Concept Guide
Table Of Contents
- About this Guide
- About Instant
- Setting up a W-IAP
- Automatic Retrieval of Configuration
- Instant User Interface
- Initial Configuration Tasks
- Customizing W-IAP Settings
- Modifying the W-IAP Host Name
- Configuring Zone Settings on a W-IAP
- Specifying a Method for Obtaining IP Address
- Configuring External Antenna
- Configuring Radio Profiles for a W-IAP
- Configuring Uplink VLAN for a W-IAP
- Changing the W-IAP Installation Mode
- Changing USB Port Status
- Master Election and Virtual Controller
- Adding a W-IAP to the Network
- Removing a W-IAP from the Network
- VLAN Configuration
- IPv6 Support
- Wireless Network Profiles
- Configuring Wireless Network Profiles
- Configuring Fast Roaming for Wireless Clients
- Configuring Modulation Rates on a WLAN SSID
- Multi-User-MIMO
- Management Frame Protection
- Disabling Short Preamble for Wireless Client
- Editing Status of a WLAN SSID Profile
- Editing a WLAN SSID Profile
- Deleting a WLAN SSID Profile
- Wired Profiles
- Captive Portal for Guest Access
- Understanding Captive Portal
- Configuring a WLAN SSID for Guest Access
- Configuring Wired Profile for Guest Access
- Configuring Internal Captive Portal for Guest Network
- Configuring External Captive Portal for a Guest Network
- Configuring Facebook Login
- Configuring Guest Logon Role and Access Rules for Guest Users
- Configuring Captive Portal Roles for an SSID
- Configuring Walled Garden Access
- Authentication and User Management
- Managing W-IAP Users
- Supported Authentication Methods
- Supported EAP Authentication Frameworks
- Configuring Authentication Servers
- Understanding Encryption Types
- Configuring Authentication Survivability
- Configuring 802.1X Authentication for a Network Profile
- Enabling 802.1X Supplicant Support
- Configuring MAC Authentication for a Network Profile
- Configuring MAC Authentication with 802.1X Authentication
- Configuring MAC Authentication with Captive Portal Authentication
- Configuring WISPr Authentication
- Blacklisting Clients
- Uploading Certificates
- Roles and Policies
- DHCP Configuration
- Configuring Time-Based Services
- Dynamic DNS Registration
- VPN Configuration
- IAP-VPN Deployment
- Adaptive Radio Management
- Deep Packet Inspection and Application Visibility
- Voice and Video
- Services
- Configuring AirGroup
- Configuring a W-IAP for RTLS Support
- Configuring a W-IAP for Analytics and Location Engine Support
- Managing BLE Beacons
- Clarity Live
- Configuring OpenDNS Credentials
- Integrating a W-IAP with Palo Alto Networks Firewall
- Integrating a W-IAP with an XML API Interface
- CALEA Integration and Lawful Intercept Compliance
- Cluster Security
- W-IAP Management and Monitoring
- Uplink Configuration
- Intrusion Detection
- Mesh W-IAP Configuration
- Mobility and Client Management
- Spectrum Monitor
- W-IAP Maintenance
- Monitoring Devices and Logs
- Hotspot Profiles
- ClearPass Guest Setup
- IAP-VPN Deployment Scenarios
- Acronyms and Abbreviations
Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide DHCP Configuration | 207
Chapter 15
DHCP Configuration
This chapter provides the following information:
l Configuring DHCP Scopes on page 207
l Configuring the Default DHCP Scope for Client IP Assignment on page 214
Configuring DHCP Scopes
The VC supports different modes of Dynamic Host Configuration Protocol (DHCP) address assignment. With
each DHCP address assignment mode, various client traffic forwarding modes are associated. For more
information on client traffic forwarding modes for IAP-VPN, see IAP-VPN Forwarding Modes on page 239.
When using a local DHCP scope in a W-IAP cluster, ensure that the VLANs configured for this DHCP scope is
allowed in the uplink switch.
In a single W-IAP network, when using a client DHCP scope for wired clients, ensure that client VLAN is not
added in the allowed VLAN list for the port to which the W-IAP E0 port is connected.
This section describes the following procedures:
l Configuring Local DHCP Scopes on page 207
l Configuring Distributed DHCP Scopes on page 209
l Configuring Centralized DHCP Scopes on page 212
Configuring Local DHCP Scopes
You can configure Local; Local, L2; and Local, L3 DHCP scopes through the Instant UI or the CLI.
l Local—In this mode, the VC acts as both the DHCP server and the default gateway. The configured subnet
and the corresponding DHCP scope are independent of the subnets configured in other W-IAP clusters. The
VC assigns an IP address from a local subnet and forwards traffic to both corporate and non-corporate
destinations. The network address is translated appropriately and the packet is forwarded through the
IPsec tunnel or through the uplink. This DHCP assignment mode is used in the Networks Address
Translation (NAT) forwarding mode.
l Local, L2—In this mode, the VC acts as a DHCP server and the gateway located outside the W-IAP.
l Local, L3—This DHCP assignment mode is used with the L3 forwarding mode. In this mode, the VC acts as
a DHCP server and the gateway, and assigns an IP address from the local subnet. The W-IAP routes the
packets sent by clients on its uplink. The Local, L3 subnets can access corporate network through the IPsec
tunnel. The network address for all client traffic, which is generated in the Local, L3 subnets and destined to
the corporate network, is translated at the source with the tunnel inner IP. However, if corporate access to
Local, L3 is not required, you can configure ACL rules to deny access.
In the Instant UI
To configure a Local or a Local, L3 DHCP scope:
1. Click More > DHCP Server. The DHCP Server window is displayed.
2. To configure a Local; Local, L2; or Local, L3 DHCP scopes, click New under Local DHCP Scopes. The
New DHCP Scope window is displayed.
3. Based on the type of DHCP scope selected, configure the following parameters: