Users Guide

ManualsBrandsDell ManualsTVs & monitorsW-620

791

792

793

794

795

796

797

798

799

800

Table Of Contents

Dell PowerConnect W-Series ArubaOS 6.1
Contents
About this Guide
- Audience
- Fundamentals
  - WebUI
  - CLI
- Related Documents
- Conventions
- Contacting Support
The Basic User-Centric Networks
- Configuring the User-Centric Network
- Deployment and Configuration Tasks
- Configuring the Controller
  - Running the Initial Setup
  - Connecting to the Controller after Initial Setup
- Configuring a VLAN for Network Connection
- Additional Configuration
Network Parameters
- Configuring VLANs
- Configuring Ports
- About VLAN Assignments
- Configuring Static Routes
  - Using the WebUI
  - Using CLI
- Configuring the Loopback IP Address
- Configuring the Controller IP Address
  - Using CLI
- Configuring GRE Tunnels
  - Creating a Tunnel Interface
    - Using the WebUI
    - Using CLI
  - Directing Traffic into the Tunnel
RF Plan
- Supported Planning
- Before You Begin
  - Task Overview
  - Planning Requirements
- Launching the RF Plan
- Using the FQLN Mapper in the AP Provision Page
  - Using the WebUI
  - Using CLI
- RF Plan Example
Access Points
- Basic Functions and Features
- AP Names and Groups
  - Creating an AP group
    - in the WebUI
    - Creating an AP group in the CLI
  - Assigning APs to an AP group
    - In the CLI
- AP Configuration Profiles
- Profile Hierarchy
- Deploying APs
- Provisioning Installed APs
- Configuring a Provisioned AP
- Managing RF Interference
  - RF Optimization
    - In the WebUI
    - In the CLI
  - RF Event Configuration
    - In the WebUI
    - In the CLI
- AP Channel Assignments
- AP Console Settings
Virtual APs
- Virtual AP Profiles
  - Excluding a virtual AP profile from an AP in the WebUI
  - Excluding a virtual AP profile from an AP in the CLI
- Configuring a Virtual AP
- Configuring a High-Throughput Virtual AP
Adaptive Radio Management (ARM)
- ARM Overview
  - ARM Support for 802.11n
  - Monitoring Your Network with ARM
    - Noise and Error Monitoring
    - Application Awareness
- ARM Profiles
- Assigning an ARM Profile to an AP Group
  - In the WebUI
  - In the CLI
- Multi-Band ARM and 802.11a/802.11g Traffic
- Band Steering
  - Steering Modes
  - Enabling Band Steering
    - In the WebUI
    - In the CLI
- Traffic Shaping
  - Enabling Traffic Shaping
    - In the WebUI
    - In the CLI
- Spectrum Load Balancing
- RX Sensitivity Tuning Based Channel Reuse
- Non-802.11 Noise Interference Immunity
- ARM Metrics
- ARM Troubleshooting
Remote Access Points
- Overview
- Configuring the Secure Remote Access Point Service
- Deploying a Branch Office/Home Office Solution
  - Configuring the branch office AP
  - Troubleshooting Remote AP
- Enabling Double Encryption
  - Using the WebUI
  - Using CLI
- Advanced Configuration Options
- Wi-Fi Multimedia
- Uplink Bandwidth Reservation
  - Bandwidth Reservation for Uplink Voice Traffic
  - Configuring Bandwidth Reservation
    - Using the WebUI
    - Using CLI
Secure Enterprise Mesh
- Mesh Access Points
- Mesh Links
  - Link Metrics
  - Optimizing Links
- Mesh Profiles
- Mesh Solutions
- Before You Begin
- Mesh Radio Profiles
  - Managing Mesh Profiles In the WebUI
  - Managing Mesh Profiles In the CLI
- RF Management (802.11a and 802.11g) Profiles
  - Managing 802.11a/802.11g Profiles In the WebUI
  - Managing 802.11a/802.11g Profiles In the CLI
- Mesh High-Throughput SSID Profiles
  - Managing Profiles In the WebUI
  - Managing Profiles In the CLI
- Mesh Cluster Profiles
- Ethernet Ports for Mesh
- Provisioning Mesh Nodes
- AP Boot Sequence
- Verifying the Network
  - Verification Checklist
  - CLI Examples
- Remote Mesh Portals
Authentication Servers
- Important Points to Remember
- Servers and Server Groups
- Configuring Servers
- Internal Database
- Server Groups
- Assigning Server Groups
- Configuring Authentication Timers
  - Setting an Authentication Timer
    - In the WebUI
    - In the CLI
802.1x Authentication
- Overview of 802.1x Authentication
- Configuring 802.1x Authentication
- Example Configurations
- Advanced Configuration Options for 802.1x
  - Configuring reauthentication with Unicast Key Rotation
    - Using the WebUI
    - Using the CLI
Certificate Revocation
- About OCSP and CRL
  - Controller as OCSP and CRL Clients
- Configuring the Controller as an OCSP Client
  - In the WebUI
  - In the CLI
- Configuring the Controller as a CRL Client
  - In the WebUI
  - In the CLI
- Configuring the Controller as a OCSP Responder
  - In the WebUI
  - In the CLI
Roles and Policies
- Policies
- User Roles
- User Role Assignments
- Global Firewall Parameters
Dashboard Monitoring
- Performance
- Usage
  - Clients
  - APs
- Security
- Potential Issues
- WLANs
- Access Points
- Clients
Stateful and WISPr Authentication
- Stateful Authentication Overview
- WISPr Authentication Overview
- Important Points to Remember
- Configuring Stateful 802.1x Authentication
  - In the WebUI
  - In the CLI
- Configuring Stateful NTLM Authentication
  - In the WebUI
  - In the CLI
- Configuring WISPr Authentication
  - In the WebUI
  - In the CLI
Captive Portal
- Captive Portal Overview
  - Policy Enforcement Firewall Next Generation (PEFNG) License
  - Controller Server Certificate
- Captive Portal in the Base ArubaOS
  - Configuring Captive Portal via the WebUI
  - Configuring Captive Portal via the CLI
- Captive Portal with the PEFNG License
  - Configuring Captive Portal via the WebUI
  - Configuring Captive Portal via the CLI
- Example Authentication with Captive Portal
- Configuring Guest VLANs
  - In the WebUI
  - In the CLI
- Captive Portal Authentication
- Optional Captive Portal Configurations
- Personalizing the Captive Portal Page
- Creating Walled Garden Access
  - Creating Walled Garden Access
    - Using the WebUI to create Walled Garden access
    - Using the CLI to create walled garden access
Advanced Security
- Securing Client Traffic
- Securing Controller-to-Controller Communication
  - Configuring Controllers for xSec
    - In the WebUI
    - In the CLI
- Configuring the Odyssey Client on Client Machines
  - Installing the Odyssey Client
Virtual Private Networks
- Planning a VPN Configuration
- VPN Authentication Profiles
- Configuring a Basic VPN for L2TP/IPsec
  - In the WebUI
- Configuring a VPN for L2TP/IPsec with IKEv2
  - In the WebUI
- Configuring a VPN for Smart Card Clients
  - Smart Card clients using IKEv2
  - Smart Card Clients using IKEv1
- Configuring a VPN for Clients with User Passwords
  - In the WebUI
  - In the CLI
- Configuring Remote Access VPNs for XAuth
  - Configuring VPNs for XAuth Clients using Smart Cards
  - Configuring a VPN for XAuth Clients Using a Username/Password
- Remote Access VPNs for PPTP
  - In the WebUI
  - In the CLI
- Site-to-Site VPNs
- VPN Dialer
  - Configuring the VPN Dialer
    - In the WebUI
    - In the CLI
  - Assigning a Dialer to a User Role
    - In the WebUI
    - In the CLI
Virtual Intranet Access
- VIA Connection Manager
- Configuring the VIA Controller
- Configuring MAC-Based Authentication
  - Configuring the MAC Authentication Profile
    - Using the WebUI to configure a MAC authentication profile
    - Using the CLI to configure a MAC authentication profile
- Configuring Clients
  - Using the WebUI to configure clients in the internal database
  - Using the CLI to configure clients in the internal database
MAC-based Authentication
Control Plane Security
- Control Plane Security Overview
- Configuring Control Plane Security
- Whitelists on Master and Local Controllers
  - Campus AP Whitelist Synchronization
  - Viewing and Managing the Master or Local Switch Whitelists
- Environments with Multiple Master Controllers
  - Configuring Networks with a Backup Master Controller
  - Configuring Networks with Clusters of Master Controllers
- Replacing a Controller on a Multi-Controller Network
  - Replacing Controllers in a Single Master Network
  - Replacing Controllers in a Multi-Master Network
- Configuring Control Plane Security after Upgrading
- Troubleshooting Control Plane Security
Adding Local Controllers
- Moving to a Multi-Controller Environment
  - Configuring a Preshared Key
  - Configuring a Controller Certificate
    - Using the CLI to configure a Local Controller Certificate
    - Using the CLI to configure the Master Controller Certificate
- Configuring Local Controllers
Remote Nodes
- Creating Remote Node Profiles
- Configuring the Remote Node Whitelist
  - Adding an RN to the whitelist
  - Viewing Remote Node Whitelist Settings
- Installing the Remote Node at the Remote Site
- Monitoring and Managing Remote Nodes
IP Mobility
- Dell Mobility Architecture
- Configuring Mobility Domains
- Tracking Mobile Users
- Advanced Mobility Functions
- Bridge Mode Mobility
- Mobility Multicast
  - Proxy IGMP and Proxy Remote Subscription
  - Inter-controller Mobility
VRRP
- Redundancy Parameters
RSTP
- Migration and Interoperability
- Rapid Convergence
  - Edge Port and Point-to-Point
- Configuring RSTP
- Troubleshooting
PVST+
- Interoperability and Best Practices
- Configure using the CLI
- Configure using the WebUI
W-600 Series Controller
- Important Points to Remember
- Internal Access Point (AP)
- USB Cellular Modems
- Configuring a Supported USB Modem
- Configuring a New USB Modem
- NAS (Network-Attached Storage)
- Print Server
  - Printer Setup Using the CLI
  - Additional Commands for Managing Printers
- Sample Topology and Configuration
- Upgrading and Migrating
OSPFv2
- Important Points to Remember
- WLAN Scenario
  - WLAN Topology
  - WLAN Routing Table
- Branch Office Scenario
  - Branch Office Topology
  - Branch Office Routing Table
- Configuring OSPF
- Deployment Best Practices
- Sample Topology and Configuration
Wireless Intrusion Prevention
- Reusable Wizard
  - Wizard Intrusion Detection
  - Wizard Intrusion Protection
    - Protection for Infrastructure
    - Protection for Clients
- Monitoring Dashboard
- Rogue AP Detection
- Intrusion Detection
  - Infrastructure Intrusion Detection
  - Client Intrusion Detection
- Intrusion Protection
  - Infrastructure Intrusion Protection
  - Client Intrusion Protection
    - Protect Valid Stations
    - Protect Windows Bridge
- WLAN Management System
  - Configuring WMS via the WebUI
  - Configuring WMS via the CLI
    - Configuring Local WMS Settings
    - Managing the WMS Database
- Client Blacklisting
WIP Advanced Features
- TotalWatch
- TotalWatch Administration
- Tarpit Shielding
- Tarpit Shielding Administration
  - Configuring Tarpit Shielding
  - Licensing
Link Aggregation Control Protocol
- Important Points to Remember
- Configuring LACP
  - In the CLI
  - In the WebUI
- Best Practices
- Sample Configuration
Management Access
- Certificate Authentication for WebUI Access
  - Configuring Certificate Authentication for WebUI Access
    - In the WebUI
    - In the CLI
- Public Key Authentication for SSH Access
  - In the WebUI
  - In the CLI
- Radius Server Authentication
- Management Password Policy
  - Defining a Management Password Policy
    - In the WebUI
  - Management Authentication Profile Parameters
- Managing Certificates
- Configuring SNMP
  - SNMP Parameters for the Controller
    - In the WebUI
    - In the CLI
- Configuring Logging
  - In the WebUI
  - In the CLI
- Guest Provisioning
- Managing Files on the Controller
- Setting the System Clock
Spectrum Analysis
- Overview
- Creating Spectrum Monitors and Hybrid APs
- Connecting Spectrum Devices to the Spectrum Analysis Client
  - View Connected Spectrum Analysis Devices
  - Disconnecting a Spectrum Device
- Configuring the Spectrum Analysis Dashboards
- Customizing Spectrum Analysis Graphs
  - Spectrum Analysis Graph Configuration Options
- Recording Spectrum Analysis Data
- Non-Wi-Fi Interferers
- Spectrum Analysis Session Log
- Viewing Spectrum Analysis Data via the CLI
- Spectrum Analysis Troubleshooting Tips
Software Licenses
- Terminology
- Licenses
  - License Types
- Multi-Controller Network
- License Usage
- Interaction
- Best Practices
- Installing a License
- Deleting a License
- Moving Licenses
- Resetting the Controller
IPv6 Support
- About IPv6
- IPv6 Topology
- IPv6 Support for Controller and AP
- IPv6 Extension Header (EH) Filtering
  - Using CLI
- Captive Portal over IPv6
  - Configuring Captive Portal over IPv6
- ArubaOS Support for IPv6 Clients
- ArubaOS Features that Support IPv6
- IPv6 User Addresses
- Important Points to Remember
Voice and Video
- Voice and Video License Requirements
- Configuring Voice and Video
- QoS for Voice and Video
- Extended Voice and Video Functionalities
- Advanced Voice Troubleshooting
External Services Interface
- Understanding ESI
- Understanding the ESI Syslog Parser
- ESI Configuration Overview
- Example Route-mode ESI Topology
- Example NAT-mode ESI Topology
- Basic Regular Expression Syntax
External User Management
- Overview
  - Before you Begin
- How the ArubaOS XML API Works
- Using the XML API Server
- XML Request
- XML Response
  - Default Response Format
    - Response Codes
  - Query Command Response Format
- Sample Code
  - Using XML API in C Language
DHCP with Vendor-Specific Options
- Windows-Based DHCP Server
  - Configuring Option 60
    - To configure option 60 on the Windows DHCP server
  - Configuring Option 43
    - To configure option 43 on the Windows DHCP server:
- DHCP Relay Agent Information Option (Option 82)
  - Configuring Option 82
    - In the WebUI
    - In the CLI
- Linux DHCP Servers
External Firewall Configuration
- Communication Between Dell Devices
- Network Management Access
- Virtual Internet Access (VIA)
- Other Communications
Behavior and Defaults
- Mode Support
- Basic System Defaults
- Default Management User Roles
- Default Open Ports
802.1x Configuration IAS Windows
- Configuring Microsoft IAS
- Configure Management Authentication using IAS
  - Configure the Controller to use IAS Management Authentication
  - Verify Communication between the Controller and the RADIUS Server
- Window XP Wireless Client Example Configuration
Internal Captive Portal
- Creating a New Internal Web Page
  - Basic HTML Example
- Installing a New Captive Portal Page
- Displaying Authentication Error Message
- Reverting to the Default Captive Portal
- Language Customization
- Customizing the Welcome Page
- Customizing the Pop-Up box
- Customizing the Logged Out Box
Tunneled Nodes
- Configuration Overview
- Configuring a Wired Tunneled Node Client
  - Configuring an Access Port as a Tunneled Node Port
  - Configuring a Trunk Port as a Tunneled Node Port
- Example Output
VIA: End User Instructions
- Pre-requisites
- Downloading VIA
- Installing VIA
- Using VIA
Provisioning RAP at Home
- Provision the RAP using a Static IP Address
- Provision the RAP on a PPPoE Connection
- Using 3G/EVDO USB Modem
Acronyms and Terms
- Acronyms
- Terms
Index

798 | 802.1x Configuration IAS Windows Dell PowerConnect W-Series ArubaOS 6.1 | User Guide

Figure 211 EAP MSCHAPv2 Properties