Alcatel-Lucent IAP93 Betriebsanweisung

User GuideAOS-W Instant6.3.1.1-4.0

10 | Contents AOS-W Instant 6.3.1.1-4.0 | User GuideIn the AOS-W Instant UI 122In the CLI 122Configuring Captive Portal Roles for an SSID 123In the AO

100 | Wireless Network Profiles AOS-W Instant 6.3.1.1-4.0 | User GuideIn the AOS-W Instant UITo modify the status of a WLAN SSID profile:1. In the Net

In the CLITo enable the extended SSIDs:(Instant Access Point)(config)# extended-ssid(Instant Access Point)(config)# end(Instant Access Point)# commit

AOS-W Instant 6.3.1.1-4.0 | User Guide Wired Profiles | 102Chapter 10Wired ProfilesThis chapter describes the following procedures:l Configuring a Wir

103 | Wired Profiles AOS-W Instant 6.3.1.1-4.0 | User Guidea. Name— Specify a name for the profile.b. Primary Usage — Select Employee or Guest.c. Spee

l Access — Select this mode to allow the port to carry a single VLAN specified as the native VLAN.l Trunk — Select this mode to allow the port to carr

105 | Wired Profiles AOS-W Instant 6.3.1.1-4.0 | User GuideIn the AOS-W Instant UITo configure security parameters for an employee network:1. Configur

l Role-based— Allows the users to obtain access based on the roles assigned to them.l Unrestricted— Allows the users to obtain unrestricted access on

107 | Wired Profiles AOS-W Instant 6.3.1.1-4.0 | User GuideTo configure unrestricted access:(Instant Access Point)(config)# wired-port-profile <nam

Enabling wired bridging on this port of an OAW-IAP makes the port available as a downlink wired bridge and allowsclient access through the port. You c

109 | Wired Profiles AOS-W Instant 6.3.1.1-4.0 | User Guide1. Click the Wired link under More at the top right corner of the AOS-W Instant main window

Understanding Encryption Types 141WPA and WPA2 141Recommended Authentication and Encryption Combinations 141Understanding Authentication Survivability

AOS-W Instant 6.3.1.1-4.0 | User Guide Captive Portal for Guest Access | 110Chapter 11Captive Portal for Guest AccessThis chapter provides the followi

111 | Captive Portal for Guest Access AOS-W Instant 6.3.1.1-4.0 | User GuideWalled GardenThe administrators can also control the resources that the gu

Parameters DescriptionDMO channel utilization thresholdSpecify a value to set a threshold for DMO channel utilization. With DMO, theOAW-IAP converts m

113 | Captive Portal for Guest Access AOS-W Instant 6.3.1.1-4.0 | User GuideParameters DescriptionDisable SSIDSelect to the checkbox to disable the SS

(Instant Access Point)(SSID Profile <name># broadcast-filter <type>(Instant Access Point)(SSID Profile <name># dtim-period <numbe

115 | Captive Portal for Guest Access AOS-W Instant 6.3.1.1-4.0 | User Guidef. Content Filtering— To ensure that all DNS requests to non-corporate dom

(Instant Access Point)(config)# wired-port-profile <name>(Instant Access Point)(wired ap profile <name>)# set-vlan <attribute>{equal

117 | Captive Portal for Guest Access AOS-W Instant 6.3.1.1-4.0 | User GuideParameter DescriptionAccounting mode(Applicable for WLAN SSIDsonly.)Select

(Instant Access Point) (wired ap profile "<name>")# auth-server <server1>(Instant Access Point) (wired ap profile "<name

119 | Captive Portal for Guest Access AOS-W Instant 6.3.1.1-4.0 | User GuideParameter DescriptionName Enter a name for the profile.Type Select any one

12 | Contents AOS-W Instant 6.3.1.1-4.0 | User GuideIn the AOS-W Instant UI 154In the CLI 154Configuring MAC Authentication with 802.1X Authentication

Configuring an SSID or Wired Profile to Use External Captive Portal AuthenticationYou can configure external captive portal authentication for a netwo

121 | Captive Portal for Guest Access AOS-W Instant 6.3.1.1-4.0 | User GuideParameter DescriptionisEncryption Select Enabled to configure encryption s

a. Enter the IP address of the ClearPass Guest server in the IP or hostname field. Obtain the ClearPass GuestIP address from your system administrator

123 | Captive Portal for Guest Access AOS-W Instant 6.3.1.1-4.0 | User Guide(Instant Access Point)(Access Rule <name>)# rule <dest> <ma

In the AOS-W Instant UITo create a Captive portal role:1. Select an SSID profile from the Networks tab. The Edit <WLAN-Profile> window is displa

125 | Captive Portal for Guest Access AOS-W Instant 6.3.1.1-4.0 | User GuideField Descriptionpage that would be displayed to users connecting to the n

(Instant Access Point)(Access Rule <Name>)# end(Instant Access Point)# commit applyConfiguring Walled Garden AccessOn the Internet, a walled gar

127 | Captive Portal for Guest Access AOS-W Instant 6.3.1.1-4.0 | User GuideYoucan also customize splash page design in the Security tab of New WLAN a

AOS-W Instant 6.3.1.1-4.0 | User Guide User Management | 128Chapter 12User ManagementThis chapter provides the following information:l OAW-IAP Users o

129 | User Management AOS-W Instant 6.3.1.1-4.0 | User Guide2. Click the Admin tab. The Admin tab details are displayed. The following figure shows th

Roles and Policies 164Firewall Configuration 164Configuring ALG Protocols 164In the AOS-W Instant UI 164In the CLI 165Configuring Firewall Settings fo

(Instant Access Point)# commit applyConfiguring Guest Management Interface Administrator CredentialsYou can configure guest administrator credentials

131 | User Management AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 43 Adding a User3. Enter the username in the Username text box.4. Enter the passwor

To configure a guest user:(Instant Access Point)(config)# user <username> <password> portal(Instant Access Point)(config)# end(Instant Acc

133 | User Management AOS-W Instant 6.3.1.1-4.0 | User Guide2. To add a user, click New. The New Guest User pop-up window is displayed.3. Specify a Us

AOS-W Instant 6.3.1.1-4.0 | User Guide Authentication | 134Chapter 13AuthenticationThis chapter provides the following information:l Understanding Aut

135 | Authentication AOS-W Instant 6.3.1.1-4.0 | User Guidesuccessful, the mac-auth-only role is overwritten by the final role. The mac-auth-only role

External RADIUS ServerIn the external RADIUS server, the IP address of the Virtual Controller is configured as the NAS IP address. AOS-WInstant RADIUS

137 | Authentication AOS-W Instant 6.3.1.1-4.0 | User GuideAlcatel-Lucent does not recommend the use of LEAP authentication method, because it does no

l Aruba-AP-Namel Aruba-AS-Credential-Hashl Aruba-AS-User-Namel Aruba-Admin-Rolel Aruba-AirGroup-Device-Typel Aruba-AirGroup-Shared-Rolel Aruba-AirGrou

139 | Authentication AOS-W Instant 6.3.1.1-4.0 | User Guidel Digest-Responsel Domain-Namel EAP-Messagel Error-Causel Event-Timestampl Exec-Programl Ex

14 | Contents AOS-W Instant 6.3.1.1-4.0 | User GuideCreating a User Role 175In the AOS-W Instant UI 175In the CLI 176Assigning Bandwidth Contracts to

l Message-Authl NAS-IPv6-Addressl NAS-Port-Typel Operator-Namel Passwordl Password-Retryl Port-Limitl Prefixl Promptl Rad-Authenticatorl Rad-Codel Rad

141 | Authentication AOS-W Instant 6.3.1.1-4.0 | User GuideUnderstanding Encryption TypesEncryption is the process of converting data into a cryptic f

Network Type Authentication EncryptionEmployee 802.1X AESGuest Network Captive Portal NoneVoice Network or Handhelddevices802.1X or PSK assupported by

143 | Authentication AOS-W Instant 6.3.1.1-4.0 | User GuideIf both the OAW-IAP to which the client was associated and the CPPM are not available, the

Figure 47 802.1X Authentication when CPPM is reachable againYou can enable authentication survivability for a wireless network profile when configurin

145 | Authentication AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 48 New Authentication Server Window3. Configure any of the following types of server

Parameter DescriptionRFC 3576Select Enabled to allow the APs to process RFC 3576-compliant Change ofAuthorization (CoA) and disconnect messages from t

147 | Authentication AOS-W Instant 6.3.1.1-4.0 | User GuideParameter DescriptionDirectory, the value is sAMAccountNameTimeout Enter a value between 1

To configure an LDAP server:(Instant Access Point)(config)# wlan ldap-server <profile-name>(Instant Access Point)(LDAP Server <profile-name&g

149 | Authentication AOS-W Instant 6.3.1.1-4.0 | User GuideController for communication with external RADIUS servers. Ensure that the Virtual Controll

In the CLI 185Assigning User VLAN Roles to a Network Profile 185In the AOS-W Instant UI 185In the CLI 186Uplink Configuration 187Uplink Interfaces 187

5. From the Authentication Server 1 drop-down, select the server name on which dynamic RADIUS proxyparameters are enabled. You can also create a new s

151 | Authentication AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 49 Admin Tab: Management Authentication Parameters3. Under Local, select any of the

The steps involved in 802.1X authentication are as follows:1. The NAS requests authentication credentials from a wireless client.2. The wireless clien

153 | Authentication AOS-W Instant 6.3.1.1-4.0 | User Guide(Instant Access Point)(SSID Profile <name>)# opmode {wpa2-aes|wpa-tkip|wpa-tkip,wpa2-

Configuring MAC Authentication for Wireless Network ProfilesYou can configure MAC authentication for a wired profile in the AOS-W Instant UI or CLI.In

155 | Authentication AOS-W Instant 6.3.1.1-4.0 | User Guide(Instant Access Point)(wired ap profile <name>)# auth-server <server-1>(Instant

1. Click the Wired link under More at the top right corner of the AOS-W Instant main window. The Wired window isdisplayed.2. Click New under Wired Net

157 | Authentication AOS-W Instant 6.3.1.1-4.0 | User Guide2. In the Access tab, specify the following parameters for a network with Role-Based rules:

3. Click WISPr tab. The WISPr tab contents are displayed. The following figure shows the WISPr tab contents:Figure 50 Configuring WISPr Authentication

159 | Authentication AOS-W Instant 6.3.1.1-4.0 | User GuideBlacklisting Clients ManuallyManual blacklisting adds the MAC address of a client to the bl

16 | Contents AOS-W Instant 6.3.1.1-4.0 | User GuideMobility and Client Management 200Layer-3 Mobility Overview 200Configuring L3-Mobility 201Home Age

3. Under Dynamic Blacklisting:4. For Auth failure blacklist time, duration in seconds after which the clients that exceed the authentication failureth

161 | Authentication AOS-W Instant 6.3.1.1-4.0 | User GuideLoading Certificates using AOS-W Instant UITo load a certificate in the AOS-W Instant UI:1.

1. Navigate to Device Setup > Certificate and then click Add to add a new certificate. The Certificate window isdisplayed.2. Enter the certificate

163 | Authentication AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 54 Selecting the GroupThe Virtual Controller Certificate section displays the certif

AOS-W Instant 6.3.1.1-4.0 | User Guide Roles and Policies | 164Chapter 14Roles and PoliciesThis chapter describes the procedures for configuring user

165 | Roles and Policies AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 55 Firewall Settings—ALG Protocols3. Select Enabled from the corresponding drop-

Configuring Firewall Settings for Protection from ARP AttacksYou can configure firewall settings to protect the network against attacks using AOS-W In

167 | Roles and Policies AOS-W Instant 6.3.1.1-4.0 | User Guidefix-dhcp Enabledpoison-check EnabledTo view the attack statistics(Instant Access Point)

Figure 57 FirewallSettings—Management Subnets2. To add a new management subnet:l Enter the subnet address in Subnet.l Enter the subnet mask in Mask.l

169 | Roles and Policies AOS-W Instant 6.3.1.1-4.0 | User GuideAccess Control List RulesYou can use Access Control List (ACL) rules to either permit o

Configuring ARM Features on an OAW-IAP 213In the AOS-W Instant UI 213In the CLI 216Configuring Radio Settings for an OAW-IAP 218In the AOS-W Instant U

Field Descriptionl bootp— Bootstrap Protocoll cfgm-tcp—l cups—Common UNIX Printing Systeml dhcp—Dynamic Host Configuration Protocoll dns—Domain Name S

171 | Roles and Policies AOS-W Instant 6.3.1.1-4.0 | User GuideField Descriptionl To a network—Access is allowed or denied to a network. After selecti

Configuring a Source NAT Access RuleThe source NAT action in access rules allows the user to override the routing profile entries. For example, when a

173 | Roles and Policies AOS-W Instant 6.3.1.1-4.0 | User Guide3. Create an access rule for the SSID profile with Source NAT action as described in Co

Allow POP3 Service to a Particular ServerTo configure POP3 service to a particular server:1. Select an existing wireless or wired profile. Depending o

175 | Roles and Policies AOS-W Instant 6.3.1.1-4.0 | User Guide3. Click New to add a new rule. The New Rule window is displayed.a. Select Deny from th

You can also create a user role when configuring wireless or wired network profiles. For more information, seeConfiguring Access Rules for a WLAN SSID

177 | Roles and Policies AOS-W Instant 6.3.1.1-4.0 | User Guide(Instant Access Point)(config)# wlan access-rule <name>(Instant Access Point) (Ac

Configuring Derivation RulesAOS-W Instant allows you to configure role and VLAN derivation-rules. You can configure these rules to assign auser role o

179 | Roles and Policies AOS-W Instant 6.3.1.1-4.0 | User GuideDevice DHCP Option DHCP FingerprintWindows XP(SP3, Home,Professional)Option 55 37010f03

18 | Contents AOS-W Instant 6.3.1.1-4.0 | User GuideConfiguring Centralized DHCP Scope 234In the AOS-W Instant UI 234In the CLI 235Configuring Local a

When Enforce Machine Authentication is enabled, both the device and the user must be authenticated for the roleassignment rule to apply.In the CLITo c

181 | Roles and Policies AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 58 RADIUS Access-Accept packets with VSAFigure 59 Configure VSA on a RADIUS Serv

Figure 60 Configuring RADIUS Attributes on the RADIUS ServerUser RoleIf the VSA and VLAN derivation rules are not matching, then the user VLAN can be

183 | Roles and Policies AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 61 VLAN Assignment Rule Window3. Select the attribute from the Attribute drop-do

(Instant Access Point)(SSID Profile "Profile1")# set-vlan mac-address-and-dhcp-options matches-regular-expression ..link 100(Instant Access

185 | Roles and Policies AOS-W Instant 6.3.1.1-4.0 | User GuideOperator Description\> Matches the end of the word. For example, \>list matches b

3. Click New under the New Role Assignment and configure the following parameters:a. Select the attribute from the Attribute drop-down list.b. Select

AOS-W Instant 6.3.1.1-4.0 | User Guide Uplink Configuration | 187Chapter 15Uplink ConfigurationThis chapter provides the following information:l Uplin

188 | Uplink Configuration AOS-W Instant 6.3.1.1-4.0 | User GuideEthernet UplinkThe Ethernet 0 port on anOAW-IAP is enabled as an uplink port by defa

You can use PPPoE for your uplink connectivity in both OAW-IAP and IAP-VPN deployments. PPPoE is supportedonly in a single AP deployment.Uplink redund

L2/L3 Forwarding Modes 252IAP-VPN Scalability Limits 253OSPFConfiguration 253VPN Configuration 255Whitelist Database Configuration 255Switch Whitelis

190 | Uplink Configuration AOS-W Instant 6.3.1.1-4.0 | User Guide(Instant Access Point)(pppoe-uplink-profile)# pppoe-unnumbered-local-l3-dhcp-profile

Modem Type Supported 3G Modemsl U301 (Franklin wireless)l USB U760 for Virgin (Novatel)l USB U720 (Novatel/Qualcomm)l UM175 (Pantech)l UM150 (Pantech)

192 | Uplink Configuration AOS-W Instant 6.3.1.1-4.0 | User GuideModem Type Supported 3G Modemsl Huawei E1731 (Airtel-3G (India))l Huawei E3765 (Vodaf

l For 4G — Enter the type of 4G modem in the 4G USB type text box.c. Enter the device ID of modem in the USB dev text box.d. Enter the TTY port of the

194 | Uplink Configuration AOS-W Instant 6.3.1.1-4.0 | User Guide(Instant Access Point)(cellular-uplink-profile)# usb-init <Initialization-paramete

l If the Wi-Fi uplink is used on the 5 GHz band, mesh is disabled. The two links are mutually exclusive.l For OAW-IAPs to connect to an AOS-W Instant

196 | Uplink Configuration AOS-W Instant 6.3.1.1-4.0 | User GuideUplink Preferences and SwitchingThis topic describes the following procedures:l Enfor

In the CLITo set an uplink priority:(Instant Access Point)(config)# uplink(Instant Access Point)(uplink)# uplink-priority {cellular <priority> |

198 | Uplink Configuration AOS-W Instant 6.3.1.1-4.0 | User Guidel If the current uplink is 3G or Wi-Fi, and Ethernet has a physical link, the OAW-IAP

Viewing Uplink Status and ConfigurationTo view the uplink status and configuration in the CLI:Instant Access Point# show uplink statusUplink preemptio

0511472-01 | November 2013 AOS-W Instant 6.3.1.1-4.0 | User GuideCopyright© 2013 Alcatel-Lucent. All rights reserved.Specifications in this manual are

20 | Contents AOS-W Instant 6.3.1.1-4.0 | User GuideAirGroup Configuration 268AirGroup Overview 268AirGroup with AOS-W Instant 269AirGroup Solution 27

AOS-W Instant 6.3.1.1-4.0 | User Guide Mobility and Client Management | 200Chapter 16Mobility and Client ManagementThis chapter provides the following

201 | Mobility and Client Management AOS-W Instant 6.3.1.1-4.0 | User GuideEach foreign AP has only one home AP per AOS-W Instant network to avoid dup

Figure 66 L3 Mobility Window1. Select Enabled from the Home agent load balancing drop-down list. By default, home agent load balancing isdisabled.2. C

AOS-W Instant 6.3.1.1-4.0 | User Guide Spectrum Monitor | 203Chapter 17Spectrum MonitorThis chapter provides the following information:l Understanding

204 | Spectrum Monitor AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 67 Device ListDevice Summary and Channel Information shows the details of the info

Non Wi-FiInterfererDescriptionBluetooth Any device that uses the Bluetooth protocol to communicate in the 2.4 GHz band is classifiedas aBluetoothdevic

206 | Spectrum Monitor AOS-W Instant 6.3.1.1-4.0 | User GuideNon Wi-FiInterfererDescriptionGenericInterfererAny non-frequency hopping device that does

Column DescriptionMax Interference(dBm)Signal strength of the non Wi-Fi device that has the highest signal strength.SNIR (db) The ratio of signal stre

208 | Spectrum Monitor AOS-W Instant 6.3.1.1-4.0 | User GuideColumn DescriptionQuality(%) Current relative quality of selected channels in the 2.4 GHz

To configure 5 GHz radio settings:(Instant Access Point)(config)# rf dot11a-radio-profile(Instant Access Point)(RF dot11a Radio Profile)# spectrum-mon

Lawful Intercept and CALEA Integration 281CALEA Integration and Lawful Intercept Compliance 281CALEA Server Integration 281Traffic Flow from IAP to CA

210 | Spectrum Monitor AOS-W Instant 6.3.1.1-4.0 | User Guide5.0 GHz:Legacy Mode:disableBeacon Interval:100802.11d/802.11h:disableInterference Immunit

AOS-W Instant 6.3.1.1-4.0 | User Guide Adaptive Radio Management | 211Chapter 18Adaptive Radio ManagementThis chapter provides the following informati

212 | Adaptive Radio Management AOS-W Instant 6.3.1.1-4.0 | User GuideLegacy 802.11a/b/g access points do not support the client match feature. When c

configured on an AP is not supported by the AP model, this value is reduced to the highest supported powersetting. The default value is for minimum tr

214 | Adaptive Radio Management AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 71 RF Window - ARM Tab3. Configure the following parameters for Band stee

4. For Airtime fairness mode, specify any of the following values:Parameter DescriptionDefault AccessSelect this option to provide access based on cli

216 | Adaptive Radio Management AOS-W Instant 6.3.1.1-4.0 | User GuideParameter DescriptionCustomize ValidChannelsSelect this check box to customize v

(Instant Access Point)(ARM)# air-time-fairness-mode {<Default Access>| <Fair Access> | <Preferred Access>}(Instant Access Point)(ARM

218 | Adaptive Radio Management AOS-W Instant 6.3.1.1-4.0 | User Guide40 enable44 enable48 enable52 enable56 enable60 enable64 enable149 enable153 ena

Parameter Descriptionl Level 2— Noise and spur immunity. This level also controls the detection ofOFDM packets, and is the default setting for the Noi

22 | Contents AOS-W Instant 6.3.1.1-4.0 | User GuideConfiguring a Connection Capability Profile 294Configuring an Operating Class Profile 294Configuri

220 | Adaptive Radio Management AOS-W Instant 6.3.1.1-4.0 | User Guide802.11d/802.11h:enableInterference Immunity Level:2Channel Switch Announcement C

AOS-W Instant 6.3.1.1-4.0 | User Guide Intrusion Detection | 221Chapter 19Intrusion DetectionThe Intrusion Detection System (IDS) is a feature that mo

222 | Intrusion Detection AOS-W Instant 6.3.1.1-4.0 | User Guidel Windows Serverl Windows XPl Windows MEl OS-Xl iPhonel iOSl Androidl Blackberryl Linu

Figure 73 Wireless Intrusion DetectionThe following table describes the detection policies enabled in the Infrastructure Detection Custom settings fie

224 | Intrusion Detection AOS-W Instant 6.3.1.1-4.0 | User GuideDetection Level Detection Policyl Detect Malformed Frame— HT IEl Detect Malformed Fram

Figure 74 Wireless Intrusion ProtectionThe following table describes the protection policies that are enabled in the Infrastructure Protection Customs

226 | Intrusion Detection AOS-W Instant 6.3.1.1-4.0 | User GuideContainment MethodsYou can enable wired and wireless containments to prevent unauthori

(Instant Access Point)(IDS)# wireless-containment <type>(Instant Access Point)(IDS)# wired-containment(Instant Access Point)(IDS)# detect-ap-spo

AOS-W Instant 6.3.1.1-4.0 | User Guide Content Filtering | 228Chapter 20Content FilteringThis chapter provides the following information:l Content Fil

229 | Content Filtering AOS-W Instant 6.3.1.1-4.0 | User Guide(Instant Access Point)(SSID Profile <name>)# end(Instant Access Point)# commit app

Resetting a Remote AP or Campus AP to an OAW-IAP 309Rebooting the OAW-IAP 309Monitoring Devices and Logs 311Configuring SNMP 311SNMP Parameters for OA

In the AOS-W Instant UITo configure OpenDNS credentials:1. Click More> Services>OpenDNS. The OpenDNS tab contents are displayed.2. Enter the Use

AOS-W Instant 6.3.1.1-4.0 | User Guide DHCP Configuration | 231Chapter 21DHCP ConfigurationThis chapter provides the following information:l Configuri

232 | DHCP Configuration AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 76 New DHCP Scope: Distributed DHCP Mode3. Based on type of distributed DHCP sco

Name Descriptionperformed to ensure that the specified ranges of IP address are in the same subnetas the default router and subnet mask. The configure

234 | DHCP Configuration AOS-W Instant 6.3.1.1-4.0 | User Guide(Instant Access Point)(DHCP Profile <profile-name>)# ip-range <start-IP> &l

Name DescriptionDHCP requests.Helper address Enter the IP address of the DHCP server.VLAN IP Specify the VLAN IP address of the DHCP relay server.VLAN

236 | DHCP Configuration AOS-W Instant 6.3.1.1-4.0 | User Guide(Instant Access Point))# commit applyConfiguring Local and Local,L3 DHCP ScopesYou can

Name DescriptionVLAN Specify a VLANID. To use this subnet, ensure that the VLANID specified here isassigned to an SSID profile. For more information

238 | DHCP Configuration AOS-W Instant 6.3.1.1-4.0 | User GuideConfiguring DHCP Server for Client IP AssignmentThe DHCP server is a built-in server, u

AOS-W Instant 6.3.1.1-4.0 | User Guide VPN Configuration | 239Chapter 22VPN ConfigurationThis chapter describes the following VPN configuration proced

240 | VPN Configuration AOS-W Instant 6.3.1.1-4.0 | User Guide3. Enter the IP address or fully qualified domain name (FQDN) for the main VPN/IPSec end

(Instant Access Point)(config)# vpn reconnect-user-on-failover(Instant Access Point)(config)# vpn reconnect-time-on-failover <down_time>(Instant

242 | VPN Configuration AOS-W Instant 6.3.1.1-4.0 | User Guidea. To allow the VPN tunnel to switch back to the primary host when it becomes available

In the CLITo enable automatic configuration of the GRE tunnel:(Instant Access Point)(config)# vpn gre-outside(Instant Access Point)(config)# vpn prima

244 | VPN Configuration AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 81 Manual GRE Configuration4. Click Next to continue. When the GRE tunnel config

n OAW-RAP109n OAW-IAP135You can configure an L2TPv3 tunnel from Virtual Controller using AOS-W Instant UI or CLI.In the AOS-W Instant UI1. Click the M

246 | VPN Configuration AOS-W Instant 6.3.1.1-4.0 | User Guidef. Select the message digest as MD5 or SHA used for message authentication.g. Enter a sh

(Instant Access Point) (L2TPv3 Tunnel Profile <l2tpv3_tunnel_profile>)# secret-key <secret_key>(Instant Access Point)(config)# end(Instant

248 | VPN Configuration AOS-W Instant 6.3.1.1-4.0 | User GuideTo view L2TPv3 global configuration:(Instant Access Point)# show l2tpv3 global parameter

data rx packets: 0, rx bytes: 0, rx errors: 0data tx packets: 6, tx bytes: 588, tx errors: 0establish retries: 0To view L2TPv3 tunnel config:(Instant

AOS-W Instant 6.3.1.1-4.0 | User Guide About this Guide | 25Chapter 1About this GuideThis User Guide describes the features supported by AOS-W Instant

250 | VPN Configuration AOS-W Instant 6.3.1.1-4.0 | User GuideSCCRP 1 0 0SCCCN 0 0 1STOPCCN 0 0 0RESERVED1 0 0 0HELLO 95 0 95OCRQ 0 0 0OCRP 0 0 0OCCN

4. Click OK.5. Click Finish.In the CLI(Instant Access Point)(config)# routing-profile(Instant Access Point)(Routing-profile)# route <destination>

AOS-W Instant 6.3.1.1-4.0 | User Guide IAP-VPN Configuration | 252Chapter 23IAP-VPN ConfigurationAlcatel-Lucent switches provide an ability to termina

253 | IAP-VPN Configuration AOS-W Instant 6.3.1.1-4.0 | User GuideIAP-VPN Scalability LimitsAOS-W Instant provides enhancements to the scalability lim

To verify the details of configured aggregated route, use the following command:(host) # show ip ospf rapng-vpn aggregated-routes <net> <mask

255 | IAP-VPN Configuration AOS-W Instant 6.3.1.1-4.0 | User GuideVPN ConfigurationThe following VPN configuration steps on the switch, enable OAW-IAP

(host) (config-sess-iaprole)#any host <radius-server-ip> any src-nat(host) (config-sess-iaprole)#any any any permit(host) (config-sess-iaprole)#

257 | IAP-VPN Configuration AOS-W Instant 6.3.1.1-4.0 | User GuideParameter DescriptionVC MAC AddressDisplays the MAC address of the Virtual Controlle

AOS-W Instant 6.3.1.1-4.0 | User Guide OmnivistaIntegration and Management | 258Chapter 24OmnivistaIntegration and ManagementThis chapter provides t

259 | OmnivistaIntegration and Management AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 86 Template-based ConfigurationTrending ReportsOmnivista saves

26 | About this Guide AOS-W Instant 6.3.1.1-4.0 | User GuideThe following informational icons are used throughout this guide:Indicates helpful suggest

Figure 87 Adding anOAW-IAP in VisualRFPSK-based and Certificate-based AuthenticationOn the DHCP server, two formats for option 43 are supported:l <

261 | OmnivistaIntegration and Management AOS-W Instant 6.3.1.1-4.0 | User Guidel Folder— "Org" (under the Top folder in AMP)l Configuratio

In the CLITo configure Omnivista information in AOS-W Instant:(Instant Access Point)(config)# organization <name>(Instant Access Point)(config)#

263 | OmnivistaIntegration and Management AOS-W Instant 6.3.1.1-4.0 | User Guide3. Select DHCP Standard Options in the Option class drop-down list an

Figure 91 AOS-W Instant and DHCP options for Omnivista: Server Options7. Select 060 Alcatel-LucentInstant AP in the Server Options window and enter A

265 | OmnivistaIntegration and Management AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 93 AOS-W Instant and DHCP options for Omnivista— 043 Vendor Sp

the DHCP clients information about certain services such as PXE. In such an environment, the standard DHCPoptions 60 and 43 cannot be used for Alcatel

267 | OmnivistaIntegration and Management AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 96 Omnivista — New GroupFigure 97 Omnivista —Monitor

AOS-W Instant 6.3.1.1-4.0 | User Guide AirGroup Configuration | 268Chapter 25AirGroup ConfigurationThis chapter provides the following information:l A

269 | AirGroup Configuration AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 98 - AirGroup ArchitectureAirGroup is not supported on a 3G uplink.AirGroup

AOS-W Instant 6.3.1.1-4.0 | User Guide About AOS-W Instant | 27Chapter 2About AOS-W InstantThis chapter provides the following information:l AOS-W Ins

Figure 99 AirGroup Enables Personal Device SharingAirGroup SolutionIn large universities and enterprise networks, it is common for Bonjour-capable dev

271 | AirGroup Configuration AOS-W Instant 6.3.1.1-4.0 | User GuideFeatures AOS-W Instant Deployment ModelsDevice owner based policy enforcement No Y

l Allow or block mDNS services based on user roles.l Allow or block mDNS services based on VLANs.l Match users’ devices, such as iPads, to their close

273 | AirGroup Configuration AOS-W Instant 6.3.1.1-4.0 | User GuideConfiguring AirGroup and AirGroup Services on an OAW-IAPYou can configure AirGroup

l To select block user roles from accessing an AirGroup service, click the corresponding edit link and select theuser roles for which you want to rest

275 | AirGroup Configuration AOS-W Instant 6.3.1.1-4.0 | User GuideCPPM Server dead time 100 SecondsAirGroup Service Information----------------------

AOS-W Instant 6.3.1.1-4.0 | User Guide Integration with Security and Location Services Applications | 276Chapter 26Integration with Security and Loca

277 | Integration with Security and Location Services Applications AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 102 Services Window —ALE Integration4

2. Click the RTLS tab. The following figure shows the contents of the RTLS tab.3. Under Aruba, select the RTLS check box to integrate AOS-W Instant wi

279 | Integration with Security and Location Services Applications AOS-W Instant 6.3.1.1-4.0 | User Guidesecurity required for enterprises to secure

28 | About AOS-W Instant AOS-W Instant 6.3.1.1-4.0 | User GuideAll OAW-IAPs except OAW-IAP224, OAW-IAP225, OAW-IAP114, and OAW-IAP115 are available as

Figure 104 Services Window - Network Integration Tab3. Select the Enable checkbox to enable PAN firewall.4. Specify the user name and password. Ensure

AOS-W Instant 6.3.1.1-4.0 | User Guide Lawful Intercept and CALEA Integration | 281Chapter 27Lawful Intercept and CALEA IntegrationThis chapter provid

282 | Lawful Intercept and CALEA Integration AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 105 IAP to CALEA ServerTraffic Flow from IAP to CALEA Server

Figure 106 IAP to CALEA Server through VPNEnsure that IPSec tunnel is configured if the client data has to be routed to the ISP or CALEA server throug

284 | Lawful Intercept and CALEA Integration AOS-W Instant 6.3.1.1-4.0 | User GuideIn the AOS-W Instant UITo configure a CALEA profile:1. Click More&g

(Instant Access Point)(SSID Profile <name># set-role <attribute>{{equals|not-equals|starts-with|ends-with|contains}<operator><rol

286 | Lawful Intercept and CALEA Integration AOS-W Instant 6.3.1.1-4.0 | User Guideip mtu : 150(Instant Access Point)# show calea statisticsRt resolve

AOS-W Instant 6.3.1.1-4.0 | User Guide Hotspot Profiles | 287Chapter 28Hotspot ProfilesThis chapter describes the following procedures:l Understanding

288 | Hotspot Profiles AOS-W Instant 6.3.1.1-4.0 | User GuideAccess Network Query Protocol (ANQP)ANQP provides a range of information, such as IP addr

3. Associate the required ANQP and H2QP advertisement profiles created in step 1 to the hotspot profile created instep 2.4. Create a SSID Profile with

Feature DescriptionBandwidth contractenhancementsAOS-W Instant supports assigning bandwidth contracts to the user roles. Theadministrator can assign a

290 | Hotspot Profiles AOS-W Instant 6.3.1.1-4.0 | User Guidel eap-ttls—To use EAP-Tunneled Transport Layer Security. The associated numeric value is

Configuring a Venue Name ProfileYou configure venue name profile to send venue information as an ANQP IE in a GAS query response. To configurea venue

292 | Hotspot Profiles AOS-W Instant 6.3.1.1-4.0 | User GuideVenue Group Associated Venue Type ValueThe associated numeric value is 5.l long-term-care

l http-redirect—When configured, additional information on the network is provided through HTTP/HTTPSredirection.l dns-redirect—When configured, addit

294 | Hotspot Profiles AOS-W Instant 6.3.1.1-4.0 | User Guide(Instant Access Point)(domain-name <name>)# end(Instant Access Point)# commit apply

l Downlink load— Indicates the percentage of the WAN downlink currently utilized. The default value of 0indicates that the downlink speed is unknown o

296 | Hotspot Profiles AOS-W Instant 6.3.1.1-4.0 | User GuideParameter Descriptionl personal-device — This network is accessible for personal devices.

Parameter Descriptionl factory-and-industriall institutionall mercantilel outdoorl residentiall storagel utility-and-miscl vehicularBy default, the bu

298 | Hotspot Profiles AOS-W Instant 6.3.1.1-4.0 | User Guide(Instant Access Point)(SSID Profile <name># vlan <vlan-ID>(Instant Access Poi

(Instant Access Point)(config)# hotspot anqp-domain-name-profile dn1(Instant Access Point)(domain-name "dn1")# domain-name DomainName(Instan

AOS-W Instant 6.3.1.1-4.0 | User Guide Contents | 3ContentsContents 3About this Guide 25Intended Audience 25Related Documents 25Conventions 25Contacti

30 | About AOS-W Instant AOS-W Instant 6.3.1.1-4.0 | User GuideFeature DescriptionCustomizing InternalCaptive Portal CertificateAOS-W Instant now supp

300 | Hotspot Profiles AOS-W Instant 6.3.1.1-4.0 | User Guide(Instant Access Point)(SSID Profile "ssidProfile1")# radius-reauth-interval 20(

AOS-W Instant 6.3.1.1-4.0 | User Guide Extended Voice and Video | 301Chapter 29Extended Voice and VideoAOS-W Instant has the added ability to identify

AOS-W Instant 6.3.1.1-4.0 | User Guide Dynamic CPUManagement | 302Chapter 30Dynamic CPUManagementThis chapter provides the following information:l D

AOS-W Instant 6.3.1.1-4.0 | User Guide Link Aggregation Control Protocol for OAW-IAP220 Series | 303Chapter 31Link Aggregation Control Protocol for OA

AOS-W Instant 6.3.1.1-4.0 | User Guide OAW-IAP Management | 304Chapter 32OAW-IAP ManagementThis section provides information on the following procedur

305 | OAW-IAP Management AOS-W Instant 6.3.1.1-4.0 | User Guide1. Navigate to the Maintenance > Configuration> page.2. Click Backup Configuratio

l For more information on firmware image cloud server, see Upgrading an OAW-IAP on page 70.A mesh point cannot be converted to Remote AP, because mesh

307 | OAW-IAP Management AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 107 - Maintenance — Convert TabFigure 108 - Convert options3. Select Remote APs

Converting an OAW-IAP to Campus APTo convert an OAW-IAP to Campus AP, do the following:1. Click the Maintenance link in the AOS-W Instant main window.

309 | OAW-IAP Management AOS-W Instant 6.3.1.1-4.0 | User Guide3. Select Standalone AP from the drop-down list.4. Select the Access Point from the dro

OAW-IAPPlatformDescriptionOAW-IAP114/115The OAW-IAP114 and OAW-IAP115 are dual radio, dual-band wireless access points that supportthe IEEE 802.11n st

Figure 111 - Rebooting the OAW-IAP3. In the OAW-IAP list, select the OAW-IAP that you want to reboot and click Reboot selected Access Point. Toreboot

AOS-W Instant 6.3.1.1-4.0 | User Guide Monitoring Devices and Logs | 311Chapter 33Monitoring Devices and LogsThis chapter provides the following infor

312 | Monitoring Devices and Logs AOS-W Instant 6.3.1.1-4.0 | User GuideConfiguring SNMPThis section describes the procedure for configuring SNMPv1, S

Figure 113 SNMPv3 User4. Enter the name of the user in the Name text box.5. Select the type of authentication protocol from the Auth protocol drop-dow

314 | Monitoring Devices and Logs AOS-W Instant 6.3.1.1-4.0 | User GuideConfiguring SNMP TrapsAOS-W Instant supports the configuration of external tr

Figure 114 Syslog Server4. In the Syslog server text box, enter the IP address of the server to which you want to send system logs.5. Select the requi

316 | Monitoring Devices and Logs AOS-W Instant 6.3.1.1-4.0 | User GuideLogging Level DescriptionWarning Warning messages.Notice Significant events of

Running Debug Commands from the AOS-W Instant UITo run the debugging commands from the AOS-W Instant UI:1. Navigate to More>Support at the top righ

318 | Monitoring Devices and Logs AOS-W Instant 6.3.1.1-4.0 | User Guidel AP Crash Info— Displays crash log information (if it exists) for the OAW-IAP

l AP Log Sapd— Displays SAPd logs.l AP Log Security— Displays security logs of the OAW-IAP.l AP Log System— Displays system logs of the OAW-IAP.l AP L

AOS-W Instant 6.3.1.1-4.0 | User Guide Setting up an OAW-IAP | 32Chapter 3Setting up an OAW-IAPThis chapter describes the following procedures:l Setti

320 | Monitoring Devices and Logs AOS-W Instant 6.3.1.1-4.0 | User Guidel AP Shaping Table— Displays shaping information for clients associated with t

l VC L2TPv3 config —Displays the L2TPv3 configuration status.l VC L2TPv3 tunnel status—Displays the L2TPv3 tunnel status.l VC L2TPv3 tunnel configurat

AOS-W Instant 6.3.1.1-4.0 | User Guide Regulatory Domain | 322Chapter 34Regulatory DomainThe IEEE 802.11/b/g/n Wi-Fi networks operate in the 2.4 GHz s

323 | Regulatory Domain AOS-W Instant 6.3.1.1-4.0 | User GuideCode Country NameCA CanadaCH SwitzerlandCL ChileCN ChinaCO ColombiaCR Costa RicaCS Serbi

Code Country NameIS IcelandIT ItalyJM JamaicaJO JordanJP JapanKE KenyaKR Republic of Korea (SouthKorea)KW KuwaitKW KuwaitLB LebanonLI LiechtensteinLI

325 | Regulatory Domain AOS-W Instant 6.3.1.1-4.0 | User GuideCode Country NamePE PeruPH PhilippinesPK Islamic Republic of PakistanPL PolandPL PolandP

Code Country NameUY UruguayVE VenezuelaVN VietnamZA South AfricaAOS-W Instant 6.3.1.1-4.0 | User Guide Regulatory Domain | 326

AOS-W Instant 6.3.1.1-4.0 | User Guide ClearPass Guest Setup | 327ClearPass Guest SetupTo configure ClearPass Guest:1. On ClearPass Guest, navigate to

328 | ClearPass Guest Setup AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 118 Create an AirGroup Administrator4. In this example, the password used is

Figure 120 Local Users UI Screen7. Navigate to the ClearPass Guest UI and click Logout. The ClearPass Guest Login page is displayed. Use theAirGroup a

33 | Setting up an OAW-IAP AOS-W Instant 6.3.1.1-4.0 | User GuideAssigning a Static IPTo assign a static IP to an OAW-IAP:1. Connect a terminal, PC, o

330 | ClearPass Guest Setup AOS-W Instant 6.3.1.1-4.0 | User Guide9. Click Register Shared Device.TestingTo verify the setup:1. Disconnect your AppleT

AOS-W Instant 6.3.1.1-4.0 | User Guide Terminology | 331TerminologyAcronyms and AbbreviationsThe following table lists the abbreviations used in this

332 | Terminology AOS-W Instant 6.3.1.1-4.0 | User GuideAbbreviation ExpansionPEAP Protected Extensible Authentication ProtocolPEM Privacy Enhanced Ma

Term DefinitionAP An access point (AP) connects users to other users within the network andalso can serve as the point of interconnection between the

334 | Terminology AOS-W Instant 6.3.1.1-4.0 | User GuideTerm Definitionfixed wireless Wireless devices or systems in fixed locations such as homes and

Term DefinitionWi-Fi A term for certain types of WLANs. Wi-Fi can apply to products that useany 802.11 standard. Wi-Fi has gained acceptance in many b

Disabling the Provisioning Wi-Fi NetworkThe provisioning network is enabled by default. AOS-W Instant provides the option to disable the provisioningn

35 | Setting up an OAW-IAP AOS-W Instant 6.3.1.1-4.0 | User GuideWhen you use a provisioning Wi-Fi network to connect to the Internet, all browser req

The AOS-W Instant CLI allows CLI scripting in several other sub-command modes to allow the users to configureindividual interfaces, SSIDs, access rule

37 | Setting up an OAW-IAP AOS-W Instant 6.3.1.1-4.0 | User GuideSequence-Sensitive Command Corresponding no commandopendns <username <password&

AOS-W Instant 6.3.1.1-4.0 | User Guide AOS-W Instant User Interface | 38Chapter 4AOS-W Instant User InterfaceThis chapter describes the following AOS-

39 | AOS-W Instant User Interface AOS-W Instant 6.3.1.1-4.0 | User GuideYou can also select the required language option from the Languages drop-down

4 | Contents AOS-W Instant 6.3.1.1-4.0 | User GuideLogging into the AOS-W Instant UI 38Viewing Connectivity Summary 38Language 38Main Window 39Banner

Each tab appears in a compressed view by default. The number of networks, OAW-IAPs, or clients in the networkprecedes the tab names. The individual ta

41 | AOS-W Instant User Interface AOS-W Instant 6.3.1.1-4.0 | User GuideAn edit link is displayed on clicking the OAW-IAP name. For details about edit

SystemThis link displays the System window. The System window consists of the following tabs:Use the Show/Hide Advanced option at the bottom of the S

43 | AOS-W Instant User Interface AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 5 System WindowRFThe RFlink displays a window for configuring Adaptive

Figure 6 RF WindowSecurityThe Security link displays a window with the following tabs:l Authentication Servers— Use this window to configure an extern

45 | AOS-W Instant User Interface AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 7 Security Window - Default ViewMaintenanceThe Maintenance link display

Figure 8 Maintenance Window - Default ViewHelpThe Help link allows you to view a short description or definition of selected terms and fields in the U

47 | AOS-W Instant User Interface AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 9 VPN window for IPSec ConfigurationIDSThe IDSwindow allows you to con

Figure 11 IDS Window: Intrusion ProtectionFor more information on wireless intrusion detection and protection, see Detecting and Classifying Rogue APs

49 | AOS-W Instant User Interface AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 12 Wired WindowServicesThe Services window allows you to configure serv

IDS 63Configuration 64AirGroup 65OmniVista 3600 Setup 65Pause/Resume 65Views 65Initial Configuration Tasks 67Updating IP Address of an OAW-IAP 67In th

Figure 13 Services Window: Default ViewDHCP ServerThe DHCP Servers window allows you to configure various DHCP modes. The following figure shows the c

51 | AOS-W Instant User Interface AOS-W Instant 6.3.1.1-4.0 | User Guidel Auto Run— Allows you to configure a schedule for automatic execution of a su

Name DescriptionInfo section in VirtualController viewThe Info section in the Virtual Controller view displays the following information:l Name— Displ

53 | AOS-W Instant User Interface AOS-W Instant 6.3.1.1-4.0 | User GuideName Descriptionl Spectrum — Displays the status of the spectrum monitor.l Cli

Icon Name Description3 UtilizationiconDisplays the radio utilization rate of the OAW-IAPs. Depending on the percentage of utilization,the color of the

55 | AOS-W Instant User Interface AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 18 Frames GraphFigure 19 Speed GraphFigure 20 Throughput GraphUsage Tre

Figure 21 Usage Trends Section in the Monitoring PaneThe following table describes the graphs displayed in the Network view:Graph Name Description Mon

57 | AOS-W Instant User Interface AOS-W Instant 6.3.1.1-4.0 | User GuideGraphNameDescription Monitoring ProcedureNeighboringAPsThe Neighboring APs gra

GraphNameDescription Monitoring ProcedureClients The Clients graph shows the number ofclients associated with the selected OAW-IAP for the last 15 min

59 | AOS-W Instant User Interface AOS-W Instant 6.3.1.1-4.0 | User GuideGraphNameDescription Monitoring ProcedureFrames The Frames Graph shows the In

6 | Contents AOS-W Instant 6.3.1.1-4.0 | User GuideIn the AOS-W Instant UI 73In the CLI 73Enabling Auto Join Mode 74Disabling Auto Join Mode 74Adding

l Association Time— The time at which the selected client was associated with a particular OAW-IAP.The AOS-W Instant UI shows the client and OAW-IAP a

61 | AOS-W Instant User Interface AOS-W Instant 6.3.1.1-4.0 | User GuideThe Alerts link displays the following types of alerts:l Client Alertsl Active

Figure 24 Fault HistoryFigure 25 Active FaultsThe following table displays a list of alerts that are generated on the AOS-W Instant network:TypeCodeDe

63 | AOS-W Instant User Interface AOS-W Instant 6.3.1.1-4.0 | User GuideTypeCodeDescription Details Corrective Actions100105 Maximum capacity reachedo

n Classification— Displays the classification of the foreign AP, for example, Interfering OAW-IAP or RogueOAW-IAP.n Channel— Displays the channel in w

65 | AOS-W Instant User Interface AOS-W Instant 6.3.1.1-4.0 | User GuideAirGroupThis AirGroup link provides an overall view of your AirGroup configura

l The following AOS-W Instant UI elements are available in this view:n Tabs— Networks, Access Points, and Clients. For detailed information about the

AOS-W Instant 6.3.1.1-4.0 | User Guide Initial Configuration Tasks | 67Chapter 5Initial Configuration TasksThis chapter describes the following basic

68 | Initial Configuration Tasks AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 29 Configuring OAW-IAP Settings3. Select either the Get IP address from

In the CLITo change the name:(Instant Access Point)# hostname <system-name>Updating Location Details of an OAW-IAPYou can update the physical lo

Virtual Controller Configuration 82Virtual Controller Overview 82Master Election Protocol 82Preference to an OAW-IAP with 3G/4G Card 82Preference to a

70 | Initial Configuration Tasks AOS-W Instant 6.3.1.1-4.0 | User GuideThe following table lists gain values supported by each type of antenna:Frequen

IAPs joining the network need to synchronize their software with the version running on the Virtual Controller, and ifthe new OAW-IAP belongs to a dif

72 | Initial Configuration Tasks AOS-W Instant 6.3.1.1-4.0 | User Guide2. Enter the HTTP proxy server's IP address and the port number.3. If you

n For all other OAW-IAPs —AlcatelInstant_Orion_6.3.1.1-4.0.0.0_xxxxl Select the Image URL option. Select this option to obtain an image file from a TF

74 | Initial Configuration Tasks AOS-W Instant 6.3.1.1-4.0 | User Guide(Instant Access Point)(config) # telnet-server(Instant Access Point)(config)# e

3. Click OK.Reboot the OAW-IAP after configuring the radio profile for the changes to affect.In the CLITo configure a preferred band:(Instant Access P

76 | Initial Configuration Tasks AOS-W Instant 6.3.1.1-4.0 | User GuideMode Descriptionand clients.Spectrum Monitor In Spectrum Monitor mode, the AP f

Configuring Uplink VLANfor an OAW-IAPInstant supports a management VLAN for the uplink traffic on an OAW-IAP. After an OAW-IAP is provisioned withthe

78 | Initial Configuration Tasks AOS-W Instant 6.3.1.1-4.0 | User Guide3. Select a time zone from the Timezone drop-down list. The time zone indicates

AOS-W Instant 6.3.1.1-4.0 | User Guide Mesh OAW-IAP Configuration | 79Chapter 6Mesh OAW-IAP ConfigurationThis chapter provides the following informati

8 | Contents AOS-W Instant 6.3.1.1-4.0 | User GuideIn the AOS-W Instant UI 97In the CLI 98Opportunistic Key Caching 98Configuring an OAW-IAP for OKC R

80 | Mesh OAW-IAP Configuration AOS-W Instant 6.3.1.1-4.0 | User GuideThe mesh portal reboots after 5 minutes when it loses its uplink connectivity to

AOS-W Instant 6.3.1.1-4.0 | User Guide VLAN Configuration | 81Chapter 7VLAN ConfigurationVLAN configuration is required for networks with more devices

AOS-W Instant 6.3.1.1-4.0 | User Guide Virtual Controller Configuration | 82Chapter 8Virtual Controller ConfigurationThis chapter provides the followi

83 | Virtual Controller Configuration AOS-W Instant 6.3.1.1-4.0 | User GuideVLAN. When the Virtual Controller goes down, a new Virtual Controller is e

In the AOS-W Instant UI1. Click the System link at top right corner of the AOS-W Instant main window. The System window is displayed.2. Click the Show

AOS-W Instant 6.3.1.1-4.0 | User Guide Wireless Network Profiles | 85Chapter 9Wireless Network ProfilesThis chapter provides the following information

86 | Wireless Network Profiles AOS-W Instant 6.3.1.1-4.0 | User GuideConfiguring WLAN Settings for an SSID ProfileYou can configure WLAN settings usin

Parameter Descriptiondirectly to the associated client.l Disabled— When set to Disabled, all broadcast and multicast traffic is forwarded.DTIM interva

88 | Wireless Network Profiles AOS-W Instant 6.3.1.1-4.0 | User GuideParameter DescriptionIn a non-WMM or hybrid environment, where some clients are n

(Instant Access Point)(SSID Profile <name>)# content-filtering(Instant Access Point)(SSID Profile <name>)# hide-ssid(Instant Access Point)

In the AOS-W Instant UI 108In the CLI 108Assigning a Profile to Ethernet Ports 108In the AOS-W Instant UI 108In the CLI 108Editing a Wired Profile 108

90 | Wireless Network Profiles AOS-W Instant 6.3.1.1-4.0 | User Guidel Default— On selecting this option, the client obtains the IP address in the sam

In the AOS-W Instant UITo configure security settings for an employee or voice network:1. In the Security tab, specify any of the following types of s

92 | Wireless Network Profiles AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 36 Security Tab: Open2. Based on the security level specified, specify the

Parameter DescriptionSecurity LevelType1. Select an appropriate value for WEP key size from theWEP key size drop-down list. You can specify 64-bit or1

94 | Wireless Network Profiles AOS-W Instant 6.3.1.1-4.0 | User GuideParameter DescriptionSecurity LevelTypeAccounting To enable accounting, select En

(Instant Access Point)(SSID Profile <name>)# external-server(Instant Access Point)(SSID Profile <name>)# server-load-balancing(Instant Acc

96 | Wireless Network Profiles AOS-W Instant 6.3.1.1-4.0 | User GuideYou can configure up to 64 access rules for an employee, voice , or guest network

(Instant Access Point)(SSID Profile <name>)# set-role-machine-auth <machine-authentication-only> <user-authentication-only>(Instant

98 | Wireless Network Profiles AOS-W Instant 6.3.1.1-4.0 | User GuideFigure 37 WLAN Security Settings—Enterprise Tab4. Set 802.11r roaming to Enabled.

Configuring an OAW-IAP for OKC RoamingYou can enable OKC roaming for WLANSSID by using AOS-W Instant UI or CLI.In the AOS-W Instant UI1. Navigate to