Owners manual

298 | Uplink Configuration Aruba Instant 6.4.0.2-4.1 | User Guide
(Instant AP)(uplink)# end
(Instant AP)# commit apply
Switching Uplinks Based on VPN and Internet Availability
The default priority for uplink switchover is Ethernet and then 3G/4G. The IAP can switch to the lower priority uplink if
the current uplink is down.
Switching Uplinks Based on VPN Status
Instant supports switching uplinks based on the VPN status when deploying multiple uplinks (Ethernet, 3G/4G, and
Wi-Fi). When VPN is used with multiple backhaul options, the IAP switches to an uplink connection based on the
VPN connection status, instead of only using the Ethernet or the physical backhaul link.
The following configuration conditions apply to uplink switching:
l If the current uplink is Ethernet and the VPN connection is down, the IAP tries to reconnect to VPN. The retry
time depends on the fast failover configuration and the primary or backup VPN tunnel. If this fails, the IAP waits
for the VPN failover timeout and selects a different uplink such as 3G/4G or Wi-Fi.
l If the current uplink is 3G or Wi-Fi, and Ethernet has a physical link, the IAP periodically suspends user traffic to
try and connect to the VPN on the Ethernet. If the IAP succeeds, the IAP switches to Ethernet. If the IAP does
not succeed, it restores the VPN connection to the current uplink.
Uplink switching based on VPN status is automatically enabled if VPNis configured on the IAP. However, you can
specify the duration in VPN failover timeout field to wait for an uplink switch. By default, this duration is set to 180
seconds. The IAP monitors the VPN status and when the VPN connection is not available for 3 minutes, the uplink
switches to another available connection (if a low priority uplink is detected and the uplink preference is set to none).
When VPN failover timeout is set to 0, uplink does not switch over.
When uplink switching based on the Internet availability is enabled, the uplink switching based on VPN failover is
automatically disabled.
Switching Uplinks Based on Internet Availability
You can configure Instant to switch uplinks based on Internet availability.
When the uplink switchover based on Internet availability is enabled, the IAP continuously sends ICMP packets to
some well-known Internet servers. If the request is timed out due to a bad uplink connection or uplink interface
failure, and the public Internet is not reachable from the current uplink, the IAP switches to a different connection.
You can set preferences for uplink switching using the Instant UI and CLI.
In the Instant UI
To configure uplink switching:
1. Click the System > show advanced settings > Uplink. The Uplink tab contents are displayed.
2. Under Uplink Management, configure the following parameters:
l VPN failover timeout To configure uplink switching based on VPNstatus, specify the duration to wait for
an uplink switch. The default duration is set to 180 seconds.
l Internet failover To configure uplink switching based on Internet availability, perform the following steps:
a. Select Enabled from the Internet failover drop-down list.
b. Specify the required values for the following fields:
n Max allowed test packet loss The maximum number of ICMP test packets that are
allowed to be lost to determine if the IAP must switch to a different uplink connection. You
can specify a value within the range of 1—1000.