Concept Guide

ManualsBrandsDell ManualsAccess PlatformsW-Series 277 Access Points

371

372

373

374

375

376

377

378

379

380

Table Of Contents

About this Guide
- Intended Audience
- Related Documents
- Conventions
- Contacting Dell
About Instant
- Instant Overview
- What is New in this Release
  - Support for New W-IAP Devices
  - No Support for W-IAP92/93
Setting up a W-IAP
- Setting up Instant Network
- Logging in to the Instant UI
  - Regulatory Domains
  - Specifying Country Code
- Accessing the Instant CLI
Automatic Retrieval of Configuration
- Managed Mode Operations
- Pre-requisites
- Configuring Managed Mode Parameters
  - Example
- Verifying the Configuration
Instant User Interface
- Login Screen
- Main Window
Initial Configuration Tasks
- Basic Configuration Tasks
- Additional Configuration Tasks
Customizing W-IAP Settings
- Modifying the W-IAP Hostname
  - In the Instant UI
  - In the CLI
- Configuring Zone Settings on a W-IAP
  - In the Instant UI
  - In the CLI
- Specifying a Method for Obtaining IP Address
  - In the Instant UI
  - In the CLI
- Configuring External Antenna
  - EIRP and Antenna Gain
  - Configuring Antenna Gain
    - In the Instant UI
    - In the CLI
- Configuring Radio Profiles for a W-IAP
- Configuring Uplink VLAN for a W-IAP
  - In the Instant UI
  - In the CLI
- Changing USB Port Status
  - In the Instant UI
  - In the CLI
- Master Election and Virtual Controller
  - Master Election Protocol
  - Manual Provisioning of Master W-IAP
    - Provisioning a W-IAP as a Master W-IAP
      - In the Instant UI
      - In the CLI
- Adding a W-IAP to the Network
- Removing a W-IAP from the Network
VLAN Configuration
- VLAN Pooling
- Uplink VLAN Monitoring and Detection on Upstream Devices
Wireless Network Profiles
- Configuring Wireless Network Profiles
- Configuring Fast Roaming for Wireless Clients
- Editing Status of a WLAN SSID Profile
  - In the Instant UI
  - In the CLI
- Editing a WLAN SSID Profile
- Deleting a WLAN SSID Profile
Wired Profiles
- Configuring a Wired Profile
- Assigning a Profile to Ethernet Ports
  - In the Instant UI
  - In the CLI
- Editing a Wired Profile
- Deleting a Wired Profile
- Link Aggregation Control Protocol
- Understanding Hierarchical Deployment
Captive Portal for Guest Access
- Understanding Captive Portal
  - Types of Captive Portal
  - Walled Garden
- Configuring a WLAN SSID for Guest Access
  - In the Instant UI
  - In the CLI
- Configuring Wired Profile for Guest Access
  - In the Instant UI
  - In the CLI
- Configuring Internal Captive Portal for Guest Network
  - In the Instant UI
  - In the CLI
- wConfiguring External Captive Portal for a Guest Network
- Configuring Facebook Login
- Configuring Guest Logon Role and Access Rules for Guest Users
  - In the Instant UI
  - In the CLI
    - Example
- Configuring Captive Portal Roles for an SSID
  - In the Instant UI
  - In the CLI
- Configuring Walled Garden Access
Authentication and User Management
- Managing W-IAP Users
- Supported Authentication Methods
- Supported EAP Authentication Frameworks
  - Authentication Termination on W-IAP
- Configuring Authentication Servers
- Understanding Encryption Types
  - WPA and WPA2
  - Recommended Authentication and Encryption Combinations
- Configuring Authentication Survivability
  - Enabling Authentication Survivability
    - In the Instant UI
      - Important Points to Remember
    - In the CLI
- Configuring 802.1X Authentication for a Network Profile
  - Configuring 802.1X Authentication for a Wireless Network Profile
    - In the Instant UI
    - In the CLI
  - Configuring 802.1X Authentication for Wired Profiles
    - In the Instant UI
    - In the CLI
- Configuring MAC Authentication for a Network Profile
  - Configuring MAC Authentication for Wireless Network Profiles
    - In the Instant UI
    - In the CLI
  - Configuring MAC Authentication for Wired Profiles
    - In the Instant UI
    - In the CLI
- FConfiguring MAC Authentication with 802.1X Authentication
  - Configuring MAC and 802.1X Authentication for a Wireless Network Profile
    - In the Instant UI
    - In the CLI
  - Configuring MAC and 802.1X Authentication for Wired Profiles
    - In the Instant UI
    - In the CLI
- hConfiguring MAC Authentication with Captive Portal Authentication
  - In the Instant UI
  - In the CLI
- Configuring WISPr Authentication
  - In the Instant UI
  - In the CLI
- Blacklisting Clients
  - Blacklisting Clients Manually
  - Blacklisting Users Dynamically
- Uploading Certificates
Roles and Policies
- Firewall Policies
- Content Filtering
- Configuring User Roles
- Configuring Derivation Rules
- Using Advanced Expressions in Role and VLAN Derivation Rules
  - Configuring a User Role for VLAN Derivation
    - Creating a User VLAN Role
      - In the Instant UI
      - In the CLI
    - Assigning User VLAN Roles to a Network Profile
      - In the Instant UI
      - In the CLI
DHCP Configuration
- Configuring DHCP Scopes
- Configuring the Default DHCP Scope for Client IP Assignment
  - In the Instant UI
  - In the CLI
VPN Configuration
- Understanding VPN Features
  - Supported VPN Protocols
- Configuring a Tunnel from a W-IAP to Dell Networking W-Series Mobility Contro...
- Configuring Routing Profiles
  - In the Instant UI
  - In the CLI
IAP-VPN Deployment
- Understanding IAP-VPN Architecture
  - IAP-VPN Scalability Limits
  - IAP-VPN Forwarding Modes
- Configuring W-IAP and Controller for IAP-VPN Operations
  - Configuring a W-IAP network for IAP-VPN operations
  - Configuring a Controller for IAP-VPN Operations
Adaptive Radio Management
- ARM Overview
- Configuring ARM Features on a W-IAP
- Configuring Radio Settings
  - In the Instant UI
    - In the CLI
Deep Packet Inspection and Application Visibility
- Deep Packet Inspection
- Enabling Application Visibility
  - In the Instant UI
  - In the CLI
- Application Visibility
- Configuring ACL Rules for Application and Application Categories
  - In the Instant UI
  - In the CLI
    - Example
- Configuring Web Policy Enforcement Service
  - In the Instant UI
  - In the CLI
    - Example
Voice and Video
- Wi-Fi Multimedia Traffic Management
  - Configuring WMM for Wireless Clients
    - In the Instant UI
    - In the CLI
  - Configuring WMM-DSCP Mapping
    - In the Instant UI
    - In the CLI
- QoS for Microsoft Office Lync
  - Microsoft Office Lync
Services
- AirGroup Configuration
- Configuring a W-IAP for RTLS Support
  - In the Instant UI
  - In the CLI
- Configuring a W-IAP for Analytics and Location Engine Support
  - ALE with Instant
  - Enabling ALE Support on a W-IAP
- Configuring OpenDNS Credentials
  - In the Instant UI
  - In the CLI
- Integrating a W-IAP with Palo Alto Networks Firewall
  - Integration with Instant
  - Configuring a W-IAP for PAN integration
    - In the Instant UI
    - In the CLI
- Integrating a W-IAP with an XML API interface
  - Integration with Instant
  - Configuring a W-IAP for XML API integration
    - In the Instant UI
    - In the CLI
- CALEA Integration and Lawful Intercept Compliance
W-IAP Management and Monitoring
- Managing a W-IAP from W-AirWave
Uplink Configuration
- Uplink Interfaces
- Uplink Preferences and Switching
Intrusion Detection
- Detecting and Classifying Rogue APs
- OS Fingerprinting
- Configuring Wireless Intrusion Protection and Detection Levels
  - Containment Methods
- Configuring IDS Using CLI
Mesh W-IAP Configuration
- Mesh Network Overview
  - Mesh W-IAPs
    - Mesh Portals
    - Mesh Points
- Setting up Instant Mesh Network
- Configuring Wired Bridging on Ethernet 0 for Mesh Point
  - In the Instant UI
  - In the CLI
Mobility and Client Management
- Layer-3 Mobility Overview
- Configuring L3-Mobility
  - Home Agent Load Balancing
  - Configuring a Mobility Domain for Instant
    - In the Instant UI
    - In the CLI
Spectrum Monitor
- Understanding Spectrum Data
- Configuring Spectrum Monitors and Hybrid W-IAPs
  - Converting a W-IAP to a Hybrid W-IAP
    - In the Instant UI
    - In the CLI
  - Converting a W-IAP to a Spectrum Monitor
    - In the Instant UI
    - In the CLI
W-IAP Maintenance
- Upgrading a W-IAP
- Backing up and Restoring W-IAP Configuration Data
- Converting a W-IAP to a Remote AP and Campus AP
- Resetting a Remote AP or Campus AP to a W-IAP
- Rebooting the W-IAP
Monitoring Devices and Logs
- Configuring SNMP
- Configuring a Syslog Server
- Running Debug Commands from the UI
Hotspot Profiles
- Understanding Hotspot Profiles
- Configuring Hotspot Profiles
- Sample Configuration
ClearPass Guest Setup
- Testing
- Troubleshooting
IAP-VPN Deployment Scenarios
- Scenario 1—IPSec: Single Datacenter Deployment with No Redundancy
- Scenario 2—IPSec: Single Datacenter with Multiple Controllers for Redundancy
- Scenario 3—IPSec: Multiple Datacenter Deployment with Primary and Backup Cont...
- Scenario 4—GRE: Single Datacenter Deployment with No Redundancy
Terminology
- Acronyms and Abbreviations
- Glossary

(Instant AP)(Hotspot2.0 "hs1")# roam-cons-oi-2 223355

(Instant AP)(Hotspot2.0 "hs1")# addtl-roam-cons-ois 0

(Instant AP)(Hotspot2.0 "hs1")# venue-group business

(Instant AP)(Hotspot2.0 "hs1")# venue-type research-and-dev-facility

(Instant AP)(Hotspot2.0 "hs1")# pame-bi

(Instant AP)(Hotspot2.0 "hs1")# group-frame-block

(Instant AP)(Hotspot2.0 "hs1")# p2p-dev-mgmt

(Instant AP)(Hotspot2.0 "hs1")# p2p-cross-connect

(Instant AP)(Hotspot2.0 "hs1")# end

(Instant AP)# commit apply

Step 3: Associating advertisement profiles with the hotspot profile

(Instant AP)# configure terminal

(Instant AP)(config)# hotspot hs-profile hs1

(Instant AP)(Hotspot2.0 "hs1")# advertisement-profile anqp-nai-realm nr1

(Instant AP)(Hotspot2.0 "hs1")# advertisement-profile anqp-venue-name vn1

(Instant AP)(Hotspot2.0 "hs1")# advertisement-profile anqp-nwk-auth na1

(Instant AP)(Hotspot2.0 "hs1")# advertisement-profile anqp-roam-cons rc1

(Instant AP)(Hotspot2.0 "hs1")# advertisement-profile anqp-3gpp 3g1

(Instant AP)(Hotspot2.0 "hs1")# advertisement-profile anqp-ip-addr-avail ip1

(Instant AP)(Hotspot2.0 "hs1")# advertisement-profile anqp-domain-name dn1

(Instant AP)(Hotspot2.0 "hs1")# advertisement-profile h2qp-oper-name on1

(Instant AP)(Hotspot2.0 "hs1")# advertisement-profile h2qp-wan-metrics wm1

(Instant AP)(Hotspot2.0 "hs1")# advertisement-profile h2qp-conn-cap cc1

(Instant AP)(Hotspot2.0 "hs1")# advertisement-profile h2qp-oper-class oc1

(Instant AP)(Hotspot2.0 "hs1")# exit

Step 4: Associate the hotspot profile with WLAN SSID:

(Instant AP)# configure terminal

(Instant AP)# wlan ssid-profile ssidProfile1

(Instant AP)(SSID Profile "ssidProfile1")# essid hsProf

(Instant AP)(SSID Profile "ssidProfile1")# type employee

(Instant AP)(SSID Profile "ssidProfile1")# vlan 200

(Instant AP)(SSID Profile "ssidProfile1")# opmode wpa2-aes

(Instant AP)(SSID Profile "ssidProfile1")# blacklist

(Instant AP)(SSID Profile "ssidProfile1")# mac-authentication

(Instant AP)(SSID Profile "ssidProfile1")# l2-auth-failthrough

(Instant AP)(SSID Profile "ssidProfile1")# radius-accounting

(Instant AP)(SSID Profile "ssidProfile1")# radius-accounting-mode user-association

(Instant AP)(SSID Profile "ssidProfile1")# radius-interim-accounting-interval 10

(Instant AP)(SSID Profile "ssidProfile1")# radius-reauth-interval 20

(Instant AP)(SSID Profile "ssidProfile1")# max-authentication-failures 2

(Instant AP)(SSID Profile "ssidProfile1")# set-role-by-ssid

(Instant AP)(SSID Profile "ssidProfile1")# hotspot-profile hs1

(Instant AP)(SSID Profile "ssidProfile1")# end

(Instant AP)# commit apply

Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Hotspot Profiles | 375