Concept Guide

l 10.40.0.0/16 subnet is reserved for L3 mode –used by Contractor SSID.
l 172.16.20.0/24 subnet is used for NAT mode – used for wired network.
l Client count in each branch is 200.
l Contractors are only permitted to reach 10.16.0.0/16 network.
W-IAP Configuration
This section provides information on configuration steps performed through the CLI and the UI.
Configuration Steps CLI Commands UI Procedure
1. Configure the primary IP
address. This IP address
is the Public IP address of
the controller. Fast
Failover is enabled for
fast convergence.
(Instant AP)(config)# vpn primary <public IP of
primary controller>
(Instant AP)(config)# vpn backup <public IP of
backup controllers>
(Instant AP)(config)# vpn preemption
(Instant AP)(config)# vpn fast-failover
See
Configuring an
IPsec Tunnel
2. Configure routing
profiles to tunnel traffic
through IPsec.
(Instant AP)(config)# routing-profile
(Instant AP)(routing-profile)# route 0.0.0.0 0.0.0.0
<public IP of primary controller>
(Instant AP)(routing-profile)# route 10.0.0.0
255.0.0.0 <public IP of backup controller>
See
Configuring
Routing
Profiles
3. Configure Enterprise
DNS for split DNS. The
example in the next
column uses a specific
enterprise domain to
tunnel all DNS queries
matching that domain to
corporate.
(Instant AP)(config)# internal-domains
(Instant AP)(domains)# domain-name corpdomain.com
See
Configuring
Enterprise
Domains
4. Configure Distributed, L3
DHCP profiles with VLAN
30 and VLAN 40.
Distributed, L3 profile with VLAN30
(Instant AP)(config)# ip dhcp l3-dhcp
(Instant AP)(DHCP profile "l3-dhcp")# server-type
Distributed,L3
(Instant AP)(DHCP profile "l3-dhcp")# server-vlan 30
(Instant AP)(DHCP profile "l3-dhcp")# ip-range
10.30.0.0 10.30.255.255
(Instant AP)(DHCP profile "l3-dhcp")# dns-server
10.1.1.50,10.1.1.30
(Instant AP)(DHCP profile "l3-dhcp")# domain-name
corpdomain.com
(Instant AP)(DHCP profile "l3-dhcp")# client-count
200
Distributed, L3 profile with VLAN40
(Instant AP)(config)# ip dhcp l3-dhcp
(Instant AP)(DHCP profile "l3-dhcp")# server-type
Distributed,L3
(Instant AP)(DHCP profile "l3-dhcp")# server-vlan 40
(Instant AP)(DHCP profile "l3-dhcp")# ip-range
10.40.0.0 10.40.255.255
(Instant AP)(DHCP profile "l3-dhcp")# dns-server
10.1.1.50,10.1.1.30
See
Configuring
Distributed
DHCP Scopes
and
Configuring
Local DHCP
Scopes
Table 86: W-IAP Configuration for Scenario 3—IPsec: Multiple Datacenter Deployment
Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide IAP-VPN Deployment Scenarios | 404