Users Guide

a. Policy Name. (This example uses cp_redirect_acl.)
b. Policy Type. Select IPv4 Session from the drop-down list.
4. Click Add in the Rules section of the Policies view.
a. Source. Select user from the drop-down list.
b. Destination. Accept any.
c. Service. Select service from the drop-down list; select svc-http (tcp80) from the secondary drop-
down list.
d. Action. Select redirect to ESI group from the drop-down list; select external_cps from the secondary
drop-down list; click <-- to add that group.
e. Click Add.
5. Click Done when you are finished.
6. Click Apply to apply the configuration changes.
In the CLI
The CLI configuration process consists of these general tasks:
l Configuring captive portal (see Captive Portal Authentication on page 302).
l Configuring the health-check ping method.
l Configuring the ESI servers.
l Configuring the ESI group.
l Defining the redirect filter for sending traffic to the ESI server.
Configuring a Health-Check Ping
The health-check ping will be associated with an ESI group, along with servers, so that controller will send ICMP
echo requests to each server in the group and mark the server down if the controller does not hear from the
server. The health-check parameters used in this example are:
l Frequency—30 seconds. (The default is 5 seconds.)
l Retry-count—3. (The default is 2.)
l Timeout—2 seconds. (The default is 2 seconds.)
Use these CLI commands to configure a health-check ping method:
esipingprofile_name
frequencyseconds
retry-countcount
timeoutseconds
Configuring ESI Servers
Here are the ESI server CLI configuration tasks:
l Configure server mode to be NAT.
l Configure the trusted IP address (the server IP address to which packets should be redirected).
l To redirect to a different port than the original destination port in the packet, configure an alternate
destination port.
Use these CLI commands to configure an ESI server and identify its associated attributes:
esiserverserver_identity
dportdestination_tcp/udp_port
mode{bridge|nat|route}
trusted-ip-addrip-addr [health-check]
Dell Networking W-Series ArubaOS 6.5.x | User Guide External Services Interface |
1060