Specifications
System Configuration
Altitude 3500 Series Access Point Product Reference Guide
72
3 Refer to the 12 available Controller IP Addresses to review the addresses the access point uses to adopt 
with a controller.
The access point contacts each controller on the list (from top to bottom) until a viable controller 
adoption is made. The access point first populates the list with the IP addresses received from its 
DHCP resource. If DHCP is not able to obtain IP addresses, the access point attempts to resolve the 
controller's Domain Name if provided within the Controller FQDN parameter. However, if the access 
point receives one or more IP addresses from the DHCP server, it will not solicit an IP address from 
a user provided domain name. Lastly, provide static (manually provided) IP addresses to the list as 
long as there is room. The access point will defer to these addresses if DHCP and a provided domain 
address fail to secure a controller adoption.
4 Click Apply to save any changes to the Adaptive AP Setup screen. Navigating away from the screen 
without clicking the Apply button results in all changes to the screen being lost.
5 Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings 
displayed on the Adaptive AP Setup screen to the last saved configuration.
6 Click Logout to securely exit the AP35xx Access Point applet. A prompt displays confirming the 
logout before the applet is closed.
Configuring Data Access
Use the AP35xx Access screen to allow/deny management access to the access point from different 
subnets (LAN1, LAN2 or WAN) using different protocols such as HTTP, HTTPS, Telnet, SSH or SNMP. 
The access options are either enabled or disabled. It is not meant to function as an ACL in routers or 
other firewalls, where you can specify and customize specific IPs to access specific interfaces.
Use the AP35xx Access screen checkboxes to enable or disable LAN1, LAN2 and/or WAN access using 
the protocols and ports listed. If access is disabled, this effectively locks out the administrator from 
configuring the AP35xx using that interface. To avoid jeopardizing the network data managed by the 
AP35xx, Extreme Networks recommends enabling only those interfaces used in the routine (daily) 
management of the network, and disabling all other interfaces until they are required. 
The AP35xx Access screen also has a facility allowing customers to create a login message with 
customer generated text. When enabled (using either the access point Web UI or CLI), the login message 
displays when the user is logging into the access point. If the login message is disabled, the default 
login screen displays with no message.
Controller Interface Use the Controller Interface drop-down menu to specify 
the interface used by the controller for connectivity with the 
access point. Options include LAN1, LAN2 and WAN. The 
default setting is LAN1.
Enable AP-
Controller Tunnel
This setting is required to enable an IPSec VPN from the 
AAP to the wireless controller. 
Keep-alive Period The Keepalive interval defines a period (in seconds) the 
AAP uses to terminate its connection to the controller if no 
data is received.
Current Controller Displays the IP address of the connected controller. This is 
the controller from which the access point receives its 
adaptive configuration.
AP Adoption State Displays whether the access point has been adopted by 
the controller (whose IP address is listed in the Current 
Controller parameter). The access point cannot receive its 
adaptive configuration without association.










