Concept Guide

ManualsBrandsDell ManualsAccess PlatformsW-Series 277 Access Points

341

342

343

344

345

346

347

348

349

350

Table Of Contents

About this Guide
- Intended Audience
- Related Documents
- Conventions
- Contacting Dell
About Instant
- Instant Overview
- What is New in this Release
  - Support for New W-IAP Devices
  - No Support for W-IAP92/93
Setting up a W-IAP
- Setting up Instant Network
- Logging in to the Instant UI
  - Regulatory Domains
  - Specifying Country Code
- Accessing the Instant CLI
Automatic Retrieval of Configuration
- Managed Mode Operations
- Pre-requisites
- Configuring Managed Mode Parameters
  - Example
- Verifying the Configuration
Instant User Interface
- Login Screen
- Main Window
Initial Configuration Tasks
- Basic Configuration Tasks
- Additional Configuration Tasks
Customizing W-IAP Settings
- Modifying the W-IAP Hostname
  - In the Instant UI
  - In the CLI
- Configuring Zone Settings on a W-IAP
  - In the Instant UI
  - In the CLI
- Specifying a Method for Obtaining IP Address
  - In the Instant UI
  - In the CLI
- Configuring External Antenna
  - EIRP and Antenna Gain
  - Configuring Antenna Gain
    - In the Instant UI
    - In the CLI
- Configuring Radio Profiles for a W-IAP
- Configuring Uplink VLAN for a W-IAP
  - In the Instant UI
  - In the CLI
- Changing USB Port Status
  - In the Instant UI
  - In the CLI
- Master Election and Virtual Controller
  - Master Election Protocol
  - Manual Provisioning of Master W-IAP
    - Provisioning a W-IAP as a Master W-IAP
      - In the Instant UI
      - In the CLI
- Adding a W-IAP to the Network
- Removing a W-IAP from the Network
VLAN Configuration
- VLAN Pooling
- Uplink VLAN Monitoring and Detection on Upstream Devices
Wireless Network Profiles
- Configuring Wireless Network Profiles
- Configuring Fast Roaming for Wireless Clients
- Editing Status of a WLAN SSID Profile
  - In the Instant UI
  - In the CLI
- Editing a WLAN SSID Profile
- Deleting a WLAN SSID Profile
Wired Profiles
- Configuring a Wired Profile
- Assigning a Profile to Ethernet Ports
  - In the Instant UI
  - In the CLI
- Editing a Wired Profile
- Deleting a Wired Profile
- Link Aggregation Control Protocol
- Understanding Hierarchical Deployment
Captive Portal for Guest Access
- Understanding Captive Portal
  - Types of Captive Portal
  - Walled Garden
- Configuring a WLAN SSID for Guest Access
  - In the Instant UI
  - In the CLI
- Configuring Wired Profile for Guest Access
  - In the Instant UI
  - In the CLI
- Configuring Internal Captive Portal for Guest Network
  - In the Instant UI
  - In the CLI
- wConfiguring External Captive Portal for a Guest Network
- Configuring Facebook Login
- Configuring Guest Logon Role and Access Rules for Guest Users
  - In the Instant UI
  - In the CLI
    - Example
- Configuring Captive Portal Roles for an SSID
  - In the Instant UI
  - In the CLI
- Configuring Walled Garden Access
Authentication and User Management
- Managing W-IAP Users
- Supported Authentication Methods
- Supported EAP Authentication Frameworks
  - Authentication Termination on W-IAP
- Configuring Authentication Servers
- Understanding Encryption Types
  - WPA and WPA2
  - Recommended Authentication and Encryption Combinations
- Configuring Authentication Survivability
  - Enabling Authentication Survivability
    - In the Instant UI
      - Important Points to Remember
    - In the CLI
- Configuring 802.1X Authentication for a Network Profile
  - Configuring 802.1X Authentication for a Wireless Network Profile
    - In the Instant UI
    - In the CLI
  - Configuring 802.1X Authentication for Wired Profiles
    - In the Instant UI
    - In the CLI
- Configuring MAC Authentication for a Network Profile
  - Configuring MAC Authentication for Wireless Network Profiles
    - In the Instant UI
    - In the CLI
  - Configuring MAC Authentication for Wired Profiles
    - In the Instant UI
    - In the CLI
- FConfiguring MAC Authentication with 802.1X Authentication
  - Configuring MAC and 802.1X Authentication for a Wireless Network Profile
    - In the Instant UI
    - In the CLI
  - Configuring MAC and 802.1X Authentication for Wired Profiles
    - In the Instant UI
    - In the CLI
- hConfiguring MAC Authentication with Captive Portal Authentication
  - In the Instant UI
  - In the CLI
- Configuring WISPr Authentication
  - In the Instant UI
  - In the CLI
- Blacklisting Clients
  - Blacklisting Clients Manually
  - Blacklisting Users Dynamically
- Uploading Certificates
Roles and Policies
- Firewall Policies
- Content Filtering
- Configuring User Roles
- Configuring Derivation Rules
- Using Advanced Expressions in Role and VLAN Derivation Rules
  - Configuring a User Role for VLAN Derivation
    - Creating a User VLAN Role
      - In the Instant UI
      - In the CLI
    - Assigning User VLAN Roles to a Network Profile
      - In the Instant UI
      - In the CLI
DHCP Configuration
- Configuring DHCP Scopes
- Configuring the Default DHCP Scope for Client IP Assignment
  - In the Instant UI
  - In the CLI
VPN Configuration
- Understanding VPN Features
  - Supported VPN Protocols
- Configuring a Tunnel from a W-IAP to Dell Networking W-Series Mobility Contro...
- Configuring Routing Profiles
  - In the Instant UI
  - In the CLI
IAP-VPN Deployment
- Understanding IAP-VPN Architecture
  - IAP-VPN Scalability Limits
  - IAP-VPN Forwarding Modes
- Configuring W-IAP and Controller for IAP-VPN Operations
  - Configuring a W-IAP network for IAP-VPN operations
  - Configuring a Controller for IAP-VPN Operations
Adaptive Radio Management
- ARM Overview
- Configuring ARM Features on a W-IAP
- Configuring Radio Settings
  - In the Instant UI
    - In the CLI
Deep Packet Inspection and Application Visibility
- Deep Packet Inspection
- Enabling Application Visibility
  - In the Instant UI
  - In the CLI
- Application Visibility
- Configuring ACL Rules for Application and Application Categories
  - In the Instant UI
  - In the CLI
    - Example
- Configuring Web Policy Enforcement Service
  - In the Instant UI
  - In the CLI
    - Example
Voice and Video
- Wi-Fi Multimedia Traffic Management
  - Configuring WMM for Wireless Clients
    - In the Instant UI
    - In the CLI
  - Configuring WMM-DSCP Mapping
    - In the Instant UI
    - In the CLI
- QoS for Microsoft Office Lync
  - Microsoft Office Lync
Services
- AirGroup Configuration
- Configuring a W-IAP for RTLS Support
  - In the Instant UI
  - In the CLI
- Configuring a W-IAP for Analytics and Location Engine Support
  - ALE with Instant
  - Enabling ALE Support on a W-IAP
- Configuring OpenDNS Credentials
  - In the Instant UI
  - In the CLI
- Integrating a W-IAP with Palo Alto Networks Firewall
  - Integration with Instant
  - Configuring a W-IAP for PAN integration
    - In the Instant UI
    - In the CLI
- Integrating a W-IAP with an XML API interface
  - Integration with Instant
  - Configuring a W-IAP for XML API integration
    - In the Instant UI
    - In the CLI
- CALEA Integration and Lawful Intercept Compliance
W-IAP Management and Monitoring
- Managing a W-IAP from W-AirWave
Uplink Configuration
- Uplink Interfaces
- Uplink Preferences and Switching
Intrusion Detection
- Detecting and Classifying Rogue APs
- OS Fingerprinting
- Configuring Wireless Intrusion Protection and Detection Levels
  - Containment Methods
- Configuring IDS Using CLI
Mesh W-IAP Configuration
- Mesh Network Overview
  - Mesh W-IAPs
    - Mesh Portals
    - Mesh Points
- Setting up Instant Mesh Network
- Configuring Wired Bridging on Ethernet 0 for Mesh Point
  - In the Instant UI
  - In the CLI
Mobility and Client Management
- Layer-3 Mobility Overview
- Configuring L3-Mobility
  - Home Agent Load Balancing
  - Configuring a Mobility Domain for Instant
    - In the Instant UI
    - In the CLI
Spectrum Monitor
- Understanding Spectrum Data
- Configuring Spectrum Monitors and Hybrid W-IAPs
  - Converting a W-IAP to a Hybrid W-IAP
    - In the Instant UI
    - In the CLI
  - Converting a W-IAP to a Spectrum Monitor
    - In the Instant UI
    - In the CLI
W-IAP Maintenance
- Upgrading a W-IAP
- Backing up and Restoring W-IAP Configuration Data
- Converting a W-IAP to a Remote AP and Campus AP
- Resetting a Remote AP or Campus AP to a W-IAP
- Rebooting the W-IAP
Monitoring Devices and Logs
- Configuring SNMP
- Configuring a Syslog Server
- Running Debug Commands from the UI
Hotspot Profiles
- Understanding Hotspot Profiles
- Configuring Hotspot Profiles
- Sample Configuration
ClearPass Guest Setup
- Testing
- Troubleshooting
IAP-VPN Deployment Scenarios
- Scenario 1—IPSec: Single Datacenter Deployment with No Redundancy
- Scenario 2—IPSec: Single Datacenter with Multiple Controllers for Redundancy
- Scenario 3—IPSec: Multiple Datacenter Deployment with Primary and Backup Cont...
- Scenario 4—GRE: Single Datacenter Deployment with No Redundancy
Terminology
- Acronyms and Abbreviations
- Glossary

If the upgrade fails and an error message is displayed, retry upgrading the W-IAP.

Upgrading to a New Version Manually

If the automatic image check feature is disabled, you can use obtain an image file from a local file system or

from a TFTPor HTTP URL. To manually check for a new firmware image version and obtain an image file:

1. Navigate to Maintenance>Firmware. The Firmware window is displayed.

2. Under Manual section, perform the following steps:

l Select the Image file option. This method is only available for single-class W-IAPs.

The following examples describe the image file format for different W-IAP models:

n For W-IAP134/135—DellInstant_Cassiopeia_6.4.3.1-4.2.0.0.0_xxxx

n For W-IAP108/109, W-IAP103, and W-IAP114/115—DellInstant_Pegasus_6.4.3.1-4.2.0.0.0_xxxx

n For W-IAP155/155P—DellInstant_Aries_6.4.3.1-4.2.0.0.0_xxxx

n For W-IAP224/225, W-IAP228, W-IAP214/215, W-IAP274/275, W-IAP277—DellInstant_Centaurus_

6.4.3.1-4.2.0.0.0_xxxx

n For W-IAP204/205 and W-IAP205H—DellInstant_Taurus_6.4.3.1-4.2.0.0.0_xxxx

n For all other W-IAPs—DellInstant_Orion_6.4.3.1-4.2.0.0.0_xxxx

l Select the Image URL option. Select this option to obtain an image file from a TFTP, FTP, or HTTP URL.

n HTTP - http://<IP-address>/<image-file>. For example, http://<IP-address>/DellInstant_Orion_6.4.3.1-

4.2.0.0.0_xxxx

n TFTP - tftp://<IP-address>/<image-file>. For example, tftp://<IP-address>/DellInstant_Orion_6.4.3.1-

4.2.0.0.0_xxxx

n FTP - ftp://<IP-address>/<image-file>. For example, ftp://<IP-address>/DellInstant_Orion_6.4.3.1-

4.2.0.0.0_xxxx

3. Clear the Reboot all APs after upgrade checkbox if required. The Reboot all APs after upgrade

checkbox is selected by default to allow the W-IAPs to reboot automatically after a successful upgrade. To

reboot the W-IAP at a later time, clear the Reboot all APs after upgrade checkbox.

4. Click Upgrade Now to upgrade the W-IAP to the newer version.

Upgrading an Image Using CLI

To upgrade an image using a HTTP, TFTP, or FTP URL:

(Instant AP)# upgrade-image <ftp/tftp/http-URL>

To upgrade an image without rebooting the W-IAP:

(Instant AP)# upgrade-image2-no-reboot <ftp/tftp/http-URL>

To view the upgrade information:

(Instant AP)# show upgrade info

Image Upgrade Progress

----------------------

Mac IP Address AP Class Status Image Info Error Detail

--- --------- -------- ------ ---------- ------------

d8:c7:c8:c4:42:98 10.17.101.1 Orion image-ok image file none

Auto reboot :enable

Use external URL :disable

Backing up and Restoring W-IAP Configuration Data

You can back up the W-IAP configuration data and restore the configuration when required.

Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide W-IAP Maintenance | 342