Dell PowerConnect W-IAP3WN/P Manual de usuario descargar pdf (Pagina 229)

V 12.12.2.0/24 [10/0] ipsec map

V 12.12.12.0/25 [10/0] ipsec map

V 12.12.12.32/27 [10/0] ipsec map

V 50.40.40.0/24 [10/0] ipsec map

V 51.41.41.128/25 [10/0] ipsec map

V 53.43.43.32/27 [10/0] ipsec map

V 54.44.44.16/28 [10/0] ipsec map

C 9.9.9.0/24 is directly connected, VLAN9

C 10.15.148.0/24 is directly connected, VLAN1

C 43.43.43.0/24 is directly connected, VLAN132

C 42.42.42.0/24 is directly connected, VLAN123

C 44.44.44.0/24 is directly connected, VLAN125

C 182.82.82.12/32 is an ipsec map 10.15.149.69-182.82.82.12

C 182.82.82.14/32 is an ipsec map 10.17.87.126-182.82.82.14

VPN Configuration

The following VPN configuration steps on the controller enable the W-IAPs to terminate their VPN connection on the

controller:

Whitelist Database Configuration

The whitelist database is a list of the MAC addresses of the W-IAPs that are allowed to establish VPN connections

with the controller. This list can be either stored in the controller database or on an external server.

You can use the following CLI command to configure the whitelist database entry if the controller is acting as the

whitelist database:

(host)# whitelist-db rap add mac-address 00:11:22:33:44:55 ap-group test

The ap-group parameter is not used for any configuration, but needs to be configured. The parameter can be any

valid string.

If an external server is used as the location for the whitelist database, add the MAC addresses of the valid W-IAPs in

the external database or external directory server and then configure a RADIUS server to authenticate the W-IAPs

using the entries in the external database or external directory server.

If you are using the Windows 2003 server, perform the following steps to configure the external whitelist database on

it. There are equivalent steps available for the Windows Server 2008 and other RADIUS servers.

1. Add the MAC addresses for all the W-IAPs in the Active Directory of the RADIUS server:

a. Open the Active Directory and Computers window, add a new user and specify the MAC address (without

the colon delimiter) of the W-IAP for the user name and password.

b. Right-click the user that you have just created and click Properties.

c. In the Dial-in tab, select Allow access in the Remote Access Permission section and click OK.

d. Repeat Step a through Step b for all W-IAPs.

2. Define the remote access policy in the Internet Authentication Service:

a. In the Internet Authentication Service window, select Remote Access Policies.

b. Launch the wizard to configure a new remote access policy.

c. Define filters and select grant remote access permission in the Permissions window.

d. Right-click the policy that you have just created and select Properties.

e. In the Settings tab, select the policy condition, and Edit Profile....

f. In the Advanced tab, select Vendor Specific, and click Add to add new vendor specific attributes.

g. Add new vendor specific attributes and click OK.

h. In the IP tab, provide the IP address of the W-IAP and click OK.

Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide IAP-VPN Deployment | 229

1 2 ... 224 225 226 227 228 229 230 231 232 233 234 ... 376 377

Comentarios a estos manuales

Sin comentarios

Dell PowerConnect W-IAP3WN/P Manual de usuario Pagina 229

Comentarios a estos manuales

Relacionado con productos y manuales para Redes Dell PowerConnect W-IAP3WN/P