Extreme Networks Altitude 3500 Series, Руководство по продукции

Страница: 72 / 594

System Configuration
Altitude 3500 Series Access Point Product Reference Guide
72
3 Refer to the 12 available Controller IP Addresses to review the addresses the access point uses to adopt
with a controller.
The access point contacts each controller on the list (from top to bottom) until a viable controller
adoption is made. The access point first populates the list with the IP addresses received from its
DHCP resource. If DHCP is not able to obtain IP addresses, the access point attempts to resolve the
controller's Domain Name if provided within the Controller FQDN parameter. However, if the access
point receives one or more IP addresses from the DHCP server, it will not solicit an IP address from
a user provided domain name. Lastly, provide static (manually provided) IP addresses to the list as
long as there is room. The access point will defer to these addresses if DHCP and a provided domain
address fail to secure a controller adoption.
4 Click Apply to save any changes to the Adaptive AP Setup screen. Navigating away from the screen
without clicking the Apply button results in all changes to the screen being lost.
5 Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings
displayed on the Adaptive AP Setup screen to the last saved configuration.
6 Click Logout to securely exit the AP35xx Access Point applet. A prompt displays confirming the
logout before the applet is closed.
Configuring Data Access
Use the AP35xx Access screen to allow/deny management access to the access point from different
subnets (LAN1, LAN2 or WAN) using different protocols such as HTTP, HTTPS, Telnet, SSH or SNMP.
The access options are either enabled or disabled. It is not meant to function as an ACL in routers or
other firewalls, where you can specify and customize specific IPs to access specific interfaces.
Use the AP35xx Access screen checkboxes to enable or disable LAN1, LAN2 and/or WAN access using
the protocols and ports listed. If access is disabled, this effectively locks out the administrator from
configuring the AP35xx using that interface. To avoid jeopardizing the network data managed by the
AP35xx, Extreme Networks recommends enabling only those interfaces used in the routine (daily)
management of the network, and disabling all other interfaces until they are required.
The AP35xx Access screen also has a facility allowing customers to create a login message with
customer generated text. When enabled (using either the access point Web UI or CLI), the login message
displays when the user is logging into the access point. If the login message is disabled, the default
login screen displays with no message.
Controller Interface Use the Controller Interface drop-down menu to specify
the interface used by the controller for connectivity with the
access point. Options include LAN1, LAN2 and WAN. The
default setting is LAN1.
Enable AP-
Controller Tunnel This setting is required to enable an IPSec VPN from the
AAP to the wireless controller.
Keep-alive Period The Keepalive interval defines a period (in seconds) the
AAP uses to terminate its connection to the controller if no
data is received.
Current Controller Displays the IP address of the connected controller. This is
the controller from which the access point receives its
adaptive configuration.
AP Adoption State Displays whether the access point has been adopted by
the controller (whose IP address is listed in the Current
Controller parameter). The access point cannot receive its
adaptive configuration without association.