model number of the W-IAP. l Channel- Channel the W-IAP is - MAC address of the client. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 25 | Dell W-Instant User Interface - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 26
. l Access Point- W-IAP to which the client is Support" on page 32 l "Help" on page 32 l "Logout" on page 33 l "Monitoring" on page 33 l "Spectrum" on page 36 l "Alerts" on page 37 l "IDS" on page 39 l "Configuration" on page 39 l "AirGroup" on page 40 l "Language" on page 40 l "Dell PowerConnect - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 27
Dell W-Instant with Dell PowerConnect WAirWave Management platform, Ekahau Real-Time Location Server and Nearbuy Real Time Location Server. Specify the IP address and port number of the server (to which Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 27 | Dell - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 28
183 for more information. l OpenDNS- Instant supports OpenDNS business solutions which requires an OpenDNS (www , do not configure it on the W-IAP. l Uplink- View or configure uplink Dell W-Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 29
- View or configure radio settings for 2.4 GHz and the 5 GHz radio profiles. For information about Radio, see "Configuring Radio Profiles in Instant" on page 173. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 29 | Dell W-Instant User Interface - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 30
page 145. Blacklisting- Use this window to manually blacklist clients. See "Client Blacklisting" on /disable Application Layer Gateway (ALG) supporting address and port translation for various Dell W-Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 31
on page 261 for more information. Figure 14 - VPN - Default View Wired Specify the desired profile for each port of the W-IAP. See "Ethernet Downlink" on page 187 for more information. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 31 | Dell W-Instant User Interface - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 32
W-IAP" on page 84. l Convert - Provides an option to change the network from W-Instant to an Dell PowerConnect W-Series Mobility Controller managed network or standalone AP. For more information, see "Migrating to a Dell PowerConnect W-Series Mobility Controller Managed Network" on page 80. Support - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 33
View" on page 235 or "Client View" on page 243, this section displays the configuration information of the selected W-IAP or the client. Figure 17 - Info Section in the Monitoring Pane Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 33 | Dell W-Instant User Interface - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 34
column. Displays the radio utilization rate of the IAPs. Depending on the percentage of utilization, the color of the lines on the Utilization icon changes from Green > Orange > Red. 34 | Dell W-Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 35
in the last 15 minutes. In the Network or W-IAP view, this graph displays the incoming and outgoing throughput traffic for the selected network or W-IAP in the last 15 minutes. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 35 | Dell W-Instant User Interface - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 36
view) displays the spectrum data that is collected by a hybrid AP or by a W-IAP that has enabled spectrum monitor. The spectrum data is not reported to the VC. The better quality. 36 | Dell W-Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 37
page 97. Alerts Alerts are generated when a user faces problems while accessing or connecting to the Wi-Fi network. The IAP to which the client is connected. l Details- Provides complete details of the alert. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 37 | Dell - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 38
of sequence. l Description- Displays the event details. Figure 25 - Active Faults For more information about alerts, see "Alert Types and Management" on page 249. 38 | Dell W-Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 39
foreign AP was last detected in the network. n Where- Provides information about the W-IAP that detected the foreign AP. Click the pushpin icon to view the information. l the settings. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 39 | Dell W-Instant User Interface - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 40
. l Service- Displays the type of the services such as Dell W-Series Instant UI. If the Dell PowerConnect W-AirWave status is Not Set Up, click the Set Up Now link to set up the Dell 40 | Dell W-Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 41
W-IAP appears. l Client view- The Client view provides information that is necessary to monitor a selected client. In the Client view, all the clients in the Dell W-Instant network are listed in the Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 41 | Dell W-Instant - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 42
you want to monitor. Client view for that client appears. For more information on the graphs and the views, see "Monitoring" on page 229. 42 | Dell W-Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 43
marked and placed into the high priority queue in QoS (Quality of Service). QoS refers to the capability of a network to provide better service to selected network traffic over various technologies. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 43 | Wireless Network - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 44
, the W-IAP chooses the optimal rate for sending broadcast and multicast frames based on the lowest of unicast rates across all associated clients. The default values are 1 Mbps for 2.4 GHz and 6 44 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 45
the W-IAP sends supported range of RSSI (Received signal strength indication) values is 0-100 dB. When a client sends a broadcast probe request frame to search for all available SSIDs, this option controls whether or not the system responds for this SSID. 4. Click Next to continue. Dell PowerConnect - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 46
the wired network. l Default- The client obtains the IP address in the same subnet as the W-IAPs. l Static- Select to specify a single VLAN, a comma separated list of VLANS, or a range to continue. 46 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 47
page 112. 3. Authentication server 1- Select the required Authentication server option from the drop-down list. Available options are: l New- If you select this option, an Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 47 | Wireless Network - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 48
when connectivity to Dell PowerConnect W-ClearPass Policy Manager is temporarily lost. Cache timeout (global)-Indicates the duration after which the authenticated credentials in the cache expire. When the cache expires, the clients are required to authenticate again. The supported range is 1 - 99 - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 49
a value greater than zero, the Access Point periodically posts accounting information as RADIUS INTERIM accounting records to the RADIUS server. 9. Blacklisting- Select Enabled to enable Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 49 | Wireless Network - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 50
see "Adding a User" on page 269. NOTE: Navigate to PEF > Blacklisting in the Dell W-Series Instant UI to specify the duration of the blacklisting on the Blacklisting tab of the PEF Authentication" on 50 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 51
value for this entry is 10. NOTE: Navigate to PEF > Blacklisting in the Dell W-Series Instant UI to specify the duration of the blacklisting on the Blacklisting tab " on page 138 for more information. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 51 | Wireless Network - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 52
on access based on destination or type of traffic. 13. Click Finish. The network is added and listed in the Networks tab. 52 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 53
Voice network type when you want devices that provide only voice services like handsets or only applications that require voice-like prioritization a name that uniquely identifies a wireless network. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 53 | Wireless Network - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 54
l Broadcast filtering- When set to All, the W-IAP drops all broadcast and multicast frames except for DHCP and the ability to configure the basic and supported rates per SSID for Dell W-Instant. Select to set the minimum Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 55
wired network. l Default- The client obtains the IP address in the same subnet as the W-IAPs. l Static- Select to specify a single VLAN, a comma separated list of VLANs, or a the following tables. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 55 | Wireless Network - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 56
- Enable this option to terminate the EAP portion of 802.1X authentication on the W-IAP instead of the RADIUS server. For more information, see "External RADIUS Server" on page the users. For 56 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 57
for this entry is 10. NOTE: Navigate to PEF > Blacklisting in the Dell W-Series Instant UI to specify the duration of the blacklisting on the Blacklisting required Authentication server option from Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 57 | Wireless Network - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 58
maximum value for this entry is 10. NOTE: Navigate to PEF > Blacklisting in the Dell W-Series Instant UI to specify the duration of the blacklisting on the Blacklisting tab of configuring an external 58 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 59
value for this entry is 10. NOTE: Navigate to PEF > Blacklisting in the Dell W-Series Instant UI to specify the duration of the blacklisting on the Blacklisting tab the New Rule window. c. Click OK. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 59 | Wireless Network - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 60
. However, you can specify encryption settings in the Security tab. Adding a Guest Network This section provides the procedure to add a guest network. 60 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 61
All, the W-IAP drops all IAP converts multicast streams into multicast unicast streams as long as the channel utilization does not exceed this threshold. The default value is 90 and the maximum threshold value is 100%. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 62
maximum value, then the W-IAP sends multicast traffic over the Rates- Indicates the ability to configure the basic and supported rates per SSID for Dell W-Instant. Select to set the minimum and maximum legacy Network Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 63
. 5. For Internal users -Click Users to populate the system's internal authentication server with users. For information about adding a user, see "Adding a User" on page 269. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 63 | Wireless Network - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 64
has to be configured to authenticate the users. For information on configuring an external RADIUS server, see "Configuring an External RADIUS Server" on page 113. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 65
of the clients with a specific number of authentication failures. 3. Max authentication failures- Users who fail to authenticate the number of times specified here are dynamically Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 65 | Wireless Network - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 66
or a hexadecimal string. Ensure that the hexadecimal string must be exactly 64 digits in length. c. Passphrase - Enter a pre-shared key (PSK) passphrase. 66 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 67
a New User Role" on page 145 for more information. n Unrestricted- Select this to set no restrictions on access based on destination or type of traffic. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 67 | Wireless Network - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 68
, W-IAP92, W-IAP93, W-IAP134, and W-IAP135 devices support up to 16 SSIDs. After you enable this option, the number of SSIDs that become active on each W-IAP depends on the W-IAP platform. NOTE: Enabling the Extended SSID option disables mesh. 68 | Wireless Network Dell PowerConnect W-Series - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 69
mesh are disabled automatically. Figure 43 - Enabling Extended SSID VLAN Pooling In a single W-IAP cluster, there can be a large number of clients in the same VLAN. This leads into multiple VLANs. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 69 | Wireless Network - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 70
70 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 71
corner of Dell W-Series Instant UI, click the Settings link. The Settings window appears. 1. In the Settings window, click the General tab. 2. Select Disabled from the Auto join mode drop-down list. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 71 | Managing W-IAPs - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 72
not support configuration using CLI. LED Display Administrators have the ability to turn off LED for all W-IAPs in IAP. TFTP Dump Server Enter the IP address of a TFTP server to store core dump files. 72 | Managing W-IAPs Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 73
this feature, navigate to Settings > General and click Show advanced options in the Dell W-Series Instant UI. Deny Inter User Bridging and Deny Local Routing To enable or . Figure 45 - Syslog Server Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 73 | Managing W-IAPs - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 74
supported by Syslog: l AP-Debug- Detailed log about AP device. l Network- Log about change of network, for example, when a new W-IAP IAP to the network: 1. In the Access Points tab, click the New link. 74 | Managing W-IAPs Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 75
from a Virtual Controller Managed Network to Mobility Controller Managed Network. Changing W-IAP Name To change the W-IAP name: 1. In the Access Points tab, click on the W-IAP that you want to rename. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 75 | Managing - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 76
change the IP address of the W-IAP: 1. In the Access Points tab, click the W-IAP for which you want to change the IP address. The edit link appears. 2. Click the edit link. The Edit AP window appears. 76 | Managing W-IAPs Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 77
statically option, then perform the following steps: a. Enter the new IP address for the W-IAP in the IP address text box. b. Enter the netmask of the network in the Netmask the Domain name text box. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 77 | Managing W-IAPs - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 78
, click the W-IAP for which you want to configure ARM. 2. Click the edit link. An Edit AP window appears. 3. In the Edit AP window, select the Radio tab. 4. Select Adaptive radio management assigned. 78 | Managing W-IAPs Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 79
0 port: 1. In the Access Points tab, click the W-IAP. 2. Click the edit link. An Edit AP window appears. 3. In the Edit AP window, select the Uplink tab. 4. Select Enable from the Eth0 Bridging drop box. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 79 | Managing - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 80
IP address, AP group, and AP type. The W-IAP then contacts the controller, establishes certificate-based secure communication, and obtains configuration and image from the controller. The W-IAP then 80 | Managing W-IAPs Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 81
3.2 or later 3.2 or later To convert a W-IAP to RAP, follow the instructions below: 1. Navigate to the Maintenance tab in the top right corner of the Dell W-Series Instant UI. 2. Click the Convert tab. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 81 | Managing - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 82
Controller IP Address is reachable by the W-IAPs. 5. Click Convert Now to complete the conversion. Figure 56- Confirm Access Point Conversion 6. The W-IAP reboots and begins operating in RAP mode. 82 | Managing W-IAPs Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 83
7. After conversion, the W-IAP is managed by the Dell PowerConnect W-Series Mobility Controller which has been specified in the Dell W-Series Instant UI. NOTE: In order for the RAP conversion to work, ensure that you configure the W-Instant AP in the RAP white-list and enable the FTP service on the - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 84
encounter any problem with the W-IAPs, you can reboot all W-IAPs or selected W-IAPs in a network using the Dell W-Series Instant UI. To reboot a W-IAP: 1. Click the Maintenance link. The Maintenance window appears. 2. Click the Reboot tab. 84 | Managing W-IAPs Dell PowerConnect W-Series Instant - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 85
IAP window appears. Click Reboot Now to proceed. Figure 60 - Confirm Reboot message 5. The Reboot in Progress message appears indicating that the reboot is in progress. Figure 61 - Reboot In Progress Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 85 | Managing W-IAPs - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 86
is not configured on the W-IAP, then the image is requested from the Image server. See "Configuring Dell PowerConnect W-AirWave" on page 207 for steps on how to configure Dell PowerConnect W-AirWave. 86 | Managing W-IAPs Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 87
enabled by default. If Dell PowerConnect W-AirWave is configured, then the automatic image check is automatically disabled, use the manual image check option to the following messages is displayed: Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 87 | Managing W-IAPs - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 88
for a new firmware image version: Manual 1. Navigate to Maintenance > Firmware to select and manually upgrade the image file. Figure 65 - Single class or Multi-class W-IAPNetworks Firmware Upgrade 88 | Managing W-IAPs Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 89
different classes of W-IAPs: TFTP: n URL for W-IAP135/134: tftp:///DellInstant_Cassiopeia_6.2.0.0-3.2.0.0_xxxx n URL for W-IAP105/92/93: tftp:// - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 90
Now button becomes available and displays the version number. 3. Click Upgrade Now. The W-IAP downloads the image from the server, saves it to flash and reboots. Depending on the the upgrading fails. 90 | Managing W-IAPs Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 91
Layer-3 Mobility W-IAPs form a single to which it first connected (home network) to another W-Instant network supporting the same WLAN access parameters (foreign network) and continue its existing Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 91 | Layer-3 Mobility - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 92
. 3. Click New in the Virtual Controller IP Addresses section, add the IP address of a VC that is part of the mobility domain, and click OK. 92 | Layer-3 Mobility Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 93
the home network in the VLAN ID text box. d. Enter the home VC IP address for this subnet in the Virtual Controller IP text box. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 93 | Layer-3 Mobility - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 94
Figure 69 - Add Subnets Information 6. Click OK. Figure 70 - Example Layer-3 Configuration 94 | Layer-3 Mobility Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 95
the Instant UI. 2. Click the Show advanced options link and then click L3 Mobility. 3. Select Enabled from the Home agent load balancing drop-down list. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 95 | Layer-3 Mobility - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 96
96 | Layer-3 Mobility Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 97
below to convert W-IAPs in an Dell W-Instant network to hybrid mode: 1. Click the RF link at the top right corner of the Dell W-Series Instant UI. 2. Click Show advanced options to view the Radio tab. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 97 | Spectrum - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 98
link. The Edit Access Point window appears. 3. Click the Radio tab. 4. From the Access Mode drop-down list, select Spectrum Monitor. 5. Click OK. 6. Reboot the W-IAP for the changes to take effect. 98 | Spectrum Monitor Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 99
the spectrum band you want that radio to monitor by selecting Lower, Middle, or Higher from the Standalone spectrum band drop-down list. d. Click OK. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 99 | Spectrum Monitor - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 100
data is collected by each W-IAP spectrum monitor and hybrid AP. The spectrum data is not reported to the VC. The Spectrum link is visible in the Dell W-Series Instant UI (Access that is displayed: 100 | Spectrum Monitor Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 101
) Some audio devices such as wireless speakers and microphones also use fixed frequency to continuously transmit audio. These devices are classified as Fixed Frequency (Audio). Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 101 | Spectrum Monitor - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 102
hopping device that does not fall into one of the other categories described in this table is classified as a Generic Interferer. For 102 | Spectrum Monitor Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 103
channel. Quality(%) Current relative quality of selected channels in the 2.4 GHz or 5 GHz radio bands, as determined by the percentage of packet retries, the current Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 103 | Spectrum Monitor - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 104
. The percentage of the channel currently being used by non Wi-Fi devices. Number of valid APs identified on the radio channel. 104 | Spectrum Monitor Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 105
device ID, device type, IP address of the spectrum monitor or hybrid AP, and the timestamp. Virtual Controller reports the detailed device information to AMP. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 105 | Spectrum Monitor - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 106
106 | Spectrum Monitor Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 107
To configure the NTP server on Dell W-Instant, perform the following steps. 1. Navigate to the Settings tab in the top right corner of the Dell W-Series Instant UI. Figure 77- Configuring NTP Server Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 107 | Time Management - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 108
IAP supports DST, you can enable daylight saving time feature on this W-IAP to ensure the W-IAP support DST, the Daylight Saving Time option does not appear. Figure 78- Enabling Daylight Saving Time 108 | Time Management Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 109
initial startup. If there are more than one WIAPs with non-default IPs in the network, all W-IAPs with default IP will automatically reboot and the DHCP process is used to assign new IP addresses. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 109 | Virtual Controller - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 110
Dell W-Instant network. This IP address is automatically provisioned on a shadow interface on the W-IAP that takes the role of a Virtual Controller. When a W-IAP . The largest address pool supported is 2048. To configure Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 111
Authentication Dial In User Service (RADIUS) is a client such as a wireless W-IAP. The wireless client can pass Dell W-Instant network supports internal RADIUS server and external RADIUS server for 802.1X authentication. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 112
packet. The following authentication methods are supported in Dell W-Instant network: Authentication Terminated on W-IAP Dell W-Instant allows EAP termination for PEAP Type methods are described below: 112 | Authentication Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 113
method is widely supported by Microsoft clients. A RADIUS server must be used as the backend authentication server. If you are using the W-IAP's internal database for attributes such as data filters. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 113 | Authentication - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 114
after updating the fields. 7. Reauth interval - When set to a value greater than zero, the Access Points periodically reauthenticate all associated and authenticated clients. 114 | Authentication Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 115
Dell PowerConnect W-ClearPass Policy Manager is temporarily lost. The following flow diagrams depict the interaction between the Dell PowerConnect W-ClearPass Policy Manager and the W-IAP for different network scenarios. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 116
Accept message which the IAP caches to support authentication survivability. As seen in the figure below, the information sent by the ClearPass Policy Manager varies depending on the authentication method used. Figure 81 - 802.1X Authentication when Dell PowerConnect W-ClearPass Policy Manager is - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 117
again. The W-IAP will send the RADIUS-Request message to the CPPM server directly for client authentication. Figure 83 - 802.1X Authentication when Dell PowerConnect W-ClearPass Policy Manager is reachable again Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 117 - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 118
-Location-Id l Dell-Named-User-Vlan l Dell-Port-Id l Dell-Priv-Admin-User l Dell-Template-User l Dell-User-Role l Dell-User-Vlan l Dell-Auth-Survivability l Dell-AS-User-Name l Dell-AS-Credential-Hash 118 | Authentication Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 119
l Framed-Routing l Full-Name l Group l Group-Name l Hint l Huntgroup-Name l Idle-Timeout l Login-IP-Host l Login-LAT-Node l Login-LAT-Port l Login-LAT-Service l Login-Service l Login-TCP-Port l Menu Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 119 | Authentication - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 120
l Rad-Length l Reply-Message l Revoke-Text l Server-Group l Server-Name l Service-Type l Session-Timeout l Simultaneous-Use l State l Strip-User-Name l Suffix l the Dell W-Series Instant UI. 120 | Authentication Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 121
usage policy in the web page. Two types of captive portal authentication are supported on Dell W-Instant. l "Internal Captive Portal" on page 121 l "External Captive "Adding a User" on page 269. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 121 | Authentication - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 122
MAC authentication drop-down list to disable or enable the MAC authentication. For information on MAC authentication, see "MAC Authentication" on page 133. 122 | Authentication Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 123
the splash page type: a. Internal - Authenticated b. Internal - Acknowledged c. External - RADIUS Server d. External - Authentication Text e. None See "Guest Network" on page 60 for more information. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 123 | Authentication - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 124
add a RADIUS server. For information on configuring external RADIUS server, see "External RADIUS Server" on page 112. 7. Click Next and then click Finish. 124 | Authentication Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 125
a splash page, perform the following steps: NOTE: The current release does not support per SSID splash page. When multiple SSIDs are configured to use customized splash page, exceed 255 characters. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 125 | Authentication - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 126
link. The Edit window for the network appears. 3. Navigate to Security tab and select None from the Splash page type drop-down list. 126 | Authentication Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 127
Click Next and then click Finish. External Captive Portal Dell W-Instant supports external captive portal authentication. The external portal can be on request and redirect them to another URL. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 127 | Authentication - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 128
details on server settings. 9. Reauth interval - When set to a value greater than zero, the Access Points periodically reauthenticate all associated and authenticated clients. 128 | Authentication Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 129
value for this entry is 10. Navigate to PEF > Blacklisting in the Dell W-Series Instant UI to specify the duration of the blacklisting on the Blacklisting key (PSK) passphrase. External splash page Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 129 | Authentication - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 130
text string returned by the external server after a successful authentication. Figure 92 - Configuring External Captive Portal Authentication for a Guest Network e. Redirect URL options are: 130 | Authentication Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 131
visitors accessing the network. Refer to the RADIUS Services section in the ClearPass Guest Deployment Guide for information on setting up the RADIUS Web Login Server and update the following fields. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 131 | Authentication - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 132
authentication are supported: - Internal - Authenticated - External - RADIUS Server Select the Internal - Authenticated or the External - RADIUS Server option from the Splash page type drop down before you configure WISPr authentication. 132 | Authentication Dell PowerConnect W-Series Instant - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 133
that the MAC address of a machine must match a manually defined list of addresses. This form of authentication does not scale past a handful of devices, because it is difficult to maintain the list Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 133 | Authentication - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 134
Internet, a walled garden typically controls a user's access to web content and services. The walled garden directs the user's navigation within particular areas to allow access to a designated login 134 | Authentication Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 135
for Internet service can view "allowed" websites (typically hotel property websites). The website names must be DNS-based (not IP address based) and support the option to the external captive portal. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 135 | Authentication - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 136
successful. b. Select the check box MAC authentication fail-thru if you want to use 802.1X authentication even when the MAC authentication fails. 136 | Authentication Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 137
MAC Auth Only Role when MAC authentication is enabled for Captive Portal. After successful MAC authentication, MAC auth only role is assigned to the client. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 137 | Authentication - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 138
Wired Authentication on a W-IAP W-Instant supports wired authentication on the Dell W-Instant supports the following certificate files: l Server certificate: PEM or PKCS#12 format with passphrase (PSK) 138 | Authentication Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 139
and then click Upload New Certificate to directly upload the certificate. Refer to "Loading Certificates using Dell W-Series Instant UI" on page 139 for further instructions. 2. Dell PowerConnect W-AirWave: Navigate to Device Setup > Certificate and then click Add New Certificate. Refer to "Loading - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 140
IAP network. Once the Virtual Controller receives this message, it draws the certificate content from the message, converts it to the right format and saves it on the RADIUS server. To load a certificate in Dell PowerConnect Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 141
select Basic. The Group name appears only if you have entered the Organization name in the Dell W-Series Instant UI. Refer to "Creating your Organization String" on page 207 for further information. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 141 | Authentication - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 142
(CA cert and Server) as highlighted in the figure below. Figure 104 - Virtual Controller Certificate 6. Click Save to apply the changes only to Dell PowerConnect W-AirWave. Click Save and Apply to apply the changes to the Instant AP. NOTE: To unselect the certificate options, click Revert. 142 - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 143
is supported. Encryption Recommendations Dell recommendations for encryption on Wi-Fi networks are as follows: l WEP -Not recommended l TKIP- Not recommended l AES- Recommended for all deployments Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 143 | Encryption - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 144
Portal None Voice Network or Handheld devices 802.1X or PSK as supported by the device AES if possible, TKIP or WEP if necessary (combine with restricted policy enforcement firewall (PEF) user role). 144 | Encryption Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 145
bandwidth contracts are applicable. This section describes creating and assigning roles using the Dell W-Series Instant UI. User Roles This section describes how to create a scroll bar on the left. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 145 | Role Derivation - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 146
only role - This indicates a known user or a non-Windows device. The device does not support machine auth or does not have a RADIUS account, but the user is logged in and to apply these changes. 146 | Role Derivation Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 147
Select the operator from the Operator drop-down list. The following types of operators are supported: l contains- To check if the attribute contains the operand value. l Is the , Incorporated (IEEE) Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 147 | Role Derivation - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 148
of derivative identifier (such as MAC addresses) for the exclusive use of the assignee. IAP uses the OUI part of a MAC address to identify the device manufacturer and assigns a rule list is applied. 148 | Role Derivation Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 149
-Accept packet from the RADIUS server. The W-IAP can analyze the return message and derive the value of the VLAN which it assigns to the user. Figure 108 - RADIUS Access-Accept packets with VSA Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 149 | User VLAN Derivation - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 150
VLAN Derivation Rules on a W-IAP The rule assigns the user to a VLAN based on the attributes returned by the RADIUS server when the user is authenticated and the MAC address of the user. 150 | User VLAN Derivation Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 151
VLAN to be assigned. 4. Click OK. Figure 111 - Configuring VLAN Derivation Rules on a W-IAP User Role If the VSA and VLAN derivation rules are not matching, then the user VLAN can . 8. Click OK. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 151 | User VLAN Derivation - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 152
using the User Role To use a defined user VLAN role: 1. Select a network on the Dell W-Series Instant UI and click on the edit link. 2. Select the Access tab 3. Under by the SSID profile. 152 | User VLAN Derivation Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 153
an SSID Profile To configure VLAN derivation rules on a W-IAP: 1. Select a network on the Dell W-Series Instant UI and click on the edit link. 2. VLAN Derivation Rules Using an SSID Profile Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 153 | User VLAN Derivation - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 154
154 | User VLAN Derivation Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 155
or deny traffic with the specified service type and destination. l Log- Select this triggered. Instant firewall supports firewall based logging function. Firewall logs on W-IAP are generated as Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 155 | Instant Firewall - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 156
priority. Figure 115 - Access Tab - Instant Firewall Settings Service Options Table 21 lists the set of service options available in the Dell W-Series Instant UI. You can allow or deny access to 156 | Instant Firewall Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 157
Input/Output System-Datagram Service Network Basic Input/Output System-Name Service Network Basic Input/Output System-Session Service Network Time Protocol Point Protocol-User Datagram Protocol Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 157 | Instant Firewall - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 158
except to a Particular Server" on page 160 l "Deny bootp Service except to a Particular Network" on page 161 Allow TCP Service to a Particular Network 1. Click the New link in the Networks tab. 158 | Instant Firewall Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 159
window appears. b. Select Allow from the Action drop-down list. c. Select custom from the Service drop-down list. n Select TCP from the Protocol drop-down list. n Enter appropriate Security tab. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 159 | Instant Firewall - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 160
down list. c. Select ftp from the Service drop-down list. d. Select except to a particular server from the Destination drop-down list and enter appropriate IP address in the IP text box. e. Click OK 160 | Instant Firewall Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 161
c. Select bootp from the Service drop-down list. d. Select except to a network from the Destination drop-down list. l Enter the appropriate IP address in the IP text box. l Enter the appropriate netmask in the Netmask text box. e. Click OK. 6. Click Finish. Dell PowerConnect W-Series Instant Access - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 162
Figure 119 - Defining Rule - Deny bootp Service Except to a Network 162 | Instant Firewall Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 163
based on per SSID, and up to four domain names can be configured manually. When enabled, all DNS requests to non-corporate domains on this wireless to configure a domain name for Content Filtering. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 163 | Content Filtering - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 164
the W-IAPs in the Dell W-Instant network and the service is enabled or disabled globally across all the wireless networks that are configured in the Dell W-Series . Figure 121 - Enterprise Domains 164 | Content Filtering Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 165
To manually add or delete a domain, perform the following steps. 1. Navigate to Settings at the top right corner of the Dell W-Series Instant UI and then select 3. Click OK to apply the changes. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 165 | Content Filtering - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 166
166 | Content Filtering Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 167
l Windows XP l Windows ME l OS-X l iPhone l iOS l Android l Blackberry l Linux In the following image, the OS of the client is Windows 7. Figure 122 - OS Fingerprinting Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 167 | OS Fingerprinting - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 168
168 | OS Fingerprinting Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 169
IAP to use prefer-5 GHz band steering mode, the WIAP steers the client to 5 GHz band (if the client is 5 GHz capable) but lets the client connect on the 2.4 GHz band if the client persists in 2.4 GHz association attempts. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 170
from monopolizing resources at the expense of other clients. NOTE: Reboot the W-IAP after configuring the radio profile settings in order for the changes to take effect Airtime Fairness Mode 170 | Adaptive Radio Management Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 171
EIRP setting it cannot support, this value is reduced to the highest supported power setting. Default If the Client Aware mode is Disabled, the W-IAP may change to a more optimal channel, but this Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 171 | Adaptive - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 172
Assigned Radio Settings for W-IAP 4. Select the Mode from the drop-down list. n Access Mode- In Access mode the AP serves clients, while also monitoring for rogue APs in the background. 172 | Adaptive Radio Management Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 173
set the channel and power manually if desired. Table 23 - AP does not provide access service to clients. 5. Select Radio Profiles in Instant Dell W-Instant supports radio profile configuration. The Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 173 | - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 174
Radio Profile 1. Navigate to RF which is at the top right corner of the Dell W-Series Instant UI. 2. Click Show advanced options to view the Radio tab. 3. to lose a small amount of range. 174 | Adaptive Radio Management Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 175
the APs in access mode continue to provide normal access service to clients, while performing additional function of monitoring RF IAP after configuring the radio profile settings in order for the changes to take effect. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 176
176 | Adaptive Radio Management Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 177
network for the presence of unauthorized W-IAPs and clients. It also logs information about the unauthorized W-IAPs and clients, and generates reports based on to your W-Instant network. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 177 | Intrusion Detection System - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 178
SSID Misuse l Detect Wireless Bridge l Detect 802.11 40MHz intolerance settings l Detect Active 802.11n Greenfield Mode l Detect AP Flood Attack 178 | Intrusion Detection System Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 179
Jack l IDS Signature- ASLEAP Three levels of detection can be configured in the WIP Protection page- Off, Low, and High (as shown in Figure 128). Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 179 | Intrusion Detection System - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 180
- Client Protection Policies Detection Level Off Detection Policy All detection policies are disabled Low l Protect Valid Station High l Protect Windows Bridge 180 | Intrusion Detection System Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 181
network. W-Instant supports the following types of containment mechanisms: l Wired containment- When enabled, Dell Access Points generate contained. Figure 129 - Containment Methods Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 181 | Intrusion Detection System - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 182
182 | Intrusion Detection System Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 183
SNMP tab. 2. Click New in the Community Strings for SNMPV1 and SNMPV2 box. 3. Enter the string in the New Community String text box. 4. Click OK. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 183 | SNMP - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 184
. To edit the details for a particular user, select the user and click Edit. To delete a particular user, select the user and click Delete. 184 | SNMP Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 185
W-Instant supports the configuration of external trap receivers in the Dell W-Series Instant UI. Only the W-IAP acting as the Virtual Controller generates traps. The OID of the traps is 1.3.6.1.4.1.14823.2.3.3.1.200.2.X. Figure 132 - SNMP Traps To configure an SNMP trap receiver: Dell PowerConnect - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 186
bases (MIBs) describe the objects that can be managed using SNMP. See the Dell PowerConnect W-Series Instant Access Point 6.2.0.03.2.0.0 MIB Reference Guide for information about the Dell MIBs and SNMP traps. 186 | SNMP Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 187
such as VoIP phones or printers (which support only wired connections) to connect to the should change the speed and duplex parameters manually. When enabled, the system passes electric Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 187 | Ethernet Downlink - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 188
profile configuration: Figure 134 - Ethernet Profile Configuration - VLAN Tab 4. Click on Security tab or click on Next and enter the following information: 188 | Ethernet Downlink Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 189
rules defined here. NOTE: This release of W-Instant supports configuration of up to 64 access rules. The following figure displays the access parameters of the Ethernet profile configuration: Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 189 | Ethernet Downlink - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 190
rule. l Deny- Deny users based on the access rule. Type of service. Destination Specify the destination. Options Disable or enable logging. The following figure displays to Ethernet 0 port: 190 | Ethernet Downlink Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 191
. l To assign an Ethernet downlink profile to Ethernet 2 port, select the profile from the 0/2 drop down list. Figure 138 - Assigning a Profile to the Ethernet Ports Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 191 | Ethernet Downlink - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 192
192 | Ethernet Downlink Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 193
port should not be used for any wired client connection. Other downlink ports can be used for connecting to wired clients. Figure 139 - Hierarchical Deployment Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 193 | Hierarchical Deployment - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 194
194 | Hierarchical Deployment Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 195
on a W-IAP is enabled as an uplink port by default. NOTE: Instant does not support configuration of an Eth0 uplink. View the type of uplink and the status of the uplink in the Dell W-Series Instant UI in the Info tab. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 195 - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 196
Modem Type Supported 3G Modems True Auto Detect l USBConnect 881 (Sierra 881U) l Quicksilver (Globetrotter ICON 322) l UM100C (UTstarcom) l Icon 452 l Aircard 250U (Sierra) l USB 598 (Sierra) 196 | Uplink Configuration Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 197
Modem Type Auto-detect + ISP/country Supported 3G Modems l U300 (Franklin wireless) l U301 (Franklin wireless) l USB U760 for )) l ZTE MF636 (HK CSL/1010) l ZTE MF633/MF636 (Telstra (Aus)) Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 197 | Uplink Configuration - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 198
36 - 4G Supported Modem Modem Type Supported 4G Modem True Manually To provision a 3G/4G uplink manually, configure the modem parameters. The W-IAP has to be rebooted if you configure USB modem parameter from the Dell Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 199
parameters manually. Provisioning a 3G/4G Switch Network To provision a 3G/4G switch network, provide the driver type for the 3G modem in the USB type text box and the driver type for 4G modem in the 4G USB type text box and click OK. Figure 144 - 3G/4G Switch Network Dell PowerConnect W-Series - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 200
mutually exclusive. l As of DellOS 6.2, APs do not support forming a Wi-Fi uplink with a W-IAP. Provisioning Wi-Fi Uplink To provision the Wi-Fi Uplink: IAP is rebooted with the factory setting: 200 | Uplink Configuration Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 201
try and connect to the VPN on the Eth0. If the W-IAP succeeds, then the W-IAP switches to Eth0. If the W-IAP does not succeed, then the W-IAP restores the VPN connection to the current uplink. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 201 | Uplink Configuration - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 202
the Settings link at the upper right corner of the Dell W-Series Instant UI. 2. Click the Show advanced options link. 3. In the Uplink tab, perform the following steps in the PPPoE section: 202 | Uplink Configuration Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 203
name provided to you by your service provider in the Service name field. b. In the CHAP secret and OK. 5. Reboot the IW-IAP for the configuration to take effect. Figure 147 - PPPoE Settings Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 203 | Uplink Configuration - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 204
204 | Uplink Configuration Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 205
troubleshooting. It also offers tools that manage RF coverage, strengthen wireless security, and demonstrate regulatory compliance. Dell W-IAPs communicate with Dell PowerConnect such that updating is completed without requiring you to manually monitor the devices. The following models can be used - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 206
from being detected as rogue W-IAPs. It tracks and correlates the IDS events to provide a complete picture of network security. Wireless Intrusion Detection System (WIDS) Event Reporting to Dell PowerConnect W-AirWave Dell PowerConnect W-AirWave supports Wireless Intrusion Detection System (WIDS - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 207
a W-IAP in VisualRF Configuring Dell PowerConnect W-AirWave This section describes how to configure Dell PowerConnect W-AirWave integration. Before configuring the Dell PowerConnect W-AirWave, you need the following: l IP address of the Dell PowerConnect W-AirWave server. l Shared key for service - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 208
Key The Shared Secret key is used by the administrator to manually authorize the first Virtual Controller for an organization. Any string is acceptable. Entering the Organization String and AMP Information into the W-IAP 1. Click the Dell PowerConnect W-AirWave Set Up Now link in the bottom-middle - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 209
master controller or the local controller. For W-IAP, this can be used to define the Dell PowerConnect W-AirWave IP, group and password. 1. From Dell W-Instant n Data Type- String n Code- 60 n Description- Dell W-Instant AP Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 210
Figure 152 - W-Instant and DHCP options for Dell PowerConnect W-AirWave- Predefined Options and Values 4. Navigate to Server Manager and select 5. Right-click on Server Options and select the configuration options. 210 | Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 211
-060 Dell WInstant AP in Server Options 7. Select 043 Vendor Specific Info and enter a value for airwave-orgn, airwave-ip, airwave-key in the ASCII field (for example: tme-instant-store1,10.169.240.8, Dell123). Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 211 - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 212
standard options 60 and 43 to give the DHCP clients info about certain services such as PXE to the DHCP clients. In such an environment, it is not possible to use the standard DHCP options 60 and 43 for Dell APs. 212 | Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 213
Specific DHCP options Upon completion, the W-IAP shows up as a new device in Dell PowerConnect W-AirWave, and a new group called tme-store4 is created. Navigate to APs/Devices > New > Group to view this group. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 213 | - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 214
Figure 158 - Dell PowerConnect W-AirWave - New Group Figure 159 - Dell PowerConnect W-AirWave -Monitor 214 | Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 215
both wired and wireless devices. Wired devices which support the Bonjour services are made part of the AirGroup when the VLANs of the devices are terminated on the Virtual Controller. AirGroup also supports Dell PowerConnect W-ClearPass Policy Manager (CPPM). With CPPM: l Users, such as students - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 216
to the user. All of these above filtering options require Dell PowerConnect W-ClearPass Policy Manager (CPPM). l In addition, the W-IAP supports Bonjour services' filtering options based on VLANs and roles for which Dell PowerConnect W-ClearPass Policy Manager is not required. The following table - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 217
for all users. l Allow or block mDNS services based on user roles. l Allow or block mDNS services based on VLANs. l Match users' devices, such as iPads, to their closest Bonjour devices, such as printers. This requires CPPM support. Dell PowerConnect W-ClearPass Policy Manager and ClearPass Guest - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 218
direct response from the same W-IAP about the other Bonjour-enabled services in the network. How Does AirGroup Work? AirGroup functionality is described in the steps below. This flow occurs when an Dell WLAN is powered by an Dell W-Instant and Dell PowerConnect W-ClearPass Policy Manager. A device - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 219
components that make up the AirGroup Solution include the Dell W-Instant, Dell PowerConnect W-ClearPass Policy Manager, and Dell PowerConnect W-ClearPass Guest. The version requirements are described below: Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 219 | AirGroup - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 220
Guest software 3.9.7 AirGroup Services plugin 0.8.7 Dell PowerConnect W-ClearPass Policy Manager software 5.2 Configuring AirGroup on W-Instant Configuring AirGroup and its service requires that you enable the AirGroup feature. WIAP AirGroup supports two default services i.e. AirPlay and - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 221
AirGroup services. Perform the following steps to configure disallow role from accessing AirPrint servers and disallow learning of AirPrint servers on the configured VLAN as shown in Figure 164 and Figure 165. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 221 - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 222
next to Air Print disallowed VLANs). The Air Print Disallowed VLANs window appears. 2. Enter the VLANs on which you want to disallow learning of AirGroup services. 3. Click OK to apply these changes. 222 | AirGroup Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 223
server. n Timeout- Indicates the timeout for one RADIUS request. The W-IAP retries to send the request several times (as configured in the "Retry 5 seconds. Specify a number between 1 and 30 (seconds). Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 223 | AirGroup - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 224
: Alternatively, you can also create a RADIUS server in the Air Group window of the Dell W-Series Instant UI. Navigate to Settings > Show advanced options > AirGroup > Clear Pass . Figure 167- CPPM Server 224 | AirGroup Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 225
CoA port is 5999 on W-IAP as well as the CPPM server. For more information on how to configure the CPPM server refer to "Enabling Support for Dynamic Notifications" on page > ClearPass Settings > CoA server. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 225 | AirGroup - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 226
, you get details of the registered rules in Dell PowerConnect W- ClearPass Policy Manager (CPPM) for this server. l MDNS Cache- By clicking on this, you receive MDNS record details of a particular server. Troubleshooting and Log Messages Navigate to the Support window at the top right corner of the - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 227
services supported for the selected W-IAP(s). l VC AirGroup Status- Displays the enable/disable status of the AirGroup and the parameters of the CPPM servers for the selected W-IAP(s). l VC AirGroup vlan- Displays the AirGroup status information for a VLAN of the selected WIAP(s). Dell PowerConnect - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 228
228 | AirGroup Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 229
link is visible if you have configured the W-IAP as a spectrum monitor. These links allow you to monitor the Dell W-Instant network. For detailed information about the Figure 171 - Virtual Controller View Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 229 | Monitoring - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 230
monitor the W-IAP. For more information, see "Dell W-Instant Access Point View" on page 235. Usage Trends The Usage Trends section displays the following graphs for the Virtual Controller: l Clients Graph 230 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 231
the last 15 minutes. l Outgoing traffic - Throughput for To check the throughput of the networks and W-IAPs associated with the Virtual Controller for the last 15 minutes, 1. Log in to the Dell W-Series Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 231 | Monitoring - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 232
, the Network view also has three tabs- Networks, Access Points, and Clients. The following sections in the Dell W-Series Instant UI, provide information about the selected network: l Info l Usage Trends 232 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 233
data encryption for this network. Usage Trends The Usage Trends section displays the following graphs for the selected network: l Clients Figure 175 - Clients Graph l Throughput Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 233 | Monitoring - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 234
Controller for the last 15 minutes. l To see the exact number of clients in the Dell W-Instant network at a particular time, hover the cursor over the graph line. To check the network at 12:03 hours. 234 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 235
section is moved below the Info section. It lists the IP address of the clients that are associated with the selected W-IAP if the signal strength or the data transfer speed of the client is low. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 235 | Monitoring - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 236
selected W-IAP: l Neighboring APs Figure 178 - Neighboring APs Graph l CPU Utilization Figure 179 - CPU Utilization Graph l Neighboring Clients Figure 180 - Neighboring Clients Graph l Memory Free (MB) 236 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 237
service. Interfering APs: An AP that is seen in the RF environment but is not Monitoring Procedure To check the neighboring APs detected by the W-IAP for the last 15 minutes, 1. Log in to the Dell W-Series Instant UI. The Virtual Controller view appears. This is the default view. Dell PowerConnect - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 238
want to monitor the client association. The W-IAP view appears. 3. Study the Memory free graph in the Overview pane. For example, the graph shows that the free memory of the W-IAP is 64 MB at 12:13 hours. 238 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 239
The Clients graph shows the number of clients associated with the selected W-IAP for the last 15 minutes. To see an enlarged view, click the Figure 184 - Utilization Graph l 2.4 GHz Frames (fps) Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 239 | Monitoring - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 240
186 - Drops (fps) Graph l Noise Floor (dBm) Figure 187 - Noise Floor (dBm) Graph l 2.4 GHz Mgmt Frames Figure 188 - 2.4 GHz Management Frames (fps) Graph 240 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 241
the RF Dashboard pane to see the Utilization graph for the selected W-IAP. The rectangle icon is seen as follows: 2.4 GHz Frames The Dell W-Series Instant UI. The Virtual Controller view appears. This is the default Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 242
W-IAP. The rectangle icon is seen as follows: 2.4 GHz Mgmt The 2.4 GHz Mgmt Frames graph To monitor the rate of management shows the rate for management frames frames in and out of the radio for the 242 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 243
the errors for the W-IAP for the last 15 minutes, 1. Log in to the Dell W-Series Instant UI. The Dell W-Series Instant UI provide information about the selected client: l Info l RF Dashboard l RF Trends l Usage Trends Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 244
client and the RF information for the W-IAP to which the client is connected to. RF Trends The RF Trends section displays the following graphs for the selected client: l Signal Figure 191 - Signal Graph 244 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 245
- Speed Graph l Throughput Figure 194 - Throughput Graph For more information about RF trends graphs in the client view and for monitoring procedures, see Table 43. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 245 | Monitoring - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 246
the signal strength of the selected client for the last 15 minutes, 1. Log in to the Dell W-Series Instant UI. The Virtual Controller view appears. This is the default view. 2. In the Speed graph in the RF 246 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 247
client-W-IAP association over the last 15 minutes. l Access Point- W-IAP name with which the client was associated. NOTE: Mobility information about the client is reset each time it roams from one W-IAP to another. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 247 - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 248
248 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 249
any more clients. Consider expanding capacity by installing additional W-IAPs or balance load by relocating W-IAPs. 100206 Invalid MAC Address The W-IAP cannot This condition may be Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 249 | Alert Types and Management - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 250
setting on the client and on the W-IAP. DHCP request timed out This client did not receive Check the status of the a response to its DHCP DHCP server in the request in time. network. 250 | Alert Types and Management Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 251
Navigate to the PEF link at the top right corner of the Dell W-Series Instant UI to view the following features. Authentication Servers This section the internal authentication server. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 251 | Policy Enforcement Firewall - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 252
- This table lists the permissions for each Role. See "Role Derivation" on page 145 for more information. NOTE: This release of W-Instant supports configuration of up to 64 access rules. 252 | Policy Enforcement Firewall Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 253
, the control signaling packets are encrypted, the W-IAP cannot determine which dynamic ports are used for voice or video traffic. In these cases, the W-IAP has to use an ACL with the Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 253 | Policy Enforcement Firewall - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 254
5223 TCP 16384-16387 UDP 16393-16402 UDP The following screenshots are configuration examples for Microsoft OCS and Apple Facetime applications. 254 | Policy Enforcement Firewall Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 255
allowed to associate with the W-IAP in the network. If a client is connected to the network when it is blacklisted, a deauthentication message is sent to force the client to disconnect. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 255 | Policy Enforcement Firewall - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 256
then select Blacklisting tab. 2. Click on the New button under the Manual Blacklisting window. 3. Enter the MAC address of the client to be blacklisted in the MAC address to add text box. 256 | Policy Enforcement Firewall Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 257
from the manual blacklist, select the MAC Address of the client under the Manual Blacklisting window client is automatically blacklisted by a W-IAP. Session Firewall Based Blacklisting In session Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 257 | - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 258
for ALG are Disabled the changes do not take effect until the existing user sessions expire. Reboot the W-IAP and the client, or wait for few minutes to ensure the changes take effect. 258 | Policy Enforcement Firewall Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 259
Firewall-based Logging W-Instant firewall now supports firewall based logging function. The firewall logs on the WInstant APs are generated as syslog messages. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 259 | Policy Enforcement Firewall - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 260
260 | Policy Enforcement Firewall Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 261
W-IAP supports termination of a VPN tunnel on the Dell IAP to create a single VPN tunnel from the Virtual Controller to a Dell PowerConnect Dell PowerConnect W-Series Mobility Controller: Figure 205 - Tunneling- Controller Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 262
feature allows the W-IAP to create a backup Dell PowerConnect W-Series Mobility Controller. The Routing profile defines the corporate subnets which need to be tunneled through the IPSec tunnel. 262 | VPN Configuration Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 263
addition to allocating IP subnets to each branch. The following modes of DHCP server are supported: l Local Subnet- In this mode, the VC assigns an IP address from a traffic is sent on the uplink. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 263 | VPN Configuration - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 264
. l L3 Routing Mode- In this mode, W-Instant supports L3 routing mode of connection to corporate. VC assigns an , the scope of the subnet is local to the W-IAP and forwards traffic through the IPSec tunnel or through the Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 265
how many branches can be supported. For the current phase of W-IAP, it is important that this value is configured consistent across all branches. n DNS server- An optional field which defines the DNS server. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 265 | VPN - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 266
along with network and mask determines how many branches can be supported. For the current phase of W-IAP, it is important that this value is configured consistent across all apply these changes. 266 | VPN Configuration Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 267
Alcatel and is not configurable in this version of WInstant. The following table describes the behavior of DHCP Relay Agent and Option 82 in the W-IAP. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 267 | VPN Configuration - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 268
relayed, but broadcasted without the ALU-specific Option 82 string 2. Click OK to apply these changes. Figure 211 - Centralized L2 DHCP Configuration 268 | VPN Configuration Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 269
for the user. The login credentials for these users are provided outside the Dell W-Instant system. A guest user can be a visitor who is temporarily using in the Password text box and reconfirm. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 269 | User Database - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 270
and click OK. Deleting a User To delete a user: 1. At the top right corner of the Dell W-Series Instant UI, click the Users link. The Users window appears. 2. In the Users section, with this username. 270 | User Database Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 271
the specified country code. You cannot change the country code for the W-IAPs designated for US and Japan. Improper country code assignment can disrupt wireless CA Country Name United States Canada Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 271 | Regulatory Domain - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 272
of Korea (South Korea) China France Hong Kong Singapore Taiwan Brazil Saudi Arabia Lebanon United Arab Emirates South Africa Argentina Australia Austria 272 | Regulatory Domain Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 273
Kuwait Liechtenstein Lithuania Mexico Morocco New Zealand Poland Puerto Rico Slovak Republic Slovenia Thailand Uruguay Panama Russia Kuwait Liechtenstein Lithuania Mexico Morocco New Zealand Poland Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 273 | Regulatory Domain - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 274
Tobago Turkey Costa Rica Ecuador Honduras Kenya Ukraine Vietnam Bulgaria Cyprus Estonia Mauritius Romania Serbia and Montenegro Indonesia Peru Venezuela Jamaica Bahrain 274 | Regulatory Domain Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 275
TN PK QA DZ Country Name Oman Jordan Bermuda Colombia Dominican Republic Guatemala Philippines Sri Lanka El Salvador Tunisia Islamic Republic of Pakistan Qatar Algeria Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 275 | Regulatory Domain - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 276
276 | Regulatory Domain Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 277
Pool Configuration This pool is used to assign an IP Address to the W-IAP after successful VPN authentication. (Dell3400) # ip local pool "rapngpool" (Dell3400) # Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 277 | Controller Configuration for VPN - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 278
iap") #server-group default (Dell3400) (VPN Authentication Profile "default-iap") #default-role iaprole (Dell3400) (VPN Authentication Profile "default-iap") #! (Dell3400) (config) # 278 | Controller Configuration for VPN Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 279
Services. Figure 214- Configure AirGroup Services 3. Click Add a new controller. Figure 215- Add a New Controller for AirGroup Services 4. Update the fields with the appropriate information. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 279 | Dell PowerConnect - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 280
Policy Manager UI, and navigate to Configuration > Identity > Local Users. Figure 217- Configuration > Identity > Local Users Selection 2. Click Add User. 280 | Dell PowerConnect W-ClearPass Configuration for AirGroup Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 281
click Add User, and create an AirGroup Operator. Figure 220- Create an AirGroup Operator 6. Click Add to save the user with an AirGroup Operator role. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 281 | Dell PowerConnect W-ClearPass Configuration for AirGroup - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 282
Shared Device For this test, add your AppleTV device name and MAC address but leave all other fields empty. 10. Click Register Shared Device. 282 | Dell PowerConnect W-ClearPass Configuration for AirGroup Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 283
- Troubleshooting Problem Limiting devices has no effect. Apple Macintosh running Mountain Lion can use AirPlay but iOS devices cannot. Solution Ensure IPv6 is disabled. Ensure IPv6 is disabled. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 283 | Dell PowerConnect - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 284
284 | Dell PowerConnect W-ClearPass Configuration for AirGroup Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 285
support for DRP. l Roles cannot be edited. - default-role in default-iap VPN profile cannot be edited. However, the WIAP is assigned with a default-vpn-role, which can be edited to include the src-NAT rule. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 285 | IAP-VPN - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 286
2. Define the remote access policy in the Internet Authentication Service: a. In the Internet Authentication Service window, select Remote Access Policies. b. Launch the wizard vendor specific attributes. 286 | IAP-VPN Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 287
To configure the VPN Local Pool: 1. Navigate to the Configuration > Advanced Services > VPN Services > IPSec page. 2. Select (check) Enable L2TP. 3. Make sure , see "VPN Configuration" on page 261. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 287 | IAP-VPN - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 288
config) # The output of this command includes the following parameters: Table 50- show iap table Parameters Parameter Branch Key Index Status Inner IP MAC Address Description Key for the the branch. 288 | IAP-VPN Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 289
management information for the selected W-IAP. l AP ARM Channels- Displays channels of ARM in the selected W-IAP. l AP ARM Configuration- Displays configuration of ARM in the selected W-IAP. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 289 | Troubleshooting - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 290
Interface Counters- Displays the package counters of bond0 of the selected W-IAP. l AP Interface Status- Displays the status of br0 of the selected W-IAP. l AP Internal DHCP Status l AP IP Interface 290 | Troubleshooting Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 291
configuration and status of monitor information of the selected W-IAP. l AP Persistent Clients- Displays the persistent clients of the selected W-IAP. l AP PPPoE uplink debug l AP PPPoE uplink status Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 291 | Troubleshooting - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 292
l VC Airgroup Service- Displays the Bonjour services supported for the selected W-IAP(s). l VC IAP. l VC Global Statistics- Displays the flow information and signal strength of the selected W- IAP. 292 | Troubleshooting Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 293
the selected W-IAP. l VC Local User Database- Displays the user configuration of the selected W-IAP. l VC support commands under the supervision of Dell technical support. Figure 224- Support Commands Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 293 | Troubleshooting - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 294
294 | Troubleshooting Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 295
ISP Internet Service Provider Instant UI Instant User Interface LEAP Lightweight Extensible Authentication Protocol MX Mail Exchanger MAC Media Access Control NAS Network Access Server Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 295 | Abbreviations - Dell PowerConnect W-IAP92 | Dell Instant 6.2.0.0-3.2.0.0 User Guide - Page 296
Extensible Authentication Protocol Privacy Enhanced Mail Power over Ethernet Remote Authentication Dial In User Service Virtual Controller Vendor-Specific Attributes Wireless Local Area Network 296 | Abbreviations Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide
Dell PowerConnect W-Series
Instant Access Point
6.2.0.0-3.2.0.0
User Guide