Concept Guide
Table Of Contents
- About this Guide
- About Instant
- Setting up a W-IAP
- Automatic Retrieval of Configuration
- Instant User Interface
- Initial Configuration Tasks
- Customizing W-IAP Settings
- Modifying the W-IAP Host Name
- Configuring Zone Settings on a W-IAP
- Specifying a Method for Obtaining IP Address
- Configuring External Antenna
- Configuring Radio Profiles for a W-IAP
- Configuring Uplink VLAN for a W-IAP
- Changing the W-IAP Installation Mode
- Changing USB Port Status
- Master Election and Virtual Controller
- Adding a W-IAP to the Network
- Removing a W-IAP from the Network
- VLAN Configuration
- IPv6 Support
- Wireless Network Profiles
- Configuring Wireless Network Profiles
- Configuring Fast Roaming for Wireless Clients
- Configuring Modulation Rates on a WLAN SSID
- Multi-User-MIMO
- Management Frame Protection
- Disabling Short Preamble for Wireless Client
- Editing Status of a WLAN SSID Profile
- Editing a WLAN SSID Profile
- Deleting a WLAN SSID Profile
- Wired Profiles
- Captive Portal for Guest Access
- Understanding Captive Portal
- Configuring a WLAN SSID for Guest Access
- Configuring Wired Profile for Guest Access
- Configuring Internal Captive Portal for Guest Network
- Configuring External Captive Portal for a Guest Network
- Configuring Facebook Login
- Configuring Guest Logon Role and Access Rules for Guest Users
- Configuring Captive Portal Roles for an SSID
- Configuring Walled Garden Access
- Authentication and User Management
- Managing W-IAP Users
- Supported Authentication Methods
- Supported EAP Authentication Frameworks
- Configuring Authentication Servers
- Understanding Encryption Types
- Configuring Authentication Survivability
- Configuring 802.1X Authentication for a Network Profile
- Enabling 802.1X Supplicant Support
- Configuring MAC Authentication for a Network Profile
- Configuring MAC Authentication with 802.1X Authentication
- Configuring MAC Authentication with Captive Portal Authentication
- Configuring WISPr Authentication
- Blacklisting Clients
- Uploading Certificates
- Roles and Policies
- DHCP Configuration
- Configuring Time-Based Services
- Dynamic DNS Registration
- VPN Configuration
- IAP-VPN Deployment
- Adaptive Radio Management
- Deep Packet Inspection and Application Visibility
- Voice and Video
- Services
- Configuring AirGroup
- Configuring a W-IAP for RTLS Support
- Configuring a W-IAP for Analytics and Location Engine Support
- Managing BLE Beacons
- Clarity Live
- Configuring OpenDNS Credentials
- Integrating a W-IAP with Palo Alto Networks Firewall
- Integrating a W-IAP with an XML API Interface
- CALEA Integration and Lawful Intercept Compliance
- Cluster Security
- W-IAP Management and Monitoring
- Uplink Configuration
- Intrusion Detection
- Mesh W-IAP Configuration
- Mobility and Client Management
- Spectrum Monitor
- W-IAP Maintenance
- Monitoring Devices and Logs
- Hotspot Profiles
- ClearPass Guest Setup
- IAP-VPN Deployment Scenarios
- Acronyms and Abbreviations
W-IAP
Variant
W-IAP
Regulatory
Domain
Controller Regulatory
Domain
ArubaOS release
US Unrestricted
W-IAP11x and
W-IAP228
US
Y
X X
ArubaOS 6.3.1.0, ArubaOS 6.3.1.1, and
ArubaOS 6.3.1.2
RW X X X
JP X Y X
W-IAP228
US
Y
X X
ArubaOS 6.3.0
RW/JP X X X
All other W-
IAPs
US Y X X Versions prior to ArubaOS 6.3.0, ArubaOS
6.3.x.x, ArubaOS 6.4, and ArubaOS 6.4.x.x
Unrestricted X Y X
JP X Y X
Table 75: W-IAP-to-ArubaOS Conversion
Converting a W-IAP to a Remote AP
For converting a W-IAP to a Remote AP, the VC sends the Remote AP convert command to all the other W-IAPs.
The VC, along with the slave W-IAPs, sets a VPN tunnel to the remote controller, and downloads the firmware
through FTP. The VC uses IPsec to communicate to the Mobility Controller over the Internet.
l If the W-IAP obtains W-AirWave information through DHCP (Option 43 and Option 60), it establishes an
HTTPS connection to the W-AirWave server, downloads the configuration, and operates in the W-IAP mode.
l If the W-IAP does not get W-AirWave information through DHCP provisioning, it tries provisioning through
the Activate server in the cloud by sending a serial number MAC address. If an entry for the W-IAP is present
in Activate and is provisioned as a W-IAP > Remote AP, Activate responds with mobility controller IP address,
W-IAP group, and W-IAP type. The W-IAP then contacts the controller, establishes certificate-based secure
communication, and obtains configuration and image from the controller. The W-IAP reboots and comes up
as a Remote AP. The W-IAP then establishes an IPsec connection with the controller and begins operating in
the Remote AP mode.
l If a W-IAP entry is present in Activate and a provisioning rule is configured to return the IP address or host
name of the W-AirWave server, the W-IAP downloads configuration from W-AirWave and operates in the W-
IAP mode.
l If there is no response from Activate, the access point comes up with default configuration and operates in
the W-IAP mode.
A mesh point cannot be converted to Remote AP, because mesh access points do not support VPN
connection.
Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide W-IAP Maintenance | 355