Users Guide

184 | Remote Access Points Dell PowerConnect W-Series ArubaOS 6.1 | User Guide
c. For Destination, select alias, then select mswitch.
d. For Service, select service, then select svc-tftp.
e. Click Add.
9. To create the next rule:
a. Under Rules, click Add.
b. For Source, select any.
c. For Destination, select alias, then select mswitch.
d. For Service, select service, then select svc-ftp.
e. Click Add.
10. Click Apply.
11. Click the User Roles tab.
a. Click Add.
b. Enter the Role Name (for example, RemoteAP).
c. Click Add under Firewall Policies.
d. In the Choose from Configured Policies menu, select the policy you just created.
e. Click Done.
12. Click Apply.
Using CLI
ip access-list session <policy>
any any svc-papi permit
any any svc-gre permit
any any svc-l2tp permit
any alias mswitch svc-tftp permit
any alias mswitch svc-ftp permit
user-role <role>
session-acl <policy>
Configure VPN Authentication
Before you enable VPN authentication, you must configure the authentication server(s) and server group that the
controller will use to validate the remote AP. When you provision the remote AP, you configure IPSec settings for
the AP, including the username and password. This username and password must be validated by an
authentication server before the remote AP is allowed to establish a VPN tunnel to the controller. The
authentication server can be any type of server supported by the controller, including the controller’s internal
database.
For more information about configuring authentication servers and server groups, refer to Chapter 9,
“Authentication Servers” .
Using the WebUI
1. Navigate to the Configuration > Security > Authentication > L3 Authentication page.
2. In the Profiles list, select the VPN Authentication Profile> default-rap.
CAUTION: For security purposes, Dell best practices is to assign a unique username and password for each remote AP.