Dell PowerConnect W Clearpass 100 Software Podręcznik Użytkownika Pobierz pdf (Strona 222)

222222 | VPN Configuration

Dell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guide

3. If you select GRE from the Protocol drop-down list, then the packets are sent and received without encryption.

a. Host— Enter the IP address or the fully qualified domain name (FQDN) for the main VPN/GRE endpoint.

a. GRE type — Enter the value for GRE type parameter.

b. Per-AP tunnel — Select Enabled or Disabled from the Per-AP tunnel drop-down list. The administrator can

enable this option to create a GRE tunnel from each OAW-IAP to the VPN/GRE Endpoint rather than the

tunnels created just from the Virtual Controller. When enabled, the traffic to the corporate network is sent

through a Layer-2 GRE tunnel from the OAW-IAP itself and need not be forwarded through the Virtual

Controller.

By default, the Per-AP tunnel option is disabled.

4. If you select IPSec from the Protocol drop-down list, the packets are sent and received with encryption.

a. Enter the IP address or fully qualified domain name for the main VPN/IPSec endpoint in the Primary host

field.

b. Enter the IP address or fully qualified domain name for the backup VPN/IPSec endpoint in the Backup host

field. This entry is optional.

c. Select Enabled from the Preemption drop-down list to allow the VPN tunnel to switch back to the primary

host when it becomes available again. This step is optional.

d. Specify a value in seconds for Hold time. When preemption is enabled and the primary host comes up, the

VPNtunnel switches to the primary host after the specified hold-time. The default value for Hold time is 600

seconds.

e. Select Enabled or Disabled from the Fast failover drop-down list. Enabling the fast failover feature allows

the OAW-IAP to create a backup VPN tunnel to the switch along with the primary tunnel, and maintain both

the primary and backup tunnels separately. If the primary tunnel fails, the OAW-IAP can switch the data

stream to the backup tunnel. This reduces the total failover time to less than one minute.

f. Specify a value in seconds for Secs between test packets. Based on the configured frequency, the OAW-

IAP can verify if an active VPN connection is available. The default value is 5 seconds, which means that the

OAW-IAP will send one packet to the controller at every 5 seconds.

g. Enter a value for Max allowed test packet loss, to define a number for lost packets, after which the IAP can

determine that the VPNconnection is unavailable. The default value is 2.

5. Click Next to continue.

In the CLI

To configure a GRE VPN tunnel:

(Instant Access Point)(config)# gre primary <name>

(Instant Access Point)(config)# gre type <type>

(Instant Access Point)(config)# gre per-ap-tunnel

(Instant Access Point)(config)# end

(Instant Access Point)# commit apply

To configure an IPSec VPN tunnel:

(Instant Access Point)(config)# vpn primary <name>

(Instant Access Point)(config)# vpn backup <name>

(Instant Access Point)(config)# fast-failover

(Instant Access Point)(config)# hold-time <seconds>

(Instant Access Point)(config)# preemption

(Instant Access Point)(config)# vpn monitor-pkt-send-freq <frequency>

(Instant Access Point)(config)# vpn monitor-pkt-lost-cnt <count>

(Instant Access Point)(config)# end

(Instant Access Point)# commit apply

1 2 ... 217 218 219 220 221 222 223 224 225 226 227 ... 295 296

Dell PowerConnect W Clearpass 100 Software Podręcznik Użytkownika Strona 222

Komentarze do niniejszej Instrukcji

Dell PowerConnect W Clearpass 100 Software Podręcznik Użytkownika Strona 222

Komentarze do niniejszej Instrukcji

Powiązane produkty i podręczniki dla Oprogramowanie Dell PowerConnect W Clearpass 100 Software