Concept Guide

l 10.2.2.0/24 is a branch owned subnet, which needs to override global routing profile
l 199.127.104.32 is used an example IP address of the W-AirWave server in the Internet
AP Configuration
The following table provides information on the configuration steps performed through the CLI with example
values. For information on the UI procedures, see the topics referenced in the UINavigation Details column.
Configuration Steps CLI Commands UI Procedure
1. Configure the primary
host for VPN with the
Public VRRP IP address of
the controller.
(ap)(config)# vpn primary <public VRRP IP of
controller>
See
Configuring an
IPSec Tunnel
2. Configure routing
profiles to tunnel traffic
through IPSec.
(ap)(config)# routing-profile
(ap)(routing-profile)# route 0.0.0.0 0.0.0.0 <public VRRP IP of
controller>
See
Configuring
Routing
Profiles
3. Define routing profile
exception RADIUS server
and W-AirWave IPs, since
the design requirement
for this solution requires
local RADIUS
authentication, even
though the IP matches
the routing profile
destination.
(ap)(config)# routing-profile
(ap)(routing-profile)# route 10.2.2.1
255.255.255.255 0.0.0.0
(ap)(routing-profile)# route 10.2.2.2
255.255.255.255 0.0.0.0
(ap)(routing-profile)# route 199.127.104.32
255.255.255.255 0.0.0.0
See
Configuring
Routing
Profiles
4. Configure Enterprise
DNS. The configuration
example in the next
column tunnels all DNS
queries to the original
DNS server of clients
without proxying on W-
IAP.
(ap)(config)# internal-domains
(ap)(domains)# domain-name *
See
Configuring
Enterprise
Domains
5. Configure centralized L2
and distributed L3 with
VLAN 20 and 30
respectively.
Centralized L2 profile
(ap)(config)# ip dhcp l2-dhcp
(ap)(DHCP Profile "l2-dhcp")# server-type
Centralized,L2
(ap)(DHCP Profile "l2-dhcp")# server-vlan 20
Distributed L3 profile
(ap)(config)# ip dhcp l3-dhcp
(ap)(DHCP Profile "l3-dhcp")# server-type
Distributed,L3
(ap)(DHCP Profile "l3-dhcp")# server-vlan 30
(ap)(DHCP Profile "l3-dhcp")# ip-range 10.30.0.0
10.30.255.255
(ap)(DHCP Profile "l3-dhcp")# dns-server
10.1.1.50,10.1.1.30
(ap)(DHCP Profile "l3-dhcp")# domain-name
corpdomain.com
(ap)(DHCP Profile "l3-dhcp")# client-count 200
See
Configuring
Centralized
DHCP Scopes
and
Configuring
Distributed
DHCP Scopes
Table 76: W-IAP Configuration for Scenario 2—IPSec: Single Datacenter with Multiple controllers for Redundancy
Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide IAP-VPN Deployment Scenarios | 386