Users Guide

531| Access Points Dell Networking W-Series ArubaOS 6.5.x| User Guide
Configuring a Remote AP
A remote AP (RAP) is recommended when the network between the AP and controller is an un-trusted/non-
routable network, such as the Internet. Furthermore, a RAP supports an internal DHCP server, while a campus
AP does not.
Remote Authentication
The two most common ways to provision an AP for remote authentication are certificate-based AP
provisioning and provisioning using a pre-shared key. Although both options allow for a simple secure setup of
your remote network, you should make sure that the procedure you select is supported by your controller, the
AP model type and the end user’s client software. If you must provision your APs using a pre-shared key, you
need to know which controller models you have that do not support certificate-based provisioning.
l Certificate based authentication allows a controller to authenticate a AP using its certificates instead of
a PSK. You can manually provision an individual AP with a full set of provisioning parameters, or
simultaneously provision an entire group of APs by defining a provisioning profile which contains a smaller
set of provisioning parameters that can be applied the entire AP group. When you manually provision an
individual AP to use certificated-based authentication, you must connect that AP to the controller before
you can define its provisioning settings.
l Use Pre-Shared Key (PSK) authentication to provision an individual remote AP or a group of remote
APs using an Internet Key Exchange Pre-Shared Key (IKE PSK).
RAP Configuration
The steps to configure a remote AP using the WebUI are similar to the steps described inConfiguring an AP
using the WebUI, although some additional steps are required.
1. In the Configuration > Wireless > AP Installation > Provisioning window, select Yes for the Remote
AP option.
2. In the Remote IP Authentication Method section, select either Pre-shared key or certificate
authentication type. The Pre-shared key option requires you to perform the following additional steps:
a. Enter and confirm the pre-shared key (IKE PSK).
b. In the User credential assignment section, specify if you want to use a Global User Name/password or
a Per AP User Name/Password.
n If you use the Per AP User Names/Passwords option, each RAP is given its own user name and
password.
n If you use the Global User Name/Password option, all selected RAPs are given the same (shared) user
name and password.
c. Enter the user name, and enter and confirm the password. If you want the controller to automatically
generate a user name and password, select Use Automatic Generation, then click Generate by the
User Name and Password fields.
3. If you are provisioning a remote AP model that support USB modems, you must complete the fields in the
USB Settings section. USB settings will not appear in the Provisioning tab unless you are provisioning an
AP that support these features. Check the USB Parameters checkbox and configure the additional cellular
USB settings described in Table 115.
Configuring a Mesh AP
The steps to configure a remote AP using the WebUI are similar to the steps described inConfiguring an AP
using the WebUI, although some additional steps are required.
1. Define and configure the mesh cluster profile.
2. Define and configure the mesh radio profile