Concept Guide

l 10.40.0.0/16 subnet is reserved for L3 mode –used by Contractor SSID.
l 172.16.20.0/24 subnet is used for NAT mode – used for wired network.
l Client count in each branch is 200.
l Contractors are only permitted to reach 10.16.0.0/16 network.
AP Configuration
This section provides information on configuration steps performed through the CLI or the UI.
Configuration Steps CLI Commands UI Procedure
1. Configure the primary IP
address. This IP address
is the Public IP address of
the controller. Fast
failover is enabled for
fast convergence.
(ap)(config)# vpn primary <public IP of primary
controller>
(ap)(config)# vpn backup <public IP of backup
controllers>
(ap)(config)# vpn preemption
(ap)(config)# vpn fast-failover
See
Configuring an
IPSec Tunnel
2. Configure routing
profiles to tunnel traffic
through IPSec.
(ap)(config)# routing-profile
(ap)(routing-profile)# route 0.0.0.0 0.0.0.0 <public
IP of primary controller>
(ap)(routing-profile)# route 10.0.0.0 255.0.0.0
<public IP of backup controller>
See
Configuring
Routing
Profiles
3. Configure Enterprise
DNS for split DNS. The
example in the next
column uses a specific
enterprise domain to
tunnel all DNS queries
matching that domain to
corporate.
(ap)(config)# internal-domains
(ap)(domains)# domain-name corpdomain.com
See
Configuring
Enterprise
Domains
4. Configure distributed L3
DHCP profiles with VLAN
30 and 40.
Distributed L3 profile with VLAN30
(ap)(config)# ip dhcp l3-dhcp
(ap)(DHCP profile "l3-dhcp")# server-type
Distributed,L3
(ap)(DHCP profile "l3-dhcp")# server-vlan 30
(ap)(DHCP profile "l3-dhcp")# ip-range 10.30.0.0
10.30.255.255
(ap)(DHCP profile "l3-dhcp")# dns-server
10.1.1.50,10.1.1.30
(ap)(DHCP profile "l3-dhcp")# domain-name
corpdomain.com
(ap)(DHCP profile "l3-dhcp")# client-count 200
Distributed L3 profile with VLAN40
(ap)(config)# ip dhcp l3-dhcp
(ap)(DHCP profile "l3-dhcp")# server-type
Distributed,L3
(ap)(DHCP profile "l3-dhcp")# server-vlan 40
(ap)(DHCP profile "l3-dhcp")# ip-range 10.40.0.0
10.40.255.255
(ap)(DHCP profile "l3-dhcp")# dns-server
10.1.1.50,10.1.1.30
(ap)(DHCP profile "l3-dhcp")# domain-name
corpdomain.com
See
Configuring
Distributed
DHCP Scopes
and
Configuring
Local DHCP
Scopes
Table 77: W-IAP Configuration for Scenario 3—IPSec: Multiple Datacenter Deployment
Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide IAP-VPN Deployment Scenarios | 390