Concept Guide

305 | Cluster Security Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide
Enabling Cluster Security
You can enable cluster security using the Instant UI or the CLI. Ensure that the following pre-requisites are
satisfied:
Pre-requisites
1. NTPserver must be reachable—If internet is reachable, pool.ntp.org will be used by default, otherwise a
static NTP server needs to be configured.
2. UDP port 4434 should be permitted.
In the Instant UI
To enable cluster security:
1. Navigate to System > General .
2. Select Enabled from the Cluster security drop-down list.
3. Click OK.
Reboot all the W-IAPs in the swarm for the configuration to take effect.
In the CLI:
To enable cluster security:
(Instant AP)(config)# cluster-security
(Instant AP)(cluster-security)# dtls
(Instant AP)(cluster-security)# end
(Instant AP)# commit apply
To disable cluster security DTLS:
(Instant AP)(config)# cluster-security
(Instant AP)(cluster-security)# no dtls
(Instant AP)(cluster-security)# end
(Instant AP)# commit apply
To change per module logging level of cluster security:
(Instant AP)# cluster-security logging module <module_name> log-level <level>
To set individual log level for each module:
(Instant AP)# cluster-security logging module <module_name> log-level-individual <level>
After enabling or disabling the cluster security option, ensure that the Config Sync Status is TRUE in the
output of the show summary command, before rebooting the cluster.
Cluster security is not supported for L3 mobility.
Cluster Security Debugging Logs
Cluster security logging is organized into modules based on functionality. The following are the core modules
which are useful and should be used for debugging:
peer—The peer module is used to log connection initiation, renegotiation, collision and active connection
updates. The log-level should be set to debug level while debugging any issues.
conn—The connection module is used to log connection creation, establishment, data transfer and
maintenance updates. The log-level should be set to debug level for debugging DTLS connection issues.