Installation guide

Appendix B: Adaptive AP B - 13
5. Select the Enable AP-Switch Tunnel option to allow AAP configuration data to reach a
switch using a secure VPN tunnel.
6. If using IPSec as the tunnel resource, enter the IPSec Passkey to ensure IPSec connectivity.
7. Click Apply to save the changes to the AAP setup.
B.4.1.2 Adopting an Adaptive AP Using a Configuration File
To adopt an AAP using a configuration file:
1. Refer to “B.4.1.1 Adopting an Adaptive AP Manually” and define the AAP switch connection
parameters.
2. Export the AAP’s configuration to a secure location.
Either import the configuration manually to other APs or the same AP later (if you elect to
default its configuration). Use DHCP option 186 and 187 to force a download of the
configuration file during startup (when it receives a DHCP offer).
B.4.1.3 Adopting an Adaptive AP Using DHCP Options
An AAP can be adopted to a wireless switch by providing the following options in the DHCP Offer:
B.4.2 Switch Configuration
A RFS7000 (running firmware version 1.1 or later) requires an explicit adaptive configuration to adopt
an access point (if IPSec is not being used for adoption). The same licenses currently used for AP300
adoption can be used for an AAP.
Disable the switch’s Adopt unconfigured radios automatically option and manually add AAPs
requiring adoption, or leave as default. In default mode, any AAP adoption request is honored until
the current switch license limit is reached.
To disable automatic adoption on the switch:
1. Select Network > Access Port Radios from the switch main menu tree.
2. Select the Configuration tab (should be displayed be default) and click the Global
Settings button.
NOTE The manual AAP adoption described above can also be conducted using
the access point’s CLI interface using the admin(system.aapsetup)>
command.
Option Data Type Value
189 String <Switch IP Address or Range of IP addresses separated by [, ; <space>]>
190 String <Fully qualified Domain Name for the Wireless Switch>
191 String <Hashed IPSec Passkey - configure on 1 AP and export to get hashed key>
192 String <Value of "1" denotes Non-IPSec Mode and "2" denotes IPSec Mode>
NOTE Options 189 and 192 are mandatory to trigger adoption using DHCP
options. Unlike an AP300, option 189 alone won’t work. These options can
be embedded in Vendor Specific Option 43 and sent in the DHCP Offer.