Alcatel-Lucent IAP93 Betriebsanweisung Seite 239
- Seite / 335
- Inhaltsverzeichnis
- FEHLERBEHEBUNG
- LESEZEICHEN
Bewertet. / 5. Basierend auf Kundenbewertungen
AOS-W Instant 6.3.1.1-4.0 | User Guide VPN Configuration | 239
Chapter 22
VPN Configuration
This chapter describes the following VPN configuration procedures:
l Understanding VPN Features on page 239
l Configuring a Tunnel from an OAW-IAP to OmniAccess WLAN Switch on page 239
l Configuring Routing Profiles on page 250
Understanding VPN Features
As OAW-IAPs use a Virtual Controller architecture, the OAW-IAP network does not require a physical controller to
provide the configured WLAN services. However, a physical switch is required for terminating Virtual Private
Networks (VPN) tunnels from the OAW-IAP networks at branch locations or datacenters, where the Alcatel-Lucent
switch acts as a VPN concentrator.
When VPNis configured, the OAW-IAP acting as the Virtual Controller creates a VPN tunnel to an OmniAccess
WLAN Switch in your corporate office. The Switch acts as a VPN end-point and does not supply the OAW-IAP with
any configuration.
The VPNfeatures are recommended for:
l Enterprises with many branches that do not have a dedicated VPN connection to the corporate office.
l Branch offices that require multiple APs.
l Individuals working from home, connecting to the VPN.
The survivability feature of OAW-IAPs with the VPN connectivity of IAP-VPNs allows you to provide corporate
connectivity to non-corporate networks.
Configuring a Tunnel from an OAW-IAP to OmniAccess WLAN Switch
OAW-IAP supports the configuration of tunneling protocols such as Generic Routing Encapsulation (GRE), IPsec,
and L2TPv3. This section describes the procedure for configuring VPN host settings on an OAW-IAP to enable
communication with a remote Switch:
l Configuring IPSec Tunnel on page 239
l Enabling Automatic Configuration of GRETunnel on page 241
l Manually Configuring a GRETunnel on page 243
l Configuring an L2TPv3 Tunnel on page 244
Configuring IPSec Tunnel
An IPsec tunnel is configured to ensure that the data flow between the networks is encrypted. When configured, the
IPSec tunnel to the switch secures corporate data. You can configure an IPSec tunnel from Virtual Controller using
AOS-W Instant UI or CLI.
In the AOS-W Instant UI
To configure a tunnel using IPSec Protocol:
1. Click the More>VPN link at the top right corner of the AOS-W Instant UI. The Tunneling window is displayed.
2. Select Aruba IPSec from the Protocol drop-down list.
- User Guide 1
- AOS-W Instant 1
- 6.3.1.1-4.0 1
- Contents 3
- In the AOS-W Instant UI 71 5
- In the CLI 72 5
- Mesh OAW-IAP Configuration 79 6
- VLAN Configuration 81 6
- Wireless Network Profiles 85 7
- Wired Profiles 102 8
- In the CLI 121 9
- User Management 128 10
- Authentication 134 10
- In the AOS-W Instant UI 148 11
- In the CLI 149 11
- In the AOS-W Instant UI 149 11
- In the AOS-W Instant UI 159 12
- In the CLI 160 12
- Roles and Policies 164 13
- Example 180 14
- Example 183 14
- In the AOS-W Instant UI 185 14
- Uplink Configuration 187 15
- Spectrum Monitor 203 16
- Adaptive Radio Management 211 16
- Intrusion Detection 221 17
- Content Filtering 228 17
- DHCP Configuration 231 17
- VPN Configuration 239 18
- IAP-VPN Configuration 252 18
- In the AOS-W Instant UI 261 19
- In the CLI 262 19
- AirGroup Configuration 268 20
- Hotspot Profiles 287 21
- Extended Voice and Video 301 22
- Dynamic CPUManagement 302 22
- OAW-IAP Management 304 22
- Regulatory Domain 322 23
- ClearPass Guest Setup 327 23
- Terminology 331 23
- Intended Audience 25
- Related Documents 25
- Conventions 25
- Contacting Support 26
- AOS-W Instant Overview 27
- AOS-W Instant UI 28
- AOS-W Instant CLI 28
- New Features in 6.3.1.1-4.0 29
- Platform 31
- Description 31
- Chapter 3 32
- Setting up an OAW-IAP 32
- Assigning a Static IP 33
- OAW-IAP Cluster 33
- 9600 8 None 1 None 34
- Specifying Country Code 35
- Connecting to a CLI Session 35
- Sequence-Sensitive Commands 37
- Login Screen 38
- Main Window 39
- Networks Tab 40
- Access Points Tab 40
- Clients Tab 41
- New Version Available 41
- Security 44
- Maintenance 45
- Monitoring 51
- Table 7: 52
- RF Dashboard Icons 53
- Icon Name Description 54
- RF Trends 54
- Figure 17 Signal Graph 54
- Table 9: 56
- Table 10: 57
- Spectrum 60
- Types of Alerts 61
- Alerts list 62
- Configuration 64
- AirGroup 65
- OmniVista 3600 Setup 65
- Pause/Resume 65
- Chapter 5 67
- Initial Configuration Tasks 67
- Modifying the OAW-IAP Name 68
- Configuring External Antenna 69
- Upgrading an OAW-IAP 70
- Enabling Terminal Access 73
- Enabling Auto Join Mode 74
- Configuring a Preferred Band 74
- Configuring an NTP Server 77
- Mesh Network Overview 79
- Mesh Points 80
- Chapter 7 81
- VLAN Configuration 81
- Virtual Controller Overview 82
- Antenna Type:Internal 83
- Iap_master:1 83
- Chapter 9 85
- Wireless Network Profiles 85
- WLAN Configuration Parameters 87
- Security Level 93
- Table 18: 93
- 802.11r Roaming 97
- Opportunistic Key Caching 98
- Enabling the Extended SSID 100
- Editing a WLAN SSID Profile 101
- Deleting a WLAN SSID Profile 101
- Configuring a Wired Profile 102
- In the CLI 103
- In the AOS-W Instant UI 103
- Editing a Wired Profile 108
- Deleting a Wired Profile 109
- Understanding Captive Portal 110
- Walled Garden 111
- Parameters Description 112
- In the Instant UI 116
- RADIUS Services 121
- OAW-IAP Users 128
- Interface 128
- 5. Click OK 133
- Chapter 13 134
- Authentication 134
- External RADIUS Server 136
- Internal RADIUS Server 136
- Supported VSAs 137
- WPA and WPA2 141
- Access-Accept 142
- Parameter Description 145
- Table 27: 145
- Table 28: 146
- Enabling Dynamic RADIUS Proxy 148
- Management Interface 150
- Blacklisting Clients 158
- Blacklisting Clients Manually 159
- Uploading Certificates 160
- Figure 54 Selecting the Group 163
- Firewall Configuration 164
- Managing Inbound Traffic 167
- Access Control List Rules 169
- Field Description 170
- Table 30: 170
- Configuring User Roles 175
- Configuring Derivation Rules 178
- Understanding VLAN Assignment 180
- User Role 182
- VLANs Created for an SSID 182
- Creating a User VLAN Role 185
- Uplink Interfaces 187
- Ethernet Uplink 188
- 3G/4G Uplink 190
- List of Supported 3G Modems 191
- 4G Supported Modem 192
- Wi-Fi Uplink 194
- Enforcing Uplinks 196
- Setting an Uplink Priority 196
- Enabling Uplink Preemption 197
- Layer-3 Mobility Overview 200
- Configuring L3-Mobility 201
- Understanding Spectrum Data 203
- Non Wi-Fi Interferers 204
- Non Wi-Fi Interferer Types 205
- Channel Details 206
- Channel Metrics 207
- Spectrum Alerts 208
- ARM Overview 211
- Airtime Fairness Mode 212
- ARM Metrics 213
- Figure 71 RF Window - ARM Tab 214
- Table 38: 214
- To view ARM configuration: 217
- OS Fingerprinting 221
- Table 43: 223
- Client Detection Policies 224
- Client Protection Policies 225
- Configuring IDSUsing CLI 226
- Content Filtering 228
- Enabling Content Filtering 228
- Configuring DHCP Scopes 231
- Name Description 232
- Table 47: 232
- Understanding VPN Features 239
- Configuring an L2TPv3 Tunnel 244
- To view L2TPv3 configuration: 247
- To view L2TPV3 tunnel status: 248
- To view L2TPv3 tunnel config: 249
- Configuring Routing Profiles 250
- Overview 252
- IAP-VPN Scalability Limits 253
- OSPFConfiguration 253
- VPN Configuration 255
- Viewing Branch Status 256
- Omnivista Features 258
- Trending Reports 259
- Intrusion Detection System 259
- Configuring Omnivista 260
- Shared Key 261
- Figure 97 Omnivista —Monitor 267
- AirGroup Overview 268
- AirGroup with AOS-W Instant 269
- AirGroup Solution 270
- AirGroup Features 271
- AirGroup Components 272
- AirGroup Services 272
- Creating a RADIUS Server 275
- Assign a Server to AirGroup 275
- Chapter 26 276
- Chapter 27 281
- Client Traffic Replication 283
- Creating a CALEA Profile 283
- Verifying the configuration 285
- Chapter 28 287
- Hotspot Profiles 287
- Configuring Hotspot Profiles 288
- Venue Types 291
- Configuring a 3GPP Profile 293
- Configuring a Domain Profile 293
- Creating a Hotspot Profile 295
- Table 57: 296
- Sample Configuration 298
- Chapter 29 301
- Extended Voice and Video 301
- Dynamic CPU Management 302
- Chapter 31 303
- Configuring LED Display 304
- Restoring Configuration 305
- Rebooting the OAW-IAP 309
- Configuring SNMP 311
- Configuring a Syslog Server 314
- Logging Levels 315
- Configuring TFTP Dump Server 316
- Support Commands 317
- Country Codes List 322
- Code Country Name 323
- ClearPass Guest Setup 327
- Troubleshooting 330
- Acronyms and Abbreviations 331
- Glossary 332
- List of Terms 333
© 2020, manymanuals.de. Alle Rechte vorbehalten. | 0.026 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Kommentare zu diesen Handbüchern