Alcatel-Lucent IAP93 manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335

Go to page of

A good user manual

The rules should oblige the seller to give the purchaser an operating instrucion of Alcatel-Lucent IAP93, along with an item. The lack of an instruction or false information given to customer shall constitute grounds to apply for a complaint because of nonconformity of goods with the contract. In accordance with the law, a customer can receive an instruction in non-paper form; lately graphic and electronic forms of the manuals, as well as instructional videos have been majorly used. A necessary precondition for this is the unmistakable, legible character of an instruction.

What is an instruction?

The term originates from the Latin word „instructio”, which means organizing. Therefore, in an instruction of Alcatel-Lucent IAP93 one could find a process description. An instruction's purpose is to teach, to ease the start-up and an item's use or performance of certain activities. An instruction is a compilation of information about an item/a service, it is a clue.

Unfortunately, only a few customers devote their time to read an instruction of Alcatel-Lucent IAP93. A good user manual introduces us to a number of additional functionalities of the purchased item, and also helps us to avoid the formation of most of the defects.

What should a perfect user manual contain?

First and foremost, an user manual of Alcatel-Lucent IAP93 should contain:
- informations concerning technical data of Alcatel-Lucent IAP93
- name of the manufacturer and a year of construction of the Alcatel-Lucent IAP93 item
- rules of operation, control and maintenance of the Alcatel-Lucent IAP93 item
- safety signs and mark certificates which confirm compatibility with appropriate standards

Why don't we read the manuals?

Usually it results from the lack of time and certainty about functionalities of purchased items. Unfortunately, networking and start-up of Alcatel-Lucent IAP93 alone are not enough. An instruction contains a number of clues concerning respective functionalities, safety rules, maintenance methods (what means should be used), eventual defects of Alcatel-Lucent IAP93, and methods of problem resolution. Eventually, when one still can't find the answer to his problems, he will be directed to the Alcatel-Lucent service. Lately animated manuals and instructional videos are quite popular among customers. These kinds of user manuals are effective; they assure that a customer will familiarize himself with the whole material, and won't skip complicated, technical information of Alcatel-Lucent IAP93.

Why one should read the manuals?

It is mostly in the manuals where we will find the details concerning construction and possibility of the Alcatel-Lucent IAP93 item, and its use of respective accessory, as well as information concerning all the functions and facilities.

After a successful purchase of an item one should find a moment and get to know with every part of an instruction. Currently the manuals are carefully prearranged and translated, so they could be fully understood by its users. The manuals will serve as an informational aid.

Table of contents for the manual

  • Page 1

    U ser Gui d e A O S - W I n s t a n t 6 . 3 . 1 . 1 - 4 . 0[...]

  • Page 2

    05114 72- 01 | No vember 2013 AO S- W In stant 6 .3.1.1 - 4.0 | U s er Gui de C o p y r ig h t © 2 0 1 3 Alc a tel- L u cen t. All r igh ts r e s er v ed . Spe c ific ation s in t his m a n ua l a re sub ject t o c ha ng e w itho ut n otice. O r igin ate d in the US A. AOS- W , Alc a tel 4 30 2, Alc ate l 4 30 4, Alc atel 4 3 0 6, A lcatel 4 30 8 [...]

  • Page 3

    AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de Co ntents | 3 C o n t e n t s C ont en t s 3 A bout t hi s G ui d e 25 Inten de d Aud ie nce 2 5 R e la t ed Docum e nts 2 5 C o n v en t ion s 2 5 C o n t act ing Su pp o r t 2 6 A bout A O S - W I nst ant 27 AOS- W I nst an t Ove r v iew 2 7 Sup p o rted Devic e s 2 7 AOS- W I nst an t U I 2 8 AOS- W I[...]

  • Page 4

    4 | C on tents AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de L og gin g in t o the AO S-W Inst an t U I 3 8 Viewin g C o nn ect iv ity Sum ma ry 3 8 L an gu ag e 3 8 Ma in W ind ow 3 9 Ban n e r 39 Sea r c h 39 Ta bs 3 9 N e tw o rks Ta b 4 0 Ac c ess Poin ts Tab 4 0 C lie nts Ta b 4 1 L inks 41 N e w Ver s ion Availa b le 41 Sy s t e m 4 2 R F 4 3 [...]

  • Page 5

    ID S 6 3 C o n f igu ra t io n 64 Air Gr o up 6 5 O mn iVis t a 36 00 Se t up 6 5 Pau s e /R esume 6 5 Views 6 5 I ni t i al Co nf i g ur at i on T asks 67 U p d ating IP Add r e s s o f an O AW -IAP 6 7 In t he AO S-W Inst an t U I 6 7 In t he CLI 6 8 Mo dify in g the O A W -IAP N am e 6 8 In t he AO S-W Inst an t U I 6 8 In t he CLI 6 9 U p d ati[...]

  • Page 6

    6 | C on tents AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de In t he AO S-W Inst an t U I 7 3 In t he CLI 7 3 Ena b lin g A u to J oin Mo d e 7 4 D isab ling Au t o J oin M od e 7 4 Add in g an O A W -IAP t o t h e N e t w or k 7 4 R e mo v ing a n OAW-IAP f ro m t he Netw or k 7 4 C o n f igu rin g a Pre fer re d Ban d 7 4 In t he AO S-W Inst an t [...]

  • Page 7

    V i r t ua l C on t r ol le r Co nf i gur a t i on 82 Vir t u al C on t ro lle r Over v iew 8 2 Ma s t er Ele c t io n Pro t o c o l 8 2 Pre fer en c e t o a n OAW-IAP w it h 3G / 4 G C ar d 8 2 Pre fer en c e t o a n OAW-IAP w it h N on - D e fau lt I P 8 2 Ma nu al Pro v is io nin g of Ma s t er O AW -IAP 8 2 Pro v ision ing a n OAW-IAP as a Ma s[...]

  • Page 8

    8 | C on tents AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de In the AO S- W I nstant U I 97 In the C LI 98 O p p or t un is t ic Key Ca c h in g 9 8 C o n f igu rin g a n OAW-IAP f or O KC R o amin g 9 9 In the AO S- W I nstant U I 99 In t he CLI 9 9 Editin g S t a t us o f a W LAN SS ID Pro f ile 9 9 In t he AO S-W Inst an t U I 1 0 0 In t he CLI 1[...]

  • Page 9

    In t he AO S-W Inst an t U I 1 0 8 In t he CLI 1 08 As s ig n in g a P r o file t o E the rn et P o r ts 1 08 In t he AO S-W Inst an t U I 1 0 8 In t he CLI 1 08 Editin g a W ir ed Pr ofile 1 08 D e le t ing a Wire d Pro f ile 1 09 C apt i ve P or t al fo r G uest Acce ss 110 U n d er s t an d in g C ap t iv e Por t a l 11 0 Type s of C a ptiv e Po[...]

  • Page 10

    10 | C o ntents AO S- W In stant 6.3.1.1 - 4.0 | U ser Gui de In t he AO S-W Inst an t U I 1 2 2 In t he CLI 1 22 C o n f igu rin g C a p tiv e P or tal R ole s f or a n S SI D 1 23 In t he AO S-W Inst an t U I 1 2 4 In t he CLI 1 25 C o n f igu rin g W al le d Ga rd en Acc ess 1 26 In t he AO S-W Inst an t U I 1 2 6 In t he CLI 1 26 D isab ling Ca[...]

  • Page 11

    U n d er s t an d in g E n c ryptio n Type s 1 41 W PA an d W PA 2 1 41 R e c o mmen d e d A uth en t ic atio n an d E n c ryptio n C om bin atio n s 1 41 U n d er s t an d in g A uth en t ic atio n S ur viv ab ilit y 1 42 C o n f igu rin g Auth e ntic atio n S e rver s 1 44 C o n f igu rin g a n Ex t er n al S er ver for Au t he ntication 1 44 In [...]

  • Page 12

    12 | C o ntents AO S- W In stant 6.3.1.1 - 4.0 | U ser Gui de In t he AO S-W Inst an t U I 1 5 4 In t he CLI 1 54 C o n f igu rin g MAC A u t he ntic a tion wit h 80 2 . 1 X Au t h en t ic atio n 1 55 C o n f igu rin g MAC an d 80 2.1 X A u the ntic a t io n f or a Wire less N etw or k Pro f ile 1 55 In t he AO S-W Inst an t U I 1 5 5 In t he CLI 1[...]

  • Page 13

    R ol es a nd P o l i ci es 164 Fir ewal l C o n figu ra t io n 1 64 C o n f igu rin g ALG Pr oto c o ls 1 64 In t he AO S-W Inst an t U I 16 4 In t he CLI 1 65 C o n f igu rin g Fir ewall Sett in gs f o r Pro tect ion fr o m A R P At t a c k s 1 66 In t he AO S-W Inst an t U I 16 6 In t he CLI 1 66 Ma na gin g Inb ou nd T ra f f ic 1 6 7 C o n f ig[...]

  • Page 14

    14 | C o ntents AO S- W In stant 6.3.1.1 - 4.0 | U ser Gui de C r ea t ing a Us er Rol e 1 75 In t he AO S-W Inst an t U I 17 5 In t he CLI 1 76 As s ig n in g B an d w id t h C on t ra c t s t o U s er Role s 1 76 As s ig n in g B an d w id t h C on t ra c ts in the AO S-W Inst an t U I 1 76 As s ig n in g a ba nd w idth c o ntra c t using AO S-W [...]

  • Page 15

    In the C LI 185 As s ig n in g U ser VL AN R o les to a N etw or k P r ofile 18 5 In the AO S- W I nstant U I 185 In the C LI 186 U pl i nk C onf i gu r at i o n 187 U p lin k I nter faces 18 7 Et he r ne t U plin k 1 88 C o n f igu rin g PPP o E Uplin k P r o file 1 89 In the AO S- W I nstant U I 189 In the C LI 189 3 G/4G Uplin k 1 90 Type s of M[...]

  • Page 16

    16 | C o ntents AO S- W In stant 6.3.1.1 - 4.0 | U ser Gui de M o bi l i t y and C l i ent M anag em en t 200 L ayer -3 M ob ilit y Over v ie w 2 00 C o n f igu rin g L 3- Mob ility 2 01 H o me Ag e nt L o a d B al a n c ing 2 01 C o n f igu rin g a Mo bility D oma in f o r A OS- W Inst an t 2 01 In t he AO S-W Inst an t U I 20 1 In t he CLI 2 02 S[...]

  • Page 17

    C o n f igu rin g AR M Fe a t u re s o n an O AW - IA P 2 13 In t he AO S-W Inst an t U I 2 13 In t he CLI 2 16 C o n f igu rin g R a d io Sett in gs for a n OAW -IAP 2 18 In t he AO S-W Inst an t U I 2 18 In t he CLI 2 19 I nt r usi o n D et ect i on 221 D e tect ing a n d C la s s ify ing Rog ue APs 2 21 O S Fin ge r p r inting 22 1 C o n f igu r[...]

  • Page 18

    18 | C o ntents AO S- W In stant 6.3.1.1 - 4.0 | U ser Gui de C o n f igu rin g C e n t ra liz ed DH C P Sc op e 2 34 In t he AO S-W Inst an t U I 23 4 In t he CLI 2 35 C o n f igu rin g L ocal an d Lo c a l,L3 DH C P S c o pe s 2 36 In t he AO S-W Inst an t U I 23 6 In t he CLI 2 37 C o n f igu rin g D H C P Ser v e r f o r C lie nt IP As s ign me[...]

  • Page 19

    L 2/L3 Fo r w ar din g Mo de s 25 2 IA P-VPN Sc ala b ility Lim its 2 53 O SPF C o n f igu ra t io n 25 3 VPN C on f igu r ation 2 55 W hi telist D atab ase C o n f ig ur atio n 2 5 5 Sw it c h W hite lis t Datab ase 2 55 Ex t e r n al W h it elist D atab a s e 2 55 VPN L ocal Po ol Con f ig u r ation 2 5 5 R o le As s ig n me nt for the Au t he[...]

  • Page 20

    20 | C o ntents AO S- W In stant 6.3.1.1 - 4.0 | U ser Gui de A i r G r ou p C on f i g ur at i on 268 Air Gr o up O v er v ie w 26 8 Air Gr o up wit h AOS- W I nst an t 2 69 Air Gr o up So lution 2 70 Air Gr o up Fe a t u re s 27 1 C PPM a nd Clea rPa s s Gu est Fea t u r es 2 72 Air Gr o up Comp o n e nts 2 72 Air Gr o up Se rvic es 2 7 2 C o n f[...]

  • Page 21

    Law f ul I nt er cep t an d C A LE A I nt egr at i on 281 C ALEA I nteg r a t ion a nd L a w f u l I nter c e pt C o mp lian c e 28 1 C ALEA S e r v er Integ r ation 2 81 Tr aff ic Flo w f r om I AP t o C ALEA Ser ver 2 81 Tr aff ic Flo w f r om I AP t o C A L EA Ser v e r thr ou gh VPN 2 82 C lie nt Tr a ff ic R ep lic atio n 2 83 C o n f igu rin [...]

  • Page 22

    22 | C o ntents AO S- W In stant 6.3.1.1 - 4.0 | U ser Gui de C o n f igu rin g a C o n ne c t ion Cap a bility P r ofile 2 94 C o n f igu rin g a n O p e ra t ing Cla s s Pro f ile 2 94 C o n f igu rin g a W AN Me t rics Pro f ile 29 4 C r ea t ing a Hots p ot Pro f ile 29 5 As s ocia t ing a n Adver t iseme nt P ro file t o a H ots po t Pro f ile[...]

  • Page 23

    R e s e t t ing a R emo t e A P o r C amp u s A P t o an OAW-IAP 3 09 R e b oo t ing th e OAW-IAP 30 9 M o ni t or i ng D evi ces and L ogs 311 C o n f igu rin g SN MP 3 11 SN MP Par a meter s f or O AW -IAP 31 1 C o n f igu rin g SN MP 3 12 C r ea t ing co mmu nity s t ri n g s f or SN MPv 1 a n d SN MPv 2 U s ing AO S-W I nstan t UI 3 12 C r ea t[...]

  • Page 24

    [...]

  • Page 25

    AO S- W In stant 6. 3.1.1- 4.0 | User G u i d e About thi s Gui d e | 25 C h a p t e r 1 A b o u t t h i s G u i d e Th is U s er G uid e de s c r ib es t h e f ea t u r es s u p p or t ed b y A OS- W Inst an t an d p r o v ide s d etai le d inst r u ct ion s f or sett in g u p a nd con f ig u r ing AO S-W Inst an t  ne t w or k . I ntended Audi[...]

  • Page 26

    26 | Abo ut thi s Gui de AO S- W In stant 6. 3.1.1- 4.0 | User G u i d e Th e f oll o w in g in f or ma tion al ic on s ar e u s e d t hr ou gh o ut t h is g uid e: Ind ic ate s he lp f u l s ug g est ion s , pe r t in en t in f or ma t ion , an d imp or t an t t hin g s t o r eme mb er . Ind ic ate s a risk of d am ag e t o y ou r h a r dwar e o r[...]

  • Page 27

    AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de About AO S- W In stant | 2 7 C h a p t e r 2 A b o u t A O S - W I n s t a n t Th is c ha pter p r ovide s t he fol lo w in g infor ma t ion : l AOS- W I nst an t Ove r v iew l W ha t is N ew in AOS- W Inst an t 6.3.1 . 1- 4.0 A O S - W I n st a n t Ove r vi e w AOS- W Inst an t v irtu a liz es O mn iAc [...]

  • Page 28

    28 | Abo ut AOS-W Instant AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de All O AW -IAP s exc e pt O A W -IAP22 4, O AW -IAP 22 5 , OAW -IAP11 4, a nd O A W -IAP11 5 a r e avail a b le as the follo w in g var ian t s : l O AW -IAP - U S ( U nited State s ) l O AW -IAP - J P (Jap an ) l O AW -IAP - I L (Is ra e l) l O AW -IAP - R W ( R est o f W o r ld[...]

  • Page 29

    Fe a tu r e D e s c r ip tio n Ba nd w i d th con tract enhancem ent s AOS-W I n stan t su p p o rts a ssig n i n g b a n d w i d th con tracts to the u se r rol e s. The ad mi n i strator can a ssi g n a b a n dw i d th con tract co n fig u re d in Kb p s t o u p stream (cli e n t to the OAW -IAP) o r do w n strea m (O AW-I AP t o cli e n ts) traf[...]

  • Page 30

    30 | Abo ut AOS-W Instant AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de Fe a tu r e D e s c r ip tio n C ustomi zi n g Intern a l C ap tive Po rtal C e rtifica te AOS-W I n stan t n o w su p p o rts u p l o a di n g of cu stomi ze d i n tern a l C a p tive Po rtal serve r certifica tes to the O AW-IAP da tab a se. Pro visi o n i n g a n OAW - IAP as[...]

  • Page 31

    O A W - IA P Pla t f o r m D e s c r ip t io n OAW - IAP11 4/1 15 The OAW -IAP11 4 a n d OAW -IAP11 5 a re d u a l ra d io , d u a l -b a n d w i rel e ss acce ss po i n ts tha t su p po rt the IEEE 8 0 2 .11 n stan d a rd f o r h i g h- pe rforma n ce WLAN . The se APs use MIMO (Multip l e i n , Mu ltip l e - out ) t echnology and ot her high-t hr[...]

  • Page 32

    AO S- W Ins tant 6.3 .1.1- 4.0 | U ser Gui de Setti n g up an OAW-IAP | 32 C h a p t e r 3 S e t t i n g u p a n O A W - I A P Th is c ha pter d e s c rib es the fol lo w in g pr oced u re s : l Setting u p AOS- W I nst an t N etw or k on p a g e 3 2 l L og gin g in t o t h e A OS- W Inst an t U I on p ag e 34 l Ac c ess in g t he AO S-W Inst an t [...]

  • Page 33

    33 | Set ti ng up an OAW-IAP AO S- W Instant 6.3.1. 1- 4.0 | U ser Gui d e As s i gni ng a Stati c IP To a s s ign a st a tic IP t o an O AW - I A P: 1 . C o n ne c t a ter min al, PC , or wor k s tation r un n ing a ter min al emu la t ion p ro g ra m to t he Co n s o le po r t o n t he O A W - IA P. 2 . Power o n t he O AW -IAP . An au t ob oo t [...]

  • Page 34

    D i s abli ng the Prov i s i oni ng Wi - Fi Netw ork Th e pr o v ision ing n e t w o r k is en a b le d by d e fau lt . A OS- W Inst an t pr o v ide s the o ptio n t o disab le the p ro v is io nin g n etw or k t hr ou g h the con s ole p o r t . Us e t his o ption o n ly w he n y o u d o n o t w a n t t he d e f au lt S SI D in s t a n t t o be b [...]

  • Page 35

    35 | Set ti ng up an OAW-IAP AO S- W Instant 6.3.1. 1- 4.0 | U ser Gui d e W he n you u s e a pr ovision ing Wi-F i n e t w o r k to c on ne c t t o t he In t e r ne t , all br ows e r r eq ue s t s ar e di r ect ed to t h e AOS- W I nst an t U I . For e x a mple , if y ou e nter ww w . exa mple . c o m in the a dd r e s s f iel d , y ou a r e d ir[...]

  • Page 36

    Th e AOS- W I nst an t C LI a llows C LI sc rip t in g in s e v er al oth e r sub -com ma nd mo d e s t o al lo w t h e u s e rs t o con f igu r e in dividu a l inter faces, S SI D s , acc ess ru les, an d s e c u r it y sett ing s . You ca n u se t he q ue st ion ma r k (? ) to v iew t h e comma n d s a v a ila ble in a p r ivileg ed m o d e, c o [...]

  • Page 37

    37 | Set ti ng up an OAW-IAP AO S- W Instant 6.3.1. 1- 4.0 | U ser Gui d e Se q u e n c e - Se n s it iv e C o mma n d C o r r e s p o n d in g n o c o mma n d op en dns <u ser na me < pa ss wo rd > no o pe ndns ru le < dest > <ma sk > <m at ch > <p ro to co l> <st art -p or t> < e nd -p ort> { per mi t [...]

  • Page 38

    AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de AO S- W Instant U ser In ter fa ce | 38 C h a p t e r 4 A O S - W I n s t a n t U s e r I n t e r f a c e Th is c ha pter d e s c rib es the fol lo w in g A OS- W Inst an t U I ele me n t s: l L og in Sc re en l Ma in W ind ow L o g i n S cr e e n Th e AOS- W I nst an t log in p ag e allo w s y ou to: l [...]

  • Page 39

    39 | AO S- W Instant U ser In ter fa ce AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de You ca n a lso s ele c t t he r eq u ir ed la ng u a g e op t ion fr o m t h e Languages dr op -d o w n lo c ated a t t he b ottom left c or ne r o f the AO S-W Inst an t mai n w in d ow. M a i n W i n d o w O n lo gg ing in t o Inst an t , t he In s t a nt U I Ma [...]

  • Page 40

    Each t a b ap pe ar s in a c om p re s s ed vie w by d efau lt . Th e n umb er o f ne t w o r k s , O AW -IAP s, o r clien t s in t he n e t w o r k p re c ed es t he tab n am es. Th e in d ividu al t ab s c an b e e x p a n de d or coll a p s ed b y clic k ing o n t h e t ab s . The list it e ms in e ach t ab can b e s o r t ed b y c lic k ing th [...]

  • Page 41

    41 | AO S- W Instant U ser In ter fa ce AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de An e d it link is di s p la y ed on clic k ing the OAW-IAP na me . Fo r de t ai ls ab ou t ed it in g O AW - I A P s e t ting s s ee I ni tial C o n f igu ra t io n Task s on p ag e 6 7 . C l i ents Tab Th is t ab d is pl a y s a lis t of clien t s t ha t ar e c o [...]

  • Page 42

    Sy s tem Th is link d is pla y s t he  Sy s t e m w ind ow. The Sys t e m w in do w con s is t s of the follo w in g tab s : U s e the Sh o w / H id e Ad v a n c e d o ption a t t he b ottom of the Sys t e m w in d o w t o v iew o r hid e t he a d v a nced o ptio n s. l General — Allows y ou to c on f ig u re , v iew o r e dit the Name , I P a[...]

  • Page 43

    43 | AO S- W Instant U ser In ter fa ce AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de Figure 5 Sy s t e m W ind o w R F Th e R F  link d is pla y s a w ind ow for con figu rin g Ada p t ive R ad io Man a ge men t (ARM) a n d R a d io fea t ur e s . l AR M — Allows y ou to v iew o r c on f ig u r e c ha nn el a n d p o w e r s ett ing s f or a l[...]

  • Page 44

    Figure 6 R F W ind o w Sec uri ty Th e Se c u r it y link d is pla ys a w in d o w w it h t h e f ollo w ing ta bs: l Au th e n t ic a t io n S e r v e r s — U s e t his wind ow to c on f igu r e an e x t er n al R AD I U S s e r v er for a wire le s s n e t w or k . S ee C o n f igu rin g a n Ex t e r n al S e r v er for Au t he n t ication o n [...]

  • Page 45

    45 | AO S- W Instant U ser In ter fa ce AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de Figure 7 Secu r i ty W ind o w - D efau lt V ie w M ai ntena nc e Th e M ai ntenanc e link d is pla ys a w in d ow t h a t all o w s y ou to ma intain th e W i- Fi ne t w or k . Th e M ai ntenanc e w in do w con s is t s of the follo w in g tab s : l A bout —D is[...]

  • Page 46

    Figure 8 Ma inten a n c e W ind o w - D efau lt V ie w H el p Th e H e lp lin k a llo w s you to v iew a sho rt d esc r ip t ion o r de f in it ion o f s ele c t e d t er ms an d field s in t he UI w in do w s o r d ialo gs. To a c t iv ate the con t ext-sen s it ive he lp: 1 . C lick the He lp lin k at the to p r ig ht cor ne r of A OS- W Inst an [...]

  • Page 47

    47 | AO S- W Instant U ser In ter fa ce AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de Figure 9 VPN w in d o w f or IPSec C o n fi g u ra t ion ID S Th e I D Swind o w al lo w s y ou to c o nfigu r e w ir ele s s in t ru s io n de t ect io n a nd p ro t ection le v els. Th e f ollo w ing fig ur es sho w the ID S w ind ow: Figure 1 0 I D S W i n d [...]

  • Page 48

    Figure 1 1 I D S W i n d ow: Intru s ion Pr ote c t ion Fo r mo r e infor ma t ion o n w ir e le s s in t ru s ion d e tect ion a n d p r otect io n , s ee Dete c t ing a nd Cla s s ify ing Rog ue APs on p ag e 22 1 . W ir e d Th e W ir e d w in do w a llows y ou to c on f ig ur e a w ire d ne tw o rk p r ofile. S e e W ir e d Pro f ile s o n pa ge[...]

  • Page 49

    49 | AO S- W Instant U ser In ter fa ce AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de Figure 1 2 W ir e d W ind o w Se r v ic e s Th e Se r v ice s w ind ow a llows y ou to c on figu re ser vic es s u c h as AirG r o up , RTLS, a nd O pe nDN S. Th e Ser v ic es w in do w con s is t s of the follo w in g t ab s : l Air G r o u p — A llo w s you to [...]

  • Page 50

    Figure 1 3 S er vi c e s W ind o w : D efa ult View D H C P Se r v e r Th e D H C P S e rver s w ind ow a llows y ou to c on f ig ur e v ar io u s D H C P mo de s . The fo llo w ing figu r e s ho w s t he con t e n ts o f the DH C P S e r v e r s w in do w : Figure 1 4 D H C P Ser v e r s W ind o w Fo r mor e in f or ma t ion , s ee DH C P C on f i[...]

  • Page 51

    51 | AO S- W Instant U ser In ter fa ce AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de l Au to R u n — Allows y ou to c on f ig ur e a s c he du le for a uto ma t ic executio n of a sup po r t c om ma nd for a sp e cif ic O AW -IAP or a ll OAW -IAPs . l Filte r — Allows y ou to f ilter the con t e n ts o f a c om ma nd o utp u t. l C le a r —C [...]

  • Page 52

    N a me D e s c r ip t io n I n f o se ctio n i n Vi rtua l C on trol l e r vi e w The I nf o se ctio n i n the Vi rtua l Co n trol l e r vie w d isp l a ys t h e fol l o w in g i n forma tio n : l N ame — D i sp l a ys the Vi rtua l C o n trol l e r n a me . l Syst em L o ca t i o n —D i sp la ys the syst e m lo ca tio n . l C ou n t ry C o d e[...]

  • Page 53

    53 | AO S- W Instant U ser In ter fa ce AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de N a me D e s c r ip t io n l Sp ect ru m — D i sp l a ys the status o f t h e spe ctrum mo n i tor. l C li e n t s — Nu mb e r o f cli e n ts a sso ci a ted w i th t h e O AW-I AP. l T ype — Di sp l a ys t h e mo d e l n u mb e r of the OAW-I AP. l C PU U t i[...]

  • Page 54

    Ic o n N a me D e s c r ip t io n 3 U tili za tio n ico n D isp l a ys t h e ra d i o u tili za tio n ra te of the OAW -IAPs. D e p e n d i n g on th e pe rce n tag e o f u til iza tio n , the col o r of the l i n e s on the U tili za tio n ico n ch a n g e s f ro m G re e n > O ra n g e > Re d . l Gree n— Util i za tio n is le ss t h a n 5[...]

  • Page 55

    55 | AO S- W Instant U ser In ter fa ce AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de Figure 1 8 Fra me s Gr ap h Figure 1 9 S pe e d Gr ap h Figure 2 0 Thr o u g h pu t Gr ap h U s a g e Tr e n d s Th e U s a g e Tr e n d s d ispla y s t he follo w in g gr ap hs: l C lie nts — I n t he d efa u lt v ie w , t he Clie n t s g ra ph d is p la y s t h[...]

  • Page 56

    Figure 2 1 U sag e Tr e n d s Sect ion in the M o nitor ing Pa ne Th e f oll o w in g tab le de s c r ib es t h e gr ap hs d is pla yed in the Netw o r k v iew: G r a p h N a me De s c r ip t io n Mo n ito r in g P r o c e d u r e C li e n ts The C l ie n ts gra p h sho w s the nu mb e r o f cli e n ts asso ci a ted w i th t h e n e two rk f o r t [...]

  • Page 57

    57 | AO S- W Instant U ser In ter fa ce AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de G r a p h N a me D e s c r ip t io n Mo n ito r in g P r o c e d u r e Neighbor ing APs The N e i g h b ori n g APs gra p h sho w s the nu mb e r o f APs he a rd by the se l e cted OAW -IAP: l Va li d APs: A n AP t h a t is p a rt o f the en terp ri se p ro vi d i [...]

  • Page 58

    G r a p h N a me D e s c r ip t io n Mo n ito r in g P r o c e d u r e C li e n ts The C l ie n ts gra p h sho w s the nu mb e r o f cli e n ts asso ci a ted w i th the se l e cted OAW - IAP for the la st 1 5 mi n u tes. To see a n en l a rg e d vi e w , cli ck t h e g ra p h . The e n l a rg e d vi e w pro vi d e s L a st, Min i mu m, Ma xi mu m, [...]

  • Page 59

    59 | AO S- W Instant U ser In ter fa ce AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de G r a p h N a me D e s c r ip t io n Mo n ito r in g P r o c e d u r e Frame s The Frame s G ra p h sh o w s t h e In an d Out frame ra te per se con d o f the cl i e n t for t h e la st 1 5 mi n u tes. It a lso sh o w s da ta f o r t h e R etry In an d R e try O u[...]

  • Page 60

    l As s o cia t io n Time — The time a t w h ic h t he sele c t e d c lien t w as a s s ociate d w it h a pa rticula r OAW-IAP . Th e AOS- W I nst an t U I s ho w s the clien t an d OAW-IAP ass o c ia t ion o v er th e last 15 min ute s . l Ac c e ss P o in t — Th e O AW -IAP na me w ith w hich t he clie nt w a s ass ocia t ed . Mo bility info r[...]

  • Page 61

    61 | AO S- W Instant U ser In ter fa ce AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de Th e Ale r ts link d is pla y s t he fol lo w in g t y pe s of a ler t s : l C lie nt Ale rts l Ac t iv e Fa ults l Fa ult His t o r y Typ e o f A le r t De s c r ip t io n In f o r ma tio n D is p la y e d C li e n t Al e rts The C l ie n t al e rt s o ccu r w h e[...]

  • Page 62

    Figure 2 4 Fau lt H is t or y Figure 2 5 A c t iv e Fa ults Th e f oll o w in g tab le disp la y s a list o f a ler t s t ha t ar e ge n e r ated o n t h e AOS- W Inst an t ne t w or k : Typ e C o d e D e s c r ip t io n D e t a ils C o r r e c t iv e Ac t io n s 10 0 1 0 1 Intern al erro r The OAW-I AP h a s encount ered an int ernal er ror for th[...]

  • Page 63

    63 | AO S- W Instant U ser In ter fa ce AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de Typ e C o d e D e s c r ip t io n D e t a ils C o r r e c t iv e Ac t io n s 10 0 1 0 5 Maxi mu m ca p a ci ty rea ch e d on OAW-I AP The OAW -IAP ha s re a ch e d maxi mu m ca p a ci ty an d ca n n o t acco mmo d a te a n y mo re cli e n ts. Consi der expandi ng c[...]

  • Page 64

    n C la s s if ic atio n — Dis pla y s t he class ific atio n o f t he fo r eig n AP , f or e x a mp le, Inter fer ing O AW -IAP or Rog u e O AW -IAP . n C h a nn el— D is pla y s t he cha n n e l in w hich t he fo re ign AP is o pe ra t in g. n Type — D is pl a y s t he Wi-F i t y p e of the for ei g n AP. n L ast see n— D is pla y s t he t[...]

  • Page 65

    65 | AO S- W Instant U ser In ter fa ce AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de Ai rG roup Th is Air G r o u p lin k pr o v id es a n ove ra ll vie w o f you r AirG r o up c on f ig ur atio n . C lic k ea c h f ield to v iew o r ed it t h e sett ing s . l MAC — D is p lays the MAC a d dr ess of the Air Gr ou p s er ver s . l IP — D ispla y[...]

  • Page 66

    l Th e f oll o w in g A OS- W Inst an t U I e leme n t s a re a v aila b le in this view: n Ta bs— N etw o r k s, Ac c ess Poin t s , an d C lien t s. Fo r de t a ile d infor ma t ion a b o u t t he ta bs, see Ta b s on p a g e 3 9 . n L inks — Mon itor ing , C lien t Aler t s , an d I D S. The Sp ect r u m link is vis ible if you h ave c o n f[...]

  • Page 67

    AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e Initi al C onfigur ation T ask s | 67 C h a p t e r 5 I n i t i a l C o n f i g u r a t i o n T a s k s Th is c ha pter d e s c rib es the fol lo w in g ba s ic OAW -IAP de p loymen t me tho ds a nd con f ig u r ation task s: l U p d ating IP Add r e s s o f an O AW -IAP on p ag e 6 7 l Mo dify in g t[...]

  • Page 68

    68 | I niti al C onfigur ation T ask s AO S- W I nstant 6 .3.1.1 - 4.0 | U ser Gui de Figure 2 9 C o nfigu rin g OAW-IAP Sett ing s 3 . Sele ct e ithe r t he G e t IP a d d r e s s fr o m D H C P s e r v e r o r S p e c if y s t a t ic a lly o p tion . I f you h ave s el e c ted the Sp e c if y s t a tic a lly o p tion , pe rfor m t he foll o w in [...]

  • Page 69

    In the CLI To cha ng e the n ame : (I ns tant A cce ss P oi nt )# h os tn am e <s yste m-n am e> U p d a t i n g L o ca t i o n D e t a i l s o f a n O A W- I A P You ca n u p da t e t he p h y s ical locatio n d etails o f an O A W -IAP b y usin g t h e AOS- W Inst an t U I o r C LI. The sy s t e m lo c ation d e tails a re u s ed fo r r etr[...]

  • Page 70

    70 | I niti al C onfigur ation T ask s AO S- W I nstant 6 .3.1.1 - 4.0 | U ser Gui de Th e f oll o w in g tab le lis t s ga in v a lu es s u p p or t ed b y ea c h t y p e o f an t e n na : Fr e q u e n c y Ba n d Typ e G a in ( d Bi) 2.4 GHz D i p o l e /O mn i 6 Panel 12 Se ctor 12 5 GHz D ip o l e /O mn i 6 Panel 14 Se ctor 14 Ta bl e 1 5 : Ante[...]

  • Page 71

    IA Ps jo inin g t h e ne t w or k ne ed to s y n c h ro nize t h e ir soft w ar e w it h the ver s io n r u nn ing o n t h e Virtu al C on t ro lle r, a nd if the n ew O AW -IAP be lo n gs t o a d iff er en t c lass , t he i ma ge file f o r the n ew O AW -IAP is pr ovid ed b y O mniVist a. If O mn iv is t a do e s no t ha v e t h e a p pr op ri a [...]

  • Page 72

    72 | I niti al C onfigur ation T ask s AO S- W I nstant 6 .3.1.1 - 4.0 | U ser Gui de 2 . Ente r the HTTP p ro x y s er v er ' s I P ad d r e s s a n d the p or t nu mb e r. 3 . If you d o no t w an t t he HTTP p ro x y t o be a pp lie d f or a p ar tic ula r ho s t, c lick N e w t o en t er th at I P a dd re s s or d om ain n ame o f t ha t h[...]

  • Page 73

    n Fo r all oth e r OAW -IAPs —Alc atelIn s tan t _O rio n _6 .3.1.1- 4 . 0.0.0 _xx x x l Sele ct the Ima g e U R L op t ion . Sele c t t his o ption to o btain a n ima ge file f r om a TFTP, FTP, o r H TTP U R L . n H TTP - htt p:/ / <I P-a dd re ss > / < ima ge -file > . For e x a mp le, h t t p:/ /< I P-a dd r e s s >/ Alc ate[...]

  • Page 74

    74 | I niti al C onfigur ation T ask s AO S- W I nstant 6 .3.1.1 - 4.0 | U ser Gui de (I ns tant A cce ss P oi nt )( co nf ig ) # te lnet -se rv er (I ns tant A cce ss P oi nt )( co nf ig )# e nd (I ns tant A cce ss P oi nt )# c om mi t ap pl y E n a b l i n g A u t o Jo i n M o d e Th e Auto J oin M o d e f ea t ur e a llo w s O AW -IAP s t o au t[...]

  • Page 75

    3 . C lick O K . R e b oo t the O AW - IA P a ft er con f ig ur ing th e r ad io pr ofile for th e c h a n ge s to aff ect . In the CLI To con f ig u re a p re f e r r ed b an d: (I ns tant A cce ss P oi nt )( co nf ig )# r f-ba nd <b an d> (I ns tant A cce ss P oi nt )( co nf ig )# e nd (I ns tant A cce ss P oi nt )# c om mi t ap pl y C o n [...]

  • Page 76

    76 | I niti al C onfigur ation T ask s AO S- W I nstant 6 .3.1.1 - 4.0 | U ser Gui de Mo d e D e s c r ip t io n an d cl i e n ts. Sp ectrum Mo n i tor In Sp ectrum Mo n i tor mo d e , t h e AP f u n ction s a s a de d i ca ted ful l -sp e ctrum R F mon i tor, scan n i n g al l ch a n n e l s to d e tect interfere n ce , wh e the r from the ne i g [...]

  • Page 77

    C o n f i g u r i n g U p l i n k V L A N fo r a n O A W- I A P Inst an t s up po r t s a ma na ge me nt VLAN for the u p lin k tra f f ic on a n OAW - I A P. A f ter a n OAW - IA P is pr o v ision ed wit h the u plin k man a ge men t VLAN , all ma na ge me nt t r aff ic s en t f ro m t he O A W - I AP is t ag g e d w ith t he ma n a g e men t V[...]

  • Page 78

    78 | I niti al C onfigur ation T ask s AO S- W I nstant 6 .3.1.1 - 4.0 | U ser Gui de 3 . Sele ct a time z on e f r o m the Tim e z o n e d r op -d own list . Th e t ime zon e ind ic a tes t h e time re t u rn ed b y t he NTP ser v er . You ca n e n ab le da y lig ht s a v in g t ime ( D ST) o n O AW -IAP s if t he time zon e y ou sele ct ed sup po[...]

  • Page 79

    AO S- W Instant 6.3 .1.1- 4 .0 | U ser Gui d e Me sh O AW- IAP C onfigur ation | 79 C h a p t e r 6 M e s h O A W - I A P C o n f i g u r a t i o n Th is c ha pter p r ovide s t he fol lo w in g infor ma t ion : l Me s h N etw or k Over v ie w on p a ge 7 9 l Setting u p AOS- W I nst an t Me s h N e t w o r k o n p ag e 80 M e sh N e t w o rk O ve [...]

  • Page 80

    80 | M esh OA W- IAP Co nfigura ti on AOS-W In stant 6.3.1. 1- 4.0 | U ser Gui de Th e mesh p or t al re b o ots a f t er 5 m in utes whe n it loses its u plin k c on ne c tiv it y to a w ire d ne tw o rk. M es h P oi nts Th e me s h p o in t e s t ab lis h e s an a ll- w ir ele s s pa t h t o t h e me s h po rta l. Th e me s h p oin t pr ovid e s [...]

  • Page 81

    AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de VLAN C onf i g ur ation | 8 1 C h a p t e r 7 V L A N C o n f i g u r a t i o n VLAN c o nfigu r a tion is r eq uir e d f o r n e t w or k s wit h mor e d e vic es a n d br oa d c ast tra f f ic on a WLAN SS ID o r w ir e d p ro f ile. B a s e d o n t he n etw or k t y pe a n d its r eq uir e me nts , y [...]

  • Page 82

    AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e Vi r tua l C ontr o l ler Co nfigura ti on | 82 C h a p t e r 8 V i r t u a l C o n t r o l l e r C o n f i g u r a t i o n Th is c ha pter p r ovide s t he fol lo w in g infor ma t ion : l Vir t u al C on t ro lle r Over v iew l Vir t u al C on t ro lle r I P A d dr ess C on f igu r ation V i r t u a[...]

  • Page 83

    83 | Virtu al C ontr o l l e r C onfigur ation AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e VLAN. W h e n t h e V ir tua l C o n tro ller g o e s d o w n , a n e w Virtu a l C on t r olle r is ele c t e d . Pr ov i s i oni ng an OA W -IAP as a M as ter O AW -IA P You ca n p r ovis ion a n OAW-IAP as a ma s t e r OAW-IAP by u s ing th e AOS- W In[...]

  • Page 84

    In the AO S -W Ins tant UI 1 . C lick the Sy s te m link at top r igh t c or n e r o f the AOS- W I nst an t mai n w in d o w . Th e S y s t e m w ind ow is d is p la y ed . 2 . C lick the S how advanced opti ons link. Th e a d v a nced o ptio ns a r e d is pla y ed . 3 . In t he General tab , en t er t he a pp r op ria t e IP ad dr e s s in t he V[...]

  • Page 85

    AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e Wi r el ess Netw or k Pr o fi l e s | 85 C h a p t e r 9 W i r e l e s s N e t w o r k P r o f i l e s Th is c ha pter p r ovide s t he fol lo w in g infor ma t ion : l U n d er s t an d in g W ire less N etw or k Pro f ile s on p ag e 8 5 l C o n f igu rin g W LAN Setting s for a n SSI D Pro f ile o [...]

  • Page 86

    86 | Wire l e ss Netw or k Pr of i les AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e C o n f i g u r i n g W L A N S e t t i n g s f o r a n S S I D P r o f i l e You ca n c o n figu re WLAN s etting s u s ing AO S - W I nst an t U I or CLI. In the AO S -W Ins tant UI To con f ig u re WLAN s ett in g s : 1 . In t he Ne t w o r k s t ab o f t he A[...]

  • Page 87

    Pa r a me t e r D e sc r ip tio n di re ctly to the a sso ci a ted cli e n t. l D isa b l e d — W h e n set to D i sa b le d , a l l b ro a d ca st a n d mu l tica st traff i c is f o rw a rd ed . D T I M i n t e rva l The D T I M i n t e rval in d i ca tes t h e d e l ive ry t ra ff i c ind i ca tio n me ssa g e (D TI M) pe ri o d in b e a co n [...]

  • Page 88

    88 | Wire l e ss Netw or k Pr of i les AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e Pa r a me t e r D e sc r ip tio n In a non -WMM or hyb rid e n vi ro n me n t, w h e re so me cli e n ts a re n o t WMM-cap a b le , yo u ca n al l o ca te h i g h e r val u e s for Be st e f f o rt W MM sha re a n d Vo i ce W MM sh a re t o al l o ca te a hi [...]

  • Page 89

    (I ns tant A cce ss P oi nt )( SS ID P ro fi le <na me> )# c on te nt -f il te ri ng (I ns tant A cce ss P oi nt )( SS ID P ro fi le <na me> )# h id e- ss id (I ns tant A cce ss P oi nt )( SS ID P ro fi le <na me> )# i na ct iv it y- ti me ou t <int erv al > (I ns tant A cce ss P oi nt )( SS ID P ro fi le <na me> )# w [...]

  • Page 90

    90 | Wire l e ss Netw or k Pr of i les AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e l D e f a u lt — On sele c t in g t h is o ption , t he clie nt o b t ain s t he IP ad d r ess in the sam e s ub ne t as the O A W -IAPs . By d efau lt , t he clie nt VLAN is ass ig ne d t o t he n a t ive V LAN o n t he wire d n e t w o r k . l St a t ic — O[...]

  • Page 91

    In the AO S -W Ins tant UI To c on figu re s ecur it y s e t t ing s f or an e mp loyee or v o ice ne t w or k: 1 . In t he Se c u r it y t ab , s pe c if y an y of the foll o w in g ty pe s o f secur ity le vels b y mo v in g t he slide r to a de s ire d le v el: l En te r p r is e —On sele c ting e nter p rise s ecu r ity le v el, the a uth e n[...]

  • Page 92

    92 | Wire l e ss Netw or k Pr of i les AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e Figure 3 6 S ecu r it y Tab : Op e n 2 . Base d o n the secur ity le v el s pe c if ie d , s p ecif y t he follo w in g pa ra me t er s : Pa r a me t e r D e sc r ip tio n Se c u r it y L e v e l Typ e Ke y Managem ent For En t e rp ri se se cu ri ty l e ve l, se[...]

  • Page 93

    Pa r a me t e r D e sc r ip tio n Se c u r it y L e v e l Typ e 1. Sele ct a n ap p ro p ri a te val u e for W EP ke y si ze from the WEP key size d ro p -d o w n l i st. Yo u can sp e ci fy 6 4 -b i t o r 12 8 -b i t . 2. Sele ct an ap p ro p ri a te va l u e for Tx key from the T x Ke y dro p -d o w n l i st. Yo u ca n sp e cify 1 , 2 , 3 , o r 4[...]

  • Page 94

    94 | Wire l e ss Netw or k Pr of i les AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e Pa r a me t e r D e sc r ip tio n Se c u r it y L e v e l Typ e Acco un t i n g To en a b l e acco u n tin g , se l ect Enabled f ro m the Acco u n t i n g d ro p -d o w n l ist. On sett i n g this op tio n to E nabled , APs p o st acco u n tin g i n forma tio n [...]

  • Page 95

    (I ns tant A cce ss P oi nt )( SS ID P ro fi le <na me> )# e xt er na l- se rv er (I ns tant A cce ss P oi nt )( SS ID P ro fi le <na me> )# s er ve r- lo ad -b al an cing (I ns tant A cce ss P oi nt )( SS ID P ro fi le <na me> )# b la ck li st (I ns tant A cce ss P oi nt )( SS ID P ro fi le <na me> )# m ac -a ut he nt ic at[...]

  • Page 96

    96 | Wire l e ss Netw or k Pr of i les AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e You ca n c o nfigu r e u p t o 6 4 acc ess ru les for a n e mp loyee , v oice , or g u e s t ne t w o r k u sing the AO S - W I nst an t U I or C L I. In the AO S -W Ins tant UI To con f ig u r e acc ess ru le s f or a n e mp loyee o r v o ic e n e t w or k : 1 .[...]

  • Page 97

    (I ns tant A cce ss P oi nt )( SS ID P ro fi le <na me> )# s et -r ol e- ma ch in e- auth < mac hi ne -a ut he nt ic at io n-on l y> < us er-a uth en ti ca ti on -o nl y> (I ns tant A cce ss P oi nt )( SS ID P ro fi le <na me> )# e nd (I ns tant A cce ss P oi nt )# c om mi t ap pl y To con f ig u re u nr estrict ed a c c e s[...]

  • Page 98

    98 | Wire l e ss Netw or k Pr of i les AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e Figure 3 7 W L AN Se c u rity Se t ti n gs—En ter pr is e Ta b 4 . Set 802. 11r roam i ng t o Enabl ed . 8 0 2 . 11 r ro am ing can a ls o be e n a b le d f or Pe r s o n a l a n d O p e n s ecu rity leve ls. 5 . C lick N e x t an d t h e n c lick Fin ish . In [...]

  • Page 99

    C onfi guri ng an O AW -IA P for O K C R oam i ng You ca n e n a b le O KC ro ami n g f o r W LAN SSI D b y u s in g A OS- W Inst an t U I or CLI. In t h e AO S- W I n s t a n t U I 1 . N a v ig ate t o t he WLAN w iz a rd ( c lic k N e t w o r k > N e w or Ne tw o r k > Sele c t t he WLAN SSI D > e d it ). 2 . C lick the Se c u r ity t[...]

  • Page 100

    100 | Wireles s N e tw or k Pr ofil es AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e In the AO S -W Ins tant UI To mo di fy t h e s t atu s of a WLAN S SI D pr ofile : 1 . In t he Ne t w o r k s t ab , s e le c t t he n e t w o r k t ha t y ou w a n t to ed it . Th e e d it link i s d ispla y ed . 2 . C lick the e d it lin k . The Ed it n e t w o[...]

  • Page 101

    In the CLI To e na bl e t h e ext en de d SSI D s : (I ns tant A cce ss P oi nt )( co nf ig )# e xten ded -s si d (I ns tant A cce ss P oi nt )( co nf ig )# e nd (I ns tant A cce ss P oi nt )# c om mi t ap pl y E d i t i n g a W L A N S S I D P r o f i l e To e dit a WLAN SS I D pr ofile : 1 . In t he Ne t w o r k s t ab , s e le c t t he n e t w o[...]

  • Page 102

    AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de Wired Pr o fi l e s | 102 Chapter 10 W i r e d P r o f i l e s Th is c ha pter d e s c rib es the fol lo w in g pr oced u re s : l C o n f igu rin g a W ir e d P r ofile on p a g e 10 2 l As s ig n in g a P r o file t o E the rn et P o r ts o n p ag e 10 8 l U n d er s t an d in g H ier ar chical D ep lo[...]

  • Page 103

    103 | Wired Pr o fi l es AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de a . N a me — Spe c ify a n a me for the p r o file. b . P r ima r y U s a g e — S e le ct Emp lo y e e o r G u e s t . c. Speed/ Dupl ex — E n s ur e t ha t ap pr o pr iate v al u e s a r e s ele c t e d f o r Speed/ Dupl ex . C on tact you r ne t w or k a dmin is t r ator [...]

  • Page 104

    l Ac c e ss — S el e c t t hi s mod e to allo w t he p or t t o c ar r y a s in gle VL A N s pe c if ie d a s t he n a tiv e V L AN . l Tr u n k — S e lect t his mo de to al lo w t h e p o rt to c ar ry p ack ets f or m ultiple VL AN s spe c if ied a s allo w e d VLANs . b . Spe c ify a ny o f t he fo llo w ing valu e s f or Clie n t I P A s s [...]

  • Page 105

    105 | Wired Pr o fi l es AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de In t h e AO S- W I n s t a n t U I To con f ig u r e s ecur ity p ar am e t e rs f o r an e mplo y e e ne t w or k : 1 . C o n f igu re th e follo w ing p a r ame t er s in t h e Se c u r it y t a b. l MAC a u t h e n t ic a t io n — To en ab le MAC au t h e ntic atio n , s e l[...]

  • Page 106

    l R o le - b a s e d — A llo w s the u s er s t o ob t a in a cc ess b ased o n t h e r o les a s sign ed to t h e m. l U n r e s tr ic t e d — A llo w s the u s er s t o ob t a in u nr est r ic ted a c c ess on the p o r t. l N e t w o r k - b a se d — Allows t he u s er s t o be a u the ntic a t e d ba s ed o n a c cess r ule s s pe c if ie[...]

  • Page 107

    107 | Wired Pr o fi l es AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de To con f ig u re u nr estrict ed a c c e s s : (I ns tant A cce ss P oi nt )( co nf ig )# w ired -po rt -p ro fi le < na me > (I ns tant A cce ss P oi nt )( wi re d ap p ro file < nam e> )# s et -r ol e- un re st rict ed (I ns tant A cce ss P oi nt )( wi re d ap p ro [...]

  • Page 108

    Ena b lin g w ire d br id gin g on th is po r t of an O A W -IAP ma k es t h e po rt a v aila b le a s a d o w n link w ir ed b rid g e a nd a llows clien t acc ess t hr ou g h the p or t . You can a ls o use the p or t t o c on ne c t a w ire d d evic e w he n a 3G u pl in k is use d . You ca n c o n f igu re su p p or t for wir e d b r idg ing o [...]

  • Page 109

    109 | Wired Pr o fi l es AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de 1 . C lick the Wir e d lin k u nd er Mor e at t he top r ig ht c o r ne r of the AO S - W I nst an t ma in w in do w . Th e W ir e d w ind ow is d is pla y ed . 2 . In t he Wir e d w in do w , sele c t t he wire d p ro f ile t o mo dify . 3 . C lick E d it . Th e Ed it W ir e d N[...]

  • Page 110

    AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e Ca ptiv e Por tal f or Guest Acc ess | 110 Chapter 11 C a p t i v e P o r t a l f o r G u e s t A c c e s s Th is c ha pter p r ovide s t he fol lo w in g infor ma t ion : l U n d er s t an d in g C ap t iv e Por t a l on p ag e 11 0 l C o n f igu rin g a W LANSSID for G ue s t A c c e s s on p ag [...]

  • Page 111

    111 | C ap ti ve Por ta l for Guest Acc ess AOS - W Instant 6.3.1. 1- 4.0 | U ser Gui de Wal l ed G ar den Th e ad min is t ra t o r s c a n a ls o c on t ro l t he r eso u r c es tha t the g ue s t user s c an a c c e s s a n d t he a mou n t o f b a nd w idth or a ir t ime t h e y c a n u se at a n y give n time. Whe n an e x t e r n al C ap t iv[...]

  • Page 112

    Pa r a me t e r s D e s c r ip t io n D MO ch a n ne l u t i l i za t io n t h re sh o l d Spe ci fy a va l u e to set a thre sho l d for DMO ch a n n e l u tili za tio n . Wit h D MO, the OAW -IAP con ve rts mul ticast st re a ms in to u n i ca st st re a ms a s l o n g a s the cha n n e l util i za tio n d oe s no t e xce e d thi s t h re sh o l [...]

  • Page 113

    113 | C ap ti ve Por ta l for Guest Acc ess AOS - W Instant 6.3.1. 1- 4.0 | U ser Gui de Pa r a me t e r s D e s c r ip t io n D isa b l e SSI D Se le ct to t h e ch e ckb o x t o d i sa b l e the SSID. On sel e cting thi s che ck bo x, the SSID is d i sa b l e d , bu t no t remo ve d from the n e two rk. By de fau l t, a l l SS IDs a re enabled. C[...]

  • Page 114

    (I ns tant A cce ss P oi nt )( SS ID P ro fi le <na me> # br oa dc as t- fi lt er < ty pe> (I ns tant A cce ss P oi nt )( SS ID P ro fi le <na me> # dt im -p er io d <n um be r- of-b eac on s> (I ns tant A cce ss P oi nt )( SS ID P ro fi le <na me> # mu lt ic as t- ra te -o pt imiz ati on (I ns tant A cce ss P oi nt )([...]

  • Page 115

    115 | C ap ti ve Por ta l for Guest Acc ess AOS - W Instant 6.3.1. 1- 4.0 | U ser Gui de f. C o n t e n t Filte r in g — To e nsur e t ha t al l D N S r eq ue s t s t o no n - c or po r a t e d oma ins on this wire d ne tw o rk a r e s en t to Op en D N S , s ele ct E nabl ed f o r C o n t e n t Filte r in g . g . U p lin k — Sele c t E nabl ed[...]

  • Page 116

    (I ns tant A cce ss P oi nt )( co nf ig )# w ired -po rt -p ro fi le < na me > (I ns tant A cce ss P oi nt )( wi re d ap p ro file < nam e> )# s et -v la n <a tt ri bu te>{ equ al s| n ot -e qu al s| s ta r ts -w ith| e nds -w it h| c on ta in s| m at ches -re gu la r- ex pr es si on } <o pera tor > <V LA N- ID >| v al[...]

  • Page 117

    117 | C ap ti ve Por ta l for Guest Acc ess AOS - W Instant 6.3.1. 1- 4.0 | U ser Gui de Pa r a me t e r D e sc r ip tio n Acco un t i n g mo d e (Ap pl i ca b l e for WLAN SSI D s on l y.) Se le ct a n acco u n tin g mo d e f ro m A ccou n t i n g mo d e for p o stin g a cco u n tin g in forma tio n a t the spe ci fie d Acco u n t i n g i n t er v[...]

  • Page 118

    (I ns tant A cce ss P oi nt ) (w ir ed a p pr of ile "< nam e> ") # au th -s er ve r <s er ver1 > (I ns tant A cce ss P oi nt ) (w ir ed a p pr of ile "< nam e> ") # ra di us -r ea ut h- inte rva l <M in ut es > (I ns tant A cce ss P oi nt ) (w ir ed a p pr of ile "< nam e> ") # en d (I ns[...]

  • Page 119

    119 | C ap ti ve Por ta l for Guest Acc ess AOS - W Instant 6.3.1. 1- 4.0 | U ser Gui de Pa r a me t e r D e sc r ip tio n N ame En ter a n a me for the p ro file . T ype Se l e ct a n y on e of the foll o w i n g type s o f a uth en tica tio n : l R ad i u s Au t h e n t i ca t i o n - Se l e ct thi s op tion to en a b l e u se r au the n tica tio[...]

  • Page 120

    C onf i gu r i ng an S S I D or Wir e d P r of il e t o U se E xt er n al C ap t i ve P o r t al A u t h ent i cat i on You ca n c o n f igu re e x t e rn al c ap t ive po rtal a u the ntic a t io n f or a n etw or k pr o f ile w he n ad d in g or e ditin g a g u est n etw or k u s ing AO S-W Inst an t U I o r C LI. In the AO S -W Ins tant UI 1 . N[...]

  • Page 121

    121 | C ap ti ve Por ta l for Guest Acc ess AOS - W Instant 6.3.1. 1- 4.0 | U ser Gui de Pa r a me t e r D e sc r ip tio n is En crypt i o n Se l e ct En a b le d to con fig u re e n cryp tio n se tt i n g s an d spe ci fy the e n cryp tio n p a ra me ters. Ta bl e 2 2 : Ex t e r n al C ap t iv e Por t a l Con f igu r ation Pa ra me t er s 5 . C li[...]

  • Page 122

    a . Ente r the IP ad d re s s o f the Clea r Pass Gu est s er v er in t he IP o r h o st n a me field . Ob t ai n t h e C le ar Pass G ue s t IP ad dr e s s f ro m y ou r s y s t em ad min is t r a tor . b . Ente r /page_nam e.php in the URL field . Th is U R L mu s t cor re s p o n d t o t he Pa g e N a me con f ig u r ed in the C le ar Pass G ue [...]

  • Page 123

    123 | C ap ti ve Por ta l for Guest Acc ess AOS - W Instant 6.3.1. 1- 4.0 | U ser Gui de (I ns tant A cce ss P oi nt )( Ac ce ss R ul e <nam e>) # ru le < de st > <m as k> < ma tc h> <pr oto co l> < st ar t- po rt > <e nd -por t> {p er mi t |d en y | sr c- na t | ds t-na t {<I P- ad dr es s> < po r[...]

  • Page 124

    In the AO S -W Ins tant UI To cre ate a C a p t iv e po rta l ro le : 1 . Sele ct a n SSI D p ro f ile f r om t he Ne tw o r k s t a b . Th e Ed it < W L AN - Pr o f ile > w in d o w is d ispla y ed . 2 . In t he Acc e s s t ab , s lid e t o R o le - b a s e d a c c ess con t ro l by u sing the sc r o ll ba r. 3 . Sele ct a r ole o r c re a t[...]

  • Page 125

    125 | C ap ti ve Por ta l for Guest Acc ess AOS - W Instant 6.3.1. 1- 4.0 | U ser Gui de Fie ld D e s c r ip tio n pa g e tha t w o u l d b e d i sp la ye d to use rs con n e ctin g to t h e n e two rk. The i n itia l pa g e asks for u se r cre d e n tia l s o r e ma il , de p e n d i n g o n the sp la sh pa g e t yp e con fig u re d l To cha ng e [...]

  • Page 126

    (I ns tant A cce ss P oi nt )( Ac ce ss R ul e <Nam e>) # en d (I ns tant A cce ss P oi nt )# c om mi t ap pl y C o n f i g u r i n g W a l l e d G a r d e n A cce ss O n the Inter n et, a walle d ga r de n t y pica lly c on tro ls acc ess t o w eb con t e n t an d s e r v ic es. The Walle d g ar de n acc e s s is r eq uir e d w he n a n e x [...]

  • Page 127

    127 | C ap ti ve Por ta l for Guest Acc ess AOS - W Instant 6.3.1. 1- 4.0 | U ser Gui de You c an a ls o c u s t o miz e s pla s h p ag e de s ign i n the Se c u r ity t ab o f N e w W L AN an d N e w W ir e d N e t w o r k w ind ows w h e n c on f igu r ing a n ew p ro f ile . 2 . N a v ig ate t o t he Se c u r it y t a b . 3 . Sele ct N o n e f r[...]

  • Page 128

    AO S- W In stant 6 .3.1.1 - 4.0 | U ser G uide U ser Mana gemen t | 128 Chapter 12 User Managem ent Th is c ha pter p r ovide s t he fol lo w in g infor ma t ion : l O AW -IAP U s er s on p ag e 1 2 8 l C o n f igu rin g Adm in is t ra t o r C r e d e ntials for the Vir t u a l C on t ro lle r I nter face on p ag e 12 8 l C o n f igu rin g G u e s [...]

  • Page 129

    129 | U ser Manag ement A OS- W In stant 6 .3.1.1 - 4.0 | U ser G uide 2 . C lick the Ad min t a b . Th e Ad min tab d e t a ils a re d is pl a y e d . Th e f ollo w in g f igu re sh o w s t he co n t e nts o f the Ad min tab : Figure 4 2 A dm i n Ta b: Ma na g e men t A u the ntic ation Pa ra me t er s 3 . U n d er L ocal, s ele c t an y of the fo[...]

  • Page 130

    (I ns tant A cce ss P oi nt )# c om mi t ap pl y C o n f i g u r i n g G u e st M a n a g e m e n t I n t e r f a ce A d m i n i st r a t o r C r e d e n t i a l s You ca n c o n figu re g ue s t ad min is t ra tor cre de n tials in the AO S-W Inst an t U I o r C LI. In the AO S -W Ins tant UI 1 . C lick the Sy s te m link at top r igh t c or n e r[...]

  • Page 131

    131 | U ser Manag ement A OS- W In stant 6 .3.1.1 - 4.0 | U ser G uide Figure 4 3 A dd in g a U s e r 3 . Ente r the u s er n a me in the Us e r n a me text bo x . 4 . Ente r the p ass w or d in the Pa s s w o r d t ext b ox a nd r econ firm. 5 . Sele ct a ty pe o f n etw or k f ro m t he T y p e dr op - d o w n list . 6 . C lick A d d an d c lic k[...]

  • Page 132

    To con f ig u re a g ue s t user : (I ns tant A cce ss P oi nt )( co nf ig )# u ser <us ern am e> < pa ss wo rd > port al (I ns tant A cce ss P oi nt )( co nf ig )# e nd (I ns tant A cce ss P oi nt )# c om mi t ap pl y C o n f i g u r i n g t h e R e a d - O n l y A d m i n i st r a t o r C r e d e n t i a l s You ca n a ss ign the r e [...]

  • Page 133

    133 | U ser Manag ement A OS- W In stant 6 .3.1.1 - 4.0 | U ser G uide 2 . To a dd a u s er , c lic k N e w . Th e N e w G u e s t U s e r po p- up win do w is di s p la y ed . 3 . Spe c ify a U s e r n a me an d Pa s s w o r d . 4 . R e ty pe the p ass w o r d t o c on f ir m. 5 . C lick O K .[...]

  • Page 134

    AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de Authentic a ti on | 134 Chapter 13 A u t h e n t i c a t i o n Th is c ha pter p r ovide s t he fol lo w in g infor ma t ion : l U n d er s t an d in g A u t he ntic a tion Me t h o d s on p a g e 1 3 4 l Sup p o rted Au t he ntication Se rver s on p a g e 13 5 l U n d er s t an d in g E n c ryptio n Typ[...]

  • Page 135

    135 | Auth entic ation AO S- W Instant 6 .3.1.1 - 4.0 | U ser Gui de succ ess f ul , t he m a c - a u t h - o n ly r ole is o v er w ritt e n by t h e fina l r ole . The m a c - a u t h - o n ly r ole is p rim a r ily u s ed for wire d c lie n ts . n L 2 au t h e n tic ation fa ll- t hr ou g h - A llo w s you to en ab le t h e l2 - a u t h e n t ic[...]

  • Page 136

    E xt er n al R A D I U S Se r ver In t he e x t er n al R A D I U S s e r v er , t he IP ad d r ess o f the Vir t ua l Con t r o lle r is con f igu r ed a s the NAS I P ad d r ess . AOS- W Inst an t R A D I U S is imp leme n ted o n t he Vir t ua l C on t ro lle r, a n d t his e limin a tes t h e n e ed to c on f ig u re mu lt ip le N A S clien t s[...]

  • Page 137

    137 | Auth entic ation AO S- W Instant 6 .3.1.1 - 4.0 | U ser Gui de Alc a t e l-L ucen t d o es n ot r eco mme nd t he use of L EA P a uth e n tic ation meth o d , b e c au s e it d o e s n o t p ro v ide an y r esis t an c e t o n etw or k att ack s . A ut h ent i cat i on T er m i na t i o n on O A W- I A P AOS- W Inst an t allo w s E xt en s ib[...]

  • Page 138

    l Aru b a- AP -Na me l Aru b a- AS -Cr e de ntial - H a s h l Aru b a- AS -Us e r -Name l Aru b a- Admin - R ol e l Aru b a- AirG ro up - D e v ic e- Ty p e l Aru b a- AirG ro up - S ha r ed -Role l Aru b a- AirG ro up - S ha r ed -Us er l Aru b a- AirG ro up - U ser -Nam e l Aru b a- Auth- Sur v iv a b ility l Aru b a- C P PM- R o le l Aru b a- D [...]

  • Page 139

    139 | Auth entic ation AO S- W Instant 6 .3.1.1 - 4.0 | U ser Gui de l D ig est -Resp o n se l D o ma in- N am e l EAP - Mess ag e l Err o r- C au s e l Ev en t-Tim e s t amp l Ex ec- P ro g ra m l Ex ec- P ro g ra m- W ait l Ex pi r a t ion l Fa ll-T hr ou g h l Filter - I d l Fr am e d -Ap p leTa lk - Lin k l Fr am e d -Ap p leTa lk - N e t w or [...]

  • Page 140

    l Me s s ag e- Auth l N AS-IPv 6- Add re s s l N AS-Po rt-T y pe l O p e ra t or - N a me l Pass w o r d l Pass w o r d- R etry l Por t-L imit l Pre fix l Pro mp t l R a d -Au the ntic a t o r l R a d -Cod e l R a d -Id l R a d -L en gth l R e p ly -Me s s a g e l R e q ue s t ed -L o c ation - I n f o l R e v o k e- Te x t l Ser v e r- Gr ou p l S[...]

  • Page 141

    141 | Auth entic ation AO S- W Instant 6 .3.1.1 - 4.0 | U ser Gui de U n d e r st a n d i n g E n cr yp t i o n T yp e s Encr yption is the p r o c e s s of con v er ting d ata in t o a c ryptic f or ma t o r c od e w he n it is t ra nsmitt ed o n a n e t w o r k . Encr yption p r e v e n t s u na utho r iz ed u s e of the d ata . AOS- W Inst an t [...]

  • Page 142

    N e t w o r k Typ e Au th e n t ic a t io n En c r y p t io n Emp lo ye e 8 0 2 .1X AES Guest N e two rk C ap tive Portal N on e Vo ice Ne two rk o r H a n d h e l d de vi ce s 80 2 .1X o r PSK a s sup p o rted by the d e vice AES i f p o ssi b l e , TKI P or WEP i f ne ce ssa ry (co mb i n e w i th se cu ri ty setting s a ssi g n e d for a use r r[...]

  • Page 143

    143 | Auth entic ation AO S- W Instant 6 .3.1.1 - 4.0 | U ser Gui de If b oth t he O AW -IAP t o w hich t he clie nt w a s a s s o c iated a n d t h e C PPM a re n ot a v aila b le , the clien t w ill b e no t be a ble to re au the ntic a t e u n til t h e C P PM ser v e r is ava ila ble a ga in . Figure 4 6 80 2.1X A u the ntic atio n u s in g c a[...]

  • Page 144

    Figure 4 7 80 2.1X A u the ntic atio n w he n C PPM is re a c h a ble a ga in You ca n e n a b le au t he ntication sur viv ab ilit y f or a wir e le s s n etw or k pr ofile w h e n c o n f igu rin g e n ter pr is e s e c u rity p ar ame ter s . For m o r e info r ma t ion , s ee Con f ig ur ing S ecu rity Sett ing s for a W L AN SS I D Pro f ile o[...]

  • Page 145

    145 | Auth entic ation AO S- W Instant 6 .3.1.1 - 4.0 | U ser Gui de Figure 4 8 N e w Authe n t ic ation Se rver Wind ow 3 . C o n f igu re an y of the f ollo w in g t y pe s of ser ver : l R AD I U S Se r v e r — To c o n f ig ur e a R AD IU S  s er v er , s pe c ify t h e att rib u tes d e s c r ibe d in t he fo llowing ta b le : Pa r a me t[...]

  • Page 146

    Pa r a me t e r D e sc r ip tio n R F C 3 5 7 6 Se le ct Enabled t o a l l o w the APs t o p ro ce ss RFC 35 7 6 -co mp l ia n t C h a n g e o f Au thori za tio n (C o A) a n d di sco n n e ct messa g e s from the R AD IUS se rve r. D isco n n e ct me ssa g e s cau se a u se r sessio n to be termi n a ted i mme d i a tely, w he re a s the Co A me s[...]

  • Page 147

    147 | Auth entic ation AO S- W Instant 6 .3.1.1 - 4.0 | U ser Gui de Pa r a me t e r D e sc r ip tio n D ire ctory, the val u e i s sAMAcco u n t N ame T ime o u t En ter a val u e b e twe e n 1 a n d 3 0 seco n d s. The d e fau l t va l ue i s 5. R et ry co u n t Enter a val u e b etw ee n 1 a n d 5 . The d e fau l t va lu e i s 3. l C PPM Se r[...]

  • Page 148

    To con f ig u re a n LDAP s er v er : (I ns tant A cce ss P oi nt )( co nf ig )# w lan ld ap- se rv er < pr of il e- na me > (I ns tant A cce ss P oi nt )( LD AP S er ve r <pro fil e- na me >) # ip < IP -a dd re ss> (I ns tant A cce ss P oi nt )( LD AP S er ve r <pro fil e- na me >) # po rt < po rt > (I ns tant A cce s[...]

  • Page 149

    149 | Auth entic ation AO S- W Instant 6 .3.1.1 - 4.0 | U ser Gui de C o n t ro ller fo r c omm u n ication wit h exter na l RA D I U S s e rver s . Ensur e t ha t t he Vir t u a l C on t ro lle r I P Add re s s is set a s a N A S IP w h en c on figu rin g R A D I U S s er ver attrib ute s w it h d y n a mic RA D I U S p r o x y e n ab led . For mo[...]

  • Page 150

    5 . Fr om t h e Au th e n t ic a t io n S e r v e r 1 d r o p- do w n, se le c t t he s er ver na me on w hich d y n a mic RA D I U S p ro x y p ar ame ter s a re e na b le d. You ca n a lso c re ate a n e w s er v e r w ith R AD I U S a n d R AD I U Sp r o x y pa r a me t er s by sele c t ing Ne w . 6 . C lick N e x t an d t h e n c lick Fin is[...]

  • Page 151

    151 | Auth entic ation AO S- W Instant 6 .3.1.1 - 4.0 | U ser Gui de Figure 4 9 A dm i n Ta b: Ma na g e men t A u the ntic ation Pa ra me t er s 3 . U n d er L ocal, s ele c t an y of the follo w in g o p t ion s f ro m the Au t h e n t ic a t io n d r op -d own lis t: l In t e r n a l — Sel e c t t hi s op t io n t o s p e c if y a sing le s et[...]

  • Page 152

    Th e s t ep s invol v e d in 80 2.1 X au t he n tic ation a r e as follo w s : 1 . Th e N A S r eq ue s t s au t h e ntic atio n c r ed en t ia ls f r o m a w ire le s s c lien t. 2 . Th e w ire le ss c lie nt sen ds a uthe ntication cr e d en t ials to t he NAS . 3 . Th e N A S sen ds the s e c re d en t ials to a R AD IU S s er v er . 4 . Th e R [...]

  • Page 153

    153 | Auth entic ation AO S- W Instant 6 .3.1.1 - 4.0 | U ser Gui de (I ns tant A cce ss P oi nt )( SS ID P ro fi le <na me> )# o pm od e {w pa 2- ae s| wp a-tk ip| wp a- tk ip ,w pa 2- ae s|dy nam ic -w ep} (I ns tant A cce ss P oi nt )( SS ID P ro fi le <na me> )# l ea p- us e- se ss io n- key (I ns tant A cce ss P oi nt )( SS ID P ro[...]

  • Page 154

    C onf i gu r i ng M A C A u t h ent i cat i on f or Wir e l ess N e t w o r k P r of il es You ca n c o n figu re MAC a uthe ntication for a wir e d pr ofile in the AO S-W Inst an t U I or CLI. In the AO S -W Ins tant UI To e na ble M A C A u t h e ntic atio n f or a wire le s s n etw or k : 1 . In t he Ne t w o r k t ab , c lick N e w t o c re ate[...]

  • Page 155

    155 | Auth entic ation AO S- W Instant 6 .3.1.1 - 4.0 | U ser Gui de (I ns tant A cce ss P oi nt )( wi re d ap p ro file < nam e> )# a ut h- se rv er < se rv er-1 > (I ns tant A cce ss P oi nt )( wi re d ap p ro file < nam e> )# a ut h- se rv er < se rv er-2 > (I ns tant A cce ss P oi nt )( wi re d ap p ro file < nam e>[...]

  • Page 156

    1 . C lick the Wir e d lin k u nd er Mor e at t he top r ig ht c o r ne r of the AO S - W I nst an t ma in w in do w . Th e W ir e d w ind ow is d is pla y ed . 2 . C lick N e w un de r W ir e d N e t w o r k s t o c r e a te a ne w ne t w or k or sele c t an e x is t in g pr ofile f o r w h ic h f or which y ou w a n t to en ab le MAC au t he ntic[...]

  • Page 157

    157 | Auth entic ation AO S- W Instant 6 .3.1.1 - 4.0 | U ser Gui de 2 . In t he Acc e s s t ab , s pe c ify t h e f ollo w in g pa ra me t er s f or a n etw o r k w ith R o le - Ba s e d r u les: a . Sele ct t he En f o r c e Ma ch in e Au t h e n tic a t io n c he c k b ox w h en MAC au t h e ntic atio n is e na ble d f o r C a ptiv e Por tal. If[...]

  • Page 158

    3 . C lick W IS Pr t ab . Th e W I SPr t ab con t en ts a r e displa y e d . Th e f ollo w in g f igu re sh o w s t he WI SP r tab con t en t s: Figure 5 0 C o nfigu rin g W I SP r Auth e n ti c a t ion 4 . Ente r the ISO C ou ntr y C od e f o r the W IS Pr Lo c a t io n I D in the ISO C o u n tr y C o d e t ext bo x . 5 . Ente r the E.16 4 Are a C[...]

  • Page 159

    159 | Auth entic ation AO S- W Instant 6 .3.1.1 - 4.0 | U ser Gui de B l ackl i st i ng C l i e nt s M anu al l y Ma nu al bl a c klis t ing a d d s t he M AC a dd re s s of a clien t t o t h e b la c k lis t . The s e c lie nts ar e ad de d in t o a pe rm a n en t b lack lis t . Th e s e c lie nts ar e no t allo w e d t o c o nn ect t o t he n etw[...]

  • Page 160

    3 . U n d er Dy na mic Black lis t in g : 4 . Fo r Au t h f a ilu r e b la ck lis t t ime , d ur atio n in secon ds a f t er wh ich t he clien t s t ha t exc e e d the a uthe n tic ation fa ilu re thr esho ld mu s t be b lack lis ted . 5 . Fo r PE F r u le b la c k lis t e d t ime , e n t er the d u r ation in se c o n ds a f ter which t he clie nt[...]

  • Page 161

    161 | Auth entic ation AO S- W Instant 6 .3.1.1 - 4.0 | U ser Gui de Load i ng C e r t i f i cat es usi ng A O S - W I nst an t U I To lo ad a ce r tif ic ate in t h e A O S-W Inst an t U I : 1 . C lick the M ai ntenanc e link a t the top r ig ht cor ne r o f t he AO S - W I n s t a nt ma in w ind ow. 2 . C lick the Ce r tif ic a t e s t ab . The C[...]

  • Page 162

    1 . N a v ig ate t o D e v ic e Se t u p > C e r t if ic a te an d t he n c lick Ad d to ad d a ne w c er t if ic a te. Th e C e r tif ic a t e w in do w is d is pla y ed . 2 . Ente r the cer t if icate N a me , a nd clic k C h o o s e File t o b r ows e an d up lo a d the cer t if icate. Figure 5 2 Lo ad ing Cer ti f ic a te v i a O mn iv is t [...]

  • Page 163

    163 | Auth entic ation AO S- W Instant 6 .3.1.1 - 4.0 | U ser Gui de Figure 5 4 S ele c t in g the G ro up Th e Vir t u a l C o n tr o lle r C e r t if ic a te s ect ion d ispla y s the cer tif ic ates (CA c er t an d Ser v e r ) . 5 . C lick S a v e t o ap ply the cha n ge s o nly to Omn iv is ta. C lick Sa v e a n d A p p ly t o ap p ly t he ch a[...]

  • Page 164

    AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e Ro l e s and Poli ci es | 164 Chapter 14 R o l e s a n d P o l i c i e s Th is c ha pter de s c ri b e s t h e pr oced u r es f o r con f igu r in g user r o le s , r ole a s s ign me nt, an d f ir e w a ll po lic ie s . l Fir ewal l C on f igu r a t ion o n pa g e 1 6 4 l Ac c ess C on t r o l List R[...]

  • Page 165

    165 | R oles and Pol i ci e s AO S- W I nstant 6 .3.1.1 - 4.0 | U ser Gui de Figure 5 5 Fire w all Sett ing s —AL G Pro t ocols 3 . Sele ct Enabl ed fro m the cor r espo nd in g dr op - d o w n list s to en ab le SI P, VOCER A , Alc atel N OE, a nd Cis c o sk inn y pr o t o cols. 4 . C lick O K . W he n the p ro t o c o ls f o r ALG a re Dis a b [...]

  • Page 166

    C onf i gu r i ng F i r ew al l S e t t i ng s f or P r ot e ct i o n f r o m A R P A t t acks You ca n c o nfigu r e f ir ewall s etting s to pr ote c t the n etw or k ag a in st a tt ack s using AO S - W I nst an t usin g AOS- W Inst an t U I o r C LI. In the AO S -W Ins tant UI To con f ig u re fire w a ll s ett ing s: 1 . C lick the Se c u r it[...]

  • Page 167

    167 | R oles and Pol i ci e s AO S- W I nstant 6 .3.1.1 - 4.0 | U ser Gui de fi x- dhcp E nab le d po is on-c hec k En ab le d To view the a t t a c k s t atis tic s (I ns tant A cce ss P oi nt )# s ho w at ta ck s tats at ta ck cou nte rs -- -- ---- --- -- -- -- -- -- -- -- -- ---- --- -- -- Co un ter Va lue -- -- --- -- --- -- ar p pa cket c oun [...]

  • Page 168

    Figure 5 7 Fire w all S etting s —Ma na g e me nt Su bn ets 2 . To a dd a n ew ma na g eme nt s ub ne t : l Ente r the sub ne t ad dr e s s in S ubnet . l Ente r the sub ne t ma s k in Ma s k . l C lick A d d . 3 . To a dd mu ltiple sub n ets , r ep ea t s t ep 2 . 4 . C lick O K . In t h e C L I To con f ig u re a ma na g e men t s ub ne t : [...]

  • Page 169

    169 | R oles and Pol i ci e s AO S- W I nstant 6 .3.1.1 - 4.0 | U ser Gui de A cce ss C o n t r o l L i st R u l e s You ca n u se A c c ess C on t r o l Li s t (ACL) r u le s t o ei t h er p er mit o r d e ny d a ta pa c k ets pa s s ing th ro ug h t he O AW -IAP . You ca n a ls o limit p ack ets or b an d w id t h availa b le t o a s e t of u s e[...]

  • Page 170

    Fie ld D e s c r ip tio n l boot p — Bo otstrap Pro toco l l cf g m-t cp — l cup s —C o mmo n U N IX Pri n tin g System l dh cp —D yn a mi c Ho st C o n fig u ra tio n Pro toco l l dns — D o ma in N a me Se rve r l esp —En ca p su l a tin g Se cu ri ty Payl o a d l ftp —File T ra nsfer P rotoco l l gre —Gen e ri c R o u tin g En ca [...]

  • Page 171

    171 | R oles and Pol i ci e s AO S- W I nstant 6 .3.1.1 - 4.0 | U ser Gui de Fie ld D e s c r ip tio n l T o a ne t w o rk —Acce ss i s a l lo w e d or d e n i e d to a ne two rk. Aft e r se le ctin g t hi s o p tio n , spe ci fy the IP a d d re ss an d n e tmask f o r t h e d estin a tio n n e two rk. l Exce pt t o a ne t w o rk —Acce ss i s a[...]

  • Page 172

    C onfi guri ng a Sourc e N AT Ac c es s R ul e Th e s ou r c e N AT a c t ion i n a c c e s s r ule s a llows t he u s er to o v er rid e the r ou t in g p r ofile en trie s . For e x a mp le, whe n a r ou t ing p r ofile is c on f ig u r ed to use 0.0 . 0 . 0/0 , t he clien t t r a ff ic o n an SSI D in L3 mo d e a cc ess to t he cor p o ra t e n [...]

  • Page 173

    173 | R oles and Pol i ci e s AO S- W I nstant 6 .3.1.1 - 4.0 | U ser Gui de 3 . C r ea t e an a c c e s s ru le f o r t he SSI D pr ofile wit h S o ur c e N AT a ct ion a s de s c rib e d in C o nfigu r in g S ou r c e- Based R o u t ing o n pa g e 1 7 2 . Th e s ou rce N AT p oo l is c o n f igu re d a n d sou rce ba s e d r ou t ing e n try is c[...]

  • Page 174

    Al l ow PO P 3 Serv i c e to a Parti c ul ar S erv er To con f ig u r e P OP3 ser v ic e t o a p a r t ic ula r s e r v e r: 1 . Sele ct a n e x is t ing wir e le s s o r w ir ed p ro f ile . Dep en din g o n the n etw or k pr o f ile sele c t e d , t he Ed it <W L A N - P r o f ile > o r E d it W ir e d N e t w o r k w in d o w is d ispla y [...]

  • Page 175

    175 | R oles and Pol i ci e s AO S- W I nstant 6 .3.1.1 - 4.0 | U ser Gui de 3 . C lick N e w t o ad d a n e w ru le . Th e N e w R u le w ind o w is d is pla y ed . a . Sele ct D e n y f r o m t he Act io n dr o p- do w n lis t . b . Sele ct ftp f ro m the Se r vic e dr op - d o w n list . c. Sele ct e x c e p t t o a p a r t ic u la r s e r v e r[...]

  • Page 176

    You ca n a lso c re ate a u s e r r ole whe n c on figu rin g w ir ele s s or wire d ne tw o rk p r ofiles. Fo r mo re in for matio n, s e e C o n f igu rin g Ac c ess R ule s f or a WLAN SSI D Pro f ile o n pa ge 9 5 a n d C o n figu rin g Ac c ess R ule s f or a Wire d Pro f ile on p ag e 10 5 In the CLI To con f ig u r e user r o les a n d acc e[...]

  • Page 177

    177 | R oles and Pol i ci e s AO S- W I nstant 6 .3.1.1 - 4.0 | U ser Gui de (I ns tant A cce ss P oi nt )( co nf ig )# w lan ac ces s- ru le < na me > (I ns tant A cce ss P oi nt ) (A cc es s Ru le < name >)# b an dw id th -l im it { do wn stre am <k bp s> | up st re am < kb p s> | pe ru ser { down str ea m <k bps >| [...]

  • Page 178

    C o n f i g u r i n g D e ri va t i o n R u l e s AOS- W Inst an t allo w s y ou to c on figu re r o le a nd VL A N de riva t io n- ru le s. You ca n c o n f igu re th e s e ru les to ass ig n a u s er r ole o r VLAN t o t h e c lie nts con ne c t in g t o an SSI D or a wire d pr o f ile . U nde r st a ndi n g R ol e A ssi gn m ent R ul e W he n a [...]

  • Page 179

    179 | R oles and Pol i ci e s AO S- W I nstant 6 .3.1.1 - 4.0 | U ser Gui de D e v ic e D H C P O p t io n DH C P Fin g e r p r in t Wind o w s XP(SP3 , H o me , Pro fessio n a l ) O pt ion 55 37010f 03062c 2e2f 1f 21f 92b W indows Mobi le O pt ion 60 3c4d6963726f 736f 66742057696e646f 777320434500 W indows 7 Phone O pt ion 55 370103060f 2c2e2f App[...]

  • Page 180

    W he n Enfo rce Mach in e A uth en t ic atio n is e na ble d , bo t h t h e d evic e an d t h e u s e r must be a uth e n t ic ated fo r the r ole a s s ign me n t ru le to ap ply. In the CLI To con f ig u r e ro le a s s ig nme nt ru les for a WLAN SS I D : (I ns tant A cce ss P oi nt )( co nf ig )# w lan ss id- pr of il e <n am e> (I ns tan[...]

  • Page 181

    181 | R oles and Pol i ci e s AO S- W I nstant 6 .3.1.1 - 4.0 | U ser Gui de Figure 5 8 R AD I U S Ac c ess - Ac c ep t pa c k e t s w it h VS A Figure 5 9 C o nfigu re VSA o n a R A D I U S Ser ver VLAN A s s i gnm ent Bas ed on Deri v ati on R ul es W he n a n e xt er na l RA D I U S ser v er is u s ed for a u t he ntic a tion , t he RA D I U S s[...]

  • Page 182

    Figure 6 0 C o nfigu rin g R AD I U S At t rib ute s o n t he R AD I U S Ser v er U s er Rol e If the VSA a n d VLAN d e r iv ation r u les a re n ot ma t c hi n g , the n t he u s er V L A N c an b e de r iv e d by a u s e r r ole . VLAN s C reate d for an SS ID If the VSA a n d VLAN d e r iv ation r u les a re n ot ma t c hi n g , a n d t he Us e[...]

  • Page 183

    183 | R oles and Pol i ci e s AO S- W I nstant 6 .3.1.1 - 4.0 | U ser Gui de Figure 6 1 V LAN As s ign me nt R u l e W ind o w 3 . Sele ct the a t t rib u t e f ro m t he Att r ib u t e dr o p - do w n lis t . The l is t of s up po rte d att rib u t es in c lud es RA D I U S a t t rib ute s , d hcp- op tion , do t 1x-a u t he ntic a tion -ty p e , [...]

  • Page 184

    (I ns tant A cce ss P oi nt )( SS ID P ro fi le "Pr ofi le 1" )# s et -v la n ma c- ad dres s-a nd -d hc p- op ti on s ma tche s- re gula r-e xp re ss io n .. li nk 1 00 (I ns tant A cce ss P oi nt )( SS ID P ro fi le "Pr ofi le 1" )# e nd (I ns tant A cce ss P oi nt )# c om mi t ap pl y U si n g A d va n ce d E xp r e ssi o n s[...]

  • Page 185

    185 | R oles and Pol i ci e s AO S- W I nstant 6 .3.1.1 - 4.0 | U ser Gui de O p e r a t o r D e s c r ip t io n > Matche s the e n d o f the wo rd . For e xa mp le , >li st ma tche s bl a ckl ist, w hi tel i st, an d so on . {n} W h e re n i s an i n teg e r" Ma tche s t h e d e cl a red e l e me n t e xa ctly t h e n time s. For exa [...]

  • Page 186

    3 . C lick N e w un de r the Ne w R o le As s ig n me n t an d c on f ig ur e t he fo llo w ing p ar a me t er s : a . Sele ct the a t t rib u t e f ro m t he Att r ib u t e dr o p - do w n lis t . b . Sele ct the o pe ra tor to match f ro m the O p e r a t o r dr o p- do w n lis t . c. Ente r the st rin g to matc h in t h e St r in g t ext b o x .[...]

  • Page 187

    AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e Upli nk C onfigur ation | 187 Chapter 15 U p l i n k C o n f i g u r a t i o n Th is c ha pter p r ovide s t he fol lo w in g infor ma t ion : l U p lin k Inter f a c es o n p a g e 18 7 l Et he r ne t U p link o n pa ge 1 88 l 3 G/4G Uplin k on p ag e 19 0 l W i- Fi U plin k on p ag e 1 9 4 l U p lin[...]

  • Page 188

    188 | U pli nk C onf i g ur at i o n AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e E t he r net U pl i nk Th e Et he rn e t 0 po r t on a n  OAW - I AP is en a b le d as a n u p lin k p or t by d e f au lt . Y o u c an view the ty p e o f up lin k a nd the st atus o f the u pli n k in t he AO S-W I n s t a nt in the In f o t a b. Figure 6 4 U [...]

  • Page 189

    You ca n u se P PP o E f or you r u plin k c on ne c t iv ity in b oth OAW - I A P a nd IAP -VPN de p loymen ts . PPP o E is s u p p or t ed o nly in a sing le AP de pl o y me nt. U p lin k r ed un d a n c y w it h t h e PPP o E lin k is n o t s up p o rted . W he n the Ethe rn et link is u p , it is used a s a P PPoE or DH C P up link. Af t er th [...]

  • Page 190

    190 | U pli nk C onf i g ur at i o n AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e (I ns tant A cce ss P oi nt )( pp po e- up link -pr of il e) # pp po e- un nu mb ered -lo ca l- l3 -d hc p- pr of il e <dhc p-p ro fi le > (I ns tant A cce ss P oi nt )( pp po e- up link -pr of il e) # en d (I ns tant A cce ss P oi nt )# c om mi t ap pl y To [...]

  • Page 191

    Mo d e m Ty p e Su p p o r t e d 3 G Mo d e ms l U 30 1 (Fran kl i n w i re le ss) l U SB U 76 0 for Virg i n (No va tel ) l U SB U 72 0 (N ova tel /Q u a l co mm) l U M17 5 (Pa n tech ) l U M15 0 (Pa n tech ) l U MW19 0(Pa n tech ) l SXC -1 08 0 (Qua l co mm) l Glob e trott e r ICON 2 2 5 l U MG181 l N TT Do Co Mo L -0 5A (L G FO MA L 0 5 A) l N T[...]

  • Page 192

    192 | U pli nk C onf i g ur at i o n AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e Mo d e m Ty p e Su p p o r t e d 3 G Mo d e ms l H ua w e i E17 3 1 (Airtel -3 G (Ind i a )) l H ua w e i E3 7 6 5 (Vo d a fon e (Au s)) l H ua w e i E3 7 6 5 (T-Mob i l e (Germa n y) l H ua w e i E1 5 5 2 (Si n g Tel ) l H ua w e i E1 7 5 0 (T-Mob i l e (Germa n y[...]

  • Page 193

    l Fo r 4G — E n t e r the ty pe o f 4G mo d e m in t he 4 G U SB t y p e t e x t bo x . c. Ente r the d evic e I D of mo de m in t he USB d e v t ext bo x . d . Ente r the TT Y po rt o f t he mo d e m in t he US B tt y text bo x . e . Ente r the p ar a me t er to in itialize t h e mo de m in the USB in it t ext bo x . f. Ente r the p ar a me t er[...]

  • Page 194

    194 | U pli nk C onf i g ur at i o n AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e (I ns tant A cce ss P oi nt )( ce ll ul ar -upl ink -p ro fi le )# u sb -i ni t <I niti ali za ti on -p ar am et er > (I ns tant A cce ss P oi nt )( ce ll ul ar -upl ink -p ro fi le )# u sb -d ia l <d ial- par am et er > (I ns tant A cce ss P oi nt )( c[...]

  • Page 195

    l If the Wi-Fi u p lin k is use d o n t he 5 G H z b an d, me s h is disab le d. Th e t w o links ar e mu t ua lly exc lusive. l Fo r OAW - I A Ps t o c on ne c t t o an AO S - W I nstan t b ased WLAN usin g W i- Fi u plin k , t he m o bility s w it c h mu s t r un AOS- W Inst an t 6.2.1 . 0 or la t er . To p ro v is io n an O A W -IAP w it h the W[...]

  • Page 196

    196 | U pli nk C onf i g ur at i o n AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e U p l i n k P r e f e r e n ce s a n d S w i t ch i n g Th is t op ic de s c rib e s t h e follo w ing p r oced ur e s : l Enfo r c ing Uplin k s on p ag e 1 96 l Setting a n U plin k Prio rity on p a g e 1 9 6 l Ena b lin g U plin k P r e emp t io n o n p ag e 19 [...]

  • Page 197

    In t h e C L I To set a n up lin k pr io r it y : (I ns tant A cce ss P oi nt )( co nf ig )# u plin k (I ns tant A cce ss P oi nt )( up li nk )# u plin k-p ri or it y {c el lu la r <p ri orit y> | et he rn et < pr io ri ty >| [po rt < In terf ace -n um be r> < pr io ri ty >]|w ifi < pr io ri ty >} (I ns tant A cce ss P[...]

  • Page 198

    198 | U pli nk C onf i g ur at i o n AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e l If the cur r e n t up lin k is 3G o r W i- Fi, a nd Ethe rn et ha s a p hys ic al lin k , the O A W -IAP p e r iod ic all y s uspe n ds u s e r tra f f ic t o t ry a nd con n ect to t he VPN on the Ethe r n et. If t he O A W -IAP s u c cee ds, t he O A W - I AP s[...]

  • Page 199

    V i ew i ng U pl i n k S t a t u s and C onf i gu r a t i o n To view the u pli n k s t atu s an d c o n figu ra t io n in t he CLI: In st ant Ac ces s Po in t# s ho w up li nk s ta tus Up li nk pre emp ti on :ena ble Up li nk enf orc e : none Et he rnet u pli nk b on d0 :D HC P Up li nk Tab le -- -- ---- --- - Ty pe Sta te Pr io ri ty In U se -- -[...]

  • Page 200

    AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e Mobi li ty an d Cli en t Mana gemen t | 200 Chapter 16 M o b i l i t y a n d C l i e n t M a n a g e m e n t Th is c ha pter p r ovide s t he fol lo w in g infor ma t ion : l L ayer -3 M ob ilit y Over v ie w on p ag e 2 0 0 l C o n f igu rin g L 3 -Mo bi lity o n pa ge 2 01 L a ye r - 3 M o b i l i t[...]

  • Page 201

    201 | M obil i ty and C li ent Ma nagem ent AO S- W I nstant 6 .3.1.1 - 4.0 | U ser Gui de Each f or ei g n A P h a s on ly on e ho me AP pe r AOS- W Inst an t ne t w or k t o a v o id du pl ication o f b ro ad c ast t ra f f ic. Sep a r ate G R E t u n n els ar e c re a t e d for ea c h for eig n A P / ho me A P p a ir . If a pe er A P is a f o r [...]

  • Page 202

    Figure 6 6 L3 Mo bility W in d o w 1 . Sele ct Enabl ed fro m the H om e agent l oad bal anci ng dr op - d o w n list . By de f au lt, h ome a ge n t lo ad b ala n c in g is d is ab led . 2 . C lick N e w in t he Vir tu a l C o n t r o lle r I P Ad d r e s s e s s ect io n, a d d t he IP a d dr ess of a Vir t u al C on t ro lle r t ha t is p ar t o[...]

  • Page 203

    AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de Spectr um M onitor | 203 Chapter 17 S p e c t r u m M o n i t o r Th is c ha pter p r ovide s t he fol lo w in g infor ma t ion : l U n d er s t an d in g S p ect ru m D ata on p ag e 2 0 3 l C o n f igu rin g Spe c t r um Mon itor s an d H y br id OAW-IAP s on p ag e 2 08 U n d e r st a n d i n g S p e [...]

  • Page 204

    204 | Spectr um M onitor A OS- W Instant 6.3.1 .1- 4. 0 | User Gui de Figure 6 7 D e v i ce List D e v ice S u mma ry a nd Cha n n e l I nfor ma t ion sh o w s t he d eta ils o f the in f o r ma t ion th a t is displ a y e d : C o lu mn D e s c r ip t io n Type D evi ce type . Thi s pa ra me ter can b e a n y of the foll o w i n g : l au d i o F F [...]

  • Page 205

    N o n W i- Fi In t e r f e r e r D e s c r ip t io n Blu e too th An y d e vi ce tha t u se s t h e Bl u e too th pro toco l t o co mmu n ica te in the 2 .4 G H z ba n d i s cla ssifie d as a Blu e too th de vi ce . Bl u e too th use s a freq u e n cy ho p p i n g p ro toco l . Fixed F requenc y (Au di o ) So me au d i o d e vi ce s such a s wi rel[...]

  • Page 206

    206 | Spectr um M onitor A OS- W Instant 6.3.1 .1- 4. 0 | User Gui de N o n W i- Fi In t e r f e r e r D e s c r ip t io n Gene ri c Interfere r Any non-f requenc y hopping devi ce that does not f all int o one of t he ot her cat egories de scri b e d in thi s tab l e i s cl a ssi fied as a Gen er ic Interfere r . For e xa mp l e a Micro w a ve -l [...]

  • Page 207

    C o lu mn D e s c r ip t io n Max In terfere nce (dB m) Sig n a l stren g th of t h e n o n Wi-Fi de vi ce tha t h a s t h e h i g h e st sig n a l stren g th. SN IR (db ) The ra tio of si g n a l stren g th t o the co mb i ne d l e ve l s of i n terfere nce a n d n o i se o n tha t cha n n e l . T h i s va l u e i s ca l cu la ted by d e termi n i[...]

  • Page 208

    208 | Spectr um M onitor A OS- W Instant 6.3.1 .1- 4. 0 | User Gui de C o lu mn D e s c r ip t io n Qual i ty(%) C u rre n t rel a tive q u a l i ty of sele cted ch an n e l s i n the 2.4 GHz o r 5 GHz ra di o ba n d s, as de termi n e d b y t h e p e rce n tag e o f p a cke t re tries, t h e cu rre n t no i se flo o r, a n d the d u ty cycle f o r[...]

  • Page 209

    To con f ig u re 5 G H z r ad io s ett in gs: (I ns tant A cce ss P oi nt )( co nf ig )# r f dot1 1a- ra di o- pr of il e (I ns tant A cce ss P oi nt )( RF d ot 11 a Ra dio Pr ofi le )# s pe ct ru m- mo ni to r C onve r t i n g anO A W- I A P t o a S pe ct r um M oni t or In spe c t ru m mo de , s pe c t ru m mo nitor in g is p e r f or me d o n[...]

  • Page 210

    210 | Spectr um M onitor A OS- W Instant 6.3.1 .1- 4. 0 | User Gui de 5. 0 GH z: Le ga cy Mod e:d is ab le Be ac on Int erv al :1 00 80 2. 11d/ 802 .1 1h :d is ab le In te rfer enc e Im mu ni ty L ev el :2 Ch an nel Sw itc h An no un ce me nt C ou nt :0 Ch an nel Re use T yp e: di sa bl e Ch an nel Re use T hr es ho ld :0 Ba ck grou nd Sp ec tr um [...]

  • Page 211

    AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de Adaptiv e R adio Mana gemen t | 211 Chapter 18 Adaptive Radi o Managem ent Th is c ha pter p r ovide s t he fol lo w in g infor ma t ion : l AR M O v er v ie w on p ag e 2 1 1 l C o n f igu rin g AR M Fe a t u re s o n an O AW - IA P o n p ag e 21 3 l C o n f igu rin g R a d io Setting s f or a n OAW - I[...]

  • Page 212

    212 | Adap ti ve Radio Manage ment AO S- W In stant 6.3.1. 1- 4.0 | U ser Gui de L eg acy 80 2.11 a / b/g acc ess po in t s do n o t s up p o r t the clien t ma t ch f ea t ur e . W he n c lie n t ma tc h is e na ble d o n 8 02 . 11 n c ap a ble a c c ess po ints , t he clie nt ma t c h f ea tur e over r ide s an y sett ing s c on f ig ur ed fo r t[...]

  • Page 213

    con f igu r e d o n a n A P is no t s up p o r t ed b y the AP mo d e l, t h is v alu e is re d uced to t he h ig he s t s up po rte d po w er sett ing . Th e de fau lt v alu e is f or minim u m tra n s mit p ower is 18 d Bm. l Ma x imu m Tr a n s mit P o w e r — Th is ind icates the ma x imu m Ef f e c t iv e I s otr o pic R a d ia t ed Po w er [...]

  • Page 214

    214 | Adap ti ve Radio Manage ment AO S- W In stant 6.3.1. 1- 4.0 | U ser Gui de Figure 7 1 R F W in d o w - AR M Tab 3 . C o n f igu re th e f o llo w ing p ar a me t er s f or Ba n d s t e e r in g mo d e : Pa r a me t e r D e sc r ip tio n Pre f e r 5 G Hz Sel e ct thi s op tio n to use b a n d stee rin g i n 5 GHz mod e . On sel e ctin g thi[...]

  • Page 215

    4 . Fo r Air t ime f a ir n e ss mo d e , spe c if y an y of the follo w in g v alu es: Pa r a me t e r D e sc r ip tio n D ef a u l t Acce ss S el e ct thi s op tio n to pro vid e a cce ss ba se d o n cl i e n t re q u e sts. Whe n Ai r T i me F ai rn e ss i s se t t o d e fau l t acce ss, pe r u se r a n d p e r SSID b a n d w i d th li mi ts are[...]

  • Page 216

    216 | Adap ti ve Radio Manage ment AO S- W In stant 6.3.1. 1- 4.0 | U ser Gui de Pa r a me t e r D e sc r ip tio n C ust o mi ze Va l i d Channels Se le ct t h i s ch e ck b o x to cu stomi ze va l i d ch a n n e l s for 2 ,4 GHz a n d 5 GHz. By de fau lt, the AP use s vali d ch a n n e l s as de fine d b y t h e C o u n try C o d e (re g u l a tor[...]

  • Page 217

    (I ns tant A cce ss P oi nt )( AR M) # ai r- time -fa ir ne ss -m od e {< De fa ul t Acce ss> | <F ai r Ac ce ss > | <P re fe r re d Ac cess >} (I ns tant A cce ss P oi nt )( AR M) # cl ie nt-a war e (I ns tant A cce ss P oi nt )( AR M) # wi de -ban ds {< 5G Hz >| <2 GH z> |< Al l> |<No ne> } (I ns tant A c[...]

  • Page 218

    218 | Adap ti ve Radio Manage ment AO S- W In stant 6.3.1. 1- 4.0 | U ser Gui de 40 e na ble 44 e na ble 48 e na ble 52 e na ble 56 e na ble 60 e na ble 64 e na ble 14 9 en able 15 3 en able 15 7 en able 16 1 en able 16 5 en able 36 + en able 44 + en able 52 + di sabl e 60 + di sabl e 14 9+ e nabl e 15 7+ e nabl e 36 E en able 52 E en able 14 9E e [...]

  • Page 219

    Pa r a me t e r D e sc r ip tio n l Le ve l 2 — No i se a n d sp u r immu n ity. Thi s le ve l a lso co n trol s t h e d e tectio n o f OF D M pa cke ts, a n d is t h e de fau l t se tt i n g for t h e N o i se Immun i ty fea ture . l Le ve l 3 — L e ve l 2 setting s a n d we a k OF D M i mmu n i ty. Thi s le ve l min i mi zes fa lse de tects o[...]

  • Page 220

    220 | Adap ti ve Radio Manage ment AO S- W In stant 6.3.1. 1- 4.0 | U ser Gui de 80 2. 11d/ 802 .1 1h :e na bl e In te rfer enc e Im mu ni ty L ev el :2 Ch an nel Sw itc h An no un ce me nt C ou nt :0 MA X Di stan ce: 60 0 Ch an nel Re use T yp e: di sa bl e Ch an nel Re use T hr es ho ld :0 Ba ck grou nd Sp ec tr um M on it or :d is able 5. 0 GH z[...]

  • Page 221

    AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de Intr u s i on D ete c ti on | 221 Chapter 19 I n t r u s i o n D e t e c t i o n Th e I ntr u s ion Detect io n S y s t e m (ID S) is a fea t ur e t h at mo nitor s t he n e t w or k for the p r esen c e of un au t ho r iz ed O AW - IA Ps a nd clien ts . It a ls o log s infor ma t ion a b o u t the u na [...]

  • Page 222

    222 | In tr usi on D e tecti on AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de l W in d o w s Ser ver l W in d o w s XP l W in d o w s ME l O S-X l iPho n e l iO S l And r oid l Blackbe rr y l L inu x C o n f i g u r i n g W i r e l e ss I n t r u si o n P r o t e ct i o n a n d D e t e ct i o n L e ve l s W I P o f f er s a w ide sele c t io n of in[...]

  • Page 223

    Figure 7 3 W ir e le s s I ntr usion Detect io n Th e f oll o w in g tab le de s c r ib es t h e de t ect io n p o lic ies e na ble d in the Infr a s tru c t ur e D e t e ct ion Cu s t o m s e t t in g s field . D e t e c t io n L e v e l D e t e c t io n P o lic y Of f R og u e C l a ssi fica tion Low l D etect AP Sp o o fin g l D etect Win d o w [...]

  • Page 224

    224 | In tr usi on D e tecti on AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de D e t e c t io n L e v e l D e t e c t io n P o lic y l D etect Ma l forme d F ra me— H T IE l D etect Malforme d Frame — Associ a tio n R e q u e st l D etect Ma l forme d F ra me— Au th l D etect Overflo w I E l D etect Overflo w EAPOL Ke y l D etect Be a co n Wron[...]

  • Page 225

    Figure 7 4 W ir e le s s I ntr usion Pr otect ion Th e f oll o w in g tab le de s c r ib es t h e pr otection p olicie s t h at a r e en ab led i n t h e I nfra s t r uct ur e Pro t e c tion Cu s t o m se t t in g s f ield . Pr o t e c t io n L e ve l Pr o t e c t io n P o lic y Of f All pro tectio n p o l i ci e s a re d i sa b l e d Low l Pro tec[...]

  • Page 226

    226 | In tr usi on D e tecti on AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de C ont ai nm ent M et hods You ca n e n ab le w ire d a n d w ir ele s s c on t ain me nts t o pr even t un a u tho rize d s t a t ion s f ro m con ne c ting to y ou r AOS- W Inst an t ne tw o rk. AOS- W Inst an t s up po r t s the follo w in g t y pe s of con t ain me nt m[...]

  • Page 227

    (I ns tant A cce ss P oi nt )( ID S) # wi re less -co nt ai nm en t <t yp e> (I ns tant A cce ss P oi nt )( ID S) # wi re d-co nta in me nt (I ns tant A cce ss P oi nt )( ID S) # de te ct-a p-s po of in g (I ns tant A cce ss P oi nt )( ID S) # de te ct-w ind ow s- br id ge (I ns tant A cce ss P oi nt )( ID S) # si gn atur e-d ea ut h- br oa d[...]

  • Page 228

    AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de Co ntent F i l ter ing | 228 Chapter 20 C o n t e n t F i l t e r i n g Th is c ha pter p r ovide s t he fol lo w in g infor ma t ion : l C o n t en t Filt e r in g on p ag e 22 8 l Ena b lin g C on t en t Filter ing o n p a g e 22 8 l C o n f igu rin g Ente r pr is e D om a in s o n p ag e 22 9 l C o n [...]

  • Page 229

    229 | C on tent F i l ter ing AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de (I ns tant A cce ss P oi nt )( SS ID P ro fi le <na me> )# e nd (I ns tant A cce ss P oi nt )# c om mi t ap pl y E nabl i n g C on t e nt F i l t er i ng f or a Wir e d P r of i le To e na ble co n ten t filt er in g f or a wire d pr o f ile, p er f o r m t he fo llo w[...]

  • Page 230

    In the AO S -W Ins tant UI To con f ig u re O pe nDN S c r e d e n t ials: 1 . C lick Mo r e > Se r v ice s > O p e n D N S . Th e O p e n D N S t ab con ten t s ar e displ a y e d. 2 . Ente r the Us e r n a me a n d P a ss w o r d t o e n a ble a c c ess t o Op en D N S. 3 . C lick O K t o ap pl y t he ch a n g es. In the CLI To con f ig u r[...]

  • Page 231

    AO S- W Instant 6.3 .1.1- 4 .0 | U ser Gui de DHC P C on fi gur at i o n | 231 Chapter 21 D H C P C o n f i g u r a t i o n Th is c ha pter p r ovide s t he fol lo w in g infor ma t ion : l C o n f igu rin g D H C P Sc op e s on p ag e 2 31 l C o n f igu rin g D H C P Ser v e r f o r C lie nt IP As s ign me n t on p a g e 2 3 8 C o n f i g u r i n [...]

  • Page 232

    232 | D H C P C onfigur ation AO S- W Instant 6.3 .1.1- 4 .0 | U ser Gui de Figure 7 6 N e w D H C P Sc op e: Di s trib uted D H C P Mo de 3 . Base d o n ty pe o f dist rib u ted DH C P s c op e, con f ig u re the fol lo w in g pa ra me t er s : N a me D e s c r ip t io n N ame En ter a n a me for the D H C P sco pe . T ype Se l e ct a n y of the f[...]

  • Page 233

    N a me D e s c r ip t io n pe rforme d to en su re tha t the sp e ci fie d ra n g e s of IP a d d re ss are i n the sa me su b n e t as the d e fau l t ro u ter an d sub n e t ma sk. The con fig u re d IP ra n g e is d ivi d e d i n to bl o cks ba se d o n the co n fig u re d cli e n t co u n t. l For Distrib u ted ,L3 mo d e , yo u ca n co n figu [...]

  • Page 234

    234 | D H C P C onfigur ation AO S- W Instant 6.3 .1.1- 4 .0 | U ser Gui de (I ns tant A cce ss P oi nt )( DH CP P ro fi le <pr ofi le -n am e> )# i p- ra ng e <s tart -IP > <e nd -I P> (I ns tant A cce ss P oi nt )( DH CP P ro fi le <pr ofi le -n am e> )# r es er ve { fi rst | la st} < co un t> (I ns tant A cce ss P o[...]

  • Page 235

    N a me D e s c r ip t io n D HC P re q u e sts. Helper addr ess Enter the I P ad d re ss o f t h e D H C P serve r. VL AN I P Sp eci fy t h e VL AN IP ad d re ss o f t h e D H C P re l a y se rve r. VL AN Mask Sp eci fy t h e VL AN su b n e t mask o f t h e D H C P re l a y se rve r. O p t i o n 8 2 Thi s o p tion is a va i l a b le o n ly i f Ce n[...]

  • Page 236

    236 | D H C P C onfigur ation AO S- W Instant 6.3 .1.1- 4 .0 | U ser Gui de (I ns tant A cce ss P oi nt )) # co mm it a pp ly C onf i gu r i ng Lo cal and L ocal , L3 D H C P S cope s You ca n c o nfigu r e L o c a l an d L ocal,L3 DH C P s c o p e s b y usin g t h e A OS- W Inst an t U I or CLI. l Local — I n t his mo d e , t he Vir t u a l C on[...]

  • Page 237

    N a me D e s c r ip t io n VL AN Sp eci fy a VL AN ID. To use this sub n e t, e n su re tha t the VL AN I D sp e cifie d h e re i s assi g n e d to an SSID pro fil e . For more in forma tio n o n SSID pro fil e co n figu ra tio n , se e C on fig u ri n g VL AN Se tt i n g s f o r a W L AN SSID Profil e o n p a g e 8 9 and C o n figu ri n g VL[...]

  • Page 238

    238 | D H C P C onfigur ation AO S- W Instant 6.3 .1.1- 4 .0 | U ser Gui de C o n f i g u r i n g D H C P S e r ve r f o r C l i e n t I P A ssi g n m e n t Th e D H C P s er v e r is a bu ilt-in ser v e r, u sed for n etw o r k s in w h ic h c lien t s ar e ass ig ne d I P ad d re s s b y the Vir t ua l C o n t ro ller . You can cu s t o miz e t h[...]

  • Page 239

    AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de VPN C onfigur ation | 239 Chapter 22 V P N C o n f i g u r a t i o n Th is c ha pter d e s c rib es the fol lo w in g V PN con f igu r ation p ro ced ur es: l U n d er s t an d in g V PN Fea t u r es o n p a g e 23 9 l C o n f igu rin g a Tu nn el f r om an O AW - I A P to Omn iAc c ess W L AN S w it c h[...]

  • Page 240

    240 | VPN C o nfigura ti on AO S- W Instant 6. 3.1.1- 4.0 | U ser Gui de 3 . Ente r the IP ad d re s s o r f ully qu alifie d do main n a me (F QDN ) f o r the ma in VPN / I P Sec e nd po in t in the Pr ima r y h o s t f ie ld . 4 . Ente r the IP ad d re s s o r FQDN f or the b a c kup VPN / I PS e c e n d p oin t in t he Ba c k u p h o s t f ie ld[...]

  • Page 241

    (I ns tant A cce ss P oi nt )( co nf ig )# v pn rec onn ec t- us er -o n- fa il ov er (I ns tant A cce ss P oi nt )( co nf ig )# v pn rec onn ec t- ti me -o n- fa il ov er <do wn_ ti me > (I ns tant A cce ss P oi nt )( co nf ig )# e nd (I ns tant A cce ss P oi nt )# c om mi t ap pl y Ex am pl e (I ns tant A cce ss P oi nt )( co nf ig )# v pn [...]

  • Page 242

    242 | VPN C o nfigura ti on AO S- W Instant 6. 3.1.1- 4.0 | U ser Gui de a . To a llow the VPN t un ne l t o s w it c h ba c k t o t he p r imar y ho s t w he n it be c om e s avai la ble a ga in , s ele c t E nabl ed fro m the Pr e e mp t io n dr o p - do w n lis t . This s t ep is o ption a l. b . If P r e e mp t io n is en a b led , s pe c if y [...]

  • Page 243

    In the CLI To e na bl e a u toma t ic c on f ig ur atio n o f t he G R E t u nn el: (I ns tant A cce ss P oi nt )( co nf ig )# v pn gre -ou ts id e (I ns tant A cce ss P oi nt )( co nf ig )# v pn pri mar y <n am e/ IP -a dd re ss > (I ns tant A cce ss P oi nt )( co nf ig )# v pn bac kup < <n am e/ IP -a dd re ss >> (I ns tant A cc[...]

  • Page 244

    244 | VPN C o nfigura ti on AO S- W Instant 6. 3.1.1- 4.0 | U ser Gui de Figure 8 1 Man ua l GRE C on f ig u r ation 4 . C lick N e x t t o c on t in ue . W h e n the G R E  tun ne l con f ig u ra t ion is c omp le t e d o n bo t h t he O AW -IAP an d Sw it c h, the p ack ets s en t f r om an d re c ei v e d by a n OAW-IAP a r e en c ap s u late[...]

  • Page 245

    n O AW -RAP 1 0 9 n O AW -IAP 1 35 You ca n c o n figu re a n L2 TPv 3 t u n ne l fro m Vir t ua l Con t ro lle r using AO S - W I nst an t U I or CLI. In the AO S -W Ins tant UI 1 . C lick the Mo r e > VPN lin k at the top r ig ht cor ne r o f t he AO S-W I nstan t UI . Th e T unnel i ng w in do w is displa yed . Figure 8 2 L3 TPv 3 Tu n n e l [...]

  • Page 246

    246 | VPN C o nfigura ti on AO S- W Instant 6. 3.1.1- 4.0 | U ser Gui de f. Sele ct the me s s ag e d ige s t as MD5 or SH A u s ed for m e s s ag e au t he n t ic ation . g . Ente r a sha re d k ey f or the m e s s ag e dig est. Th is k ey s h o uld ma t c h w it h the tun ne l en d po in t s ha r e d k ey. h . If r eq uir e d , s el e c t t he fa[...]

  • Page 247

    (I ns tant A cce ss P oi nt ) (L 2T Pv 3 Tu nn el Pro fil e <l 2t pv 3_ tu nn el _p ro file >)# s ec re t- ke y <s ec re t_ ke y> (I ns tant A cce ss P oi nt )( co nf ig )# e nd (I ns tant A cce ss P oi nt )# c om mi t ap pl y To con f ig u re a L 2TPv3 s ess io n: (I ns tant A cce ss P oi nt )( co nf ig )# l 2tpv 3 ses si on < l2 tp[...]

  • Page 248

    248 | VPN C o nfigura ti on AO S- W Instant 6. 3.1.1- 4.0 | U ser Gui de To view L 2TPv3 glo b a l c on f igu r ation : (I ns tant A cce ss P oi nt )# s ho w l2 tp v3 g loba l par am et er L2 TP V3 Glo bal c on fi gu ra ti on -- -- ---- --- -- -- -- -- -- -- -- -- Ho st N ame -- -- ---- -- In st ant- C4: 42 :9 8 To view L 2TPV3 sess ion st a t u s [...]

  • Page 249

    da ta r x pack ets : 0, r x by te s: 0 , rx e rr or s: 0 da ta t x pack ets : 6, t x by te s: 5 88 , tx e rr or s: 0 es ta blis h ret ri es : 0 To view L 2TPv3 t un n e l c on f ig: (I ns tant A cce ss P oi nt )# s ho w l2 tp v3 t unne l con fi g Tu nn el pro fil e te st _t un ne l_ pr im ary l2 tp h ost na me: I ns ta nt -C 4: 42 :9 8 lo ca l UDP [...]

  • Page 250

    250 | VPN C o nfigura ti on AO S- W Instant 6. 3.1.1- 4.0 | U ser Gui de SC CR P 1 0 0 SC CC N 0 0 1 ST OP CCN 0 0 0 RE SE RVED 1 0 0 0 HE LL O 95 0 9 5 OC RQ 0 0 0 OC RP 0 0 0 OC CN 0 0 0 IC RQ 0 0 1 IC RP 1 0 0 IC CN 0 0 1 RE SE RVED 2 0 0 0 CD N 0 0 0 WE N 0 0 0 SL I 0 0 0 C o n f i g u r i n g R o u t i n g P r o f i l e s AOS- W Inst an t c an[...]

  • Page 251

    4 . C lick O K . 5 . C lick Fin ish . In the CLI (I ns tant A cce ss P oi nt )( co nf ig )# r outi ng- pr of il e (I ns tant A cce ss P oi nt )( Ro ut in g- prof ile )# r ou te < de st in at io n> < mask > <ga te wa y> (I ns tant A cce ss P oi nt )( Ro ut in g- prof ile )# e nd (I ns tant A cce ss P oi nt )# c om mi t ap pl y AO S[...]

  • Page 252

    AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de IAP - VPN C onf i g ur ation | 252 Chapter 23 I A P - V P N C o n f i g u r a t i o n Alc a t e l-L ucen t s w it c h e s pr o v id e an a bility t o t e r min ate t h e IP Sec a nd G R E V PN  tun ne ls f ro m t he O AW - IA P a n d p ro v ide co r p or ate c on n e c t iv it y t o t he b ra n ch ne [...]

  • Page 253

    253 | IAP- VPN C on fi gur at i o n AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de I A P - V P N S ca l abi l i t y Li m i t s AOS- W Inst an t pr ovid es e n h an c eme n ts t o the sc ala b ility limits f or th e IA P-VPN br an che s ter min ating o n t h e s w itc h. Th e f ollo w in g t ab le p r o v ide s the IAP - V PN sc ala bili ty in for ma [...]

  • Page 254

    To ver if y t he d e tails o f con f igu r e d ag gr eg a ted r ou t e , use t h e f o llowing com man d: (h os t) # sho w ip os pf r ap ng -v pn a gg re ga ted- rou te s <n et > <m as k> (h os t) #sh ow ip o sp f ra pn g- vp n ag gr eg ate- rou te s 10 0. 10 0. 2. 0 25 5. 25 5.25 5.0 Co nt ribu tin g ro ut es o f RA PN G VP N ag gr ega[...]

  • Page 255

    255 | IAP- VPN C on fi gur at i o n AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de V P N C o n f i g u r a t i o n Th e f oll o w in g VPN c o nfigu r a tion st ep s on the sw it ch, e n a ble O A W -IAPs to t er min ate t he ir VPN con ne c t io n o n the sw itc h: Whi t e l i st D a t a base C onf i gur a t i o n Th e w hite list d atab ase is a li[...]

  • Page 256

    (h os t) (co nfi g- se ss -i ap ro le )# any ho st <r ad iu s- se rv er -i p> a ny s rc-n at (h os t) (co nfi g- se ss -i ap ro le )# any an y any p er mi t (h os t) (co nfi g- se ss -i ap ro le )# ! (h os t) (co nfi g) # us er -r ol e ia pr ol e (h os t) (co nfi g- ro le ) #s es si on -a cl iap rol e V P N P r of i l e C onf i gu r at i on T[...]

  • Page 257

    257 | IAP- VPN C on fi gur at i o n AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de Pa r a me t e r D e sc r ip tio n VC M AC A ddre ss D isp l a ys t h e MAC a d d re ss of the Vi rtua l C on trol l e r of the b ra n ch . St at us D i sp la ys the curre n t st a tus o f t h e b ra n ch (U P/DOWN). In ne r IP D isp l a ys t h e i n tern a l VPN IP o f[...]

  • Page 258

    AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de O mniv is ta Inte gr ation and M anag emen t | 258 Chapter 24 O m n i v i s t a I n t e g r a t i o n a n d M a n a g e m e n t Th is c ha pter p r ovide s t he fol lo w in g infor ma t ion : l O mn iv is t a Fe atur es on p ag e 25 8 l C o n f igu rin g O mn iv is t a on p a g e 2 60 O m n i vi st[...]

  • Page 259

    259 | Omniv is ta Inte gr ation and M anag ement AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de Figure 8 6 Temp la te- ba s ed Co n fi g u ra t ion Tr en di ng R epo r t s O mn iv is t a s ave s up to 1 4 mo nths o f act ion a b le in f or ma tion , includ in g n etw or k pe rfo r man c e da t a a nd u s er r oa min g p att er n s , s o y ou ca n [...]

  • Page 260

    Figure 8 7 A dd in g a n  OAW-IAP in Vi s u alRF P S K - b ased a nd C e r t i f i cat e- ba sed A ut hen t i ca t i o n O n t h e D H C P ser v er , t w o f or ma t s for o ptio n 43 a re sup p or t ed : l <o r g a n iz a t io n > , <a ms - ip > ,< a ms- k e y > — I f you cho ose t h is for ma t , t he O AW -IAP au t h e n t[...]

  • Page 261

    261 | Omniv is ta Inte gr ation and M anag ement AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de l Fo lde r — "Or g" ( un de r t h e To p f o ld er in AMP) l C o n f igu ra t io n Gr ou p— " Or g" You ca n a ls o a ss ign a dd it io na l s trin gs to c re ate a h ie ra rch y of sub fold e r s u n de r t he fol d e r n ame d [...]

  • Page 262

    In t h e C L I To con f ig u re O mnivis ta infor ma t ion in AO S - W I nstan t : (I ns tant A cce ss P oi nt )( co nf ig )# o rgan iza ti on < na me > (I ns tant A cce ss P oi nt )( co nf ig )# a ms-i p <IP -a dd re ss o r do ma in n am e> (I ns tant A cce ss P oi nt )( co nf ig )# a ms-b ack up -i p <I P- ad dr es s or d om ain na[...]

  • Page 263

    263 | Omniv is ta Inte gr ation and M anag ement AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de 3 . Sele ct D H C P St a n d a r d O p t io n s in t he O p tio n c la s s dr op - d o w n list a nd the n c lick Ad d . 4 . Ente r the follo w in g in f or ma t io n: n N a me — A O S-W Inst an t n D a ta Ty pe — St rin g n C o d e—60 n D e s cri[...]

  • Page 264

    Figure 9 1 A OS- W Inst an t an d D H C P op t io n s f or O mn i v is t a : Ser v e r Op t ion s 7 . Sele ct 0 6 0 Alc a te l- L u c e n t In s t a n t AP in t h e Se r v e r O p t io n s w in do w a nd e nte r Alc a te l- L u c e n t I n s t a n t AP in the Strin g Valu e. Figure 9 2 A OS- W Inst an t an d D H C P op t io n s f or O mn i v is [...]

  • Page 265

    265 | Omniv is ta Inte gr ation and M anag ement AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de Figure 9 3 A OS- W Inst an t an d D H C P op t io n s f or O mn iv is t a— 0 43 Ve nd or Sp ecif ic Info Th is c re ate s a D H C P op t io n 6 0 a n d 43 o n a glo ba l ba s is . Y o u c an d o t he sam e on a p er -sc o pe b asis . The p e r -sc op [...]

  • Page 266

    the DH C P c lien t s info r matio n a b o u t c e rtain se r v ices s u ch as PXE . I n s uch an en v ir o n me nt, t he st an d ar d D H C P o ption s 60 a nd 4 3 c a n n ot b e u sed for Alcatel - L ucen t A Ps . Th is metho d d esc rib e s ho w t o s et u p a D H C P ser v er to s e n d op t ion 4 3 w it h O mn iv is t a info rma t io n to AOS-[...]

  • Page 267

    267 | Omniv is ta Inte gr ation and M anag ement AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de Figure 9 6 Omn iv is t a — N ew Gr o up Figure 9 7 Omn iv is t a —Mo nito r[...]

  • Page 268

    AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de A i r Gro up C onfigur ation | 268 Chapter 25 A i r G r o u p C o n f i g u r a t i o n Th is c ha pter p r ovide s t he fol lo w in g infor ma t ion : l Air Gr o up O v er v ie w on p ag e 2 6 8 l Air Gr o up wit h AOS- W I nst an t on p a g e 2 69 l C o n f igu rin g Air Gr o up a nd Air Gr ou p Ser v [...]

  • Page 269

    269 | AirGro up C on fi gur at i o n AO S- W I nstant 6.3.1 .1- 4.0 | U ser Gui de Figure 9 8 - A irG r o u p A r c hitect ur e Air Gr o up is n ot s u pp or t ed o n a 3 G up link. A i r G r o u p w i t h A O S - W I n st a n t Air Gr o up cap ab ilities a re a v ai la ble a s a fea t u r e in Alc a tel- Lu c e n t W LANs w h e r e W i- Fi d ata i[...]

  • Page 270

    Figure 9 9 A irG r o u p E na b l e s Per s on a l Devic e S h ar ing A i r G r ou p S ol ut i on In lar ge u n iver s it ies an d en t er p rise ne t w o r ks , it is c omm on for Bo njo u r - c ap ab le d e v ices t o c o nn ect t o t he n etw o r k a c ro s s VL AN s . A s a re s u lt, u s er d evic e s s uch as an iPa d on a spe c if ic VLAN c [...]

  • Page 271

    271 | AirGro up C on fi gur at i o n AO S- W I nstant 6.3.1 .1- 4.0 | U ser Gui de Fe a tu r e s  AO S - W I n s t a n t D e p lo yme n t Mo d e ls D evi ce ow n e r b a se d p o l i cy e n force me n t No Yes Lo ca tio n ba se d po l i cy e n force me n t N o Yes Sh are d u se r li st b a se d p o li cy en force me n t N o Ye s Sh are d ro l e [...]

  • Page 272

    l Allo w or b lo c k mD N S s er vic es b ased o n user r o les. l Allo w or b lo c k mD N S s er vic es b ased o n VLAN s . l Ma t c h user s’ de v ic e s , s u c h as iPad s , t o t h e ir closest B o njo ur d e v ices, such as p rin t e r s . Th is re qu ir e s C PP M sup po rt. C P P M and C l e ar P ass G uest Fe at ur es C PPM a nd Clea rPa[...]

  • Page 273

    273 | AirGro up C on fi gur at i o n AO S- W I nstant 6.3.1 .1- 4.0 | U ser Gui de C o n f i g u r i n g A i r G r o u p a n d A i r G r o u p S e r vi ce s o n a n O A W - I A P You ca n c o n figu re Air Gr ou p s e r v ic es, using AO S - W I nst an t U I or CLI. In the AO S -W Ins tant UI To e na bl e AirG r o up a nd its s er v ic e s : 1 . C [...]

  • Page 274

    l To sele c t blo c k user r o le s fro m a c c ess in g a n AirG r o u p s e r v ic e, clic k the cor r e s po nd in g e d it link an d s ele c t t he u s er r ole s f or which y o u w a n t t o re s trict acc ess . B y de f a u lt , a n A ir Gr ou p s er v ic e is acc e s s ib le by a ll user r o le s con f igu r e d in y o ur O A W -IAP c lu s t[...]

  • Page 275

    275 | AirGro up C on fi gur at i o n AO S- W I nstant 6.3.1 .1- 4.0 | U ser Gui de CP PM S erve r dea d ti me 10 0 Seco nds Ai rG roup S erv ic e In fo rm at io n -- -- ---- --- -- -- -- -- -- -- -- -- - Se rv ice St atu s -- -- --- -- --- - ai rp lay En abl ed ai rp rint D isa bl ed it un es Dis abl ed re mo temg mt En ab le d sh ar ing Di sab le [...]

  • Page 276

    AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e  Integ r ation w ith Secur i ty and Lo cati on Ser vi ces Appl i cati ons | 276 Chapter 26 I n t e g r a t i o n w i t h S e c u r i t y a n d L o c a t i o n S e r v i c e s A p p l i c a t i o n s Th is c ha pter d e s c rib es the fol lo w in g pr oced u re s : l C o n f igu rin g a n O AW -IAP [...]

  • Page 277

    277 |  Inte gr at i o n w i t h Security and Locati on Ser vi ces A ppli cati ons AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e Figure 1 0 2 S e r v ic e s W i n do w — ALE In t e gr ation 4 . Spe c ify the AL E ser v er n a me o r I P ad dr e s s . 5 . Spe c ify the r ep or ting in t er val w it hin th e r a ng e of 6 – 6 0 s e c on ds. T[...]

  • Page 278

    2 . C lick the RTL S tab . Th e f o llo w ing figu r e s h ows the con t en ts o f t he RTL S t ab . 3 . U n d er Ar u b a , sele c t t he RTL S c he c k b ox to integ r a t e A OS- W Inst an t w it h Omn ivis t a or Ekah au Rea l Tim e L ocation Se rve r . Figure 1 0 3 R TLS Wind ow 4 . Spe c ify the IP ad d r ess a nd p or t t o w hich t h e lo c[...]

  • Page 279

    279 |  Inte gr at i o n w i t h Security and Locati on Ser vi ces A ppli cati ons AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e secur it y re qu ir ed for e n ter pr is e s t o s ecu r e t he ir ne t w o r k s . In t he con t e x t of bu s ine s s e s using so cial ne t w or k in g s it es, le ga c y f ire w alls ar e no t ab le t o d iff er e[...]

  • Page 280

    Figure 1 0 4 S e r v ic e s W ind ow - N e t w or k Integ r ation Ta b 3 . Sele ct the En a b le che c k bo x t o en ab le PAN fire w all. 4 . Spe c ify the u s er n am e a n d p a s s w or d. En s u r e t ha t y ou p ro v id e u s e r c r ed en t ia ls of the PAN f ire w a ll ad min is t ra t o r . 5 . Ente r the PAN fire w al l I P ad dr e s s . [...]

  • Page 281

    AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e Lawful I nter cept and C ALEA Integr ation | 281 Chapter 27 L a w f u l I n t e r c e p t a n d C A L E A I n t e g r a t i o n Th is c ha pter p r ovide s t he fol lo w in g infor ma t ion : l C ALEA I nteg r a t ion a nd L a w f u l I nter c e pt C o mp lian c e on p a ge 2 81 l C o n f igu rin g OA[...]

  • Page 282

    282 | La w ful Inte r cept a nd C ALEA In tegr ati on A OS - W Instant 6.3.1. 1- 4.0 | U ser Guide Figure 1 0 5 I A P to C A LEA S e rver Traffi c Fl ow from IAP to C ALE A S erv er throug h VP N You ca n a lso de plo y C A L EA s e r v er wit h Sw it c h an d c on f ig ur e an a dd ition al I PSec t u nn el f or co r po ra t e acc e s s . W he n C[...]

  • Page 283

    Figure 1 0 6 I A P to C ALEA S e rver thr o ug h V PN Ensu r e t ha t I P Sec tun ne l is con f igu r e d if the clien t da t a h a s t o b e ro uted to the ISP or CALEA ser v er th r ou gh VPN . Fo r mor e in f or ma t ion o n c on f ig u r ing IPS ec, s ee Con figu rin g I PSec Tu nn e l on p ag e 23 9 . C l i ent Tr af f i c R ep l i cat i on C [...]

  • Page 284

    284 | La w ful Inte r cept a nd C ALEA In tegr ati on A OS - W Instant 6.3.1. 1- 4.0 | U ser Guide In the AO S -W Ins tant UI To con f ig u re a CA L EA pr o f ile: 1 . C lick Mo r e > Se r v ice s at the top r ig ht cor ne r o f t he AO S-W I nstan t ma in w ind o w . 2 . C lick C A L E A . Th e C AL EA t ab d eta ils a r e d is pla y ed . 3 . [...]

  • Page 285

    (I ns tant A cce ss P oi nt )( SS ID P ro fi le <na me> # se t- ro le < at tr ib ut e> {{eq ual s| no t- eq ua ls |s ta rts- wit h| en ds-w ith |c on ta in s} <o pe ra tor> <ro le >| va lu e- of } (I ns tant A cce ss P oi nt )( SS ID P ro fi le <na me> # en d (I ns tant A cce ss P oi nt )( SS ID P ro fi le <na me>[...]

  • Page 286

    286 | La w ful Inte r cept a nd C ALEA In tegr ati on A OS - W Instant 6.3.1. 1- 4.0 | U ser Guide ip m tu : 1 50 (I ns tant A cce ss P oi nt )# s ho w ca le a st atis tic s Rt r es olve f ail : 0 Ds t re solv e fai l: 0 Al lo c fail ure : 0 Fr ag ged pa cke ts : 0 Ju mb o pa ck ets : 26 3 To ta l Tx fai l : 0 To ta l Tx ok : 263[...]

  • Page 287

    AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de Hotspot Pr ofil es | 287 Chapter 28 H o t s p o t P r o f i l e s Th is c ha pter d e s c rib es the fol lo w in g pr oced u re s : l U n d er s t an d in g H ots po t Pro f ile s on p ag e 2 8 7 l C o n f igu rin g H o ts po t Pr ofiles o n pa ge 2 8 8 l Sam p le C on f igu r a t ion o n pa g e 2 9 8 In[...]

  • Page 288

    288 | H otspot Pr of i les AOS-W Instant 6.3 .1.1- 4.0 | U ser Gui de A ccess N et w o r k Q u er y P r ot ocol ( A N Q P ) AN QP pr ovide s a ra n g e o f in f or ma tion , s uch as IP ad dr e s s ty pe a nd a v ail a b ilit y , ro am in g pa rtn er s a c c ess ibl e thr ou gh a h o t s p ot, a nd the Ext en s ib le Auth e ntic atio n Pro t o c ol[...]

  • Page 289

    3 . A s s o c ia t e t he r eq u ir ed AN Q P a nd H2Q P ad v e r tis eme n t pr o f ile s cre ate d in s tep 1 to t he h o t s p ot p r ofile c re a t ed in st ep 2 . 4 . C r ea t e a SS I D Pro f ile w it h e n ter pr is e s e cur it y an d W P A2 en c r y p tion sett in gs a n d a s sociate t h e SSI D w ith t he h ots po t pr ofile cre ate d in[...]

  • Page 290

    290 | H otspot Pr of i les AOS-W Instant 6.3 .1.1- 4.0 | U ser Gui de l e a p - t t ls —To use EA P-T un ne led T ra nspo r t L a y er Se cur it y . The a s s o c ia t ed n um e r ic v a lue is 2 1. l peap —To u s e p r otect ed Ext en s ib le A u the ntic a t io n P r o tocol. Th e ass o ciated n um er ic v alu e is 25 . l cr y p t o - c a r d[...]

  • Page 291

    C onfi guri ng a Venue Nam e P rofi l e You co n figu re ve n u e n ame p ro file t o s en d v e n u e in f or ma tion a s a n A N Q P IE in a GAS q ue ry re s po nse . To con f ig u r e a ven ue n am e p r ofile, en t er th e f o llowing co mma nd s at the com ma nd p ro mp t : (I ns tant A cce ss P oi nt )( co nf ig )# h otsp ot an qp -v en ue -n[...]

  • Page 292

    292 | H otspot Pr of i les AOS-W Instant 6.3 .1.1- 4.0 | U ser Gui de Ve n u e G r o u p As s o c ia t e d Ve n u e Ty p e V a lu e The a ssoci a ted n u me ri c val u e is 5 . l lo n g -term-ca re —The a sso ci a ted n ume ri c val u e i s 2 . l al c-d ru g -re h a b —The a sso ci a ted n ume ri c val u e i s 3 . l gro u p -h o me —The a sso[...]

  • Page 293

    l h t t p - r e d ir e c t — W he n c on figu re d , ad di t io na l in f or ma t ion o n t he n e tw o rk is pr o v ide d t hr o u g h H TTP/H TTPS r ed ire c t io n. l d n s - r e d ir e c t — W he n c o n figu re d , a d d it ion al infor ma t ion o n t he ne t w or k is pr o v ide d t h r ou gh D N S r ed ir ect ion . Th is o ption r eq u i[...]

  • Page 294

    294 | H otspot Pr of i les AOS-W Instant 6.3 .1.1- 4.0 | U ser Gui de (I ns tant A cce ss P oi nt )( do ma in -n ame <n ame >) # en d (I ns tant A cce ss P oi nt )# c om mi t ap pl y C onfi guri ng an O perato r -fri endly P rofi l e You ca n c o nfigu r e t h e o pe ra t o r - f rie nd ly na me p ro f ile to de f ine th e id en t if y t he o[...]

  • Page 295

    l D o w n lin k lo a d — I nd ic ate s t he p e r c en t ag e of t he WA N do w nlin k c ur r en t ly utiliz e d . Th e d efau lt v alu e o f 0 in dicate s t ha t t he d own lin k spe ed is u nkno w n or u n s p e cif ied . l D o w n lin k sp e e d — I nd icates the WA N do w nlin k s pe e d in Kbp s . l U p lin k lo a d —I nd ic a t e s t h [...]

  • Page 296

    296 | H otspot Pr of i les AOS-W Instant 6.3 .1.1- 4.0 | U ser Gui de Pa r a me t e r D e sc r ip tio n l pe rso n a l -d e vi ce — T h i s ne two rk is a cce ssi b l e for pe rso n a l de vi ce s. For exa mp l e , a l a p top o r came ra co n fig u re d w i th a pri n ter f o r t h e p u rp o se o f p rin tin g . The co rre sp o n d i ng i n teg[...]

  • Page 297

    Pa r a me t e r D e sc r ip tio n l factory-a nd -i n d u stria l l in stitutio n a l l mer can til e l out door l resi d e n tia l l stora ge l util i ty-an d -mi sc l veh i cu l a r By d efau l t, the bu si n e ss ve n u e g ro u p i s u se d . ven u e -type Sp e ci fy a ve n u e type to be a d ve rtise d in the AN QP IEs from O AW-I APs asso ci [...]

  • Page 298

    298 | H otspot Pr of i les AOS-W Instant 6.3 .1.1- 4.0 | U ser Gui de (I ns tant A cce ss P oi nt )( SS ID P ro fi le <na me> # vl an < vl an -I D> (I ns tant A cce ss P oi nt )( SS ID P ro fi le <na me> # se t- vl an < at tr ib ut e> {equ als |n ot -e qu al s| s ta rt s-wi t h| e nd s-wi th| c on ta in s} < op er at or &[...]

  • Page 299

    (I ns tant A cce ss P oi nt )( co nf ig )# h otsp ot an qp -d om ai n- na me -p ro file d n1 (I ns tant A cce ss P oi nt )( do ma in -n ame "d n1" )# d om ai n- na me D om ai nN ame (I ns tant A cce ss P oi nt )( do ma in -n ame "d n1" )# e xi t (I ns tant A cce ss P oi nt )( co nf ig )# h otsp ot h2 qp -o pe r- na me -p ro fi l[...]

  • Page 300

    300 | H otspot Pr of i les AOS-W Instant 6.3 .1.1- 4.0 | U ser Gui de (I ns tant A cce ss P oi nt )( SS ID P ro fi le "ss idP ro fi le 1" )# r ad iu s- re auth -in te rv al 2 0 (I ns tant A cce ss P oi nt )( SS ID P ro fi le "ss idP ro fi le 1" )# m ax -a ut he ntic ati on -f ai lu re s 2 (I ns tant A cce ss P oi nt )( SS ID P r[...]

  • Page 301

    AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de Ex tende d Voi ce and Vi d eo | 301 Chapter 29 E x t e n d e d V o i c e a n d V i d e o AOS- W Inst an t ha s t he a dd e d a b ilit y t o ide ntify a n d pr ior itiz e v oice an d v id eo tra f f ic f r o m ap pli c a tion s such as Micro s o f t Off ice C omm u n ic ation s Ser v er ( OCS) an d App le[...]

  • Page 302

    AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e Dynami c C PU  Mana geme nt | 302 Chapter 30 D y n a m i c C P U M a n a g e m e n t Th is c ha pter p r ovide s t he fol lo w in g infor ma t ion : l D y n a mic C PU Man ag e me nt o n pa ge 3 0 2 l C o n f igu rin g f o r D yna mic C P U Man a g e men t on p ag e 30 2 D yn a m i c C P U Ma n [...]

  • Page 303

    AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e Li nk Aggr egation C on tr ol Pr ot ocol for OA W- IAP220 Ser ies | 303 Chapter 31 L i n k A g g r e g a t i o n C o n t r o l P r o t o c o l f o r O A W - I A P 2 2 0 S e r i e s O AW -IAP 2 20 Ser ies su p p or t s t he I E EE 8 02 . 11 ac st a nd ar d for hi g h - pe rfo r ma nce W LAN. To s up po[...]

  • Page 304

    AO S- W Instant 6.3 .1.1- 4 .0 | U ser Gui d e OA W- IAP Manag emen t | 304 Chapter 32 O A W - I A P M a n a g e m e n t Th is s ect ion p r o v ide s infor ma t ion o n t he fo llowing p r o c ed ur es: l C o n f igu rin g L ED D is pla y on p ag e 30 4 l Back in g up a nd Rest o r in g OAW -IAP C on figu ra t io n D a t a on p ag e 30 4 l C o n v[...]

  • Page 305

    305 | OAW-IAP Ma nagem ent A OS- W Instant 6.3 .1.1- 4.0 | U ser Gui de 1 . N a v ig ate t o t he M a in t e n a n c e > C o n fig u r a t io n > pa ge . 2 . C lick B a c k u p C o n f ig u r a t io n . 3 . C lick C o n t in u e t o c o n f ir m the b ack up . Th e in s t an t . c f g con t ain in g the O A W -IAP c o n figu ra t io n da t a [...]

  • Page 306

    l Fo r mor e in f or ma t ion o n f irm w a r e imag e c lo u d s e r v er , s ee Upg ra di n g a n OAW -IAP on p a g e 70 . A me s h po in t c a nn ot b e c on v er t e d t o R emo t e AP , be c a use mesh a c c e s s po in ts d o n ot s u p po rt VPN con ne c t io n . An OAW-IAP c an b e c on v e r t ed to a C amp u s AP an d R e mo t e AP on ly [...]

  • Page 307

    307 | OAW-IAP Ma nagem ent A OS- W Instant 6.3 .1.1- 4.0 | U ser Gui de Figure 1 0 7 - Main t en a n c e — C o nver t Tab Figure 1 0 8 - C on v er t op t ion s 3 . Sele ct R e mo te A Ps ma n a g e d b y a Mo b ility C o n t r o lle r f ro m t he d ro p - do w n lis t . 4 . Ente r the h ost n a me ( f ully qu alifie d do ma in n ame ) o r the IP [...]

  • Page 308

    C onve r t i n g an O A W- I A P t o C am pus A P To con v er t an O AW -IAP t o C amp u s AP, d o t he foll o w in g : 1 . C lick the M ai ntenanc e link in the AO S - W I nstan t ma in w ind o w . 2 . C lick the Co n v e r t t ab . Th e C o n v e r t t ab is displa y e d . Figure 1 0 9 - C on v er t ing a n OAW-IAP t o C amp u s AP 3 . Sele ct C [...]

  • Page 309

    309 | OAW-IAP Ma nagem ent A OS- W Instant 6.3 .1.1- 4.0 | U ser Gui de 3 . Sele ct S t a n d a lo n e AP f r o m t he d r o p - do w n lis t . 4 . Sele ct the Ac c e s s Poin t f ro m t he d ro p - do w n lis t . 5 . C lick C o n v e r t N o w t o c om ple t e t he co n v er s ion . Th e a n O AW -IAP no w op er a t e s in the st an da lo ne mo de[...]

  • Page 310

    Figure 1 1 1 - R eb oo t ing the O AW -IAP 3 . In t he O A W - I AP list , sele c t t he O A W - I AP t h a t y o u w a nt to re bo ot an d c lic k R e b o o t s e le c t e d Ac c e s s Po in t . To r eb oo t all t he O AW -IAP s in t he n e tw o rk, c lic k Re b o o t All. 4 . Th e C o n fir m R e b o o t f o r AP mess a g e is disp la y ed . C li[...]

  • Page 311

    AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e Mo ni tor ing D evi ces and Lo gs | 311 Chapter 33 M o n i t o r i n g D e v i c e s a n d L o g s Th is c ha pter p r ovide s t he fol lo w in g infor ma t ion : l C o n f igu rin g SN MP o n pa ge 3 11 l C o n f igu rin g a Sy s log Se rve r o n p a g e 31 4 l C o n f igu rin g TFT P D u mp S e rver[...]

  • Page 312

    312 | M onitoring De v i ces and L ogs AO S- W Instant 6.3 .1.1- 4 .0 | User Gui de C onf i gu r i ng S N M P Th is s ect io n de s c r ib es the p r o c ed ur e f or c o n figu rin g S N MPv 1 , SN MPv 2, a nd S N MPv 3 c ommu n it y s t rin g s u s in g AOS- W Inst an t U I o r C LI. C reati ng c om m uni ty s tr i ngs for SN M Pv 1 and SN M P v [...]

  • Page 313

    Figure 1 1 3 S N MPv 3 U s er 4 . Ente r the n am e o f t he u s e r in the Na me text bo x . 5 . Sele ct the ty pe o f au t he n t ic ation p r otocol f r o m t h e A u th p r o t o c o l dr op -d o w n list . 6 . Ente r the a uth e n tic ation p a s s w o r d in t he Pa s s w o r d t ext bo x a nd r ety p e t he p ass w or d in the Re t y p e t e[...]

  • Page 314

    314 | M onitoring De v i ces and L ogs AO S- W Instant 6.3 .1.1- 4 .0 | User Gui de C onf i gu r i ng S N M P T r aps  AOS- W I nst an t s up p o r t s the con f ig u r ation o f ext er n al t ra p r e c e iver s . On ly the O AW - IA P a ct ing a s t he Vir t ua l C o n t ro ller g e ne ra t e s t ra p s . Th e O I D of the tra p s is 1.3 .6.1.[...]

  • Page 315

    Figure 1 1 4 S y s log Se rve r 4 . In t he Sys lo g s e r v e r t ext bo x , en t e r the IP ad d r ess o f the ser v e r to w h ic h y ou wan t t o s en d s y s t e m log s . 5 . Sele ct t he r e q uir ed v alu es to c on f igu r e s y s log f acilit y le v els. Sy s log Fa c ilit y is a n info r ma t ion f ield a s s ociate d w ith a s y s log m[...]

  • Page 316

    316 | M onitoring De v i ces and L ogs AO S- W Instant 6.3 .1.1- 4 .0 | User Gui de L o g g in g L e v e l D e s c r ip t io n Warn in g Warn in g me ssa g e s. N otice Sig n i fica n t e ve n ts o f a n o n -cri tical an d no rma l n a ture . The de fau l t va l u e for al l Sysl o g faci l itie s. Informa tion a l Me ssa g e s of g e n e ra l i n[...]

  • Page 317

    R u n n i n g D e b u g C o m ma n d s f r o m t h e A O S - W I n st a n t UI To r un th e d e bu gg ing co mma nd s f ro m t he AO S - W I nst an t U I : 1 . N a v ig ate t o Mo r e > S upport at the top r ig h t c o rn er o f t he AO S - W I nstan t ma in w ind o w . Th e Support wind o w is d is pla y ed . 2 . Sele ct the r eq ui r e d op t [...]

  • Page 318

    318 | M onitoring De v i ces and L ogs AO S- W Instant 6.3 .1.1- 4 .0 | User Gui de l AP C r a s h I n f o — D is pla y s c ra s h lo g in f or ma t io n (if it e x is t s ) f or th e OAW -IAP. Th e s t or e d infor ma t ion is c lea re d fro m the fla s h a ft er the AP re bo o t s . l AP C u r r e n t Tim e — D is pla y s t he cur r e nt t im[...]

  • Page 319

    l AP L o g Sa p d — D ispla y s SAPd log s . l AP L o g Se c u r it y — D ispla y s s ecur it y log s of the O AW - I A P. l AP L o g Sy s t e m— D is pl a y s s y s t em lo gs o f t he O AW -IAP . l A P Log T unnel S tat us M anagem ent —D is pl a y s t un n e l s t atus. l AP L o g U p g r a d e — D is p la ys ima ge d ownlo a d an d up[...]

  • Page 320

    320 | M onitoring De v i ces and L ogs AO S- W Instant 6.3 .1.1- 4 .0 | User Gui de l AP Sh a p in g Ta b le — D is pla y s s ha pin g in for matio n f or clien ts a s s o c iated wit h t h e OAW-IAP . l AP So c k e ts — D is pla y s infor ma t ion sock e t s o f the O A W -IAP. l AP STM C o n f ig u r a tio n — D is p la y s STM c on f igu r[...]

  • Page 321

    l VC L 2 TPv 3 c o n f ig — D is p la y s the L 2TPv3 c on f ig ur atio n s tatus. l VC L 2 TPv 3 tu n n e l s t a t u s — D is pl a y s t he L 2 TPv3 t un ne l st atu s . l VC L 2 TPv 3 tu n n e l c o n fig u r a t io n — D is p lays the L 2T P v 3 t u n n e l c on figu ra t io n s t atus. l VC L 2 TPv 3 se s s io n s ta t u s —D is pla y [...]

  • Page 322

    AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e R eg ulatory D o main | 322 Chapter 34 R e g u l a t o r y D o m a i n Th e I EE E 8 02 . 11 / b /g/n W i-Fi ne tw or k s o pe ra t e in the 2 . 4 GHz s pe c t ru m an d I EE E 8 02 . 11 a /n op er ate in the 5 . 0 GHz spe c t ru m. Th e s pe c t ru m is d iv ide d into cha nn els. Th e 2 . 4 GHz s p [...]

  • Page 323

    323 | R eg ul ator y D o main AO S- W In s tant 6. 3.1.1- 4.0 | U ser Gui d e C o d e C o u n t r y N a me C A Ca n a d a C H Sw itzerl a n d C L Ch i l e C N Ch i n a C O Co l o mb i a C R C o sta Rica C S Serb i a a n d Mo n ten e g ro C Y Cyp ru s C Z C zech R e p u b l i c D E German y D K De n ma rk D O Do mi n ica n R e p u b l i c D Z Alg e [...]

  • Page 324

    C o d e C o u n t r y N a me IS I ce l an d IT I tal y JM Jama i ca JO Jord a n JP Jap a n KE Ke nya KR R e p u b l i c o f Ko re a (So uth Ko rea ) KW Ku w ai t KW Ku w ai t LB Lebanon LI L i e ch ten stei n LI L i e ch ten stei n LK Sri L an ka LT Lit huania LT Lit huania LU Luxem bourg MA Mo rocco MA Mo rocco MU Ma uri tiu s MX Me xico MX Me xic[...]

  • Page 325

    325 | R eg ul ator y D o main AO S- W In s tant 6. 3.1.1- 4.0 | U ser Gui d e C o d e C o u n t r y N a me PE Pe ru PH Ph il i p p i ne s PK Islami c R ep u b l i c of Pa ki stan PL Po la n d PL Po la n d PR Pu e rto Ri co PR Pu e rto Ri co PT Po rtug al QA Q a tar R O Ro ma n i a R U Ru ssi a R U Ru ssi a SA Sa ud i Ara b i a SG Sin g a p o re SI [...]

  • Page 326

    C o d e C o u n t r y N a me U Y Uru g u a y VE Ve ne zu e l a VN Vie tna m ZA So u th Af rica AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e R eg ulatory D o main | 326[...]

  • Page 327

    AO S- W In stant 6 .3.1.1 - 4.0 | U ser Gui d e Clear Pass G uest Setup | 327 C l e a r P a s s G u e s t S e t u p To con f ig u re Clea rPa s s Gu est : 1 . O n C le a rPa s s Gu e s t , n aviga t e t o Ad min is t r a t io n > A ir G r o u p Se r v ic e s . 2 . C lick C o n f ig u r e Air G r o u p Se r v ice s . Figure 1 1 6 C on f igu re Ai[...]

  • Page 328

    328 | C lear Pas s Gues t Setu p AO S- W I nstant 6 .3.1.1 - 4.0 | U ser Gui de Figure 1 1 8 C re ate an Air Gr ou p Adm in is t r ator 4 . In t his e x amp le , t he p a ss w o rd u s ed is test 1 2 3 . C lic k A d d . 5 . N o w c lick A d d U se r , an d c r e a t e an Air G r o u p O p e r a t o r . Figure 1 1 9 C re ate an Air Gr ou p O p e r a[...]

  • Page 329

    Figure 1 2 0 Lo c al Us er s U I S c r ee n 7 . N a v ig ate t o t he Cle a rPa s s Gu e s t U I an d c lick Logout . Th e C le a r Pa s s G u e s t L o g in p a g e is d is pla y ed . U s e t he Air Gr o up a dmi n c r ed en t ia ls t o log i n . 8 . Af t e r lo gg ing in , c lic k C r e a t e D e v ic e . Figure 1 2 1 C re ate a D evic e Th e f o[...]

  • Page 330

    330 | C lear Pas s Gues t Setu p AO S- W I nstant 6 .3.1.1 - 4.0 | U ser Gui de 9 . C lick R e g is te r S h a r e d D e v ic e . Te st i n g To ver if y t he se tup : 1 . D isc on ne c t y ou r App le TV a nd OSX Mo u ntain L ion / iOS 6 de v ic es if t h e y w er e p r eviou s ly c on ne c t e d to t he w ir ele s s ne t w or k . R emo v e t h ei[...]

  • Page 331

    AO S- W Instant 6.3.1 .1- 4.0 | U ser Gui de T er m i nology | 331 T e r m i n o l o g y A cro n ym s a n d A b b r e vi a t i o n s Th e f oll o w in g tab le lis t s t he a b b r eviatio n s used i n this u s e r gu ide . Ab b r e via t io n E x p a n s io n AR M Ad ap tive R a d i o Ma n a g e me n t AR P Add re ss R e so l u tio n Pro toco l BS[...]

  • Page 332

    332 | T er m i n ol ogy AOS-W Instant 6.3 .1.1- 4.0 | U ser Gui de Ab b r e via t io n E x p a n s io n PEAP Pro tected Exten sib l e Au the n tica tion Pr otoco l PEM Priva cy En h a n ce d Ma i l Po E Po we r o ve r Ethe rn e t R AD IUS R emo te Au the n tica tio n D i a l In U se r Se rvi ce VC Virtua l C o n trol l e r VSA Ven d o r-Sp e ci fic[...]

  • Page 333

    Te r m D e f in itio n AP An acce ss p o i n t (AP) con n e cts use rs to o the r u se rs w ithi n t h e n e two rk a n d al so ca n se rve a s t h e p o i n t o f in terco n n e ctio n b e twe e n the WLAN a n d a fixed w i re n e two rk. The n u mb e r of a cce ss po in ts a WLAN n e e d s is de termi n e d b y t h e n u mb e r of u se rs an d th[...]

  • Page 334

    334 | T er m i n ol ogy AOS-W Instant 6.3 .1.1- 4.0 | U ser Gui de Te r m D e f in itio n fixed wi re l e ss Wirel e ss d e vi ce s o r systems in fixed lo ca tio n s su ch a s h o me s a n d o ff ice s. Fixed wi re l e ss d e vi ce s usu a l l y d e ri ve the i r e le ctrica l p o w e r from the util i ty mai n s, u n l i ke mo bi l e w i re le ss[...]

  • Page 335

    Te r m D e f in itio n Wi-F i A term for ce rtain t yp e s o f WLAN s. Wi-F i ca n ap p l y to p ro d u cts t h a t use an y 8 0 2 .11 st a n d ard . Wi-F i h a s g a i n e d a cce p tan ce i n man y b u si n e sse s, ag e n ci e s, sch o o l s, an d h o me s as an a l tern a tive to a wi re d LA N. Man y ai rp o rts, ho tel s, a n d fast-f oo d fa[...]