Page 1 Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 User Guide...
Page 2 Aruba Networks, Inc. from any and all legal actions that might be taken against it with respect to infringement of copyright on behalf of those vendors. Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide 0511035-01 | January 2012...
Page 3: Table Of Contents
Language ........................... 36 AirWave Setup........................36 Pause/Resume ........................37 Views ............................37 Chapter 3 Wireless Network......................39 Network Types..........................39 Employee Network ........................39 Adding an Employee Network..................40 Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Contents | 3...
Page 4 802.1X Authentication ........................77 Internal RADIUS Server......................77 External RADIUS Server......................78 Authentication Terminated on IAP................78 Configuring an External RADIUS Server ..............79 Enabling Instant RADIUS ....................80 4 | Contents Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 5 Configuring External Captive Portal Authentication when Editing a Guest Network ........................90 External Captive Portal Authentication via Dell PowerConnect W-ClearPass GuestConnect..........................90 Creating a Web Login page in the Dell PowerConnect W-ClearPass GuestConnect ........................90 Configuring the RADIUS Server in Instant ..............91 Mac Authentication ......................... 91 Configuring Mac Authentication....................
Page 6 Airwave Discovery through DHCP Option................134 Chapter 18 Monitoring ........................135 Virtual Controller View........................135 Monitoring Link ........................136 Info ............................136 RF Dashboard.......................... 136 Usage Trends .......................... 136 6 | Contents Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 7 Adding a User..........................151 Editing User Settings......................152 Deleting a User ........................152 Chapter 21 Regulatory Domain......................153 Country Codes List.......................... 154 Appendix A Abbreviations ........................157 Abbreviations ..........................157 Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Contents | 7...
Page 8 8 | Contents Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 9 Syslog Server ............................ 62 Figure 43 Adding an IAP to the Instant Network ..................63 Figure 44 Entering the Mac Address for the New IAP ................63 Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Figures | 9...
Page 10 Radio Profile ............................ 119 Figure 91 Intrusion Detection ........................121 Figure 92 Wireless Intrusion Protection—Detection ................122 Figure 93 Wireless Intrusion Protection—Protection ................124 Figure 94 Containment Methods ........................125 10 | Figures Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 11 Frames Graph..........................145 Figure 112 Speed Graph............................ 145 Figure 113 Throughput Graph .......................... 146 Figure 114 Adding a User ..........................151 Figure 115 Specifying a Country Code ......................153 Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Figures | 11...
Page 12 12 | Figures Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 13 Table 25 Client View—RF Trends Graphs and Monitoring Procedures..........146 Table 26 Alerts List ............................149 Table 27 Country Codes List.......................... 154 Table 28 List of abbreviations........................157 Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Tables | 13...
Page 14 14 | Tables Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 15: About This Guide
Dell Instant network. Intended Audience This guide is intended for Dell Instant customers who will be configuring and using Dell Instant to set up the Dell PowerConnect W-Instant wireless network infrastructure. Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 16: Conventions
WARNING: Indicates a risk of personal injury or death. Website Contact Table 2 Website Support Web Site Support Main Website dell.com Support Website support.dell.com Documentation Website support.dell.com/manuals 16 | About this Guide Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 17: Chapter 1 Initial Configuration
Chapter 1 Initial Configuration This chapter provides information that is required to setup Dell Instant and access the Instant User Interface. Initial Setup This section provides a pre-installation checklist and describes the initial procedures required to set up Dell Instant.
Page 18: Connecting The Iap To A Power Source
4. In the Mac operating system, click the AirPort icon. A list of available Wi-Fi networks is displayed. 5. Click on the instant network. NOTE: While connecting to a provisioning Wi-Fi network, ensure that the client is not connected to any wired network. 18 | Initial Configuration Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 19: Login Into Instant User Interface
Launch a web browser and navigate to (or any URL or web address). In the login screen, instant.dell-pcw.com enter the following credentials: Username—admin  Password—admin  Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Initial Configuration | 19...
Page 20: Specifying The Country Code
Instant user interface. You can change the default login credentials after your first login. Specifying the Country Code NOTE: Skip this section, if you are installing the IAP in United States, Japan or Israel. Dell PowerConnect W-Instant Access Points are shipped in four variants: IAP—US (United States) ...
Page 21: Chapter 2 Instant User Interface
The Instant UI consists of the following elements: Banner  Search  Tabs  Links  Views  These elements are explained in the following sections. Figure 5 Instant UI Interface Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Instant User Interface | 21...
Page 22: Banner
Each tab is explained in the following sections. Networks Tab This tab displays a list of Wi-Fi networks that are configured in the Dell Instant network. The network names appear as links. The expanded view displays the following information about each Wi-Fi network: Name—Name of the network.
Page 23: Access Points Tab
Access Points Tab If the Auto Join Mode feature is enabled, a list of enabled and active IAPs in the Dell Instant network is displayed in the Access Points tab. The IAP names are displayed as links. If the Auto Join Mode feature is disabled, a New link appears. Click on this link to add a new IAP to the network.
Page 24: Links
This link displays the Users box. This box contains fields that are required to add, edit, or delete a user or users. You can also specify the user type. Two types of users, employee and guest, will be using the Dell Instant network.
Page 25: Settings
Advanced—View or edit the preferred band for the network, dynamic RADIUS Proxy, and Auto join mode  settings. For information about dynamic RADIUS Proxy and Auto join mode, see “External RADIUS Server” on page 78 “Auto Join Mode” on page Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Instant User Interface | 25...
Page 26: Servers
This link displays the Maintenance box. The Maintenance box allows you to maintain the Wi-Fi network. It consists of the following tabs: About—Displays the Build Time, IAP model name, Dell Instant OS version, Web address of Dell Inc., and ...
Page 27: Support
Clear—Click to clear the text box  Save Results—Click to open the results in another window and save it as an HTML or text file.  Figure 12 Support Window Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Instant User Interface | 27...
Page 28 NOTE: Use the support commands under the supervision of Dell technical support. You can view the following information for each access point in the Dell Instant network using the support box: AP Access Rule Table—Displays all the ACL rules of the selected IAP.
Page 29 AP Allowed Channels—Displays information of the allowed channels for the selected IAP.  AP Radio 0 Stats—Displays aggregate debug statistics of the selected IAP Radio 0.  Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Instant User Interface | 29...
Page 30: Help
1. At the top right corner of Instant UI, click the Help link. The following box appears below the Help link. Figure 14 Help Link 30 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 31: Logout
Use this link to logout of the Instant UI. Monitoring This link displays the Monitoring pane. This pane can be used to monitor the Dell Instant network. Use the down arrow located to the right side of these links to compress or expand the monitoring pane. The monitoring...
Page 32: Table 3 Rf Dashboard Icons
Green—Noise floor is more than 87dBm.  Orange—Noise floor is between 80 dBm - 87 dBm.  Red—Noise floor is less than 80 dBm.  32 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 33: Alerts
Client Alerts, Active Faults, and Fault History. NOTE: New alerts will be generated for an incomplete DHCP transaction of a client. Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Instant User Interface | 33...
Page 34: Figure 19 Alerts Link
Time—Displays the system time when an event occurs.  Number—Indicates the number of sequence.  Cleared by—Displays the module which cleared this fault.  Description—Displays the event details.  34 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 35: Ids
Network—Displays the name of the network to which the foreign AP is connected.  Classification—Displays the classification of the foreign AP - Interfering IAP or Rogue IAP.  Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Instant User Interface | 35...
Page 36: Language
Instant UI. These links are located at the bottom left corner of the Instant UI. A default language is selected based on the language preferences in the client desktop operating system or browser. If Dell Instant cannot detect the language, then English (En) is used as the default language.
Page 37: Pause/Resume
Instant Access Point view—The Instant Access Point view provides information that is necessary to monitor a  selected IAP. All IAPs in the Dell Instant network are listed in the Access Points tab. Click the name of the IAP that you want to monitor. Access Point view for that IAP appears.
Page 38 38 | Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 39: Chapter 3 Wireless Network
Employee Network An Employee network is a classic Wi-Fi network. This network type is supported with full customization on Dell Instant. It will be used by the employees in the organization. Passphrase based or 802.1X based authentication methods are supported on this network type. Employees can access the protected data of an enterprise through the employee network after successful authentication.
Page 40: Adding An Employee Network
You select the Network assigned – VLAN ID option The client gets the IP address from the specified VLAN. Enter the ID of the VLAN in the VLAN ID text box. 40 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 41 IAP at every beacon. You may choose to configure a larger DTIM value for power saving. b. Transmit Rates: Indicates the ability to configure the basic and supported rates per SSID for Dell Instant. Select to set the minimum and maximum legacy (non-802.11n) transmit rates for each band -2.4GHz and 5GHz.
Page 42: Table 6 Conditions For Adding An Employee Network-Security Tab
Certificates: Click to display information about current certificates installed in the network. It also provides interface to upload new certificates and to set passphrase for the certificates. For more information, see “Certificates” on page 42 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 43  Enabled and Disabled When Enabled, user must configure at least one RADIUS server for authentication server. See “Mac Authentication” on page 91 for further details. Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Wireless Network | 43...
Page 44: Figure 26 Security Tab-Enterprise
Figure 26 Security Tab—Enterprise 44 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 45: Figure 27 Security Tab-Personal
Figure 27 Security Tab—Personal Figure 28 Security Tab—Open Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Wireless Network | 45...
Page 46: Voice Network
Voice Network Use the Voice network type when you want devices that provide only voice services like handsets or only applications that require voice-like prioritization need connectivity. 46 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 47: Adding A Voice Network
IAPs and the wireless clients. The Virtual Controller NATs all traffic that passes out of this interface. This setup eliminates the need for complex VLAN and IP address management for a multi-site wireless network. Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Wireless Network | 47...
Page 48: Table 8 Conditions For Adding A Voice Network-Security Tab
IAP at every beacon. You may choose to configure a larger DTIM value for power saving. b. Transmit Rates—Indicates the ability to configure the basic and supported rates per SSID for Dell Instant. Select to set the minimum and maximum legacy (non-802.11n) transmit rates for each band - 2.4GHz and 5GHz.
Page 49 Click New. b. Select appropriate options in the New Rule box. c. Click OK. 5. Click Finish. The network is added and listed in the Networks tab. Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Wireless Network | 49...
Page 50: Guest Network
Broadcast filtering: When set to All, the IAP will drop all broadcast and multicast frames except for  DHCP and ARP. When set to ARP, in addition to the above, the IAP will convert ARP requests to 50 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 51: Table 9 Conditions For Adding A Guest Network-Basic Info Tab
IAP at every beacon. You may choose to configure a larger DTIM value for power saving. b. Transmit Rates: Indicates the ability to configure the basic and supported rates per SSID for Dell Instant. Select to set the minimum and maximum legacy (non-802.11n) transmit rates for each band -2.4GHz and 5GHz.
Page 52: Figure 32 Adding A Guest Network-Splash
Select the required key management option from the Key management drop-down list. Available options are: WPA-2 Personal  WPA Personal  Both (WPA-2 & WPA)  52 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 53: Editing A Network
2. Click the edit link. The Edit network box appears. 3. Make the required changes in any of the tabs. Click Next or the tab name to move to the next tab. 4. Click Finish. Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Wireless Network | 53...
Page 54: Deleting A Network
1. In the Networks tab, click the network which you want to delete. An x appears against the network to be deleted. 2. Click x. A delete confirmation box appears. 3. Click Delete Now. 54 | Wireless Network Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 55: Chapter 4 Mesh Network
Chapter 4 Mesh Network The Dell PowerConnect W-Instant secure enterprise mesh solution is an effective way to expand network coverage for outdoor and indoor enterprise environments without any wires. As traffic traverses across mesh IAPs, the mesh network automatically reconfigures around broken or blocked paths. This self-healing feature provides increased reliability and redundancy: the network continues to operate if an IAP stops functioning or a connection fails.
Page 56: Instant Mesh Setup
Figure 35 Untrusted Connection Window 6. In the login screen as shown in Figure 36, enter the following credentials: Username—admin  Password—admin  56 | Mesh Network Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 57: Figure 36 Login Window
NOTE: The IAP mesh point will get an IP address from the same DHCP pool as the portal, and this DHCP request goes through the portal. Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Mesh Network | 57...
Page 58 58 | Mesh Network Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 59: Chapter 5 Managing Iaps
Chapter 5 Managing IAPs The Dell Instant network supports up to 16 IAPs. This chapter describes the auto join mode, Terminal Access, LED display, and Syslog server features in Dell Instant. In addition, the chapter provides procedures for adding and removing IAPs, editing the IAP settings, and upgrading the firmware on the IAP using the Instant UI.
Page 60: Led Display
LED Display to enable or disable the LEDs. When enabled, all LEDs are turned off. Use this option in environments where LEDs can be a distraction. Figure 39 LED Display NOTE: The LED display will be always in Enabled mode while rebooting the IAP. 60 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 61: Terminal Access
To enable or disable the telnet access to the IAP's CLI, go to Settings > Advanced > Terminal access. Figure 40 Terminal Access TFTP Dump Server Enter the IP address of a TFTP server to store core dump files. Figure 41 TFTP Dump Server Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Managing IAPs | 61...
Page 62: Syslog Server
Syslog Server Syslog Levels Dell Instant supports facility-based logging levels. Syslog Facility is an information field associated with a syslog message. It is an application or operating system component that generates a log message. The following seven facilities are supported by Syslog: AP-Debug: Detailed log about AP device.
Page 63: Adding An Iap To The Network
Messages of general interest to system users. Debug Messages containing information useful for debugging. Adding an IAP to the Network To add an IAP to the Dell Instant network, assign an IP address. For more information, see “Assigning an IP Address to the IAP” on page 18.
Page 64: Editing Iap Settings
1. In the Access Points tab, click the IAP for which you want to change the IP address. The edit link appears. 2. Click the edit link. The Edit AP box appears. 3. Click the Connectivity tab. 64 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 65: Figure 47 Configuring Iap Settings-Connectivity Tab
5. Enter the domain name in the Domain name text box. Figure 48 Configuring IAP Connectivity Settings—Specifying Static Settings 5. Click OK, and reboot the IAP. Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Managing IAPs | 65...
Page 66: Configuring Adaptive Radio Management
IAP to factory default settings. If you have converted your IAP to a campus AP, pressing the reset button converts it back to an IAP. The IAP will then boot with the factory default image. Refer to the Dell PowerConnect W-IAP92/93/105 Instant Access Point Installation Guide for details.
Page 67: Figure 50 Maintenance Box
2. Click the Convert tab. Figure 51 Maintenance—Convert Tab 3. Enter the IP address of mobility controller in the IP Address of Mobility Controller text box. Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Managing IAPs | 67...
Page 68: Rebooting The Iap
3. In the IAP list, select the IAP that you want to reboot and click Reboot selected Access Point. To reboot all the IAPs in the network, click Reboot All. 68 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 69: Firmware Image Server In Cloud Network
The image check feature allows the IAP to discover new software image versions on a cloud-based image server hosted by Dell. The location of the image server is fixed and cannot be changed by the user. Dell takes care of managing the image server, and ensures that the image server is loaded with latest versions of ArubaOS software for its products.
Page 70: Automatic Firmware Image Check And Upgrade
Depending on the progress and success of the upgrade, one of the following messages will be displayed: Upgrading—While image upgrading is in progress.  Upgrade successful -When the upgrading is successful.  Upgrade fail -When the upgrading fails.  70 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 71: Manual Firmware Image Check And Upgrade
Upgrading—While image upgrading is in progress.  Upgrade successful—When the upgrading is successful.  Upgrade fail—When the upgrading fails.  Figure 59 Manual Image Check Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Managing IAPs | 71...
Page 72 72 | Managing IAPs Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 73: Chapter 6 Ntp Server
Network Time Protocol (NTP) is required to obtain the precise time from a server and to regulate the local time in each network element. If NTP server is not configured in the Dell Instant network, an IAP reboot may lead to variation in time and data.
Page 74 74 | NTP Server Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 75: Chapter 7 Virtual Controller
Virtual Controller IP Address You can specify a single static IP address that can be used to manage a multi-AP Dell Instant network. This IP address is automatically provisioned on a shadow interface on the IAP that takes the role of a Virtual Controller.
Page 76: Configuring The Dhcp Server
6. Select Minutes, Hours, or Days for the lease time from the drop-down list next to Lease time. Figure 62 Configuring the DHCP Server 7. Click Ok to apply the changes. 76 | Virtual Controller Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 77: Chapter 8 Authentication
NOTE: A NAS acts as a gateway to guard access to a protected resource. A client connecting to the wireless network first connects to the NAS. The Dell Instant network supports internal RADIUS server and external RADIUS server for 802.1x authentication.
Page 78: External Radius Server
NOTE: Dell Instant does not ship with any 802.1x server certificate. EAP-TTLS and EAP-PEAP support is not available until the administrator uploads a valid 802.1x server certificate to the Dell Instant network. By default, the 802.1x authentication is limited to LEAP only.
Page 79: Configuring An External Radius Server
(objectclass=*). Key Attribute: Indicates the attribute that should be used as a key in search for the LDAP server. For  Active Directory, the value is sAMAccountName. Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Authentication | 79...
Page 80: Enabling Instant Radius
IP Address of the Virtual Controller for communication with external RADIUS servers. You must set the Virtual Controller IP address as a NAS client in the RADIUS server if Dynamic RADIUS Proxy is enabled. 80 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 81: Radius Server Authentication With Vsa
 Acct-Authentic  Acct-Delay-Time  Acct-Input-Gigawords  Acct-Input-Octets  Acct-Input-Packets  Acct-Link-Count  Acct-Multi-Session-Id  Acct-Output-Gigawords  Acct-Output-Octets  Acct-Output-Packets  Acct-Session-Id  Acct-Session-Time  Acct-Status-Type  Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Authentication | 81...
Page 82  Expiration  Fall-Through  Filter-Id  Framed-AppleTalk-Link  Framed-AppleTalk-Network  Framed-AppleTalk-Zone  Framed-Compression  Framed-IP-Address  Framed-IP-Netmask  Framed-IPX-Network  Framed-MTU  Framed-Protocol  Framed-Route  82 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 83  Server-Name  Service-Type  Session-Timeout  Simultaneous-Use  State  Strip-User-Name  Suffix  Termination-Action  Termination-Menu  Tunnel-Assignment-Id  Tunnel-Client-Auth-Id  Tunnel-Client-Endpoint  Tunnel-Connection-Id  Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Authentication | 83...
Page 84: Management Authentication Settings
RADIUS server w/ fallback to internal—Specify the radius servers as well as a Username and Password. If  there is no response from the RADIUS server (RADIUS server timeout), the authentication will switch to “Internal”. Figure 65 Management Authentication Settings 4. Click OK. 84 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 85: Captive Portal
Captive Portal Dell Instant network supports captive portal authentication method for a Guest network type. In this method, a web page is displayed to a guest user who tries to access the internet. The user has to authenticate or accept company's network usage policy in the web page.
Page 86: Configuring Internal Captive Portal Authentication When Editing A Guest Network
1. Enter a name for the network in the Name (SSID) text box. 2. Select Guest and then click Next. 3. In the Security tab, select Internal—Authenticated under the splash page type. 86 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 87: Customizing A Splash Page
3. To change the policy text, click the second square in the splash page, type the required text in the Policy text box, and click OK. The policy text should not exceed 255 characters. Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Authentication | 87...
Page 88: Disabling Captive Portal Authentication
2. Click the edit link. The Edit box for the network appears. 3. Click Next and clear the Splash page check box in the Security tab. Figure 70 Disabling Captive Portal Authentication 4. Click Next and click Finish. 88 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 89: External Captive Portal
External Captive Portal Dell Instant supports external captive portal authentication. The external portal can be in a cloud or on a server outside the enterprise network. Configuring External Captive Portal Authentication when Adding a Guest Network To configure external captive portal authentication when adding a guest network, perform the following steps: 1.
Page 90: Configuring External Captive Portal Authentication When Editing A Guest Network
7. Click Next and click Finish. External Captive Portal Authentication via Dell PowerConnect W-ClearPass GuestConnect You can now configure Instant to point to Dell PowerConnect W-ClearPass GuestConnect as an external Captive Portal server. User authentication is performed by: Matching a string in the server response ...
Page 91: Configuring The Radius Server In Instant
3. Click Next to continue. 4. In the Security tab, select External and update the following fields. a. Enter the IP address of the Dell PowerConnect W-ClearPass GuestConnect server in the IP or hostname field. The IP address is 10.65.77.245.
Page 92: Figure 73 Configuring Mac Authentication
NAS identifier: Use this to configure strings for RADIUS attribute 32, NAS Identifier, to be sent with RADIUS requests to the RADIUS server. 5. Click OK to continue. Figure 73 Configuring Mac Authentication 6. Click Next and click Finish. 92 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 93: Walled Garden Access
 www.apple.com/library/test will only allow subset of www.apple.com site corresponding to path /library/  test/* favicon.ico will allow access to /favicon.ico from all domains.  Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Authentication | 93...
Page 94: Certificates
DER i.e. CA Certs for TLS termination  Loading Certificates To load a certificate, perform the following steps: 1. Navigate to the Maintenance > Certificates page. Figure 75 Loading Certificates 94 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 95: Figure 76 New Certificate
5. If you have selected Server certificate type, then enter a passphrase in Passphrase and reconfirm. 6. Click Browse and select the appropriate certificate file, and click Upload Certificate. Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Authentication | 95...
Page 96 96 | Authentication Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 97: Chapter 9 Encryption
Encryption Types Supported in Dell Instant Encryption is the process of converting data into an undecipherable format or code when it is transmitted on a network. Encryption prevents unauthorized use of the data. The following encryption types are supported in Dell Instant: Though WEP is an authentication method, it is also an encryption algorithm where all users typically share the same key.
Page 98: Understanding Wpa And Wpa2
Voice Network or Handheld devices 802.1X or PSK as supported by the AES if possible, TKIP or WEP if device necessary (combine with restricted policy enforcement firewall (PEF) user role). 98 | Encryption Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 99: Chapter 10 Role Derivation
Chapter 10 Role Derivation Every client in an Dell Instant network is associated with a user role, which determines the client’s network privileges, how often it must re-authenticate, and which bandwidth contracts are applicable. This chapter describes creating and assigning roles using the Instant UI.
Page 100: Creating Role Assignment Rules
 4. enter the string to match in the String text box. 5. Select the appropriate role from the Role drop-down list. 6. Click OK. 100 | Role Derivation Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 101: Figure 79 Creating Role Assignment Rules
Figure 79 Creating Role Assignment Rules Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Role Derivation | 101...
Page 102 102 | Role Derivation Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 103: Chapter 11 Instant Firewall
Dell Instant implements the Instant Firewall feature that uses a simplified firewall policy language. An administrator can define the firewall policies on an SSID or wireless network such as the Guest network or an Employee network.
Page 104 Session Initiation Protocol-Transmission Control Protocol sip-udp Session Initiation Protocol-User Datagram Protocol smb-tcp Server Message Block-Transmission Control Protocol smb-udp Server Message Block-User Datagram Protocol smtp Simple mail transfer protocol 104 | Instant Firewall Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 105: Destination Options
To define allow TCP service access rule to a particular network, perform the following steps: a. Click New, the New Rule box appears. b. Select Allow from the Action drop-down list. Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Instant Firewall | 105...
Page 106: Allow Pop3 Service To A Particular Server
3. Select pop3 from the Service drop-down list. 4. Select to a particular server from the Destination drop-down list and enter appropriate IP address in the IP text box. 5. Click OK. 106 | Instant Firewall Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 107: Deny Ftp Service Except To A Particular Server
4. Select except to a particular server from the Destination drop-down list and enter appropriate IP address in the IP text box. 5. Click OK 5. Click Finish Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Instant Firewall | 107...
Page 108: Deny Bootp Service Except To A Particular Network
4. Select except to a network from the Destination drop-down list. Enter appropriate IP address in the IP text box.  Enter appropriate netmask in the Netmask text box.  5. Click OK. 5. Click Finish. 108 | Instant Firewall Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 109: Figure 84 Defining Rule-Deny Bootp Service Except To A Particular Network
Figure 84 Defining Rule—Deny bootp Service Except to a Particular Network Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Instant Firewall | 109...
Page 110 110 | Instant Firewall Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 111: Chapter 12 Content Filtering
Chapter 12 Content Filtering Dell Instant uses OpenDNS to implement the Content Filtering feature. OpenDNS is a Domain Name System (DNS) resolution service provider. It offers features such as misspelling correction, phishing protection, and opendns.com/. integrated web content filtering. For more information on OpenDNS, refer to The Content Filtering feature allows you to create internet access policies that allow or deny user access to websites based on the website categories and security ratings.
Page 112: Enterprise Domains
Figure 85 Enabling Content Filtering The content filtering configuration applies to all the IAPs in the Dell Instant network and the service is enabled or disabled globally across all the wireless networks that are configured in the Dell Instant. Enterprise Domains The Enterprise Domain Names displays all the DNS domain names valid on the enterprise network.
Page 113: Chapter 13 Os Fingerprinting
OS Fingerprinting The OS Fingerprinting feature gathers information about the client that is connected to the Dell Instant network to find the operating system that the client is running on. The following is a list of advantages of this feature: Identifying rogue clients—Helps to identify clients that are running on forbidden operating systems.
Page 114 114 | OS Fingerprinting Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 115: Chapter 14 Adaptive Radio Management
ARM Features This section describes ARM features that are available in Dell Instant. Channel or Power Assignment This feature automatically assigns channel and power settings for all the IAPs in the network according to changes in the RF environment.
Page 116: Airtime Fairness Mode
AP capabilities. In the event that an AP is configured for a Min Tx EIRP setting it cannot support, this value will be reduced to the highest supported power setting. The default value is18 dBm. 116 | Adaptive Radio Management Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 117: Max Transmit Power
ARM-assigned channel to provide a snapshot of the current RF health state. Configuring Administrator Assigned Radio Settings for IAP ARM is enabled on Dell Instant by default. It automatically assigns appropriate channel and power for the IAPs. To manually configure radio settings using the Instant UI, perform the following steps: 1.
Page 118: Figure 89 Configuring Administrator Assigned Radio Settings For Iap
6. Select appropriate channel number from the Channel drop-down list for both 2.4 GHz and 5 GHz band sections. 7. Enter appropriate transmit power value in the Transmit power text box in 2.4 GHz and 5 GHz band sections. 8. Click OK. 118 | Adaptive Radio Management Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 119: Configuring Radio Profiles In Instant
Configuring Radio Profiles in Instant Dell Instant supports radio profile configuration. The radio settings are available for both the 2.4-GHz and the 5- GHz radio profiles. You can configure the radios separately, using the parameters described in table on each radio.
Page 120 When set to Static, the access point will set its CCA threshold to the value specified in Channel reuse threshold. Channel reuse threshold When set to Static, this value specifies the tolerable interference that must be maintained. 120 | Adaptive Radio Management Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 121: Chapter 15 Intrusion Detection System
Rogue AP Detection and Classification The most important IDS functionality offered in the Dell Instant network is the ability to detect rogue APs, interfering APs, and other devices that can potentially disrupt network operations. An AP is considered to be a rogue AP if it is both unauthorized and plugged into the wired side of the network.
Page 122: Figure 92 Wireless Intrusion Protection-Detection
 Detect Adhoc networks using VALID SSID: Valid SSID list will be auto- configured based on Instant AP configuration  Detect Malformed Frame: Large Duration 122 | Intrusion Detection System Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 123: Table 16 Infrastructure Detection Policies
Detect EAP Rate Anomaly   Detect Rate Anomaly  Detect Chop Chop Attack Detect TKIP Replay Attack  IDS Signature:Air Jack   IDS Signature: ASLEAP Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Intrusion Detection System | 123...
Page 124: Figure 93 Wireless Intrusion Protection-Protection
The following table describes the detection policies that are enabled in Client Protection Custom settings box. Table 19 Client Protection Policies Detection Level Detection Policy All detection policies are disabled  Protect Valid Station High  Protect Windows Bridge 124 | Intrusion Detection System Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 125: Containment Methods
You can enable wired and wireless containments to prevent unauthorized stations from connecting to your Instant network. Instant supports the following types of containment mechanisms: Wired containment—When enabled, Dell Access Points will generate ARP packets on the wired network to  contain wireless attacks.
Page 126 126 | Intrusion Detection System Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 127: Chapter 16 Snmp
Dell Instant supports versions 1, 2c, and 3 of Simple Network Management Protocol (SNMP) for reporting purposes only. In other words, SNMP cannot be used for setting values in an Dell system in the current IAP. SNMP Parameters for IAP You can configure the following parameters for IAP.
Page 128: Figure 95 Creating Community Strings For Snmpv1 And Snmpv2
9. To edit the details for a particular user, select the user and click Edit. 10. To delete a particular user, select the user and click Delete. 128 | SNMP Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 129: Snmp Traps
Figure 96 Creating Users for SNMPV3 SNMP Traps Dell Instant supports the configuration of external trap receivers in the Instant UI. Only the IAP acting as the Virtual Controller will generate traps. The OID of the traps is 1.3.6.1.4.1.14823.2.3.3.1.200.2.X. Figure 97 SNMP Traps To configure an SNMP trap receiver, follow this procedure.
Page 130 NOTE: Dell PowerConnect W-Series-specific management information bases (MIBs) describe the objects that can be managed using SNMP. See the Dell PowerConnect W-Series Instant Access Point MIB Reference Guide for information about the Dell PowerConnect W-Series and Aruba MIBs and SNMP traps.
Page 131: Chapter 17 Airwave Integration And Management
IAPs, and diagnose problems from any Internet connection. Dell IAPs communicate with AirWave using the HTTPS protocol. This allows an AirWave server to be deployed in the cloud across a NAT device such as a router.
Page 132: Template Based Configuration
RF Visualization support for Dell Instant Airwave supports RF visualization for Dell Instant. The VisualRF module is an add-on to the AirWave Wireless Management Suite that provides a real-time picture of the actual radio environment of your wireless network and 132 | Airwave Integration and Management Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 133: Configuring Airwave
Creating your Organization String The Organization String is a set of colon-separated strings created by the AirWave administrator to accurately represent the deployment of each Dell Instant system. This string is entered into the Dell Instant UI by the on- site installer.
Page 134: Entering The Organization String And Amp Information Into The Iap
You can configure this only if the Airwave is not configured earlier or have deleted the precedent configuration. On the DHCP server, the format for option 60 is “ArubaInstantAP”, and the format for option 43 is “ams-ip, ams- key”. 134 | Airwave Integration and Management Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 135: Chapter 18 Monitoring
Virtual Controller View The Virtual Controller view is the default view.This view allows you to monitor the Dell Instant network. The following Instant UI elements are available in this view: Tabs—Contains three tabs: Networks, Access Points, and Clients. For detailed information about the tabs, ...
Page 136: Monitoring Link
RF Dashboard The RF Dashboard section displays the following information: IP address, Signal, and Speed information about the clients in the Dell Instant network. If the speed or signal  strength of a client is low, IP address of the client appears as a link. Click the link to monitor the client. For more information, see “Client View”...
Page 137: Client Alerts Link
Virtual the last 15 minutes. Controller at 11:43 hours. To see the exact number of clients in the Dell  Instant network at a particular time, hover the cursor over the graph line.
Page 138: Network View
Network View All Wi-Fi networks in the Dell Instant network are listed in the Networks tab. Click the network that you want to monitor. Network View for the selected network appears. Similar to the Virtual Controller view, the Network view also has three tabs: Networks, Access Points, and Clients.
Page 139: Usage Trends
15 minutes. association. The Network view appears.  To see the exact number of clients in the Dell 3. Study the Clients graph in the Usage Trends Instant network at a particular time, hover the pane. For example, the graph on the left shows cursor over the graph line.
Page 140: Instant Access Point View
Instant Access Point View All IAPs in the Dell Instant network are listed in the Access Points tab. Click the IAP that you want to monitor. Access Point view for that IAP appears.
Page 141: Info
2.4 GHz Frames  Figure 108 2.4 GHz Frames Graph Noise Floor  Errors  To see the graphs for the 5 GHz band, click the 5 GHz link. Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Monitoring | 141...
Page 142: Table 23 Instant Access Point View-Rf Trends Graphs And Monitoring Procedures
NOTE: You can also click the rectangle icon under the Noise column in the RF Dashboard pane to see the Noise graph for the selected IAP. 142 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 143: Usage Trends
IAP for the last 15 minutes. To see the exact throughput of the selected IAP at a particular time, hover the cursor over the graph line. Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Monitoring | 143...
Page 144: Client View
Client View In the Virtual Controller view, all clients in the Dell Instant network are listed in the Clients tab. Click the IP address of the client that you want to monitor. Client view for that client appears. The Client view has three tabs: Networks, Access Points, and Clients.
Page 145: Rf Trends
The RF Trends section displays the following graphs for the selected client: Signal  Figure 110 Signal Graph Frames  Figure 111 Frames Graph Speed  Figure 112 Speed Graph Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Monitoring | 145...
Page 146: Figure 113 Throughput Graph
Maximum, and Average statistics for the In, Out, Retries In, and Retries Out frames. To see the exact frames at a particular time, hover the cursor over the graph line. 146 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 147: Mobility Trail
Access Point—IAP name with which the client was associated.  NOTE: Mobility information about the client is reset each time it roams from one IAP to another. Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Monitoring | 147...
Page 148 148 | Monitoring Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 149: Chapter 19 Alert Types And Management
Alert Types Alerts are generated when a user encounters problems while accessing or connecting to the Wi-Fi network. These alerts enable you to troubleshoot the problems. The alerts that are generated on Dell Instant can be categorized as follows: 802.11 related association and authentication failure alerts.
Page 150 DHCP request timed out This client did not receive a response to Check the status of the DHCP server in its DHCP request in time. the network. 150 | Alert Types and Management Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 151: Chapter 20 User Database
User Database In Dell Instant, the user database consists of a list of guest and employee users. Addition of a user involves specifying a username and password for the user. The login credentials for these users are provided outside the Dell Instant system.
Page 152: Editing User Settings
To delete all users or multiple users at a time, select the usernames that you want to delete, and click Delete All. NOTE: Deleting a user only removes the user record from the user database, and won't disconnect the online user under this username. 152 | User Database Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 153: Chapter 21 Regulatory Domain
The channels that can be used in a particular country differ based on the regulations of that country. The initial Wi-Fi setup requires you to specify the country code for the country in which the Dell Instant will operate. This configuration sets the regulatory domain for the radio frequencies that the IAPs use. Within the regulated transmission spectrum, a high-throughput 802.11a, 802.11b/g, or 802.11n radio setting can be...
Page 154: Country Codes List
Republic of Korea (South Korea) China France Hong Kong Singapore Taiwan Brazil Israel Saudi Arabia Lebanon United Arab Emirates South Africa Argentina Australia Austria Bolivia Chile Greece 154 | Regulatory Domain Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 155 Thailand Uruguay Panama Russia Kuwait Liechtenstein Lithuania Mexico Morocco New Zealand Poland Puerto Rico Slovak Republic Slovenia Thailand Uruguay Panama Russia Egypt Trinidad and Tobago Turkey Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Regulatory Domain | 155...
Page 156 Serbia and Montenegro Indonesia Peru Venezuela Jamaica Bahrain Oman Jordan Bermuda Colombia Dominican Republic Guatemala Philippines Sri Lanka El Salvador Tunisia Islamic Republic of Pakistan Qatar Algeria 156 | Regulatory Domain Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...
Page 157: Appendix A Abbreviations
Network Access Server Network Address Translation Name Server Network Time Protocol PEAP Protected Extensible Authentication Protocol Privacy Enhanced Mail Power over Ethernet RADIUS Remote Authentication Dial In User Service Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide Abbreviations | 157...
Page 158 Table 28 List of abbreviations (Continued) Abbreviation Expansion Virtual Controller Vendor-Specific Attributes WLAN Wireless Local Area Network 158 | Abbreviations Dell PowerConnect W-Series Instant Access Point 6.1.2.3-2.0.0.0 | User Guide...

This manual is also suitable for:

Powerconnect w-iap3wn Powerconnect w-series

Dell PowerConnect W-IAP175P User Manual

Chapter 1 Initial Configuration

Chapter 2 Instant User Interface

Chapter 3 Wireless Network

Chapter 4 Mesh Network

Chapter 5 Managing Iaps

Chapter 6 NTP Server

Chapter 7 Virtual Controller

Chapter 8 Authentication

Chapter 9 Encryption

Chapter 10 Role Derivation

Chapter 11 Instant Firewall

Chapter 12 Content Filtering

Chapter 13 OS Fingerprinting

Chapter 14 Adaptive Radio Management

Chapter 15 Intrusion Detection System

Chapter 16 SNMP

Chapter 17 Airwave Integration and Management

Chapter 18 Monitoring

Quick Links

Related Manuals for Dell PowerConnect W-IAP175P

Summary of Contents for Dell PowerConnect W-IAP175P

This manual is also suitable for:

Table of Contents