Users Guide

262 | VPN Configuration Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide
1. Navigate to the VPN link at the top right corner of the Dell W-Series Instant UI. The
Tunneling window appears.
2. Select IPSec from the Protocol drop-down list.
3. If you select GRE from the Protocol drop-down list then the packets are sent and received
without encryption.
a. GRE type — Enter the value for GRE type parameter.
b. Per-AP tunnel — Select Enabled or Disabled from the Per-AP tunnel drop-down list.
The user can create GRE tunnels from all of the APs instead of creating tunnels only from
the AP that is acting as the Virtual Controller. The traffic going to the corporate is sent via
L2 GRE tunnel from the AP itself and does not have to be forwarded through the Virtual
Controller.
NOTE: By default, the Per-AP tunnel option is disabled.
4. Enter the IP address or fully qualified domain name for the main VPN/GRE endpoint in the
Primary host field.
5. Enter the IP address or fully qualified domain name for the backup VPN endpoint in the
Backup host field. This entry is optional.
6. Select Enabled from the Preemption drop-down list to switch back to the primary host when
and if it becomes available again. This step is optional.
7. Select Enabled or Disabled from the Fast failover drop-down list.
8. Enter Connection test frequency at which packets are sent to the controller. The unit is
seconds per packet and the default value is 10 seconds which means that every 10 seconds the
W-IAP will send one packet to the controller.
NOTE: This value should be less than L3 user time out value in the Dell Controller. For
example, if L3 user timeout in the Dell Controller is 5 minutes, the Connection test frequency
should be less than 300 seconds.
9. Enter Test packet count which is the number of lost packets and after which the W-IAP will
make the tunnel down. The default value is 2.
10. Click Next to continue.
Fast Failover
Enabling the fast failover feature allows the W-IAP to create a backup VPN tunnel to the
controller along with the primary tunnel, and maintain both the primary and backup tunnel
separately. If the primary tunnel fails, the W-IAP can switch the data stream to the backup
tunnel. This reduces the total failover time to less than one minute.
Routing Profile Configuration
W-Instant can terminate a single VPN connection on an Dell PowerConnect W-Series Mobility
Controller. The Routing profile defines the corporate subnets which need to be tunneled through
the IPSec tunnel.