background image

Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0

  | User Guide

Contents  |  

5

RADIUS Server Authentication with VSA............................................................................. 81

List of supported VSA’s ................................................................................................... 81
Management Authentication Settings.......................................................................... 84

Captive Portal .................................................................................................................................... 85

Internal Captive Portal............................................................................................................. 85

Configuring Internal Captive Portal Authentication when Adding a Guest
Network ............................................................................................................................. 85
Configuring Internal Captive Portal Authentication when Editing a Guest
Network ............................................................................................................................. 86
Configuring Internal Captive Portal with External Radius Server Authentication
when Adding a Guest Network ...................................................................................... 86
Customizing a Splash Page ............................................................................................ 87
Disabling Captive Portal authentication ....................................................................... 88

External Captive Portal ............................................................................................................ 89

Configuring External Captive Portal Authentication when Adding a
Guest Network .................................................................................................................. 89
Configuring External Captive Portal Authentication when Editing a
Guest Network .................................................................................................................. 90

External Captive Portal Authentication via Dell PowerConnect W-ClearPass
GuestConnect............................................................................................................................ 90

Creating a Web Login page in the Dell PowerConnect W-ClearPass
GuestConnect ................................................................................................................... 90
Configuring the RADIUS Server in Instant ................................................................... 91

Mac Authentication ......................................................................................................................... 91

Configuring Mac Authentication............................................................................................ 91

Walled Garden Access.................................................................................................................... 93

Creating Walled Garden Access ........................................................................................... 93

Certificates ........................................................................................................................................ 94

Loading Certificates ................................................................................................................. 94

Chapter 9

Encryption........................................................................................................................... 97

Encryption Types Supported in Dell Instant................................................................................. 97

WEP ............................................................................................................................................ 97
TKIP............................................................................................................................................. 97
AES.............................................................................................................................................. 97

Encryption Recommendations ....................................................................................................... 97

Understanding WPA and WPA2 .................................................................................................... 98

Recommended Authentication and Encryption Combinations ......................................... 98

Chapter 10

Role Derivation................................................................................................................... 99

User Roles.......................................................................................................................................... 99

Creating a New User Role....................................................................................................... 99
Creating Role Assignment Rules.......................................................................................... 100

Chapter 11

Instant Firewall ................................................................................................................ 103

Service Options............................................................................................................................... 103

Destination Options ........................................................................................................................ 105

Example Access Rules .................................................................................................................. 105

Allow TCP service to a particular network ........................................................................ 105
Allow PoP3 service to a particular server.......................................................................... 106
Deny FTP service except to a particular server................................................................ 107
Deny bootp service except to a particular network ......................................................... 108

Содержание PowerConnect W-IAP175P

Страница 1: ...Dell PowerConnect W Series Instant Access Point 6 1 2 3 2 0 0 0 User Guide ...

Страница 2: ...Code Certain Aruba products include Open Source software code developed by third parties including software code subject to the GNU General Public License GPL GNU Lesser General Public License LGPL or other Open Source Licenses The Open Source code used can be found at this site http www arubanetworks com open_source Legal Notice The use of Aruba Networks Inc switching platforms and software by al...

Страница 3: ...IP Address to the IAP 18 Connecting to a Provisioning Wi Fi Network 18 Login into Instant User Interface 19 Specifying the Country Code 20 Chapter 2 Instant User Interface 21 Understanding the Instant UI Layout 21 Banner 22 Search 22 Tabs 22 Networks Tab 22 Access Points Tab 23 Clients Tab 23 Links 24 New version available 24 Users 24 Settings 25 Servers 26 Roles 26 Maintenance 26 Support 27 Help ...

Страница 4: ... of the IAP 64 Configuring Adaptive Radio Management 66 Migrating from a Virtual Controller Managed Network to Mobility Controller Managed Network 66 Rebooting the IAP 68 Firmware Image Server in Cloud Network 69 Automatic Firmware Image Check and Upgrade 70 Upgrading to new version 70 Manual Firmware Image Check and Upgrade 71 Chapter 6 NTP Server 73 Configuring an NTP Server 73 Chapter 7 Virtual...

Страница 5: ...xternal Captive Portal Authentication via Dell PowerConnect W ClearPass GuestConnect 90 Creating a Web Login page in the Dell PowerConnect W ClearPass GuestConnect 90 Configuring the RADIUS Server in Instant 91 Mac Authentication 91 Configuring Mac Authentication 91 Walled Garden Access 93 Creating Walled Garden Access 93 Certificates 94 Loading Certificates 94 Chapter 9 Encryption 97 Encryption T...

Страница 6: ... Radio Profiles in Instant 119 Chapter 15 Intrusion Detection System 121 Rogue AP Detection and Classification 121 Wireless Intrusion Protection WIP 121 Containment Methods 125 Chapter 16 SNMP 127 SNMP Parameters for IAP 127 SNMP Traps 129 Chapter 17 Airwave Integration and Management 131 AirWave Features 131 Image Management 131 IAP and Client Monitoring 131 Template Based Configuration 132 Trend...

Страница 7: ...w 140 Info 141 RF Dashboard 141 RF Trends 141 Usage Trends 143 Client View 144 Info 144 RF Dashboard 144 RF Trends 145 Mobility Trail 147 Chapter 19 Alert Types and Management 149 Alert Types 149 Chapter 20 User Database 151 Adding a User 151 Editing User Settings 152 Deleting a User 152 Chapter 21 Regulatory Domain 153 Country Codes List 154 Appendix A Abbreviations 157 Abbreviations 157 ...

Страница 8: ...8 Contents Dell PowerConnect W Series Instant Access Point 6 1 2 3 2 0 0 0 User Guide ...

Страница 9: ...e Trends Section in the Monitoring Pane 33 Figure 19 Alerts Link 34 Figure 20 Client Alerts 34 Figure 21 Fault History 35 Figure 22 Active Faults 35 Figure 23 Intrusion Detection on Instant UI 36 Figure 24 AirWave Setup Link AirWave Configuration 37 Figure 25 Adding an Employee Network Basic Info Tab 40 Figure 26 Security Tab Enterprise 44 Figure 27 Security Tab Personal 45 Figure 28 Security Tab ...

Страница 10: ...rnal Captive Portal with External Radius Server Authentication 87 Figure 69 Customizing a Splash Page 88 Figure 70 Disabling Captive Portal Authentication 88 Figure 71 Configuring External Captive Portal when adding a Guest Network 89 Figure 72 Configuring External Captive Portal Authentication when Editing a Guest Network 90 Figure 73 Configuring Mac Authentication 92 Figure 74 Walled Garden 93 F...

Страница 11: ...100 Configuring AirWave 134 Figure 101 Virtual Controller View 135 Figure 102 Clients Graph 136 Figure 103 Throughput Graph 137 Figure 104 Network View 138 Figure 105 Clients Graph 139 Figure 106 Throughput Graph 139 Figure 107 Instant Access Point View 140 Figure 108 2 4 GHz Frames Graph 141 Figure 109 Client View 144 Figure 110 Signal Graph 145 Figure 111 Frames Graph 145 Figure 112 Speed Graph ...

Страница 12: ...12 Figures Dell PowerConnect W Series Instant Access Point 6 1 2 3 2 0 0 0 User Guide ...

Страница 13: ...ication and Encryption Combinations 98 Table 13 Network Service Options 103 Table 14 Destination Options 105 Table 15 Radio Profile Configuration Parameters 119 Table 16 Infrastructure Detection Policies 122 Table 17 Client Detection Policies 123 Table 18 Infrastructure Protection Policies 124 Table 19 Client Protection Policies 124 Table 20 SNMP Parameters for IAP 127 Table 21 Virtual Controller ...

Страница 14: ...14 Tables Dell PowerConnect W Series Instant Access Point 6 1 2 3 2 0 0 0 User Guide ...

Страница 15: ...rk can support up to 16 IAPs and 256 users Dell PowerConnect W Instant consists of at least one Instant Access Point IAP and a Virtual Controller VC The Virtual Controller resides within one of the access points In an Dell PowerConnect W Instant deployment only the first IAP needs to be configured After the first IAP is deployed the subsequent IAPs will inherit all the required information from th...

Страница 16: ...ks Screen input and output This style is used to illustrate Screen output On screen system prompt Filenames software devices and specific commands Bold This style is used to emphasize Instant UI elements For example name of a text box or the name of a drop down list NOTE Indicates helpful suggestions pertinent information and important things to remember CAUTION Indicates a risk of damage to your ...

Страница 17: ... is provided in one of two ways Endspan The switch that the IAP is connected to can provide power Midspan A device can sit between the switch and the IAP The choice of endspan or midspan depends on the capabilities of the switch that the IAP is connected to Typically if a switch is in place and does not support PoE midspan power injectors are used NOTE A DNS server functions as a phonebook for the...

Страница 18: ...witch or router using an Ethernet cable Ensure that the DHCP service is enabled on the network 2 Connect the IAP to a power source The IAP will receive an IP address provided by the switch or router Connecting to a Provisioning Wi Fi Network To connect to a provisioning Wi Fi network 1 Connect a wireless enabled client to a provisioning Wi Fi network The provisioning network is called instant 2 In...

Страница 19: ...ecting to a provisioning Wi Fi Network Microsoft Windows Figure 2 Connecting to a provisioning Wi Fi Network Mac OS Login into Instant User Interface Launch a web browser and navigate to instant dell pcw com or any URL or web address In the login screen enter the following credentials Username admin Password admin ...

Страница 20: ...ogin credentials after your first login Specifying the Country Code Dell PowerConnect W Instant Access Points are shipped in four variants IAP US United States IAP JP Japan IAP IL Israel IAP ROW Rest of World After you successfully login to the Instant user interface a Country Code box appears if IAP ROW APs are installed Select the country code for the IAP ROW APs installed For the complete list ...

Страница 21: ...rowser from a remote management console or workstation JavaScript must be enabled on the web browser to view the Instant UI Supported browsers are Internet Explorer 7 or higher Safari Google Chrome Mozilla Firefox Understanding the Instant UI Layout The Instant UI consists of the following elements Banner Search Tabs Links Views These elements are explained in the following sections Figure 5 Insta...

Страница 22: ...to see the expanded view and click again to compress the expanded view Items in each tab are associated with a triangle icon Click on the triangle icon to sort the data in increasing or decreasing order Each tab is explained in the following sections Networks Tab This tab displays a list of Wi Fi networks that are configured in the Dell Instant network The network names appear as links The expande...

Страница 23: ...urrently broadcasting on Power dB Maximum transmit EIRP of the radio Utilization Utilization percentage of the IAP radios Noise dBM Noise floor of the IAP An edit link appears on clicking the IAP name For details about editing IAP settings see Editing IAP Settings on page 64 Figure 7 Access Points Tab Compressed View and Expanded View Clients Tab This tab displays a list of clients that are connec...

Страница 24: ... Language AirWave Setup Pause Resume New version available This link appears in the Instant UI only if a new image version is available on the image server and AirWave is not configured For more information about the New version available link and its functions see Firmware Image Server in Cloud Network on page 69 Users This link displays the Users box This box contains fields that are required to...

Страница 25: ...pter 14 Adaptive Radio Management Radio View or configure radio settings for 2 4 GHz and the 5 GHz radio profiles For information about Radio see Configuring Radio Profiles in Instant on page 119 Enterprise Domains This indicates all the DNS domain names valid on the enterprise network This list is used to determine how client DNS requests should be routed When Content Filtering is enabled for the...

Страница 26: ...rk The Clear Configuration function allows you to delete or clear the current configuration of the network and reset to provisioning configuration Certificates Displays information about current certificate installed in the network Provides interface to upload new certificates and to set a passphrase for the certificates For more information see Certificates on page 94 Firmware Displays the curren...

Страница 27: ...Command Provides various options for which you can generate support logs Target Provides a list of IAPs in the network Run Click this to generate the support log for the selected option and IAP Filter Enter a string and click to display the filtered content of any command Clear Click to clear the text box Save Results Click to open the results in another window and save it as an HTML or text file ...

Страница 28: ...og Network Displays network logs of the selected IAP AP Log Security Displays security logs of the selected IAP AP Log System Displays system logs of the selected IAP AP Log User Debug Displays user debug logs of the selected IAP AP Log User Displays user logs of the selected IAP AP Log Wireless Displays logs about wireless of the selected IAP AP Log Wireless Displays logs about wireless of the se...

Страница 29: ...ser Database Displays the user configuration of the selected IAP VC Radius Attributes Displays the radius attributes of the selected IAP VC Radius Servers Displays the radius servers configuration of the selected IAP VC Saved Configuration Displays the saved configuration information of the selected IAP VC SNMP Configuration Displays the SNMP configuration of the selected IAP AP Summary Displays t...

Страница 30: ...e Displays the Basic Service Set BSS table of the selected IAP IDS Status Displays WLAN Interface Data Structures WLAN Interface Switch Status and RTLS Configuration tables for the selected IAP IDS AP Table Displays the Monitored IAP Table which lists all the IAPs monitored by the selected IAP ARM Bandwidth Management Displays bandwidth management information for the selected IAP ARM History Displ...

Страница 31: ...s or expand the monitoring pane The monitoring pane consists of the following sections Info RF Dashboard Usage Trends Figure 15 Monitoring on Instant UI Info Displays the configuration information of the Virtual Controller by default In a Network View this section displays configuration information of the selected network Similarly in an Instant Access Point View or Client View this section displa...

Страница 32: ...ed icon against the client in the Speed column Access Points Lists the IAPs whose utilization noise or errors are not within the specified threshold The IAP names appear as links When the IAP is clicked the IAP configuration information is displayed in the Info section The RF Dashboard section is pushed to the bottom left corner of the Instant UI The RF Trends section appears in its place This sec...

Страница 33: ... with the Virtual Controller in the last 15 minutes In Network or IAP view this graph displays the number of clients that were associated with the selected network or IAP in the last 15 minutes Throughput In the default Virtual Controller view the Throughput graph displays the incoming and outgoing throughput traffic for the Virtual Controller in the last 15 minutes In the Network or IAP view this...

Страница 34: ... address of the client which caused the alert Description Provides a short description of the alert Access Points Displays the IP address of the IAP to which the client is connected Details Provides complete details of the alert Figure 20 Client Alerts Fault History These alerts occur in the event of a system fault A Fault History consists of the following fields Time Displays the system time when...

Страница 35: ...ts For more information about alerts see Chapter 19 Alert Types and Management IDS This link displays a list of foreign APs and foreign clients that are detected in the network It consists of the following sections Foreign Access Points Detected Lists the APs that are not controlled by the Virtual Controller The following information is displayed for each foreign AP Mac address Displays the Mac ad...

Страница 36: ...ovides information about the IAP that detected the foreign client Click the pushpin icon to view the information For more information on the intrusion detection feature see Chapter 15 Intrusion Detection System Figure 23 Intrusion Detection on Instant UI Language The language links are provided in the login screen to allow users to select the preferred language before logging in to the Instant UI ...

Страница 37: ...he Info section The views on the Instant UI are classified as follows Virtual Controller view The Virtual Controller view is the default view This view allows you to monitor the Dell Instant network Network view The Network view provides information that is necessary to monitor a selected wireless network All Wi Fi networks in the Dell Instant network are listed in the Networks tab Click the name ...

Страница 38: ...38 Instant User Interface Dell PowerConnect W Series Instant Access Point 6 1 2 3 2 0 0 0 User Guide ...

Страница 39: ...enticate the client 2 Connection After successful authentication the client establishes a connection with the IAP Network Types Dell Instant wireless networks are categorized as Employee Network Voice Network Guest Network Employee Network An Employee network is a classic Wi Fi network This network type is supported with full customization on Dell Instant It will be used by the employees in the or...

Страница 40: ...e options This selection determines whether the network is primarily intended to be used for employee data guest data or voice traffic c Client IP assignment Select the required Client IP assignment option Available options for an Employee network are Network assigned Default Network assigned VLAN ID and Virtual Controller assigned The following table describes these options Table 5 Conditions for...

Страница 41: ...traffic is forwarded DTIM interval Indicates the DTIM delivery traffic indication message period in number of beacons You can configure this option for every WLAN SSID profile The default value is 1 which means the client will check for buffered data on the IAP at every beacon You may choose to configure a larger DTIM value for power saving b Transmit Rates Indicates the ability to configure the b...

Страница 42: ... Server on page 78 3 Select the required Authentication server option from the Authentication server 1drop down list Available options are New If you select this option then an external radius server has to be configured to authenticate the users For information on configuring an external RADIUS server see Chapter 8 Authentication InternalServer If you select this option then users who are require...

Страница 43: ...ncryption type see Chapter 9 Encryption 2 Select a passphrase format from the Passphrase format drop down list Available options are 8 63 alphanumeric chars 64 hexadecimal chars 3 Enter a passphrase in the Passphrase text box and reconfirm 4 Select the required option from the Mac authentication drop down list Available options are Enabled and Disabled When Enabled user must configure at least one...

Страница 44: ...44 Wireless Network Dell PowerConnect W Series Instant Access Point 6 1 2 3 2 0 0 0 User Guide Figure 26 Security Tab Enterprise ...

Страница 45: ...Dell PowerConnect W Series Instant Access Point 6 1 2 3 2 0 0 0 User Guide Wireless Network 45 Figure 27 Security Tab Personal Figure 28 Security Tab Open ...

Страница 46: ...ult rule perform the following steps a Select the rule and then click Edit b Select appropriate options in the Edit Rule box and click OK To define an access rule perform the following steps a Click New b Select appropriate options in the New Rule box c Click OK Figure 29 Adding an Employee Network Access Rules Tab Network 6 Click Finish The network is added and listed in the Networks tab Voice Ne...

Страница 47: ...rom the Band drop down list at which the wireless network will transmit radio signals Available options are All 2 4 GHz and 5 GHz The All option is selected by default It is also the recommended option Table 7 Conditions for Adding a Voice Network Basic Info Tab If then You select the Network assigned Default option The client gets the IP address in the same subnet at the IAPs You select the Netwo...

Страница 48: ...stant Select to set the minimum and maximum legacy non 802 11n transmit rates for each band 2 4GHz and 5GHz c Hide SSID Select this check box if you do not want the SSID network name to be visible to users 3 Inactivity timeout Indicates the time in seconds after which an idle client ages out The minimum value is 60 seconds and the default value is 1000 seconds 4 Click Next and set appropriate secu...

Страница 49: ...ate Tx key from the Tx Key drop down list Available options are 1 2 3 and 4 Enter an appropriate WEP key in the WEP Key text box and reconfirm For more information on encryption and recommended encryption type see Chapter 9 Encryption 2 Enter a passphrase in the Passphrase text box and reconfirm 3 Select the required option from the Mac authentication drop down list Available options are None This...

Страница 50: ... in the Name SSID text box b Select Guest from the Primary usage options This selection determines the primary usage of the network being added c The Client IP assignment selection automatically changes to Virtual Controller assigned The Virtual Controller creates a private subnet and VLAN for the IAPs and the wireless clients The Virtual Controller NATs all traffic out of this interface 3 Click t...

Страница 51: ...radio signals Available options are All 2 4 GHz and 5 GHz The All option is selected by default It is also the recommended option e Content Filtering When enabled all DNS requests to non corporate domains on this wireless network are sent to OpenDNS f Hide SSID Select this check box if you do not want the SSID network name to be visible to users g Inactivity timeout Indicates the time in seconds a...

Страница 52: ...x 4 In the Authentication text box enter the unique signature that the external server will return in the response after a successful user authentication 5 Select the required Authentication server 1 option from the drop down list Available options are New If you select this option then an external radius server has to be configured to authenticate the users For information on configuring an exter...

Страница 53: ...y default This rule allows traffic to all destinations Instant Firewall treats packets based on the first rule matched For more information see Chapter 11 Instant Firewall To edit the default rule perform the following steps a Select the rule and click Edit b Select appropriate options in the Edit Rule box and click OK To define an access rule perform the following steps a Click New b Select appro...

Страница 54: ... 6 1 2 3 2 0 0 0 User Guide Deleting a Network To delete a network perform the following steps 1 In the Networks tab click the network which you want to delete An x appears against the network to be deleted 2 Click x A delete confirmation box appears 3 Click Delete Now ...

Страница 55: ...ver WLAN services to its clients By default IAPs operate as thin IAPs which means their primary function is to receive and transmit electromagnetic signals other WLAN processing is left to the controller When planning a mesh network you manually configure IAPs to operate in mesh portal or mesh point roles Unlike a traditional WLAN environment local mesh nodes provide encryption and traffic forward...

Страница 56: ...s get their IP addresses in the same subnet 2 For over the air provisioning Connect one IAP to the switch to form the mesh portal All the other IAPs are provisioned over the air Ensure that only one Virtual Controller one subnet is available over the air and all the IAPs are connected to a DHCP server and get their IP addresses in the same subnet 3 An open SSID instant will be listed Connect a lap...

Страница 57: ...he IAPs that you want to deploy as Mesh Points from the switch and place the IAPs at the desired location The wired IAPs are Mesh Portals Figure 37 Mesh Portal NOTE The IAPs in US JP or IL regulatory domain which are in factory default state will scan for several minutes after booting An IAP mesh point in factory default state will automatically join the portal if only a single Instant mesh networ...

Страница 58: ...58 Mesh Network Dell PowerConnect W Series Instant Access Point 6 1 2 3 2 0 0 0 User Guide ...

Страница 59: ...ver the Virtual Controller 2 Join the network 3 Begin functioning The Auto Join Mode feature is enabled by default When the Auto Join Mode feature is disabled a New link appears in the Access Points tab Click this link to add IAPs to the network For more information see Adding an IAP to the Network on page 63 Also when this feature is disabled IAPs that are configured but not active appear in red ...

Страница 60: ...he ability to turn off LED for all IAPs in an Instant network Go to Settings Advanced LED Display to enable or disable the LEDs When enabled all LEDs are turned off Use this option in environments where LEDs can be a distraction Figure 39 LED Display NOTE The LED display will be always in Enabled mode while rebooting the IAP ...

Страница 61: ...r Guide Managing IAPs 61 Terminal Access To enable or disable the telnet access to the IAP s CLI go to Settings Advanced Terminal access Figure 40 Terminal Access TFTP Dump Server Enter the IP address of a TFTP server to store core dump files Figure 41 TFTP Dump Server ...

Страница 62: ...ge It is an application or operating system component that generates a log message The following seven facilities are supported by Syslog AP Debug Detailed log about AP device Network Log about change of network for example when a new IAP is added to a network Security Log about network security for example when a client connects using wrong password System Log about configuration and system statu...

Страница 63: ...twork 2 In the New Access Point box enter the Mac address for the new IAP Figure 44 Entering the Mac Address for the New IAP 3 Click OK Removing an IAP from the Network An IAP can be manually removed from the network only if the Auto Join Mode feature is disabled To manually remove an IAP from the network perform the following steps 1 In the Access Points tab click the IAP which you want to delete...

Страница 64: ...orm the following steps 1 In the Access Points tab click the AP of the IAP that you want to rename The edit link appears Figure 45 Editing IAP Settings 2 Click the edit link Figure 46 Changing IAP Name 3 Edit the IAP name in the Name text box 4 Click OK Changing IP Address of the IAP The Instant UI allows you to change the IP address of the IAP connected to the network To change the IP address of ...

Страница 65: ...tion perform the following steps 1 Enter the new IP address for the IAP in the IP address text box 2 Enter the netmask of the network in the Netmask text box 3 Enter the IP address of the default gateway in the Default gateway text box 4 Enter the IP address of the DNS server in the DNS server text box 5 Enter the domain name in the Domain name text box Figure 48 Configuring IAP Connectivity Setti...

Страница 66: ... assigned Figure 49 Configuring IAP Radio Settings Mode Access 5 Click OK Migrating from a Virtual Controller Managed Network to Mobility Controller Managed Network An IAP can be provisioned as a Campus AP in a controller based network but a Campus AP cannot be provisioned as an IAP Before converting the IAP ensure that both the IAP and controller are configured to operate in the same regulatory d...

Страница 67: ...IAP to Campus AP do the following 1 At the top right corner of Instant UI click the Maintenance link The Maintenance box appears Figure 50 Maintenance Box 2 Click the Convert tab Figure 51 Maintenance Convert Tab 3 Enter the IP address of mobility controller in the IP Address of Mobility Controller text box ...

Страница 68: ...roblem with the IAPs you can reboot all IAPs or selected IAPs in a network using the Instant UI To reboot an IAP 1 Click the Maintenance link The Maintenance box appears 2 Click the Reboot tab Figure 53 Rebooting the IAP 3 In the IAP list select the IAP that you want to reboot and click Reboot selected Access Point To reboot all the IAPs in the network click Reboot All NOTE An IAP can be converted...

Страница 69: ...e image check feature allows the IAP to discover new software image versions on a cloud based image server hosted by Dell The location of the image server is fixed and cannot be changed by the user Dell takes care of managing the image server and ensures that the image server is loaded with latest versions of ArubaOS software for its products The Virtual Controller VC in Instant AP communicates wi...

Страница 70: ... the image server then a New version available link appears at the top right corner of the Instant UI Figure 57 Automatic Image Check New Version Available Link Upgrading to new version After the Automatic image check feature identifies a new version perform the following steps to upgrade to the new version 1 Click the New version available link The Maintenance window appears 2 Click Upgrade Now t...

Страница 71: ...ble If there is no new version available Image server timed out Connection or session between the image server and the IAP is timed out Image server failure If the image server does not respond A new image version found If a new image version is found 2 If a new version is found the Upgrade Now button becomes available and displays the version number 3 Click Upgrade Now The IAP downloads the image...

Страница 72: ...72 Managing IAPs Dell PowerConnect W Series Instant Access Point 6 1 2 3 2 0 0 0 User Guide ...

Страница 73: ...ime for billing services and similar Network Time Protocol NTP is required to obtain the precise time from a server and to regulate the local time in each network element If NTP server is not configured in the Dell Instant network an IAP reboot may lead to variation in time and data Configuring an NTP Server The NTP server is set to pool ntp org by default To configure the NTP server on Dell Insta...

Страница 74: ...74 NTP Server Dell PowerConnect W Series Instant Access Point 6 1 2 3 2 0 0 0 User Guide ...

Страница 75: ... enables the Dell Instant network to dynamically elect an IAP to take on a VC role allow graceful failover to a new Virtual Controller when the existing VC is down and avoid race conditions This protocol ensures stability of the network during initial startup or when the VC goes down by allowing only one IAP to self elect as a VC Virtual Controller IP Address You can specify a single static IP add...

Страница 76: ...d lease time for the DHCP server perform the following steps 1 At the top right corner of the Instant UI click the Settings link 2 In the Settings box click the Basic tab 3 Enter the domain name of the client in the Domain name text box 4 Enter the IP addresses of the DNS servers seperated by comma in the DNS server text box 5 Enter the duration of the DHCP lease in the Lease time text box 6 Selec...

Страница 77: ... the client if the user identity is present in its database The RADIUS server sends an Access Accept message to the NAS If the RADIUS server cannot identify the user it stops the authentication process and sends an Access Reject message to the NAS The NAS forwards this message to the client and the client must re authenticate with correct credentials 5 After the client is authenticated the RADIUS ...

Страница 78: ... on the IAP sends a RADIUS packet to the local IP address The Internal RADIUS server listens and replies to the RADIUS packet The following authentication methods are supported in Dell Instant network Authentication Terminated on IAP Dell Instant allows EAP termination for EAP GTC and will be able to authorize its against an LDAP server This will allow users to run EAP GTC termination with their o...

Страница 79: ... Specify a number between 1 and 5 Indicates the maximum number of authentication requests that are sent to server group and the default value is 3 requests RFC 3576 When enabled the Access Points will process RFC 3576 compliant Change of Authorization CoA and Disconnect messages from the RADIUS server Disconnect messages cause a user session to be terminated immediately whereas CoA messages modify...

Страница 80: ...henticate all associated and authenticated clients 5 Click Next to continue and then click Finish Enabling Instant RADIUS To enable Instant RADIUS perform the following steps 1 At the upper right corner of the Instant UI click the Settings link 2 In the Settings box click the Advanced tab 3 Select Enabled from the Dynamic RADIUS Proxy drop down list When enabled the Virtual Controller network will...

Страница 81: ...name of the network role for the user The authenticated user is placed into the management role specified by the VSA List of supported VSA s Instant supports the following types of VSA s AP Group AP Name ARAP Features ARAP Security ARAP Security Data ARAP Zone Access Acct Authentic Acct Delay Time Acct Input Gigawords Acct Input Octets Acct Input Packets Acct Link Count Acct Multi Session Id Acct ...

Страница 82: ...in User Aruba Template User Aruba User Role Aruba User Vlan CHAP Challenge Callback Id Callback Number Class Connect Info Connect Rate Crypt Password DB Entry State Digest Response Domain Name EAP Message Error Cause Event Timestamp Exec Program Exec Program Wait Expiration Fall Through Filter Id Framed AppleTalk Link Framed AppleTalk Network Framed AppleTalk Zone Framed Compression Framed IP Addr...

Страница 83: ...n LAT Service Login Service Login TCP Port Menu Message Auth NAS Port Type Password Password Retry Port Limit Prefix Prompt Rad Authenticator Rad Code Rad Id Rad Length Reply Message Revoke Text Server Group Server Name Service Type Session Timeout Simultaneous Use State Strip User Name Suffix Termination Action Termination Menu Tunnel Assignment Id Tunnel Client Auth Id Tunnel Client Endpoint Tun...

Страница 84: ...he Username and Password specified in the respective text boxes to access the Virtual Configuring an External RADIUS Server on page 79 Management UI RADIUS Server Specify one or two radius servers to authenticate UI If two servers are configured users can use them in primary backup mode or load balancing mode this is identical to the radius server configuration for SSIDs For information on configu...

Страница 85: ...d then users who are required to authenticate have to be added to the user database Click the Users link to add the users For information about adding users see Adding a User on page 151 Internal Acknowledged To gain access to the wireless network a user must accept the terms and conditions Configuring Internal Captive Portal Authentication when Adding a Guest Network To configure internal captive...

Страница 86: ...ne of the following options for the splash page type in the Security tab a Internal Authenticated a Internal Acknowledged Figure 67 Configuring Captive Portal when Editing a Guest Network The appearance of a splash page can be customized as required For information on customizing a splash page see Customizing a Splash Page on page 87 4 Click Next and click Finish Configuring Internal Captive Porta...

Страница 87: ...b click the network for which you want to customize the splash page The edit link for the network appears 2 Click the edit link The Edit box for the network appears 3 Click Next and perform the following steps in the Security tab 1 To change the color of the splash page click the Splash page rectangle and select the required color from the Background Color palette 2 To change the welcome text clic...

Страница 88: ...ble captive portal authentication perform the following steps 1 In the Network tab click the guest network for which you want to disable captive portal authentication The edit link for the network appears 2 Click the edit link The Edit box for the network appears 3 Click Next and clear the Splash page check box in the Security tab Figure 70 Disabling Captive Portal Authentication 4 Click Next and ...

Страница 89: ...s 1 Enter the IP address or the hostname in the IP or hostname text box 2 Enter the URL for the splash page in the URL text box 3 Enter the number of the port to be used for communicating with the external server in the Port text box 4 In the Authentication text box enter the unique signature that the external server will return in the response after a successful authentication The authentication ...

Страница 90: ...gs 5 Reauth interval When set to a value greater than zero the Access Points will periodically reauthenticate all associated and authenticated clients 6 Accounting When enabled the Access Points will post accounting information as RADIUS START and RADIUS STOP accounting records to the RADIUS server 7 Click Next and click Finish External Captive Portal Authentication via Dell PowerConnect W ClearPa...

Страница 91: ...ver 1 drop down list Refer to Configuring an External RADIUS Server on page 79 to update the RADIUS server fields 5 The new network appears in the Networks tab Click the wireless network icon and select the new network 6 Open any browser and type any URL Instant redirects the URL to Dell PowerConnect W ClearPass GuestConnect login page 7 Login to the network with the username and password specifie...

Страница 92: ...ternal RADIUS server f Timeout Specify a number between1 and 30 seconds User will be disconnected after this time The default value is 5 seconds g Retry count Specify a number between 1 and 5 Indicates the maximum number of authentication requests that are sent to server group and the default value is 3 requests h RFC 3576 When enabled the Access Points will process RFC 3576 compliant Change of Au...

Страница 93: ...ased not IP address based and support the option to define wildcards This works for client devices with or without HTTP proxy settings When a user attempts to navigate to other websites not configured in the white list walled garden profile the user is redirected back to the login page In addition the black listed walled garden profile is configured to explicitly block navigation to websites from ...

Страница 94: ...ates A certificate is a digital file that certifies the identity of the organization or products of the organization It is also used to establish your credentials for any web transactions It contains the organization name a serial number expiration date a copy of the certificate holder s public key and the digital signature of the certificate issuing authority so that a recipient can ensure that t...

Страница 95: ...Server certificate from the drop down list The CA certificate is required to validate the client s certificate and the server certificate verifies the server s identity to the client 4 Select the certificate format from the Certificate format drop down list 5 If you have selected Server certificate type then enter a passphrase in Passphrase and reconfirm 6 Click Browse and select the appropriate c...

Страница 96: ...96 Authentication Dell PowerConnect W Series Instant Access Point 6 1 2 3 2 0 0 0 User Guide ...

Страница 97: ...n algorithm as WEP but TKIP is much more secure and has an additional message integrity check MIC Recently some cracks have begun to appear in the TKIP encryption methods It is recommended that all users migrate from TKIP to AES as soon as possible AES The Advanced Encryption Standard AES encryption algorithm is now widely supported and is the recommended encryption type for all wireless networks ...

Страница 98: ...rsonnel Key change intervals can also be configured Enterprise Enterprise is more secure when compared to WPA Personal In this type every client automatically receives a unique encryption key after securely logging on to the network This key is long and automatically updated regularly While WPA uses TKIP WPA2 uses AES algorithm Recommended Authentication and Encryption Combinations Table 12 summar...

Страница 99: ...stant UI User Roles This section describes how to create a new user role Figure 77 Access Tab Instant User Role Settings Creating a New User Role To create a new user role perform the following steps 1 Click the New link in the Networks tab To define the access rule to an existing network click the network The edit link appears Click the edit link and navigate to the Access tab 2 In the Basic Info...

Страница 100: ...Assignment Rules table The default user role is the newly created user role 2 Select the attribute from the Attribute drop down list To view the list of supported attributes see List of supported VSA s on page 81 3 Select the operator from the Operator drop down list The following types of operators are supported contains To check if the attribute contains the operand value Is the role To check if...

Страница 101: ...Dell PowerConnect W Series Instant Access Point 6 1 2 3 2 0 0 0 User Guide Role Derivation 101 Figure 79 Creating Role Assignment Rules ...

Страница 102: ...102 Role Derivation Dell PowerConnect W Series Instant Access Point 6 1 2 3 2 0 0 0 User Guide ...

Страница 103: ...At the end of authentication these policies are uniformly applied to users connected to that network The Instant Firewall gives the flexibility to limit packets or bandwidth available to particular class of users Instant Firewall treats packets based on the first rule matched Figure 80 Access Tab Instant Firewall Settings Service Options Table 13 lists a sample set of service options available in ...

Страница 104: ...ter Daemon protocol User Datagram Protocol msrpc tcp Microsoft Remote Procedure Call Transmission Control Protocol msrpc udp Microsoft Remote Procedure Call User Datagram Protocol netbios dgm Network Basic Input Output System Datagram Service netbios ns Network Basic Input Output System Name Service netbios ssn Network Basic Input Output System Session Service ntp Network Time Protocol papi Point ...

Страница 105: ...stinations access rule is enabled by default This rule allows traffic to all destinations To define allow TCP service access rule to a particular network perform the following steps a Click New the New Rule box appears b Select Allow from the Action drop down list snmp Simple network management protocol snmp trap Simple network management protocol trap svp Software Validation Protocol tftp Trivial...

Страница 106: ... the access rule to an existing network click the network The edit link appears Click the edit link and navigate to the Access tab 2 In the Basic Info tab enter the appropriate information 3 Click Next and set appropriate security levels using the slider button in the Security tab 4 Click Next The Access tab appears The Allow any to all destinations access rule is enabled by default This rule allo...

Страница 107: ...ppropriate information 3 Click Next and set appropriate security levels using the slider button in the Security tab 4 Click Next The Access tab appears The Allow any to all destinations access rule is enabled by default This rule allows traffic to all destinations To define deny FTP service access rule except to a particular server perform the following steps 1 Click New the New Rule box appears 2...

Страница 108: ...tion 3 Click Next and set appropriate security levels using the slider button in the Security tab 4 Click Next The Access tab appears The Allow any to all destinations access rule is enabled by default This rule allows traffic to all destinations To define deny bootp service access rule except to a network perform the following steps 1 Click New the New Rule box appears 2 Select Deny from the Acti...

Страница 109: ...Dell PowerConnect W Series Instant Access Point 6 1 2 3 2 0 0 0 User Guide Instant Firewall 109 Figure 84 Defining Rule Deny bootp Service Except to a Particular Network ...

Страница 110: ...110 Instant Firewall Dell PowerConnect W Series Instant Access Point 6 1 2 3 2 0 0 0 User Guide ...

Страница 111: ...sent to OpenDNS Enabling Content Filtering To enable content filtering per SSID perform the following steps 1 Click New in the Networks tab and then click More to view the options 2 In the Other Options field select Enabled from the Content Filtering drop down list and click Next to continue NOTE Regardless of whether content filtering is disabled or enabled instant dell pcw com is always resolved...

Страница 112: ... The Enterprise Domain Names displays all the DNS domain names valid on the enterprise network This list is used to determine how client DNS requests should be routed When Content Filtering is enabled for the wireless network everything that does not match this list is sent to OpenDNS Figure 86 Enterprise Domains To manually add or delete a domain perform the following steps 1 Navigate to Settings...

Страница 113: ...ting systems Identifying outdated operating systems Helps to locate outdated and unexpected OS in the company network Locating and patching vulnerable operating systems Assists in locating and patching specific operating system versions on the network that have known vulnerabilities thereby securing the company network OS Fingerprinting is enabled in the Dell Instant network by default The followi...

Страница 114: ...114 OS Fingerprinting Dell PowerConnect W Series Instant Access Point 6 1 2 3 2 0 0 0 User Guide ...

Страница 115: ...e Voice Aware Scanning This feature stops the IAP that is supporting an active voice call from scanning for other channels in the RF spectrum The IAP resumes scanning when no more active voice calls are present on that IAP This significantly improves the voice quality when a call is in progress while simultaneously delivering automated RF management functions Load Aware Scanning This feature dynam...

Страница 116: ...ss all the clients Preferred Access Allocates Airtime to all the clients but preference is for higher performing clients Figure 88 Airtime fairness mode Customize valid channels You can customize the Valid 5GHz channels for 20MHz channels and the Valid 2 4 GHz channels for 20MHz channels in the IAP Here the administrator can configure the ARM channels in the channel width window The valid channels...

Страница 117: ...interference and intrusion detection Wide Channel Bands This feature allows administrators to configure 40 MHz channels in the 2 4 GHz and 5 0 GHz bands 40 MHz channels are essentially two 20 MHz adjacent channels that are bonded together 40 MHz channel effectively doubles the frequency bandwidth available for data transmission Monitoring the Network with ARM When ARM is enabled an IAP dynamically...

Страница 118: ...down list 5 Select Administrator assigned in 2 4 GHz and 5 GHz band sections 6 Select appropriate channel number from the Channel drop down list for both 2 4 GHz and 5 GHz band sections 7 Enter appropriate transmit power value in the Transmit power text box in 2 4 GHz and 5 GHz band sections 8 Click OK NOTE Select the Monitor Mode to configure the specific IAP in the Instant network in Monitor Mod...

Страница 119: ...equency bands Figure 90 Radio Profile 1 Navigate to Settings Radio in the UI 2 Configure the radio settings described in Table 15 for bands 2 4GHz and 5GHz Table 15 Radio Profile Configuration Parameters Parameter Description Legacy only Enable to run the radio in non 802 11n mode This is disabled by default 802 11d 802 11h Enable the radio to advertise its 802 11d Country Information and 802 11h ...

Страница 120: ... level of interference related to 2 4Ghz appliances such as cordless phones Level 4 Level 3 settings and FIR immunity At this level the AP adjusts its sensitivity to in band power which can improve performance in environments with high and constant levels of noise interference Level 5 The AP completely disables PHY error reporting improving performance by eliminating the time the IAP would spend o...

Страница 121: ...dered a direct security threat since it is not connected to the wired network However an interfering AP may be reclassified as a rogue AP Figure 91 Intrusion Detection Wireless Intrusion Protection WIP WIP offers a wide selection of intrusion detection and protection features to protect the network against wireless threats Like most other security related features of the Dell network the WIP confi...

Страница 122: ...table describes the detection policies that are enabled in Infrastructure Detection Custom settings box Table 16 Infrastructure Detection Policies Detection Level Detection Policy Off Rogue Classification Low Detect AP Spoofing Detect Windows Bridge IDS Signature Deauthentication Broadcast IDS Signature Disassociation Broadcast Medium Detect Adhoc networks using VALID SSID Valid SSID list will be ...

Страница 123: ...Frame HT IE Detect Malformed Frame Association Request Detect Malformed Frame Auth Detect Overflow IE Detect Overflow EAPOL Key Detect Beacon Wrong Channel Detect devices with invalid Mac OUI Table 17 Client Detection Policies Detection Level Detection Policy Off All detection policies are disabled Low Detect Valid Station Mis association Medium Detect Disconnect Station Attack Detect Omerta Attac...

Страница 124: ...ustom settings box The following table describes the detection policies that are enabled in Client Protection Custom settings box Table 18 Infrastructure Protection Policies Detection Level Detection Policy Off All detection policies are disabled Low Protect SSID Valid SSID list should be auto derived from Instant configuration Rogue Containment High Protect from Adhoc Networks Protect AP Imperson...

Страница 125: ...s Wireless containment When enabled the system will attempt to disconnect all clients that are connected or attempting to connect to the identified Access Point None Disables all the containment mechanisms Deauthenticate only With deauthentication containment the Access Point or client is contained by disrupting the client association on the wireless interface Tarpit containment With Tarpit contai...

Страница 126: ...126 Intrusion Detection System Dell PowerConnect W Series Instant Access Point 6 1 2 3 2 0 0 0 User Guide ...

Страница 127: ...e Virtual Controller and the SNMP agent If you are using SNMPv3 to obtain values from the Dell Instant you can configure the following parameters Name A string representing the name of the user Authentication Protocol An indication of whether messages sent on behalf of this user can be authenticated and if so the type of authentication protocol used This can take one of the two values MD5 HMAC MD5...

Страница 128: ...text box 4 Select the type of authentication protocol from the Auth protocol drop down list 5 Enter the authentication password in the Password tex box and retype the password in the Retype tex box 6 Select the type of privacy protocol from the Privacy protocol drop down list 7 Enter the privacy protocol password in the Password text box and retype the password in the Retype text box 8 Click OK 9 ...

Страница 129: ... the IAP acting as the Virtual Controller will generate traps The OID of the traps is 1 3 6 1 4 1 14823 2 3 3 1 200 2 X Figure 97 SNMP Traps To configure an SNMP trap receiver follow this procedure 1 Enter a name in the SNMP Engine ID text box It indicates the name of the SNMP agent on the access point SNMPV3 agent has an engine ID that uniquely identifies the agent in the device and is unique to ...

Страница 130: ...V2c traps and a username for SNMPV3 traps 4 Port Enter the port to which the traps are sent The default value is 162 5 Inform When enabled traps are sent as SNMP INFORM messages It is applicable to SNMPV3 only The default value is Yes 3 Click OK to view the trap receiver information in the SNMP Trap Receivers window NOTE Dell PowerConnect W Series specific management information bases MIBs describ...

Страница 131: ...at are available in the Dell Instant network Image Management AirWave allows updating the firmware on WLAN devices by defining a minimum acceptable firmware version for each make and model of a device It remotely distributes the firmware image to the WLAN devices that require updates and also schedules the firmware updates such that updating is completed without the necessity to manually monitor t...

Страница 132: ...e classification It automatically detects rogue APs irrespective of their location in the network It prevents authorized IAPs from being detected as rogue IAPs It tracks and correlates the IDS events to provide a complete picture of network security Wireless Intrusion Detection System WIDS Event Reporting to Airwave Airwave supports WIDS Event Reporting which is provided by Dell Instant This inclu...

Страница 133: ...ervice authorization This is assigned by the AirWave administrator Creating your Organization String The Organization String is a set of colon separated strings created by the AirWave administrator to accurately represent the deployment of each Dell Instant system This string is entered into the Dell Instant UI by the on site installer AMP Role Org Admin initially disabled AMP User Org Admin assig...

Страница 134: ... name text box 3 Enter the IP address of the AirWave server in the Airwave IP text box 4 Enter the shared key in the Shared key text box and reconfirm This shared key is used for configuring the first AP in the Dell Instant network 5 Click OK Airwave Discovery through DHCP Option The AirWave configuration can also be performed on the DHCP option that is configured on the DHCP server You can config...

Страница 135: ...or these parameters Virtual Controller View The Virtual Controller view is the default view This view allows you to monitor the Dell Instant network The following Instant UI elements are available in this view Tabs Contains three tabs Networks Access Points and Clients For detailed information about the tabs see Chapter 2 Instant User Interface Links Contains three links Monitoring Client Alerts a...

Страница 136: ...tual Controller is operating 2 4 GHz band 5 4 GHz band or both RF Dashboard The RF Dashboard section displays the following information IP address Signal and Speed information about the clients in the Dell Instant network If the speed or signal strength of a client is low IP address of the client appears as a link Click the link to monitor the client For more information see Client View on page 14...

Страница 137: ...ant UI The Virtual Controller view appears This is the default view 2 Study the Clients graph in the Usage Trends pane For example the graph on the left shows that one client is associated with the Virtual Controller at 11 43 hours Throughput The Throughput graph shows the throughput of all networks and IAPs associated with the Virtual Controller for the last 15 minutes Outgoing traffic Throughput...

Страница 138: ...work Info Usage Trends Figure 104 Network View Info The Info section displays the following information about the selected network Name Name of the network Key Management Authentication key type Band Band in which the network is broadcast 2 4 GHz band 5 4 GHz band or both Type Network type Employee Guest or Voice IP Assignment Source of IP address for the client Authentication Server System s inte...

Страница 139: ...see an enlarged view click the graph The enlarged view provides Last Minimum Maximum and Average statistics for the number of clients associated with the Virtual Controller for the last 15 minutes To see the exact number of clients in the Dell Instant network at a particular time hover the cursor over the graph line To check the number of clients associated with the network for the last 15 minutes...

Страница 140: ... traffic Throughput for incoming traffic is displayed in blue Incoming traffic is shown below the median line To see an enlarged view click the graph The enlarged view provides Last Minimum Maximum and Average statistics for the incoming and outgoing traffic throughput of the network for the last 15 minutes To see the exact throughput of the selected network at a particular time hover the cursor o...

Страница 141: ...ilability of the IAP in Mega Bytes RF Dashboard In the Instant Access Point view the RF Dashboard section is moved below the Info section It lists the IP address of the clients that are associated with the selected IAP if the signal strength or the data transfer speed of the client is low RF Trends The RF Trends section has two links 2 4 GHz and 5 GHz The 2 4 GHz link is clicked by default and the...

Страница 142: ...the median line To see an enlarged view click the graph The enlarged view provides Last Minimum Maximum and Average statistics for the incoming and outgoing frames To see the exact utilization percent at a particular time hover the cursor over the graph line To monitor the In and Out frame rate per second for the radio in 2 4 GHz band for the last 15 minutes 1 Log in to the WebUI The Virtual Contr...

Страница 143: ...istics for the number of clients associated with the IAP for the last 15 minutes To see the exact number of clients associated with the selected IAP at a particular time hover the cursor over the graph line To check the number of clients associated with the IAP for the last 15 minutes 1 Log in to the Instant UI The Virtual Controller view appears This is the default view 2 In the Access Points tab...

Страница 144: ...ient View Info The Info section provides the following information about the selected IAP Name Name of the selected client IP Address IP address of the client Mac Address Mac Address of the client OS Operating System that is running on the client Network Network to which the client is connected to Access Point IAP to which the client is connected to Channel Channel that the client is using Type Ch...

Страница 145: ...nt Access Point 6 1 2 3 2 0 0 0 User Guide Monitoring 145 RF Trends The RF Trends section displays the following graphs for the selected client Signal Figure 110 Signal Graph Frames Figure 111 Frames Graph Speed Figure 112 Speed Graph ...

Страница 146: ...strength for the client is 54 0 dB at 12 23 hours Frames The Frames Graph shows the In and Out frame rate per second for the client for the last 15 minutes It also shows data for the Retry In and Retry Out frames Outgoing frames Outgoing frame traffic is displayed in green It is shown above the median line Incoming frames Incoming frame traffic is displayed in blue It is shown below the median lin...

Страница 147: ...s that the data transfer speed at 12 26 hours is 240 mbps Throughput The Throughput Graph shows the throughput for the selected client for the last 15 minutes Outgoing traffic Throughput for outgoing traffic is displayed in green Outgoing traffic is shown above the median line Incoming traffic Throughput for incoming traffic is displayed in blue Incoming traffic is shown below the median line To s...

Страница 148: ...148 Monitoring Dell PowerConnect W Series Instant Access Point 6 1 2 3 2 0 0 0 User Guide ...

Страница 149: ...ncryption settings and try to associate again 100104 Unsupported 802 11 rate The IAP cannot allow this client to associate because it does not support the 802 11 rate requested by this client Check the configuration on the IAP to see if the desired rate can be supported if not consider replacing the IAP with another model that can support the rate 100105 Maximum capacity reached on IAP The IAP has...

Страница 150: ...rtain the correct authentication credentials and log in again 100410 Integrity check failure in encrypted message The IAP cannot receive data from this client because the integrity check of the received message MIC has failed Check the encryption setting on the client and on the IAP 100511 DHCP request timed out This client did not receive a response to its DHCP request in time Check the status of...

Страница 151: ...he required authentication encryption and access rules and allow the guest user to use the enterprise network An employee user is the employee who will be using the enterprise network for various official tasks You can create Employee WLANs specify the required authentication encryption and access rules and allow the employees to use the enterprise network Adding a User To add a user perform the f...

Страница 152: ...The user s details appear on the right side 3 Edit as required and click OK Deleting a User To delete a user perform the following steps 1 At the top right corner of the Instant UI click the Users link The Users box appears 2 In the Users section select the username that you want to delete and click Delete To delete all users or multiple users at a time select the usernames that you want to delete...

Страница 153: ...itial Wi Fi setup requires you to specify the country code for the country in which the Dell Instant will operate This configuration sets the regulatory domain for the radio frequencies that the IAPs use Within the regulated transmission spectrum a high throughput 802 11a 802 11b g or 802 11n radio setting can be configured The available 20 MHz and 40 MHz channels are dependent on the specified co...

Страница 154: ...an DE Germany NL Netherlands IT Italy PT Portugal LU Luxembourg NO Norway FI Finland DK Denmark CH Switzerland CZ Czech Republic ES Spain GB United Kingdom KR Republic of Korea South Korea CN China FR France HK Hong Kong SG Singapore TW Taiwan BR Brazil IL Israel SA Saudi Arabia LB Lebanon AE United Arab Emirates ZA South Africa AR Argentina AU Australia AT Austria BO Bolivia CL Chile GR Greece ...

Страница 155: ...o NZ New Zealand PL Poland PR Puerto Rico SK Slovak Republic SI Slovenia TH Thailand UY Uruguay PA Panama RU Russia KW Kuwait LI Liechtenstein LT Lithuania MX Mexico MA Morocco NZ New Zealand PL Poland PR Puerto Rico SK Slovak Republic SI Slovenia TH Thailand UY Uruguay PA Panama RU Russia EG Egypt TT Trinidad and Tobago TR Turkey Table 27 Country Codes List Continued Code Country Name ...

Страница 156: ...ulgaria CY Cyprus EE Estonia MU Mauritius RO Romania CS Serbia and Montenegro ID Indonesia PE Peru VE Venezuela JM Jamaica BH Bahrain OM Oman JO Jordan BM Bermuda CO Colombia DO Dominican Republic GT Guatemala PH Philippines LK Sri Lanka SV El Salvador TN Tunisia PK Islamic Republic of Pakistan QA Qatar DZ Algeria Table 27 Country Codes List Continued Code Country Name ...

Страница 157: ...e DNS Domain Name System EAP TLS Extensible Authentication Protocol Transport Layer Security EAP TTLS Extensible Authentication Protocol Tunneled Transport Layer Security IAP Instant Access Point IDS Intrusion Detection System IEEE Institute of Electrical and Electronics Engineers ISP Internet Service Provider Instant UI Instant User Interface LEAP Lightweight Extensible Authentication Protocol MX...

Страница 158: ...ll PowerConnect W Series Instant Access Point 6 1 2 3 2 0 0 0 User Guide VC Virtual Controller VSA Vendor Specific Attributes WLAN Wireless Local Area Network Table 28 List of abbreviations Continued Abbreviation Expansion ...

Отзывы: