Users Guide
Table Of Contents
- Contents
- About this Guide
- The Basic User-Centric Networks
- Understanding Basic Deployment and Configuration Tasks
- Controller Configuration Workflow
- Connect the Controller to the Network
- W-7000 Series and W-7200 Series Controllers
- Using the LCD Screen
- Configuring a VLAN to Connect to the Network
- Enabling Wireless Connectivity
- Enabling Wireless Connectivity
- Configuring Your User-Centric Network
- Replacing a Controller
- Control Plane Security
- Control Plane Security Overview
- Configuring Control Plane Security
- Managing AP Whitelists
- Managing Whitelists on Master and Local Controllers
- Working in Environments with Multiple Master Controllers
- Replacing a Controller on a Multi-Controller Network
- Configuring Control Plane Security after Upgrading
- Troubleshooting Control Plane Security
- Software Licenses
- Network Configuration Parameters
- IPv6 Support
- Understanding IPv6 Notation
- Understanding IPv6 Topology
- Enabling IPv6
- Enabling IPv6 Support for Controller and APs
- Filtering an IPv6 Extension Header (EH)
- Configuring a Captive Portal over IPv6
- Working with IPv6 Router Advertisements (RAs)
- RADIUS Over IPv6
- TACACS Over IPv6
- DHCPv6 Server
- Understanding ArubaOS Supported Network Configuration for IPv6 Clients
- Understanding ArubaOS Authentication and Firewall Features that Support IPv6
- Managing IPv6 User Addresses
- Understanding IPv6 Exceptions and Best Practices
- Link Aggregation Control Protocol
- OSPFv2
- Tunneled Nodes
- Authentication Servers
- MAC-based Authentication
- Branch Controller Config for Controllers
- Branch Deployment Features
- Scalable Site-to-Site VPN Tunnels
- Layer-3 Redundancy for Branch Controller Masters
- WAN Failure (Authentication) Survivability
- WAN Health Check
- WAN Optimization through IP Payload Compression
- Interface Bandwidth Contracts
- Branch Integration with a Palo Alto Networks (PAN) Portal
- Branch Controller Routing Features
- Cloud Management
- Zero-Touch Provisioning
- Using Smart Config to create a Branch Config Group
- PortFast and BPDU Guard
- Preventing WAN Link Failure on Virtual APs
- Branch WAN Dashboard
- 802.1X Authentication
- Stateful and WISPr Authentication
- Certificate Revocation
- Captive Portal Authentication
- Understanding Captive Portal
- Configuring Captive Portal in the Base Operating System
- Using Captive Portal with a PEFNG License
- Sample Authentication with Captive Portal
- Configuring Guest VLANs
- Configuring Captive Portal Authentication Profiles
- Enabling Optional Captive Portal Configurations
- Personalizing the Captive Portal Page
- Creating and Installing an Internal Captive Portal
- Creating Walled Garden Access
- Enabling Captive Portal Enhancements
- Netdestination for AAAA Records
- Virtual Private Networks
- Planning a VPN Configuration
- Working with VPN Authentication Profiles
- Configuring a Basic VPN for L2TP/IPsec
- Configuring a VPN for L2TP/IPsec with IKEv2
- Configuring a VPN for Smart Card Clients
- Configuring a VPN for Clients with User Passwords
- Configuring Remote Access VPNs for XAuth
- Working with Remote Access VPNs for PPTP
- Working with Site-to-Site VPNs
- Working with VPN Dialer
- Roles and Policies
- ClearPass Policy Manager Integration
- Virtual APs
- Adaptive Radio Management
- Understanding ARM
- Client Match
- ARM Coverage and Interference Metrics
- Configuring ARM Profiles
- Assigning an ARM Profile to an AP Group
- Using Multi-Band ARM for 802.11a/802.11g Traffic
- Band Steering
- Dynamic Bandwidth Switch
- Enabling Traffic Shaping
- Spectrum Load Balancing
- Reusing Channels to Control RX Sensitivity Tuning
- Configuring Non-802.11 Noise Interference Immunity
- Troubleshooting ARM
- Wireless Intrusion Prevention
- Working with the Reusable Wizard
- Monitoring the Dashboard
- Detecting Rogue APs
- Working with Intrusion Detection
- Configuring Intrusion Protection
- Configuring the WLAN Management System
- Understanding Client Blacklisting
- Working with WIP Advanced Features
- Configuring TotalWatch
- Administering TotalWatch
- Tarpit Shielding Overview
- Configuring Tarpit Shielding
- Access Points
- Important Points to Remember
- Basic Functions and Features
- AP Settings Triggering a Radio Restart
- Naming and Grouping APs
- Understanding AP Configuration Profiles
- Before you Deploy an AP
- Enable Controller Discovery
- Enable DHCP to Provide APs with IP Addresses
- AP Provisioning Profiles
- Configuring Installed APs
- Optional AP Configuration Settings
- RF Management
- Optimizing APs Over Low-Speed Links
- AP Scanning Optimization
- Channel Group Scanning
- Configuring AP Channel Assignments
- Managing AP Console Settings
- Link Aggregation Support on W-AP220 Series, W-AP270 Series, and W-AP320 Series
- Recording Consolidated AP-Provisioned Information
- Service Tag
- Secure Enterprise Mesh
- Mesh Overview Information
- Mesh Configuration Procedures
- Understanding Mesh Access Points
- Understanding Mesh Links
- Understanding Mesh Profiles
- Understanding Remote Mesh Portals (RMPs)
- Understanding the AP Boot Sequence
- Mesh Deployment Solutions
- Mesh Deployment Planning
- Configuring Mesh Cluster Profiles
- Creating and Editing Mesh Radio Profiles
- Creating and Editing Mesh High-Throughput SSID Profiles
- Configuring Ethernet Ports for Mesh
- Provisioning Mesh Nodes
- Verifying Your Mesh Network
- Configuring Remote Mesh Portals (RMPs)
- Increasing Network Uptime Through Redundancy and VRRP
- RSTP
- PVST+
- Link Layer Discovery Protocol
- IP Mobility
- External Firewall Configuration
- Palo Alto Networks Firewall Integration
- Remote Access Points
- About Remote Access Points
- Configuring the Secure Remote Access Point Service
- Deploying a Branch/Home Office Solution
- Enabling Remote AP Advanced Configuration Options
- Understanding Split Tunneling
- Understanding Bridge
- Provisioning Wi-Fi Multimedia
- Reserving Uplink Bandwidth
- Provisioning 4G USB Modems on Remote Access Points
- Provisioning RAPs at Home
- Configuring W-IAP3WN and W-IAP3WNP Access Points
- Converting an IAP to RAP or CAP
- Enabling Bandwidth Contract Support for RAPs
- RAP TFTP Image Upgrade
- Virtual Intranet Access
- Spectrum Analysis
- Understanding Spectrum Analysis
- Creating Spectrum Monitors and Hybrid APs
- Connecting Spectrum Devices to the Spectrum Analysis Client
- Configuring the Spectrum Analysis Dashboards
- Customizing Spectrum Analysis Graphs
- Working with Non-Wi-Fi Interferers
- Understanding the Spectrum Analysis Session Log
- Viewing Spectrum Analysis Data
- Recording Spectrum Analysis Data
- Troubleshooting Spectrum Analysis
- Dashboard Monitoring
- Management Access
- Configuring Certificate Authentication for WebUI Access
- Secure Shell (SSH)
- WebUI Session Timer
- Enabling RADIUS Server Authentication
- Connecting to an W-AirWave Server
- Custom Certificate Support for RAP
- Implementing a Specific Management Password Policy
- Configuring AP Image Preload
- Configuring Centralized Image Upgrades
- Managing Certificates
- Configuring SNMP
- Enabling Capacity Alerts
- Configuring Logging
- Enabling Guest Provisioning
- Managing Files on the Controller
- Setting the System Clock
- ClearPass Profiling with IF-MAP
- Whitelist Synchronization
- Downloadable Regulatory Table
- 802.11u Hotspots
- Hotspot 2.0 Pre-Deployment Information
- Hotspot Profile Configuration Tasks
- Hotspot 2.0 Overview
- Configuring Hotspot 2.0 Profiles
- Configuring Hotspot Advertisement Profiles
- Configuring ANQP Venue Name Profiles
- Configuring ANQP Network Authentication Profiles
- Configuring ANQP Domain Name Profiles
- Configuring ANQP IP Address Availability Profiles
- Configuring ANQP NAI Realm Profiles
- Configuring ANQP Roaming Consortium Profiles
- Configuring ANQP 3GPP Cellular Network Profiles
- Configuring H2QP Connection Capability Profiles
- Configuring H2QP Operator Friendly Name Profiles
- Configuring H2QP Operating Class Indication Profiles
- Configuring H2QP WAN Metrics Profiles
- Adding Local Controllers
- Voice and Video
- AirGroup
- Zero Configuration Networking
- AirGroup Solution
- AirGroup Deployment Models
- Features Supported in AirGroup
- ClearPass Policy Manager and ClearPass Guest Features
- Auto-association and Controller-based Policy
- Best Practices and Limitations
- Integrated Deployment Model
- Controller Dashboard Monitoring
- Configuring the AirGroup-CPPM Interface
- Bluetooth-Based Discovery and AirGroup
- AirGroup mDNS Static Records
- mDNS AP VLAN Aggregation
- mDNS Multicast Response Propagation
- Troubleshooting and Log Messages
- Instant AP VPN Support
- External Services Interface
- External User Management
- Behavior and Defaults
- DHCP with Vendor-Specific Options
- 802.1X Configuration for IAS and Windows Clients
- Acronyms and Terms
UTC- Time Zones UTC+Time Zones
l "Mid-Atlantic", "UTC-02", "FNT"
l "Azores", "UTC-01", "AZOST", "AZOST"
l "Cape-Verde-Is", "UTC-01", "CVT"
l "Casablanca", "UTC+00", "UTC",
l "Coordinated-Universal-Time", "UTC+00", "UTC",
l "Dublin", "UTC+00", "UTC", "IST"
l "Edinburgh", "UTC+00", "UTC", "BST"
l "Lisbon", "UTC+00", "UTC", "WEST"
l "London", "UTC+00", "UTC", "BST"
l "Monrovia", "UTC+00", "UTC",
l "Reykjavik", "UTC+00", "UTC",
l "Amsterdam", "UTC+01", "CET", "CEST"
l "Berlin", "UTC+01", "CET", "CEST"
l "Bern", "UTC+01", "CET", "CEST"
l "Rome", "UTC+01", "CET", "CEST"
l "Stockholm", "UTC+01", "CET", "CEST"
l "Vienna", "UTC+01", "CET", "CEST"
l "Belgrade", "UTC+01", "CET", "CEST"
l "Bratislava", "UTC+01", "CET", "CEST"
l "Budapest", "UTC+01", "CET", "CEST"
l "Ljubljana", "UTC+01", "CET", "CEST"
l "Prague", "UTC+01", "CET", "CEST"
l "Brussels", "UTC+01", "CET", "CEST"
l "Copenhagen", "UTC+01", "CET", "CEST"
l "Madrid", "UTC+01", "CET", "CEST"
l "Paris", "UTC+01", "CET", "CEST"
l "Sarajevo", "UTC+01", "CET", "CEST"
l "Skopje", "UTC+01", "CET", "CEST"
l "Warsaw", "UTC+01", "CET", "CEST"
l "Zagreb", "UTC+01", "CET", "CEST"
l "West-Central-Africa", "UTC+01", "CET"
l "Windhoek", "UTC+01", "CET" "WAST"
l "Amman", "UTC+02", "EET" "EEST"
l "Athens", "UTC+02", "EET" "EEST"
l "Bucharest", "UTC+02", "EET" "EEST"
l "Beirut", "UTC+02", "EET" "EEST"
l "Cairo", "UTC+02", "EET"
l "Damascus", "UTC+02", "EET" "EEST"
l "Helsinki", "UTC+02", "EET" "EEST"
l "Istanbul", "UTC+02", "EET" "EEST"
l "Kyiv", "UTC+02", "EET" "EEST"
l "Riga", "UTC+02", "EET" "EEST"
l "Sofia", "UTC+02", "EET" "EEST"
l "Tallinn", "UTC+02", "EET" "EEST"
l "Vilnius", "UTC+02", "EET" "EEST"
l "Jerusalem", "UTC+02", "EET" "IST"
l "Baghdad", "UTC+03", "MSK"
l "Minsk", "UTC+03", "MSK"
l "Kuwait", "UTC+03", "MSK"
l "Riyadh", "UTC+03", "MSK"
l "Nairobi", "UTC+03", "MSK"
l "Tehran", "UTC+03:30", "IRST"
l "Abu-Dhabi", "UTC+04", "GST"
l "Muscat", "UTC+04", "GST"
l "Baku", "UTC+04", "GST" "AZST"
l "Moscow", "UTC+04", "GST"
l "St.Petersburg", "UTC+04", "GST"
l "Volgograd", "UTC+04", "GST"
l "Port-Louis", "UTC+04", "GST"
l "Tbilisi", "UTC+04", "GST"
l "Yerevan", "UTC+04", "GST"
l "Kabul", "UTC+04:30", "AFT"
l "Islamabad" ,"UTC+05", "PKT"
l "Karachi" ,"UTC+05", "PKT"
l "Tashkent" ,"UTC+05", "PKT"
l "Chennai" ,"UTC+05:30", "IST"
l "Kolkata" ,"UTC+05:30", "IST"
l "Mumbai" ,"UTC+05:30", "IST"
l "New-Delhi" ,"UTC+05:30", "IST"
l "Sri-Jayawardenepura", "UTC+05:30", "IST"
l "Kathmandu", "UTC+05:45", "NPT"
l "Astana", "UTC+06", "BTT"
l "Dhaka", "UTC+06", "BTT"
l "Ekaterinburg", "UTC+06", "BTT"
l "Yangon", "UTC+06:30", "MMT"
l "Bangkok", "UTC+07", "THA"
Table 56: Supported Branch Config Group Time Zone Formats
Dell Networking W-Series ArubaOS 6.5.x | User Guide BranchController Config for Controllers |
229