Page 1 Dell PowerConnect W-Series nstant Access Point 6.1.3.1-3.0. User Guide...
Page 2 , the ® registered Aruba the Mobile Edge Company logo, and Aruba Mobility Management System . Dell™, the DELL™ logo, and PowerConnect™ are trademarks of Dell Inc. All rights reserved. Specifications in this manual are subject to change without notice.
Page 3: Table Of Contents
Alerts ..........................37 IDS ............................39 Configuration........................40 Language ........................... 40 Dell PowerConnect W-AirWave Setup ................ 40 Pause/Resume ........................41 Views ............................41 Chapter 3 Wireless Network......................43 Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Contents | 3...
Page 4 Configuring an NTP Server ......................89 Chapter 7 Virtual Controller........................ 91 Master Election Protocol ........................ 91 Virtual Controller IP Address......................91 Specifying Name and IP Address for the Virtual Controller..........91 4 | Contents Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 5 Configuring External Captive Portal Authentication when Editing a Guest Network External Captive Portal Authentication using Dell PowerConnect W-ClearPass Guest- Connect ............................ 108 Creating a Web Login page in the Dell PowerConnect W-ClearPass GuestConnect Configuring the RADIUS Server in Instant ..............108 MAC Authentication........................109 Configuring MAC Authentication..................
Page 6 Wireless Intrusion Protection (WIP) ................... 147 Containment Methods ......................151 Chapter 17 SNMP ..........................153 SNMP Parameters for IAP......................153 SNMP Traps ..........................155 Chapter 18 Ethernet Downlink ......................157 6 | Contents Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 7 Entering the Organization String and AMP Information into the IAP ....168 Dell PowerConnect W-AirWave Discovery through DHCP Option........ 168 Standard DHCP option 60 and 43 on Windows Server 2008 for Dell Instant APs 168 Alternate method for defining Vendor Specific DHCP options........171 Chapter 21 Monitoring ........................
Page 8 Whitelist DB Configuration if the Controller is acting as the Whitelist Entry ....209 VPN Local Pool Configuration ....................210 IAP VPN Profile Configuration....................210 Appendix B Abbreviations ........................213 Abbreviations ..........................213 8 | Contents Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 9: Figures
Intrusion Detection on Instant UI ....................40 Figure 29 Configuration............................. 40 Figure 30 Dell PowerConnect W-AirWave Setup Link – Dell PowerConnect W-AirWave Configuration Figure 31 Adding an Employee Network — Basic Info Tab ..............44 Figure 32 Adding an Employee Network— VLAN Tab ................45 Figure 33 Employee Security Tab—...
Page 10 Loading Certificate via Dell PowrConnect W-AirWave ............113 Figure 90 CA Certificate ..........................114 Figure 91 Server Certificate ........................... 114 Figure 92 Selecting the Group ........................114 Figure 93 Virtual Controller Certificate......................115 10 | Figures Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 11 Figure 133 Instant and DHCP options for Dell PowerConnect W-AirWave— Server Options..... 170 Figure 134 Instant and DHCP options for Dell PowerConnect W-AirWave—060 Dell Instant AP in Serv- er Options170 Figure 135 Instant and DHCP options for Dell PowerConnect W-AirWave— 043 Vendor Specific Info..
Page 12 Distributed L3 DHCP Configuration....................202 Figure 166 Centralized L2 DHCP Configuration ..................... 202 Figure 167 Adding a User ..........................203 Figure 168 Specifying a Country Code ......................205 12 | Figures Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 13 Client View — RF Trends Graphs and Monitoring Procedures..........186 Table 31 Alerts List ............................189 Table 32 Country Codes List.......................... 206 Table 33 List of abbreviations........................213 Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Tables | 13...
Page 14 14 | Tables Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 15: About This Guide
Dell Instant consists of an Instant Access Point (IAP) and a Virtual Controller (VC). The Virtual Controller resides within one of the access points. In a Dell Instant deployment only the first IAP needs to be configured. After the first IAP is deployed, the subsequent IAPs will inherit all the required information from the Virtual Controller.
Page 16: Conventions
CAUTION: Indicates a risk of damage to your hardware or loss of data. WARNING: Indicates a risk of personal injury or death. Contacting Support Website Support Main Website dell.com Support Website support.dell.com Dell Documentation support.dell.com/manuals 16 | About this Guide Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 17: Chapter 1 Initial Configuration
This chapter provides information that is required to setup Dell PowerConnect W-Series Instant Access Point and access the Instant User Interface. Initial Setup This section provides a pre-installation checklist and describes the initial procedures required to set up Dell Instant. Pre-Installation Checklist Before installing the Instant Access Point (IAP), make sure that you have the following: Ethernet cable of required length to connect the IAP to the home router.
Page 18: Connecting The Iap To A Power Source
4. In the Mac operating system, click the AirPort icon. A list of available Wi-Fi networks is displayed. 5. Click on the instant network. NOTE: While connecting to the provisioning Wi-Fi network, ensure that the client is not connected to any wired network. 18 | Initial Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 19: Login Into Instant User Interface
Figure 2 Connecting to a provisioning Wi-Fi Network — Mac OS Login into Instant User Interface Launch a web browser and navigate to instant.dell-pcw.com (or any URL or web address). In the login screen, enter the following credentials: Username— admin ...
Page 20: Specifying The Country Code
Instant user interface. You can change the default login credentials after your first login. Specifying the Country Code NOTE: Skip this section, if you are installing the IAP in United States or Japan. Dell PowerConnect W-Series Instant Access Points are shipped in four variants: IAP-US (United States) ...
Page 21: Chapter 2 Instant User Interface
The Instant UI consists of the following elements: Banner  Search  Tabs  Links  Views  These elements are explained in the following sections. Figure 5 Instant UI Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface | 21...
Page 22: Banner
Each tab is explained in the following sections. Networks Tab This tab displays a list of Wi-Fi networks that are configured in the Dell Instant network. The network names appear as links. The expanded view displays the following information about each Wi-Fi network: Name—...
Page 23: Access Points Tab
Access Points Tab If the Auto Join Mode feature is enabled, a list of enabled and active IAPs in the Dell Instant network is displayed in the Access Points tab. The IAP names are displayed as links. If the Auto Join Mode feature is disabled, a New link appears. Click on this link to add a new IAP to the network.
Page 24: Links
This link appears in the top right corner of Instant UI only if a new image version is available on the image server and Dell PowerConnect W-AirWave is not configured. For more information about the New version available link and its functions, see “Firmware Image Server in Cloud Network”...
Page 25: Settings
RTLS— View or edit the RTLS server settings.  Dell RTLS— Enable this to integrate with Dell PowerConnect W-AirWave Management platform,  Ekahau Real Time Location Server and Nearbuy Real Time Location Server. Specify the IP address and port number of the server to which location reports are sent, a shared secret key, and the frequency at which packets are sent to the server.
Page 26: Figure 10 Rtls
NOTE: For OpenDNS to work, enable Content Filtering feature while creating a new network. Click New in the Networks tab and then select Enabled from the Content filtering drop-down list. Uplink— View or configure uplink settings. See Chapter 19, “Uplink Configuration” for more information.  26 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 27: Figure 12 Rf
Radio — View or configure radio settings for 2.4GHz and the 5GHz radio profiles. For information about Radio, “Configuring Radio Profiles in Instant” on page 145. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface | 27...
Page 28: Pef
WIP offers a wide selection of intrusion detection and protection features to protect the network against wireless threats. Use this window to specify standard levels of threat detection. See “Wireless Intrusion Protection (WIP)” on page 147 for more information. 28 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 29: Vpn
This link displays the Maintenance window. The Maintenance window allows you to maintain the Wi-Fi network. It consists of the following tabs: About— Displays the Build Time, IAP model name, Dell Instant OS version, Web address of Dell and ...
Page 30: Figure 16 Maintenance Link - Default View
For more information, see “Rebooting the IAP” on page 83. Convert — Provides an option to change the network from a Virtual Controller managed network to a Dell  Mobility Controller managed network. For more information, see “Migrating from a Virtual Controller Managed Network to Mobility Controller Managed Network”...
Page 31: Support
4. Click Run. NOTE: Use the support commands under the supervision of Dell technical support. You can view the following information for each access point in the Dell Instant network using the support window: AP Access Rule Table— Displays all the ACL rules of the selected IAP.
Page 32 VC Allowed AP Table— Displays allowed AP enable/disable status and allowed AP list of the selected IAP.  VC Application Services— Displays the details of application services of the selected IAP, which includes  protocol number, port number. 32 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 33 ARM Bandwidth Management— Displays bandwidth management information for the selected IAP.  ARM History— Displays the channel history and power changes due to Adaptive Radio Management (ARM)  for the selected IAP. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface | 33...
Page 34: Help
Use this link to logout of the Instant UI. Monitoring This link displays the Monitoring pane. This pane can be used to monitor the Dell Instant network. Use the down arrow located to the right side of these links to compress or expand the monitoring pane. The monitoring...
Page 35: Figure 20 Monitoring On Instant Ui
Signal— Displays the signal strength of the client. Depending on the signal strength of the client, the color  of the lines on the Signal bar changes from Green > Orange > Red. Green— Signal strength is more than 20 decibels.  Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface | 35...
Page 36 Virtual Controller in the last 15 minutes. In the Network or IAP view, this graph displays the incoming and outgoing throughput traffic for the selected network or IAP in the last 15 minutes. 36 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 37: Alerts
Timestamp— Displays the time at which the client alert was recorded.  Mac address— Displays the Mac address of the client which caused the alert.  Description— Provides a short description of the alert.  Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface | 37...
Page 38: Figure 25 Client Alerts
Number— Indicates the number of sequence.  Cleared by— Displays the module which cleared this fault.  Description— Displays the event details.  Figure 26 Fault History 38 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 39: Ids
Type— Displays the Wi-Fi type of the foreign client.  Last seen— Displays the time when the foreign client was last detected in the network.  Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant User Interface | 39...
Page 40: Configuration
Instant UI. In addition, this link is also located at the bottom left corner of the Instant UI. A default language is selected based on the language preferences in the client desktop operating system or browser. If Dell Instant cannot detect the language, then English (En) is used as the default language.
Page 41: Pause/Resume
Client view— The Client view provides information that is necessary to monitor a selected client. In the  Client view, all the clients in the Dell Instant network are listed in the Clients tab. Click the IP address of the client that you want to monitor. Client view for that client appears.
Page 42 42 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 43: Chapter 3 Wireless Network
Employee Network An Employee network is a classic Wi-Fi network. This network type is supported with full customization on Dell Instant. It will be used by the employees in the organization. Passphrase based or 802.1X based authentication methods are supported on this network type. Employees can access the protected data of an enterprise through the employee network after successful authentication.
Page 44: Adding An Employee Network
Percentage of Airtime— Indicates the aggregate amount of airtime that all clients on this Network can  use to send/receive data. Each user— Indicates the throughput for any single user on this Network. The throughput value is  specified in kbps. 44 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 45: Figure 32 Adding An Employee Network- Vlan Tab
IAP at every beacon. You may choose to configure a larger DTIM value for power saving. c. Transmit Rates— Indicates the ability to configure the basic and supported rates per SSID for Dell Instant. Select to set the minimum and maximum legacy (non-802.11n) transmit rates for each band —...
Page 46: Figure 33 Employee Security Tab- Enterprise
7. Set the appropriate security levels using the slider in the Security tab. The default level is Personal. The available options are Enterprise, Personal, and Open which are described in the following tables. Figure 33 Employee Security Tab— Enterprise 46 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 47: Table 5 Conditions For Adding An Employee Network- Security Tab
Blacklisting tab of the PEF window. 7. Click Upload Certificate and browse to upload a certificate file for the internal server. See “Certificates” on page 111 for more information. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 47...
Page 48 “Adding a User” on page 203. 10. Click Upload Certificate and browse to upload a certificate file for the internal server. See “Certificates” on page 111 for more information. 48 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 49: Figure 34 Employee Security Tab- Personal
Figure 34 Employee Security Tab— Personal Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 49...
Page 50: Table 6 Conditions For Adding An Employee Network- Security Tab
“Adding a User” on page 203. 7. Click Upload Certificate and browse to upload a certificate file for the internal server. See “Certificates” on page 111 for more information. 50 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 51: Figure 35 Employee Security Tab- Open
“Creating a New User Role” on page 119 for more information. 3. Unrestricted— Select this to set no restrictions on access based on destination or type of traffic. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 51...
Page 52: Voice Network
Voice Network Use the Voice network type when you want devices that provide only voice services like handsets or only applications that require voice-like prioritization need connectivity. 52 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 53: Adding A Voice Network
Each radio— Indicates the aggregate amount of throughput each radio (some AP models have  multiple radios) is allowed to provide for all clients connected to that radio. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 53...
Page 54: Table 7 Conditions For Client Ip And Vlan Assignment
DTIM value for power saving. c. Transmit Rates— Indicates the ability to configure the basic and supported rates per SSID for Dell Instant. Select to set the minimum and maximum legacy (non-802.11n) transmit rates for each band —...
Page 55: Figure 38 Voice Security Tab- Enterprise
Figure 38 Voice Security Tab— Enterprise Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 55...
Page 56: Table 8 Conditions For Adding A Voice Network- Security Tab
“Adding a User” on page 203. 8. Click Upload Certificate and browse to upload a certificate file for the internal server. See “Certificates” on page 111 for more information 56 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 57 “Adding a User” on page 203. 10. Click Upload Certificate and browse to upload a certificate file for the internal server. See “Certificates” on page 111 for more information. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 57...
Page 58 “Creating a New User  Role” on page 119 for more information. Unrestricted— Select this to set no restrictions on access based on destination or type of traffic.  58 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 59: Guest Network
Typically, a guest network is an un- encrypted network. However, you can specify encryption settings in the Security tab (see step 10 of the following procedure). Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 59...
Page 60: Adding A Guest Network
Each radio— Indicates the aggregate amount of throughput each radio (some AP models have  multiple radios) is allowed to provide for all clients connected to that radio. 60 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 61: Table 9 Conditions For Client Ip And Vlan Assignment
DTIM value for power saving. c. Transmit Rates— Indicates the ability to configure the basic and supported rates per SSID for Dell Instant. Select to set the minimum and maximum legacy (non-802.11n) transmit rates for each band - 2.4GHz and 5GHz.
Page 62: Table 10 Conditions For Adding A Guest Network- Security Tab
For more information, see “Walled Garden Access” on page 110. None Select this option if you do not want to set the captive portal authentication. 62 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 63: Figure 41 Adding A Guest Network - Splash
Passphrase format — Specify either an alphanumeric or a hexadecimal string. Ensure that the hexadecimal string must be exactly 64 digits in length. c. Passphrase — Enter a pre-shared key (PSK) passphrase. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 63...
Page 64: Figure 42 Configuring A Splash Page - Encryption Settings
“Creating a New User  Role” on page 119 for more information. Unrestricted— Select this to set no restrictions on access based on destination or type of traffic.  64 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 65: Editing A Network
1. In the Networks tab, click the network which you want to delete. A x link appears against the network to be deleted. 2. Click x. A delete confirmation window appears. 3. Click Delete Now. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Wireless Network | 65...
Page 66 66 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 67: Chapter 4 Mesh Network
This chapter describes the Dell Instant secure enterprise mesh architecture. Mesh Instant Access Points A Dell Instant mesh network requires at least one wired connection. The wired IAP is the mesh portal and also acts as a virtual controller. The un-wired IAPs are mesh points.
Page 68: Mesh Points
Instant Mesh Setup Instant mesh can be provisioned in two ways — Over-the-air provisioning and over-the-wire provisioning. Over- the-air provisioning is available when only one Dell Instant mesh network is being advertised and it will not work for ROW version of IAPs.
Page 69: Figure 45 Untrusted Connection Window
47. Disconnect the IAPs that you want to deploy as Mesh Points from the switch and place the IAPs at the desired location. The wired IAPs are Mesh Portals. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Mesh Network | 69...
Page 70: Figure 47 Mesh Portal
NOTE: The IAP mesh point will get an IP address from the same DHCP pool as the portal, and this DHCP request goes through the portal. 70 | Mesh Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 71: Chapter 5 Managing Iaps
This chapter describes the Preferred band, Auto join mode, Terminal Access, LED display, and Syslog server features in Dell Instant. In addition, the chapter provides procedures for adding and removing IAPs, editing the IAP settings, and upgrading the firmware on the IAP using the Instant UI.
Page 72: Led Display
LED Display to enable or disable the LEDs. When Disabled, all the LEDs are turned off. Use this option in environments where LEDs can be a distraction. Figure 49 LED Display NOTE: The LED display is always in Enabled mode while rebooting the IAP. 72 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 73: Terminal Access
To enable or disable the telnet access to the IAP's CLI, go to Settings > Advanced > Terminal access. Figure 50 Terminal Access NOTE: Instant does not support configuration using CLI. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Managing IAPs | 73...
Page 74: Tftp Dump Server
Syslog level— For a global level configuration, select one of the logging levels from the standard list of syslog  levels. The default value is Notice. Figure 52 Syslog Server 74 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 75: Syslog Facility Levels
Messages of general interest to system users. Debug Messages containing information useful for debugging. Adding an IAP to the Network To add an IAP to the Dell Instant network, assign an IP address. For more information, see “Assigning an IP Address to the IAP” on page 18.
Page 76: Removing An Iap From The Network
To change the IAP name, perform the following steps: 1. In the Access Points tab, click on the IAP that you want to rename. Figure 55 Editing IAP Settings 76 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 77: Changing Ip Address Of The Iap
2. Enter the netmask of the network in the Netmask text box. 3. Enter the IP address of the default gateway in the Default gateway text box. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Managing IAPs | 77...
Page 78: Configuring Adaptive Radio Management
4. Click OK and reboot the IAP. Configuring Adaptive Radio Management Adaptive Radio Management (ARM) is enabled in Dell Instant by default. However, if ARM is disabled, perform the following steps to enable it. 1. In the Access Points tab, click the IAP for which you want to configure ARM.
Page 79: Migrating From A Virtual Controller Managed Network To Mobility Controller Managed Network
The IAP then reboots and comes up as a RAP. The IAP then establishes an IPSEC connection with the controller and begins operating in RAP mode. If an IAP entry for the AP is present in the firmware image cloud server, the IAP gets Dell PowerConnect W- ...
Page 80: Table 13 Supported Iap Platforms And Minimal Aos Version For Iap To Rap Conversion
To convert an IAP to RAP, follow the instructions below: 1. Navigate to the Maintenance tab in the top right corner of the Instant UI. 2. Click the Convert tab. 80 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 81: Figure 60 Maintenance - Convert Tab
NOTE: Ensure the Mobility Controller IP Address is reachable by the IAPs. 5. Click Convert Now to complete the conversion. Figure 62 Confirm Access Point Conversion 6. The IAP will reboot and begin operating in RAP mode. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Managing IAPs | 81...
Page 82: Converting An Iap To Cap
Virtual Controller cluster in the same Layer 2 domain. 1. Navigate to the Maintenance tab in the top right corner of the Instant UI. 2. Click the Convert tab 82 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 83: Converting Back To An Iap
The IAP will then boot with the factory default settings. NOTE: W-IAP92, W-IAP93, W-IAP104, W-IAP105, W-IAP134, W-IAP135, W-IAP3WN, W-IAP3WNP — These IAP platforms support reset button. W-IAP175P and W-IAP175AC do not have reset buttons. Please contact Dell support for the backward conversion process on these IAPs.
Page 84: Figure 65 Rebooting The Iap
Unable to contact Access Points after reboot was initiated message will appear. Figure 68 Reboot Successful 7. Click OK to close the window and re-login to the system. 84 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 85: Firmware Image Server In Cloud Network
When new IAPs joining the network need to synchronize its software with that of the virtual controller, and the new IAP is of a different class, the image file for the new IAP will be provided by Dell PowerConnect W- AirWave.
Page 86: Upgrading To New Version
To manually check for a new firmware image version, perform the following steps: Manual Navigate to Maintenance > Firmware to select and manually upgrade the image file. 86 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 87: Automatic
Automatic 1. Click Check for New Version to automatically check for images on the Dell image server in the cloud. The field is replaced with the Image Check in Progress message. After the image check is completed, one of the following messages will appear: No new version available—...
Page 88 88 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 89: Chapter 6 Ntp Server
Network Time Protocol (NTP) is required to obtain the precise time from a server and to regulate the local time in each network element. If NTP server is not configured in the Dell Instant network, an IAP reboot may lead to variation in time and data.
Page 90 90 | NTP Server Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 91: Chapter 7 Virtual Controller
Virtual Controller IP Address You can specify a single static IP address that can be used to manage a multi-AP Dell Instant network. This IP address is automatically provisioned on a shadow interface on the IAP that takes the role of a Virtual Controller.
Page 92: Configuring The Dhcp Server
6. Select Minutes, Hours, or Days for the lease time from the drop-down list next to Lease time. Figure 74 Configuring the DHCP Server 7. Click Ok to apply the changes. 92 | Virtual Controller Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 93: Chapter 8 Authentication
NOTE: A NAS acts as a gateway to guard access to a protected resource. A client connecting to the wireless network first connects to the NAS. The Dell Instant network supports internal RADIUS server and external RADIUS server for 802.1x authentication.
Page 94: External Radius Server
NOTE: Dell Instant does not ship with any 802.1x server certificate. EAP-TTLS and EAP-PEAP support is not available until the administrator uploads a valid 802.1x server certificate to the Dell Instant network. By default, the 802.1x authentication is limited to LEAP only.
Page 95: Configuring An External Radius Server
IP address— Enter the IP address of the external RADIUS server.  Auth port— Enter the authorization port number of the external RADIUS server. The port number is  set to 1812 by default. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 95...
Page 96: Figure 75 Configuring An External Radius Server
9. For Internal users— Click Users to populate the system’s internal authentication server with users. For information about adding a user, see “Adding a User” on page 203. 10. Click Next to continue and then click Finish. 96 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 97: Enabling Instant Radius
 AP-Name  ARAP-Features  ARAP-Security  ARAP-Security-Data  ARAP-Zone-Access  Acct-Authentic  Acct-Delay-Time  Acct-Input-Gigawords  Acct-Input-Octets  Acct-Input-Packets  Acct-Link-Count  Acct-Multi-Session-Id  Acct-Output-Gigawords  Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 97...
Page 98  EAP-Message  Error-Cause  Event-Timestamp  Exec-Program  Exec-Program-Wait  Expiration  Fall-Through  Filter-Id  Framed-AppleTalk-Link  Framed-AppleTalk-Network  Framed-AppleTalk-Zone  Framed-Compression  Framed-IP-Address  98 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 99  Rad-Id  Rad-Length  Reply-Message  Revoke-Text  Server-Group  Server-Name  Service-Type  Session-Timeout  Simultaneous-Use  State  Strip-User-Name  Suffix  Termination-Action  Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 99...
Page 100: Management Authentication Settings
RADIUS server w/ fallback to internal— Specify the radius servers as well as a Username and Password. If  there is no response from the RADIUS server (RADIUS server timeout), the authentication will switch to Internal. Figure 77 Management Authentication Settings 100 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 101: Captive Portal
Captive Portal Dell Instant network supports captive portal authentication method for a Guest network type. In this method, a web page is displayed to a guest user who tries to access the internet. The user has to authenticate or accept company's network usage policy in the web page.
Page 102: Configuring Internal Captive Portal Authentication When Editing A Guest Network
3. Navigate to the Security tab and select one of the following options for the splash page type: a. Internal — Authenticated b. Internal — Acknowledged c. External d. None “Guest Network” on page 59 for more information. 102 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 103: Configuring Internal Captive Portal With External Radius Server Authentication When Adding A Guest Network
If there is no external RADIUS server in the drop-down list, click New to add a RADIUS server. For information on configuring external RADIUS server, see “External RADIUS Server” on page 94. 6. Click Next and then click Finish. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 103...
Page 104: Customizing A Splash Page
3. To change the policy text, click the second square in the splash page, type the required text in the Policy text box, and click OK. The policy text should not exceed 255 characters. 104 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 105: Disabling Captive Portal Authentication
2. Click the edit link. The Edit window for the network appears. 3. Navigate to Security tab and select None from the Splash page type drop-down list. Figure 82 Disabling Captive Portal Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 105...
Page 106: External Captive Portal
4. Click Next and then click Finish. External Captive Portal Dell Instant supports external captive portal authentication. The external portal can be on the cloud or on a server outside the enterprise network. Configuring External Captive Portal Authentication when Adding a Guest Network To configure external captive portal authentication when adding a guest network, perform the following steps: 1.
Page 107: Configuring External Captive Portal Authentication When Editing A Guest Network
8. Accounting— When enabled, the Access Points will post accounting information as RADIUS START and RADIUS STOP accounting records to the RADIUS server. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 107...
Page 108: External Captive Portal Authentication Using Dell Powerconnect W-Clearpass Guestconnect
5. In the Security tab, select External and update the following fields. a. Enter the IP address of the Dell PowerConnect W-ClearPass GuestConnect server in the IP or hostname field. The IP address is 10.65.77.245. b. Enter /page_name.php in the URL field. This URL must correspond to the Page Name configured in the Dell PowerConnect W-ClearPass GuestConnect RADIUS Web Login page.
Page 109: Mac Authentication
NAS identifier: Use this to configure strings for RADIUS attribute 32, NAS Identifier, to be sent with RADIUS requests to the RADIUS server. 5. Click OK to continue. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 109...
Page 110: Walled Garden Access
When a user attempts to navigate to other websites not configured in the white list walled garden profile, the user is redirected back to the login page. In addition, the black listed walled garden profile is configured to explicitly block navigation to websites from unauthenticated users. 110 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 111: Certificates
Dell Instant supports the following certificate files: Server certificate: PEM or PKCS#12 format with passphrase (PSK)  CA certificate: PEM or DER format  Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Authentication | 111...
Page 112: Loading Certificates Using Instant Webui
Upload New Certificate to directly upload the certificate. Refer Loading Certificates using Instant WebUI for further instructions. 2. Dell PowrConnect W-AirWave: Navigate to Device Setup > Certificate and then click Add New Certificate. Refer Loading Certificates using Dell PowrConnect W-AirWave for further instructions.
Page 113: Loading Certificates Using Dell Powrconnect W-Airwave
7. The Certificate Successfully Installed window will appear. Loading Certificates using Dell PowrConnect W-AirWave You can now manage Instant AP certificates using the Dell PowrConnect W-AirWave Management server (AMP). The AMP directly provision the certificates for basic certificate verification (i.e certificate type, format, version, serial number etc) before accepting the certificate and uploading to an IAP network.
Page 114: Figure 90 Ca Certificate
Organization name in the Instant Web UI. Refer Entering the Organization String and AMP Information into the IAP for further information. Figure 92 Selecting the Group 114 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 115: Figure 93 Virtual Controller Certificate
Figure 93 Virtual Controller Certificate 6. Click Save to apply the changes only to Dell PowrConnect W-AirWave. Click Save and Apply to apply the changes to the Instant AP. 7. Click Revert to unselect the certificate options.
Page 116 116 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 117: Chapter 9 Encryption
Encryption Types Supported in Dell Instant Encryption is the process of converting data into an undecipherable format or code when it is transmitted on a network. Encryption prevents unauthorized use of the data. The following encryption types are supported in Dell Instant: Though WEP is an authentication method, it is also an encryption algorithm where all users typically share the same key.
Page 118: Understanding Wpa And Wpa2
Voice Network or Handheld devices 802.1X or PSK as supported by the device AES if possible, TKIP or WEP if necessary (combine with restricted policy enforcement firewall (PEF) user role). 118 | Encryption Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 119: Chapter 10 Role Derivation
Chapter 10 Role Derivation Every client in a Dell Instant network is associated with a user role, which determines the client’s network privileges, how often it must re-authenticate, and which bandwidth contracts are applicable. This chapter describes creating and assigning roles using the Instant UI.
Page 120: Creating Role Assignment Rules
To create role assignment rules for the user role, perform the following steps: 1. Click New in the Role Assignment Rules section of the window. The default user role is the newly created user role. 120 | Role Derivation Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 121: Figure 96 Creating Role Assignment Rules
4. Enter the string to match in the String text box. 5. Select the appropriate role from the Role drop-down list. 6. Click OK. Figure 96 Creating Role Assignment Rules Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Role Derivation | 121...
Page 122 122 | Role Derivation Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 123: Chapter 11 User Vlan Derivation
Vendor Specific Attributes (VSA) When an external radius server is used, the user VLAN can be derived from the Dell-User-Vlan VSA.The VSA is then carried in Access-Accept packet from the radius server. The IAP can analyze the return message and get the value as VLAN to assign the user.
Page 124: Vlan Derivation Rule
2. Select the VLAN tab and check the Dynamic radio button under the client VLAN assignment. 3. Click the New button to assign the user to a VLAN. The New VLAN Assignment Rule window appears. 124 | User VLAN Derivation Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 125: User Role
5. Click the New button under the Access rules. 6. Select the Rule type as VLAN assignment. 7. Enter the ID of the VLAN in the VLAN id textbox. 8. Click OK. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide User VLAN Derivation | 125...
Page 126: Figure 101 Configuring Vlan Derivation Using The User Role
8. Enter the string to match in the String textbox. 9. Select the role to be assigned from the Role textbox. 10. Click OK. Figure 102 To Use a Defined User VLAN Role 126 | User VLAN Derivation Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 127: Ssid Profile
2. Select the VLAN tab and check the static radio button under the client VLAN assignment. 3. Enter the ID of the VLAN in the VLAN ID textbox. 4. Click OK. Figure 103 Configuring VLAN Derivation Rules Using SSID Profile Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide User VLAN Derivation | 127...
Page 128 128 | User VLAN Derivation Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 129: Chapter 12 Instant Firewall
Dell Instant implements the Instant Firewall feature that uses a simplified firewall policy language. An administrator can define the firewall policies on an SSID or wireless network such as the Guest network or an Employee network.
Page 130: Service Options
Network Basic Input/Output System-Session Service Network Time Protocol papi Point of Access for Providers of Information pop3 Post Office Protocol 3 pptp Point-to-Point Tunneling Protocol rtsp Real Time Streaming Protocol 130 | Instant Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 131: Destination Options
To define the access rule to an existing network, click the network. The edit link appears. Click the edit link and navigate to the Access tab. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant Firewall | 131...
Page 132: Allow Pop3 Service To A Particular Server
To define the access rule to an existing network, click the network. The edit link appears. Click the edit link and navigate to the Access tab. 2. In the Basic Info tab, enter the appropriate information and click Next to continue. 132 | Instant Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 133: Deny Ftp Service Except To A Particular Server
To define deny FTP service access rule except to a particular server, perform the following steps: 1. Click New, the New Rule window appears. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant Firewall | 133...
Page 134: Deny Bootp Service Except To A Particular Network
4. Select except to a network from the Destination drop-down list. Enter the appropriate IP address in the IP text box.  Enter the appropriate netmask in the Netmask text box.  5. Click OK. 134 | Instant Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 135: Figure 108 Defining Rule - Deny Bootp Service Except To A Network
6. Click Finish. Figure 108 Defining Rule — Deny bootp Service Except to a Network Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Instant Firewall | 135...
Page 136 136 | Instant Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 137: Chapter 13 Content Filtering
Chapter 13 Content Filtering Dell Instant uses OpenDNS to implement the Content Filtering feature. OpenDNS is a Domain Name System (DNS) resolution service provider. It offers features such as misspelling correction, phishing protection, and integrated web content filtering. For more information on OpenDNS, refer opendns.com/.
Page 138: Enterprise Domains
Figure 109 Enabling Content Filtering The content filtering configuration applies to all the IAPs in the Dell Instant network and the service is enabled or disabled globally across all the wireless networks that are configured in the Dell Instant. Enterprise Domains The Enterprise Domain Names displays all the DNS domain names that are valid on the enterprise network.
Page 139: Chapter 14 Os Fingerprinting
OS Fingerprinting The OS Fingerprinting feature gathers information about the client that is connected to the Dell Instant network to find the operating system that the client is running on. The following is a list of advantages of this feature: Identifying rogue clients—...
Page 140 140 | OS Fingerprinting Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 141: Chapter 15 Adaptive Radio Management
ARM Features This section describes ARM features that are available in Dell Instant. Channel or Power Assignment This feature automatically assigns channel and power settings for all the IAPs in the network according to changes in the RF environment.
Page 142: Airtime Fairness Mode
IAP. Here, the administrator can configure the ARM channels in the channel width window. The valid channels will automatically show in the static channel assignment window. 142 | Adaptive Radio Management Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 143: Min Transmit Power
IAP RF environment. Each IAP gathers other metrics on their ARM-assigned channel to provide a snapshot of the current RF health state. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Adaptive Radio Management | 143...
Page 144: Configuring Administrator Assigned Radio Settings For Iap
Configuring Administrator Assigned Radio Settings for IAP Adaptive Radio Management (ARM) is enabled on Dell Instant by default. It automatically assigns appropriate channel and power settings for the IAPs. To manually configure radio settings, perform the following steps: 1. In the Access Points tab, click the AP for which you want to enable ARM. The edit link appears.
Page 145: Configuring Radio Profiles In Instant
Configuring Radio Profiles in Instant Dell Instant supports radio profile configuration. The radio settings are available for both the 2.4-GHz and the 5- GHz radio profiles. You can configure the radios separately, using the parameters described in table on each radio.
Page 146 When set to Static, this value specifies the tolerable interference that must be maintained. Channel reuse threshold NOTE: Ensure to reboot the IAP after configuring the radio profile settings in order for the changes to take effect. 146 | Adaptive Radio Management Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 147: Chapter 16 Intrusion Detection System
Rogue AP Detection and Classification The most important IDS functionality offered in the Dell Instant network is the ability to detect rogue APs, interfering APs, and other devices that can potentially disrupt network operations. An AP is considered to be a rogue AP if it is both unauthorized and plugged into the wired side of the network.
Page 148: Figure 116 Wireless Intrusion Protection- Detection
Medium  Detect Adhoc networks using VALID SSID— Valid SSID list will be auto-configured based on Instant AP configuration  Detect Malformed Frame— Large Duration 148 | Intrusion Detection System Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 149: Table 20 Client Detection Policies
Detect EAP Rate Anomaly   Detect Rate Anomaly  Detect Chop Chop Attack Detect TKIP Replay Attack  IDS Signature— Air Jack   IDS Signature— ASLEAP Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Intrusion Detection System | 149...
Page 150: Figure 117 Wireless Intrusion Protection- Protection
The following table describes the detection policies that are enabled in Client Protection Custom settings box. Table 22 Client Protection Policies Detection Level Detection Policy All detection policies are disabled Protect Valid Station  High  Protect Windows Bridge 150 | Intrusion Detection System Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 151: Containment Methods
You can enable wired and wireless containments to prevent unauthorized stations from connecting to your Instant network. Instant supports the following types of containment mechanisms: Wired containment— When enabled, Dell PowerConnect W-Series Instant Access Points will generate ARP  packets on the wired network to contain wireless attacks.
Page 152 152 | Intrusion Detection System Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 153: Chapter 17 Snmp
Dell Instant supports versions 1, 2c, and 3 of Simple Network Management Protocol (SNMP) for reporting purposes only. In other words, SNMP cannot be used for setting values in a Dell system in the current IAP. SNMP Parameters for IAP You can configure the following parameters for IAP.
Page 154: Figure 119 Creating Community Strings For Snmpv1 And Snmpv2
9. To edit the details for a particular user, select the user and click Edit. 10. To delete a particular user, select the user and click Delete. 154 | SNMP Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 155: Snmp Traps
Figure 120 Creating Users for SNMPV3 SNMP Traps Dell Instant supports the configuration of external trap receivers in the Instant UI. Only the IAP acting as the Virtual Controller will generate traps. The OID of the traps is 1.3.6.1.4.1.14823.2.3.3.1.200.2.X. Figure 121 SNMP Traps Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 156 NOTE: Dell PowerConnect W-Series-specific management information bases (MIBs) describe the objects that can be managed using SNMP. See the Dell PowerConnect W-Series Instant Access Point MIB Reference Guide for information about the Dell PowerConnect W-Series and Aruba MIBs and SNMP traps.
Page 157: Chapter 18 Ethernet Downlink
NOTE: The Power Sourcing Equipment (PSE) functionality is available only for the Ethernet port2 on W-RAP3WNP. Admin Status Displays the status of the admin. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Ethernet Downlink | 157...
Page 158: Assigning A Profile To The Ethernet Port
Ethernet 2 port, select the profile from the Ethernet 2 drop down list  Figure 123 Assigning a Profile to the Ethernet Port 158 | Ethernet Downlink Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 159: Chapter 19 Uplink Configuration
Uplink Configuration Uplink Configuration Overview The Dell PowerConnect W-Instant supports 3G USB modems for the corporate Instant network. The 3G USB modems can be used to extend the connectivity to places where ethernet uplink cannot be configured. By using this, the client traffic can reach the internet and the corporate network. It also provides a reliable backup link for the ethernet based Instant network.
Page 160: Table 25 List Of Supported 3G Modems
Huawei E220 for Movistar in Spain Huawei E180 for Movistar in Spain  True Auto Detect (continued) ZTE-MF820   Huawei E173s-1  Sierra 320  Longcheer WM72 U600(3G mode)  160 | Uplink Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 161 USB modem parameter from the WebUI. Use the following procedure to provision 3G uplink manually: 1. In the settings tab, click the show advanced settings hyperlink. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Uplink Configuration | 161...
Page 162: Uplink Switchover
The default priority list is eth0, 3G. The IAP has the ability to switch to the lower priority uplink if the current uplink is down. NOTE: IAP reboot is not required for uplink swtichover process. 162 | Uplink Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 163: Uplink Preemption
NOTE: The user can force to use one uplink manually, so that the IAP use that uplink, switchover and preemption does not work under this configuration. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Uplink Configuration | 163...
Page 164 164 | Uplink Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 165: Chapter 20 Dell Powerconnect W-Airwave Integration And Management
IAP and Client Monitoring Dell PowerConnect W-AirWave allows you to find any IAP or client on the wireless network and to see real-time monitoring views. These monitoring views can be used to aggregate critical information and high-end monitoring information.
Page 166: Template-Based Configuration
The WIDS report cites the number of IDS events for devices that have experienced the most instances in the prior 24 hours, and provides links to support additional analysis or configuration in response. 166 | Dell PowerConnect W-AirWave Integration and Management Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 167: Rf Visualization Support For Dell Instant
Additional strings in the Organization String are used to create a hierarchy of sub folders under the folder named “Org”: subfolder1 would be a folder under the “Org” folder  subfolder2 would be a folder under subfolder1  Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Dell PowerConnect W-AirWave Integration and Management | 167...
Page 168: About Shared Key
In networks that are not using DHCP option 60 and 43, it is easy to use the standard DHCP options 60 and 43 for Dell AP or Dell Instant AP. For Dell APs these options can be used to indicate the, master controller or the local controller.
Page 169: Figure 131 Instant And Dhcp Options For Dell Powerconnect W-Airwave- Set Predefined Options
4. Go to Server Manager and select Server Options in the IPv4 window. (This will set the value globally. Use options in a per scope basis to override the global options). 5. Right click on Server Options and select configure options. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Dell PowerConnect W-AirWave Integration and Management | 169...
Page 170: Figure 133 Instant And Dhcp Options For Dell Powerconnect W-Airwave- Server Options
Figure 133 Instant and DHCP options for Dell PowerConnect W-AirWave— Server Options 6. Select 060 Dell Instant AP in the Server Options window and enter Dell InstantAP in the String Value. Figure 134 Instant and DHCP options for Dell PowerConnect W-AirWave—060 Dell Instant AP in Server Options 7.
Page 171: Alternate Method For Defining Vendor Specific Dhcp Options
60 and 43 for giving the DHCP clients info about certain services such as PXE to the DHCP clients. In such an environment, it is not possible to use the standard DHCP option 60 and 43 for Dell APs.
Page 172: Figure 137 Vendor Specific Dhcp Options
This method describes how to set up a DHCP server to send option 43 with Dell PowerConnect W-AirWave information to Dell Instant IAP. This section assumes that option 43 will be sent per scope since option 60 is being shared by other devices as well.
Page 173: Figure 138 Dell Powerconnect W-Airwave - New Group
Figure 138 Dell PowerConnect W-AirWave — New Group Figure 139 Dell PowerConnect W-AirWave —Monitor Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Dell PowerConnect W-AirWave Integration and Management | 173...
Page 174 174 | Dell PowerConnect W-AirWave Integration and Management Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 175: Chapter 21 Monitoring
Virtual Controller View The Virtual Controller view is the default view.This view allows you to monitor the Dell Instant network. The following Instant UI elements are available in this view: Tabs— Contains three tabs— Networks, Access Points, and Clients. For detailed information about the tabs, ...
Page 176: Monitoring Link
RF Dashboard The RF Dashboard section displays the following information: IP address, Signal, and Speed information about the clients in the Dell Instant network. If the speed or signal  strength of a client is low, IP address of the client appears as a link. Click the link to monitor the client. For more information, see “Client View”...
Page 177: Client Alerts Link
Virtual the last 15 minutes. Controller at 11:43 hours. To see the exact number of clients in the Dell  Instant network at a particular time, hover the cursor over the graph line.
Page 178: Network View
Network View All Wi-Fi networks in the Dell Instant network are listed in the Networks tab. Click the network that you want to monitor. Network View for the selected network appears. Similar to the Virtual Controller view, the Network view also has three tabs— Networks, Access Points, and Clients.
Page 179: Usage Trends
The Network view appears. 3. Study the Clients graph in the Usage Trends  To see the exact number of clients in the Dell Instant network at a particular time, hover the pane. For example, the graph on the left shows cursor over the graph line.
Page 180: Instant Access Point View
Instant Access Point View All IAPs in the Dell Instant network are listed in the Access Points tab. Click the IAP that you want to monitor. Access Point view for that IAP appears.
Page 181: Info
2.4 GHz Frames  Figure 147 2.4 GHz Frames Graph Noise Floor  Errors  To see the graphs for the 5 GHz band, click the 5 GHz link. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Monitoring | 181...
Page 182: Table 28 Instant Access Point View - Rf Trends Graphs And Monitoring Procedures
NOTE: You can also click the rectangle icon the Noise column in the RF Dashboard pane to see the Noise graph for the selected IAP. The rectangle icon is seen as follows: 182 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 183: Usage Trends
IAP for the last 15 minutes. To see the exact throughput of the selected IAP at a particular time, hover the cursor over the graph line. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Monitoring | 183...
Page 184: Client View
Client View In the Virtual Controller view, all clients in the Dell Instant network are listed in the Clients tab. Click the IP address of the client that you want to monitor. Client view for that client appears. The Client view has three tabs— Networks, Access Points, and Clients.
Page 185: Rf Trends
The RF Trends section displays the following graphs for the selected client: Signal  Figure 149 Signal Graph Frames  Figure 150 Frames Graph Speed  Figure 151 Speed Graph Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Monitoring | 185...
Page 186: Figure 152 Throughput Graph
Maximum, and Average statistics for the In, Out, Retries In, and Retries Out frames. To see the exact frames at a particular time, hover the cursor over the graph line. 186 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 187 15 minutes. To see the exact throughput at a particular time, hover the cursor over the graph line. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Monitoring | 187...
Page 188: Mobility Trail
Access Point— IAP name with which the client was associated.  NOTE: Mobility information about the client is reset each time it roams from one IAP to another. 188 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 189: Chapter 22 Alert Types And Management
Alert Types Alerts are generated when a user encounters problems while accessing or connecting to the Wi-Fi network. These alerts enable you to troubleshoot the problems. The alerts that are generated on Dell Instant can be categorized as follows: 802.11 related association and authentication failure alerts.
Page 190 DHCP request timed out This client did not receive a response to Check the status of the DHCP server in its DHCP request in time. the network. 190 | Alert Types and Management Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 191: Chapter 23 Policy Enforcement Firewall
Chapter 23 Policy Enforcement Firewall Dell’s Policy Enforcement Firewall (PEF) module for Dell Instant provides identity-based controls to enforce application-layer security, prioritization, traffic forwarding, and network performance policies for wired and wireless networks. The PEF window displays the external/internal authentication servers, currently defined roles for all the networks, blacklisted clients and to enable or disable the protocols for ALG.
Page 192: Users For Internal Server
NOTE: A special default role with the same name as the network is automatically defined for each network. These roles cannot be deleted or renamed. 192 | Policy Enforcement Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 193: Client Blacklisting
Client Blacklisting The client blacklisting denies connectivity to the blacklisted clients. When a client is blacklisted in a Dell IAP, the client is not allowed to associate with the IAP in the network. If a client is connected to the network when it is blacklisted, a deauthentication message will be send to force the client to disconnect.
Page 194: Types Of Client Blacklisting
Authentication Failure Blacklisting When the time taken by a client fails to authenticate exceeds the configured threshold, the client would be automatically blacklisted by an IAP. 194 | Policy Enforcement Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 195: Session Firewall Based Blacklisting
Instant firewall now supports the ALG (Application Layer Gateway) functions such as SIP, Vocera, Alcatel NOE, and Cisco Skinny protocols. To enable or disable the protocols for ALG in Dell Instant perform the following steps: 1. Select PEF from the top right of the Instant UI.
Page 196: Firewall-Based Logging
IAP and the client, or wait for few minutes to ensure the changes take effect. Firewall-based Logging Instant firewall now supports firewall based logging function. The firewall logs on the Instant APs are generated as syslog messages. 196 | Policy Enforcement Firewall Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 197: Chapter 24 Vpn Configuration
The VPN configuration functionality enables the IAP to create a single VPN tunnel from the Virtual Controller to a Dell Mobility Controller in your corporate office. Here, the VPN tunnels from the Instant APs terminate on the Dell Mobility Controller. The controller solely acts as a VPN end-point and does not supply the Instant AP with any configuration.
Page 198: Routing Profile Configuration
7. Enter the Hold time which indicates the duration of the controller that will remain on the backup controller. 8. Click Next to continue. Routing Profile Configuration Instant can terminate VPN connections on Dell Mobility Controllers. The Routing profile defines the corporate subnets which need to be tunneled through the IPSec tunnel. Figure 161 Corporate Access—...
Page 199: Nat Dhcp Configuration
DNS server— An optional field which defines the DNS server.  Domain name— An optional field which defines the domain name.  Lease time— An optional field which defines the lease time for client.  Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide VPN Configuration | 199...
Page 200: Distributed L2 Dhcp Configuration
Domain name— An optional field which defines the domain name.  Lease time— An optional field which defines the lease time for client.  2. Click OK to apply these changes. 200 | VPN Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 201: Distributed L3 Dhcp Configuration
Domain name— An optional field which defines the domain name.  Lease time— An optional field which defines the lease time for client  2. Click OK to apply these changes. Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide VPN Configuration | 201...
Page 202: Centralized L2 Dhcp Configuration
VLAN— VLAN ID of the subnet. This needs to be referenced in the SSID configuration to make use of  this subnet. 2. Click OK to apply these changes. Figure 166 Centralized L2 DHCP Configuration 202 | VPN Configuration Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 203: Chapter 25 User Database
User Database In Dell Instant, the user database consists of a list of guest and employee users. Addition of a user involves specifying a username and password for the user. The login credentials for these users are provided outside the Dell Instant system.
Page 204: Editing User Settings
To delete all users or multiple users at a time, select the usernames that you want to delete, and click Delete All. NOTE: Deleting a user only removes the user record from the user database, and won't disconnect the online user under this username. 204 | User Database Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 205: Chapter 26 Regulatory Domain
The channels that can be used in a particular country differ based on the regulations of that country. The initial Wi-Fi setup requires you to specify the country code for the country in which the Dell Instant will operate. This configuration sets the regulatory domain for the radio frequencies that the IAPs use. Within the regulated transmission spectrum, a high-throughput 802.11a, 802.11b/g, or 802.11n radio setting can be...
Page 206: Country Codes List
Republic of Korea (South Korea) China France Hong Kong Singapore Taiwan Brazil Israel Saudi Arabia Lebanon United Arab Emirates South Africa Argentina Australia Austria Bolivia Chile Greece 206 | Regulatory Domain Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 207 Panama Russia Kuwait Liechtenstein Lithuania Mexico Morocco New Zealand Poland Puerto Rico Slovak Republic Slovenia Thailand Uruguay Panama Russia Egypt Trinidad and Tobago Turkey Costa Rica Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Regulatory Domain | 207...
Page 208 Serbia and Montenegro Indonesia Peru Venezuela Jamaica Bahrain Oman Jordan Bermuda Colombia Dominican Republic Guatemala Philippines Sri Lanka El Salvador Tunisia Islamic Republic of Pakistan Qatar Algeria 208 | Regulatory Domain Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 209: Appendix A Controller Configuration For Vpn
AP MAC address needs to be saved in the Radius server as a lower case entry without any delimiter. (ArubaW-3400) #local-userdb-ap add mac-address 00:11:22:33:44:55 ap-group test (ArubaW-3400) # Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Controller Configuration for VPN | 209...
Page 210: Vpn Local Pool Configuration
This role is used to define src-nat rule to Radius server to get Dynamic Radius proxy working. (ArubaW-3400) (config) #ip access-list session iaprole (ArubaW-3400) (config-sess-iaprole)#any host <radius-server-ip> any src-nat (ArubaW-3400) (config-sess-iaprole)#any any any permit (ArubaW-3400) (config-sess-iaprole)#! 210 | Controller Configuration for VPN Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 211 (ArubaW-3400) (config) #aaa authentication vpn default-iap (ArubaW-3400) (VPN Authentication Profile "default-iap") #server-group default (ArubaW-3400) (VPN Authentication Profile "default-iap") #default-role iaprole (ArubaW-3400) (VPN Authentication Profile "default-iap") #! (ArubaW-3400) (config) # Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Controller Configuration for VPN | 211...
Page 212 212 | Controller Configuration for VPN Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...
Page 213: Appendix B Abbreviations
Network Access Server Network Address Translation Name Server Network Time Protocol PEAP Protected Extensible Authentication Protocol Privacy Enhanced Mail Power over Ethernet RADIUS Remote Authentication Dial In User Service Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Abbreviations | 213...
Page 214 Table 33 List of abbreviations (Continued) Abbreviation Expansion Virtual Controller Vendor-Specific Attributes WLAN Wireless Local Area Network 214 | Abbreviations Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide...

This manual is also suitable for:

Powerconnect w-iap92 Powerconnect w-series

Dell PowerConnect W-IAP3WN User Manual

Figures

Chapter 1 Initial Configuration

Chapter 2 Instant User Interface

Figure

Chapter 3 Wireless Network

Chapter 4 Mesh Network

Chapter 5 Managing Iaps

Chapter 6 NTP Server

Chapter 7 Virtual Controller

Chapter 8 Authentication

Chapter 9 Encryption

Chapter 10 Role Derivation

Chapter 11 User VLAN Derivation

Chapter 12 Instant Firewall

Chapter 13 Content Filtering

Chapter 14 OS Fingerprinting

Chapter 15 Adaptive Radio Management

Quick Links

Related Manuals for Dell PowerConnect W-IAP3WN

Summary of Contents for Dell PowerConnect W-IAP3WN