Owners manual

Name Description
Enabling split tunnel allows a VPN user to access a public network and a local LAN or
WAN network at the same time through the same physical network connection. For
example, a user can use a remote access VPN software client connecting to a corporate
network using a home wireless network. The user with split tunneling enabled is able to
connect to file servers, database servers, mail servers and other servers on the corporate
network through the VPN connection. When the user connects to Internet resources (Web
sites, FTP sites and so on), the connection request goes directly out the gateway provided
by the home network. The split-DNS functionality intercepts DNS requests from clients for
non-corporate domains (as configured in Enterprise Domains list) and forwards to AP's
own DNS server.
When split-tunnel is disabled, all the traffic including the corporate and Internet traffic is
tunneled irrespective of the routing profile specifications. If the GRE tunnel is down and
when the corporate network is not reachable, the client traffic is dropped.
DHCP relay If you are configuring a Centralized, L2 DHCP profile, you can select Enabled to allow the
IAPs to intercept the broadcast packets and relay DHCP requests to centralized DHCP
server.
NOTE: The DHCP relay option is not available for centralized,L3 profile configuration.
Helper address Specify the IP address of the DHCP server.
NOTE: For Centralized, L2 DHCP profiles, the Helper address option is displayed only
when DHCP relay is enabled.
VLAN IP Specify the Centralized L3 DHCP subnet gateway IP.
VLAN Mask Specify the subnet mask of the Centralized L3 DHCP subnet gateway IP.
Option82
Select Alcatel to enable DHCP Option 82 to allow clients to send DHCP packets with the
Option 82 string. The Option 82 string is available only in the Alcatel (ALU) format. The ALU
format for the Option 82 string consists of the following:
l Remote Circuit ID; X AP-MAC; SSID; SSID-Type
l Remote Agent; X IDUE-MAC
NOTE: The Option 82 string is specific to Alcatel and is not configurable.
Table 39: Centralized DHCP Mode: Configuration Parameters
4. Click OK.
The following table describes the behavior of the DHCP Relay Agent and Option 82 in the IAP.
DHCP Relay Option 82 Behavior
Enabled Enabled DHCP packet relayed with the ALU-specific Option 82 string
Enabled Disabled DHCP packet relayed without the ALU-specific Option 82 string
Disabled Enabled DHCP packet not relayed, but broadcast with the ALU-specific Option 82 string
Disabled Disabled DHCP packet not relayed, but broadcast without the ALU-specific Option 82
string
Table 40: DHCP Relay and Option 82
In the CLI
To configure a centralized,L2 DHCP profile:
(Instant AP)(config)# ip dhcp <profile-name>
(Instant AP)(DHCP Profile <profile-name>)# server-type <centralized>
Aruba Instant 6.4.0.2-4.1 | User Guide DHCP Configuration | 206