Dell PowerConnect W Clearpass 100 Software Podręcznik Użytkownika

AOS-W Instant6.2.1.0-3.3User Guide

1010 | ContentsDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideUnderstanding Encryption Types 120WPA and WPA2 120Recommended Authenti

100100 | Uplink ConfigurationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guidel Configuring Uplink Preferences and Switching on page 1

(Instant Access Point)(cellular-uplink-profile)# usb-tty <tty-port>(Instant Access Point)(cellular-uplink-profile)# usb-init <Initialization-

102102 | Uplink ConfigurationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideSupported Country list----------------------Country list

configured :NO(Instant Access Point)# show wifi-uplink configESSID :Cipher Suite :Passphrase :Band :(Instant Access Point)# show wifi-uplink auth log-

104104 | Uplink ConfigurationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideCHAP secret 8e87644deda9364100719e017f88ebceTo view the

2. Under Uplink Priority List, select the uplink, and click the icons at the bottom of the Uplink Priority List section,to increase or decrease the pr

106106 | Uplink ConfigurationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guidel If the current uplink is Ethernet and the VPN connecti

Instant Access Point# show uplink statusUplink preemption :enableUplink enforce :noneEthernet uplink bond0 :DHCPUplink Table------------Type State Pri

0511361-01 | April2013 108

AOS-W Instant 6.2.1.0-3.3| User Guide Wired Profiles | 109Chapter 12Wired ProfilesThis chapter describes the following procedures:l Configuring a Wire

Configuring MAC and 802.1X Authentication for a Wireless Network Profile 133In the Instant UI 134In the CLI 134Configuring MAC and 802.1X Authenticati

110110 | Wired ProfilesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guideb. Primary Usage — Select Employee or Guest.c. Speed/Duplex —

l Virtual Controller Assigned: Select this option to allow the Virtual Controller to assign IP addresses tothe wired clients. When the Virtual Control

112112 | Wired ProfilesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideIn the Instant UITo configure security parameters for an emplo

authentication are added to the user database. For information about adding a user and customizing a splashpage, see Configuring Users on page 129 and

114114 | Wired ProfilesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guidel Select the Assign pre-authentication role check box to add a

l A direct wired ISP connection or a wireless uplink.l One or more DHCP pools for private VLANs.l One downlink port configured on a private VLAN witho

116116 | Wired ProfilesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideIn the CLITo configure Ethernet bridging:Instant Access Point#

AOS-W Instant 6.2.1.0-3.3| User Guide Authentication | 117Chapter 13AuthenticationThis chapter provides the following information:l Understanding Auth

118118 | AuthenticationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guideauthentication is attempted. If 802.1X authentication is succe

Supported Authentication ServersBased on the security requirements, you can configure internal or external RADIUSservers. This section describesthe f

1212 | ContentsDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideIn the Instant UI 146In the CLI 146Configuring WISPr Authentication 14

120120 | AuthenticationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guidel EAP-PEAP (MSCHAPv2)— EAP-PEAP is an 802.1X authentication me

feature set.The following table summarizes the differences between the two certifications:Certification Authentication EncryptionWPA l PSKl IEEE 802.1

122122 | AuthenticationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideAs shown in the following figure, the information sent by the

Figure 40 802.1X Authentication using cached credentialsThe following figure illustrates a scenario where the CPPM link is available again. The OAW-IA

124124 | AuthenticationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideYou can enable authentication survivability for a wireless net

Parameter DescriptionAuth portEnter the authorization port number of the external RADIUS server. The default portnumber is 1812.Accounting portEnter t

126126 | AuthenticationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideParameter DescriptionFilterSpecify the filter to apply when se

To configure an LDAP server:(Instant Access Point)(config)# wlan ldap-server <profile-name>(Instant Access Point)(LDAP Server <profile-name&g

128128 | AuthenticationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guide2. Select the Admin tab. The Admin tab details are displayed.

(Instant Access Point) (config)# mgmt-auth-server-local-backup(Instant Access Point) (config)# end(Instant Access Point) (config)# commit applyConfigu

Configuring Source-Based Routing 160Examples for Access Rules 160Allow POP3 Service to a Particular Server 160Allow TCP Service to a Particular Networ

130130 | AuthenticationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guide3. Enter the username in the Username text box.4. Enter the pa

Configuring 802.1X authentication for a Wireless Network ProfileYou can configure 802.1X authentication for a wireless network profile in the Instant

132132 | AuthenticationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guide1. Click the Wired link under More at the top right corner of

In the CLITo configure a WLAN SSID profile in the CLI:(Instant Access Point)(config)# wlan ssid-profile <SSID-Name>(Instant Access Point)(SSID P

134134 | AuthenticationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideIn the Instant UITo configure both MAC and 802.1X authenticati

(Instant Access Point)(config)# wired-port-profile <profile-name>(Instant Access Point)(wired ap profile <profile-name>)# type {<employ

136136 | AuthenticationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guidea. Select any of the following from the Splash page type drop-

Configuring Internal Captive Portal Authentication for a Wired ProfileYou can configure internal captive portal authentication when adding or editing

138138 | AuthenticationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideCustomizing a Splash Page DesignA splash page is a web page th

Configuring External Captive Portal Authentication for a Network ProfileYou can configure external captive portal authentication for a network profile

1414 | ContentsDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideUser Role 173VLANs Created for an SSID 174Configuring VLAN Derivation

140140 | AuthenticationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideParameter DescriptionDisable if uplink typeisSelect the type o

(Instant Access Point)(External Captive Portal)# server-fail-through(Instant Access Point)(External Captive Portal)# end(Instant Access Point)# commit

142142 | AuthenticationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guideb. Enter /page_name.php in the URL field. This URL must corres

Figure 45 Captive Portal Rule for Internal Acknowledged Splash PageFigure 46 Captive Portal Rule for External Authentication Text Splash PageField Des

144144 | AuthenticationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideField Descriptionasks for user credentials or email, depending

l If the captive portal splash page type is Internal-Acknowledged or External-Authentication Text and MACauthentication is enabled, a server configura

146146 | AuthenticationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideConfiguring Walled Garden AccessOn the Internet, a walled gard

These smart clients enable client authentication and roaming between hotspots by embedding iPass GenericInterface Specification (GIS)redirect,authenti

148148 | AuthenticationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guide9. Enter the name of the Hotspot location in the Location Name

3. Under Dynamic Blacklisting:4. For Auth failure blacklist time, duration in seconds after which the clients that exceed the authentication failureth

In the CLI 190Adaptive Radio Management 191ARM Overview 191Channel or Power Assignment 191Voice Aware Scanning 191Load Aware Scanning 191Band Steering

150150 | AuthenticationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guide(Instant Access Point)(config)# blacklist-client <MAC-Addre

Figure 48 Maintenance Window: Certificates Tab3. To upload a certificate, click Upload New Certificate. The New Certificate window appears.4. Select t

152152 | AuthenticationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideFigure 49 Loading Certificate via OmniVista 36003. Select the

The Virtual Controller Certificate section displays the certificates (CA cert and Server).5. Click Save to apply the changes only to OmniVista 3600. C

0511361-01 | April2013 154

AOS-W Instant 6.2.1.0-3.3| User Guide Roles and Policies | 155Chapter 14Roles and PoliciesThis chapter describes the procedures for configuring user r

156156 | Roles and PoliciesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideService Descriptioncustom Available options are TCP, UDP,

Service Descriptionpptp Point-to-Point Tunneling Protocolrtsp Real Time Streaming Protocolsccp Skinny Call Control Protocolsip Session Initiation Prot

158158 | Roles and PoliciesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideQoS for Microsoft Office OCS and Apple FacetimeVoice and v

Field DescriptionRule type Select a rule type, for example Access control from the drop-down list.Action Select any of following attributes:l Select A

1616 | ContentsDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideIn the CLI 210Configuring Enterprise Domains 210In the Instant UI 210I

160160 | Roles and PoliciesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideYou can also configure source based routing to allow clien

a. Select Allow from the Action drop-down list.b. Select pop3 from the Service drop-down list.c. Select to a particular server from the Destination dr

162162 | Roles and PoliciesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guide1. Select an existing wireless or wired profile. Depending

When the protocols for ALG are Disabled the changes do not take effect affect until the existing usersessions are expired. Reboot the OAW-IAP and the

164164 | Roles and PoliciesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guide3. To configure protection against security attacks, selec

arp packet counter 0drop bad arp packet counter 0dhcp response packet counter 0fixed bad dhcp packet counter 0send arp attack alert counter 0send dhcp

166166 | Roles and PoliciesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideConfiguring Machine and User Authentication RolesYou can a

Understanding Role Assignment RulesMAC-Address AttributeThe first three octets in a MAC address are known as Organizationally Unique Identifier (OUI),

168168 | Roles and PoliciesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideAccess tab.2. Under Role Assignment Rules, click New.3. Se

l The user VLANs can be derived from the default roles configured for 802.1X authentication or MACauthentication.l After client authentication, the VL

VPN Configuration 226Whitelist Database Configuration 226Switch Whitelist Database 226External Whitelist Database 226VPN Local Pool Configuration 227R

170170 | Roles and PoliciesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideSupported VSAsInstant supports the following VSAs:l AP-Gro

l Alcatel-Lucent-Mdps-Device-Productl Alcatel-Lucent-Mdps-Device-Seriall Alcatel-Lucent-Mdps-Device-Udidl Alcatel-Lucent-Mdps-Device-Versionl Alcatel-

172172 | Roles and PoliciesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guidel Framed-Routel Framed-Routingl Full-Namel Groupl Group-Na

l Tunnel-Connection-Idl Tunnel-Medium-Typel Tunnel-Preferencel Tunnel-Private-Group-Idl Tunnel-Server-Auth-Idl Tunnel-Server-Endpointl Tunnel-Typel Us

174174 | Roles and PoliciesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideVLANs Created for an SSIDIf the VSA and VLAN derivation ru

Figure 56 VLAN Assignment Rule Based on DHCP Optionl Operator— Select an operator for matching the string.l String— Enter the string to match.l VLAN—

176176 | Roles and PoliciesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guide5. Under the Access rules, click New.6. Select the Rule ty

Figure 58 User VLAN Role Assignment4. Click OK.In the CLITo assign VLAN role to a WLAN profile:(Instant Access Point)(config)# wlan ssid-profile <S

0511361-01 | April2013 178

AOS-W Instant 6.2.1.0-3.3| User Guide Mobility and Client Management | 179Chapter 15Mobility and Client ManagementThis chapter provides the following

1818 | ContentsDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideCPPM and ClearPass Guest Features 245AirGroup Components 245Configurin

180180 | Mobility and Client ManagementDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideController IP addresses, the client is identif

Figure 60 L3 Mobility Window1. Select Enabled from the Home agent load balancing drop-down list. By default, home agent load balancing isdisabled.2. C

0511361-01 | April2013 182

AOS-W Instant 6.2.1.0-3.3| User Guide Spectrum Monitor | 183Chapter 16Spectrum MonitorThis chapter provides the following information:l Understanding

184184 | Spectrum MonitorDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideFigure 61 Device ListDevice Summary and Channel Information

Non Wi-FiInterfererDescriptionBluetooth Any device that uses the Bluetooth protocol to communicate in the 2.4 GHz band is classifiedas aBluetoothdevic

186186 | Spectrum MonitorDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideNon Wi-FiInterfererDescriptionGenericInterfererAny non-frequ

Column DescriptionMax Interference(dBm)Signal strength of the non Wi-Fi device that has the highest signal strength.SNIR (db) The ratio of signal stre

188188 | Spectrum MonitorDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideColumn DescriptionQuality(%) Current relative quality of sel

Instant Access Point (RF dot11 g Radio Profile)# spectrum-monitorTo configure 5 GHz radio settings:(Instant Access Point)(config)# rf dot11a-radio-pro

Configuring H2QP Profiles 258Configuring an Operator-friendly Profile 258Configuring a Connection Capability Profile 259Configuring an Operating Class

190190 | Spectrum MonitorDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guided. Click OK.In the CLITo convert anOAW-IAP to a spectrum mo

AOS-W Instant 6.2.1.0-3.3| User Guide Adaptive Radio Management | 191Chapter 17Adaptive Radio ManagementThis chapter provides the following informatio

192192 | Adaptive Radio ManagementDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guidethe Virtual Controller determines the distribution

ARM MetricsARM computes coverage and interference metrics for each valid channel and chooses the best performing channeland transmit power settings fo

194194 | Adaptive Radio ManagementDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideParameter DescriptionPrefer 5 GHzSelectthis option

6. For Access Point Control, specify the following parameters:Parameter DescriptionCustomize ValidChannelsSelect this check box to customize valid cha

196196 | Adaptive Radio ManagementDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guide(Instant Access Point)(ARM)# spectrum-load-balancin

165 enable36+ enable44+ enable52+ disable60+ disable149+ enable157+ enableConfiguring Radio Settings for an OAW-IAPYou can configure 2.4 GHz and 5 GHz

198198 | Adaptive Radio ManagementDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideParameter DescriptionChannel switchannouncementcoun

Background Spectrum Monitor:disableStandalone Spectrum Band:5ghz-upperAOS-W Instant 6.2.1.0-3.3| User Guide Adaptive Radio Management | 199

Copyright© 2013 Alcatel-Lucent. All rights reserved.Specifications in this manual are subject to change without notice.Originated in the USA.AOS-W, Al

2020 | ContentsDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideConfiguring SNMP Traps 274In the Instant UI 274In the CLI 274Configuri

0511361-01 | April2013 200

AOS-W Instant 6.2.1.0-3.3| User Guide Intrusion Detection | 201Chapter 18Intrusion DetectionThe Intrusion Detection System (IDS) is a feature that mon

202202 | Intrusion DetectionDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guidel Windows Vistal Windows Serverl Windows XPl Windows MEl

Figure 67 Wireless Intrusion Protection: DetectionThe following table describes the detection policies enabled in the Infrastructure Detection Custom

204204 | Intrusion DetectionDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideDetection Level Detection Policyl Detect Malformed Frame—

Figure 68 Wireless Intrusion Protection: DetectionThe following table describes the detection policies that are enabled in the Infrastructure Protecti

206206 | Intrusion DetectionDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideContainment MethodsYou can enable wired and wireless cont

(Instant Access Point)(IDS)# wireless-containment <type>(Instant Access Point)(IDS)# wired-containment(Instant Access Point)(IDS)# detect-ap-spo

0511361-01 | April2013 208

AOS-W Instant 6.2.1.0-3.3| User Guide Content Filtering | 209Chapter 19Content FilteringThis chapter provides the following information:l Content Filt

AOS-W Instant 6.2.1.0-3.3| User Guide About this Guide | 21About this GuideThis User Guide describes the features supported by AOS-W Instant and provi

210210 | Content FilteringDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guide(Instant Access Point)(SSID Profile <name>)# content-

In the Instant UITo configure OpenDNS credentials:1. Click More> Services>OpenDNS. The OpenDNS tab contents are displayed.2. Enter the Username

0511361-01 | April2013 212

AOS-W Instant 6.2.1.0-3.3| User Guide DHCP Configuration | 213Chapter 20DHCP ConfigurationThis chapter provides the following information:l Understand

214214 | DHCP ConfigurationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideConfiguring DHCP ScopesYou can configure Distributed,L2, D

Figure 71 New DHCP Scope: Distributed DHCP Mode3. Based on type of distributed DHCP scope, configure the following parameters:Name DescriptionNameEnte

216216 | DHCP ConfigurationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideName Descriptionperformed to ensure that the specified ran

(Instant Access Point)(DHCP Profile<profile-name>)# option <type> <value>(Instant Access Point)(DHCP Profile<profile-name>)# e

218218 | DHCP ConfigurationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideName DescriptionNetwork Specify the network to use.Net Mas

In the CLITo configure Local DHCP scope:(Instant Access Point)(config)# ip dhcp <profile-name>(Instant Access Point)(DHCP Profile<profile-nam

2222 | About this GuideDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideIndicates a risk of damage to your hardware or loss of data.In

220220 | DHCP ConfigurationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guide7. Enter the mask in the Mask text box.To provide simultan

AOS-W Instant 6.2.1.0-3.3| User Guide VPN Configuration | 221Chapter 21VPN ConfigurationThis chapter describes the following VPN configuration procedu

222222 | VPN ConfigurationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guide3. If you select GRE from the Protocol drop-down list, then

To view VPN status:Instant Access Point# show vpn statusprofile name:default--------------------------------------------------current using tunnel :un

224224 | VPN ConfigurationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideFigure 74 Tunneling— Routing3. Update the following paramet

AOS-W Instant 6.2.1.0-3.3| User Guide IAP-VPN Configuration | 225Chapter 22IAP-VPN ConfigurationAlcatel-Lucent switches provide an ability to terminat

226226 | IAP-VPN ConfigurationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideWhen an OAW-IAP registers with the switch and is config

e. In the Settings tab, select the policy condition, and Edit Profile...f. In the Advanced tab, select Vendor Specific, and click Add to add new vend

228228 | IAP-VPN ConfigurationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideParameter DescriptionBranch Key Key for the branch, whi

AOS-W Instant 6.2.1.0-3.3| User Guide OmniVista 3600Integration and Management | 229Chapter 23OmniVista 3600Integration and ManagementThis chapter p

AOS-W Instant 6.2.1.0-3.3| User Guide About AOS-W Instant | 23Chapter 4About AOS-W InstantThis chapter provides the following information:l AOS-W Inst

230230 | OmniVista 3600Integration and Man-agementDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideFigure 75 Template-based Configura

Figure 76 Adding anOAW-IAP in VisualRFConfiguring OmniVista 3600Before configuring the OmniVista 3600, ensure that you have the following information

232232 | OmniVista 3600Integration and Man-agementDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideFigure 77 Instant and DHCP options

Figure 78 AOS-W Instant and DHCP options for OmniVista 3600: Predefined Options and Values5. Navigate to Server Manager and select Server Options in t

234234 | OmniVista 3600Integration and Man-agementDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideFigure 79 AOS-W Instant and DHCP o

Figure 81 AOS-W Instant and DHCP options for OmniVista 3600— 043 Vendor Specific InfoThis creates a DHCP option 60 and 43 on a global basis. You can d

236236 | OmniVista 3600Integration and Man-agementDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guidethe DHCP clients information about

Figure 84 OmniVista 3600 — New GroupFigure 85 OmniVista 3600 —MonitorConfiguring Organization StringThe Organization string is a set of colon-separate

238238 | OmniVista 3600Integration and Man-agementDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guidel AMP User— "Org Admin"

5. Enter the shared key in the Shared key text box and reconfirm. This shared key is used for configuring the firstAP in the Alcatel-LucentAOS-W Inst

2424 | About AOS-W InstantDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guidel OAW-IAP-IL (Israel)l OAW-IAP-ROW (Rest of World)For infor

0511361-01 | April2013 240

AOS-W Instant 6.2.1.0-3.3| User Guide AirGroup Configuration | 241Chapter 24AirGroup ConfigurationThis chapter provides the following information:l Ai

242242 | AirGroup ConfigurationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideFigure 87 - AirGroup ArchitectureAirGroup is not suppo

Figure 88 AirGroup Enables Personal Device SharingAirGroup SolutionIn large universities and enterprise networks, it is common for Bonjour-capable dev

244244 | AirGroup ConfigurationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideFeatures Alcatel-LucentAOS-W Instant Deployment Model

l Allow or block mDNS services based on user roles.l Allow or block mDNS services based on VLANs.l Match users’ devices, such as iPads, to their close

246246 | AirGroup ConfigurationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideFigure 90 AirGroup Configuration3. Select the Enable A

(Instant Access Point)(airgroup)# cppm enforce-registration(Instant Access Point)(airgroup)# cppm-server <server>(Instant Access Point)(airgroup

248248 | AirGroup ConfigurationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideThe AirGroup configuration with CPPM involves the foll

AOS-W Instant 6.2.1.0-3.3| User Guide Real Time Location Server Configuration | 249Chapter 25Real Time Location Server ConfigurationThis chapter descr

Feature DescriptionDistributed DHCP for IAP-VPNThis feature allows you to configure the DHCP address assignment for the branchesconnected to the corpo

250250 | Real Time Location Server Con-figurationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guide(Instant Access Point)(config)# airw

AOS-W Instant 6.2.1.0-3.3| User Guide Hotspot Profiles | 251Chapter 26Hotspot ProfilesThis chapter describes the following procedures:l Understanding

252252 | Hotspot ProfilesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideAn AP can include its service provider Organization Identifi

l Chargeable Public network—This network provides access to the Internet based on payment. For example, asubscription-based Internet access in a coffe

254254 | Hotspot ProfilesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guidel business-professional-officel business-research-and-develo

l 3GPP Profilel IP Address availability Profilel Domain Name Profilel Operator Friendly Name Profilel Connection Capability Profilel Operating Class P

256256 | Hotspot ProfilesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideYou can specify any of the authentication values for the nai

l factory-or-industriall institutionall mercantilel outdoorl reservedl residentiall storagel unspecifiedl Utility-Miscl VehicularYou can specify any o

258258 | Hotspot ProfilesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideConfiguring an IP Address Availability ProfileYou can config

Configuring a Connection Capability ProfileYou can configure a Connection Capability profile to define information such as the hotspot IP protocols an

2626 | About AOS-W InstantDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideFeature DescriptionConfigurable accountingmodes for guest u

260260 | Hotspot ProfilesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideConfiguring a Hotspot ProfileYou can configure a hotspot pro

Parameter DescriptionasraEnable the Additional Steps Required for Access (asra)to indicate if additional steps arerequired for authentication. When e

262262 | Hotspot ProfilesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideAssociating a Hotspot Profile with an Advertisement ProfileT

AOS-W Instant 6.2.1.0-3.3| User Guide OAW-IAP Management | 263Chapter 27OAW-IAP ManagementThis section provides information on the following procedure

264264 | OAW-IAP ManagementDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guide1. Navigate to the Maintenance > Configuration> page

A mesh point cannot be converted to Remote AP, because mesh access points do not support VPNconnection.An OAW-IAP can be converted to a Campus AP and

266266 | OAW-IAP ManagementDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideFigure 92 - Maintenance — Convert TabFigure 93 - Convert o

Converting an OAW-IAP to Campus APTo convert an OAW-IAP to Campus AP, do the following:1. Click the Maintenance link in the Instant main window.2. Cli

268268 | OAW-IAP ManagementDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guide3. Select Standalone AP from the drop-down list.4. Select

Figure 96 - Rebooting the OAW-IAP3. In the OAW-IAP list, select the OAW-IAP that you want to reboot and click Reboot selected Access Point. Toreboot a

AOS-W Instant 6.2.1.0-3.3| User Guide Initial Configuration | 27Chapter 5Initial ConfigurationThis chapter describes the following procedures:l Settin

0511361-01 | April2013 270

AOS-W Instant 6.2.1.0-3.3| User Guide Monitoring Devices and Logs | 271Chapter 28Monitoring Devices and LogsThis chapter provides the following inform

272272 | Monitoring Devices and LogsDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideConfiguring SNMPThis section describes the proced

Figure 98 SNMPv3 User4. Enter the name of the user in the Name text box.5. Select the type of authentication protocol from the Auth protocol drop-down

274274 | Monitoring Devices and LogsDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideConfiguring SNMP TrapsAOS-W Instant supports the

(Instant Access Point)# commit applyConfiguring a Syslog ServerYou can specify a syslog server for sending syslog messages to the external servers eit

276276 | Monitoring Devices and LogsDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideThe following table describes the logging levels

4. Click Run.Support CommandsYou can view the following information for each access point in the Alcatel-LucentAOS-W Instant network using thesupport

278278 | Monitoring Devices and LogsDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guidel AP Datapath Session Table— Displays the datapat

l AP Mesh Neighbors— Displays the mesh link neighbors of the OAW-IAP.l AP Monitor Active Laser Beams—Displays the active laser beam sources for the OA

2828 | Initial ConfigurationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideAssigning a Static IPTo assign a static IP to an OAW-IAP:

280280 | Monitoring Devices and LogsDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guidel VC AMP Data Sent—Displays information about the

AOS-W Instant 6.2.1.0-3.3| User Guide Regulatory Domain | 281Chapter 29Regulatory DomainThe IEEE 802.11/b/g/n Wi-Fi networks operate in the 2.4 GHz sp

282282 | Regulatory DomainDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideCode Country NameLU LuxembourgNO NorwayFI FinlandDK Denmark

Code Country NameIE IrelandKW KuwaitLI LiechtensteinLT LithuaniaMX MexicoMA MoroccoNZ New ZealandPL PolandPR Puerto RicoSK Slovak RepublicSI SloveniaT

284284 | Regulatory DomainDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideCode Country NameRU RussiaEG EgyptTT Trinidad and TobagoTR

Code Country NameLK Sri LankaSV El SalvadorTN TunisiaPK Islamic Republic of PakistanQA QatarDZ AlgeriaAOS-W Instant 6.2.1.0-3.3| User Guide Regulatory

AOS-W Instant 6.2.1.0-3.3| User Guide ClearPass Guest Setup | 286ClearPass Guest SetupTo configure ClearPass Guest:1. On ClearPass Guest, navigate to

287287 | ClearPass Guest SetupDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideFigure 103 Configure AirGroup Services Controller Setti

Figure 105 Create an AirGroup Administrator4. In this example, the password used is test123. Click Add.5. Now click Add User, and create an AirGroup O

289289 | ClearPass Guest SetupDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideFigure 107 Local Users UI Screen7. Navigate to the Clea

Disabling the Provisioning Wi-Fi NetworkThe provisioning network is enabled by default. AOS-W Instant provides the option to disable the provisioningn

9. Click Register Shared Device.TestingTo verify the setup:1. Disconnect your AppleTV and OSX Mountain Lion/iOS 6 devices if they were previously conn

AOS-W Instant 6.2.1.0-3.3| User Guide Terminology | 291TerminologyAcronyms and AbbreviationsThe following table lists the abbreviations used in this u

292292 | TerminologyDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideAbbreviation ExpansionNS Name ServerNTP Network Time ProtocolPEAP

0511296-01 | April2013 293GlossaryThe following table lists the terms and their definitions used in this guide.Term Definition802.11 An evolving famil

0511296-01 | April2013 294Term Definitionband A specified range of frequencies of electromagnetic radiation.Daylight Saving Time Daylight saving time

0511296-01 | April2013 295Term Definitionl Midspan— A device can sit between the switch and APsThe choice of endspan or midspan depends on the capabil

0511296-01 | April2013 296Term Definitionwireless service provider A company that offers transmission services to users of wireless devicesthrough rad

AOS-W Instant 6.2.1.0-3.3| User Guide Contents | 3ContentsContents 3About this Guide 21Intended Audience 21Related Documents 21Conventions 21Contactin

3030 | Initial ConfigurationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideWhen you use a provisioning Wi-Fi network to connect to t

The configure terminal command allows you to enter the basic configuration mode and the command prompt isdisplayed as follows:(Instant Access Point)(c

3232 | Initial ConfigurationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideSequence-Sensitive Command Corresponding no commandopendn

AOS-W Instant 6.2.1.0-3.3| User Guide AOS-W Instant User Interface | 33Chapter 6AOS-W Instant User InterfaceThe AOS-W Instant main window consists of

3434 | AOS-W Instant User InterfaceDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideNetworks TabThis tab displays a list of Wi-Fi netw

Clients TabThis tab displays a list of clients that are connected to the Instant network. The client names appear as links. Theexpanded view displays

3636 | AOS-W Instant User InterfaceDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideSystemThis link displays the System window. The S

Figure 4 System Window - Default ViewRFThe RFlink displays a window for configuring Adaptive Radio Management (ARM) and Radio features.l ARM — Allows

3838 | AOS-W Instant User InterfaceDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideFigure 5 RF Window - Default ViewSecurityThe Secur

Figure 6 Security Window - Default ViewMaintenanceThe Maintenance link displays a window that allows you to maintain the Wi-Fi network. The Maintenanc

44 | ContentsDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideAOS-W Instant User Interface 33Banner 33Search 33Tabs 33Networks Tab 34A

4040 | AOS-W Instant User InterfaceDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideFigure 7 Maintenance Window - Default ViewHelpThe

Figure 8 VPN - Default ViewIDSThe IDSwindow allows you to configure wireless intrusion detection and protection levels. The following figuresshow the

4242 | AOS-W Instant User InterfaceDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideFigure 10 IDS Window: Intrusion ProtectionFor more

l RTLS — Allows you to integrate OmniVista 3600 Management platform, Ekahau Real-Time Location Server andNearbuy Real Time Location Server with AOS-W

4444 | AOS-W Instant User InterfaceDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideSupportThe Support consists of the following field

InfoThe Info section displays the configuration information of the Virtual Controller by default. On selecting the NetworkView tab, the monitoring pan

4646 | AOS-W Instant User InterfaceDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideName Descriptionl Clients — Number of clients asso

Icon Name Description3 UtilizationiconDisplays the radio utilization rate of the OAW-IAPs. Depending on the percentage of utilization,the color of the

4848 | AOS-W Instant User InterfaceDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideFigure 17 Frames GraphFigure 18 Speed GraphFigure

Figure 20 Usage Trends Section in the Monitoring PaneThe following table describes the graphs displayed in the Network view:Graph Name Description Mon

Language 58OmniVista 3600 Setup 58Pause/Resume 58Views 58Basic Configuration Procedures 61Updating IP Address of an OAW-IAP 61In the Instant UI 61In t

5050 | AOS-W Instant User InterfaceDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideGraphNameDescription Monitoring ProcedureNeighbori

GraphNameDescription Monitoring ProcedureTo see an enlarged view, click the graph.The enlarged view provides Last,Minimum, Maximum, and Averagestatist

5252 | AOS-W Instant User InterfaceDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideGraphNameDescription Monitoring Proceduretraffic i

Mobility information about the client is reset each time it roams from one OAW-IAP to another.SpectrumThe spectrum link (in the Access Point view) dis

5454 | AOS-W Instant User InterfaceDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guidel Fault HistoryType of Alert Description Informati

Figure 23 Fault HistoryFigure 24 Active FaultsThe following table displays a list of alerts that are generated on the Alcatel-LucentAOS-W Instant net

5656 | AOS-W Instant User InterfaceDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideTypeCodeDescription Details Corrective Actions1001

n Channel— Displays the channel in which the foreign AP is operating.n Type— Displays the Wi-Fi type of the foreign AP.n Last seen— Displays the time

5858 | AOS-W Instant User InterfaceDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guidel IP — Displays the IP address of the AirGroup ser

l Virtual Controller view— The Virtual Controller view is the default view. This view allows you to monitor theInstant network. This view allows you t

66 | ContentsDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideRemoving an OAW-IAP from the Network 68Configuring a Preferred Band 68In

0511361-01 | April2013 60

AOS-W Instant 6.2.1.0-3.3| User Guide Basic Configuration Procedures | 61Chapter 7Basic Configuration ProceduresThis chapter describes the following b

6262 | Basic Configuration ProceduresDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideFigure 28 Configuring OAW-IAP Settings3. Select

In the CLITo change the name:(Instant Access Point)# hostname <system-name>Updating Location Details of an OAW-IAPYou can update the physical lo

6464 | Basic Configuration ProceduresDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideThe following table lists gain values supported

OAW-IAPs joining the network need to synchronize their software with the version running on the Virtual Controller,and if the new OAW-IAP belongs to a

6666 | Basic Configuration ProceduresDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideFigure 29 Firmware Upgrade Window2. Under Manual

Image Upgrade Progress----------------------Mac IP Address AP Class Status Image Info Error Detail--- --------- -------- ------ ---------- -----------

6868 | Basic Configuration ProceduresDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guide1. In the Access Points tab, click the New link.

5. Select the Adaptive radio management assigned option under the bands that are applicable to the OAW-IAPconfiguration.6. Click OK.Configuring Radio

Wireless Network Profiles 79Understanding Wireless Network Profiles 79Network Types 79Configuring WLAN Settings for an SSID Profile 80In the Instant U

7070 | Basic Configuration ProceduresDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideConfiguring Uplink for an OAW-IAPInstant support

3. Select a time zone from the Timezone drop-down list. The time zone indicates the time returned by the NTPserver.You can enable daylight saving time

0511361-01 | April2013 72

AOS-W Instant 6.2.1.0-3.3| User Guide Virtual Controller Configuration | 73Chapter 8Virtual Controller ConfigurationThis chapter provides the followin

7474 | Virtual Controller ConfigurationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideVirtual Controller IP Address ConfigurationYou

AOS-W Instant 6.2.1.0-3.3| User Guide Mesh OAW-IAP Configuration | 75Chapter 9Mesh OAW-IAP ConfigurationThis chapter provides the following informatio

7676 | Mesh OAW-IAP ConfigurationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideThe mesh points authenticate to the mesh portal and

The OAW-IAPs in US, JP, or IL regulatory domain which are in factory default state scan for severalminutes after booting. An OAW-IAP mesh point in fac

0511361-01 | April2013 78

AOS-W Instant 6.2.1.0-3.3| User Guide Wireless Network Profiles | 79Chapter 10Wireless Network ProfilesThis chapter provides the following information

88 | ContentsDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideDeleting a WLAN SSID Profile 94Uplink Configuration 95Understanding Upli

8080 | Wireless Network ProfilesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideConfiguring WLAN Settings for an SSID ProfileYou can

l Specify the DTIM interval. The DTIM interval indicates the delivery traffic indication message (DTIM)period in beacons, which can be configured for

8282 | Wireless Network ProfilesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guidel Voice WMM share — Allocates bandwidth for voice tra

(Instant Access Point)(SSID Profile<name>)# max-clients-threshold <number-of-clients>(Instant Access Point)(SSID Profile<name>)# end

8484 | Wireless Network ProfilesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guide2. Select any for the following options for Client IP

l Configuring Security Settings for Guest NetworkIf you are creating a new SSID profile, configure the WLANand VLAN settings before defining security

8686 | Wireless Network ProfilesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guidel Dynamic WEP with 802.1X2. If you do not want to use

l Perform MAC authentication before 802.1X — Select this check box to use 802.1X authentication onlywhen the MAC authentication is successful.l MAC au

8888 | Wireless Network ProfilesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guide3. To configure MAC authentication, set MAC authentic

Figure 34 Security Tab: OpenTo configure settings for the open security level:1. To enable MAC authentication, select Enabled from the MAC authenticat

Configuring Wired Settings 109In the Instant UI 109In the CLI 110Configuring VLAN for a Wired Profile 110In the Instant UI 110In the CLI 111Configurin

9090 | Wireless Network ProfilesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guide(Instant Access Point)(SSID Profile<name>)# opm

(Instant Access Point)(SSID Profile<name>)# wpa-passphrase <WPA_key>(Instant Access Point)(SSID Profile<name>)# radius-accounting(In

9292 | Wireless Network ProfilesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guiden Create access rules for a specific user role. For m

3. Select or clear the Disable SSID check box to disable or enable the SSID. The SSID is enabled by default.4. Click Next or the tab name to move to t

9494 | Wireless Network ProfilesDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideEditing a WLAN SSID ProfileTo edit a WLAN SSID profil

AOS-W Instant 6.2.1.0-3.3| User Guide Uplink Configuration | 95Chapter 11Uplink ConfigurationThis chapter provides the following information:l Underst

9696 | Uplink ConfigurationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideFor more information on uplink configuration procedures, s

You can use PPPoE for your uplink connectivity in both OAW-IAP and IAP-VPN deployments. PPPoE is supportedonly in a single AP deployment.Uplink redund

9898 | Uplink ConfigurationDell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User GuideModem Type Supported 3G Modemsl U301 (Franklin wireless)l

Modem Type Supported 3G Modemsl Huawei E1731 (Airtel-3G (India))l Huawei E3765 (Vodafone (Aus))l Huawei E3765 (T-Mobile (Germany)l Huawei E1552 (SingT