Dell PowerConnect W Clearpass 100 Software Guía de usuario Pagina 225
- Pagina / 296
- Tabla de contenidos
- SOLUCIÓN DE PROBLEMAS
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
AOS-W Instant 6.2.1.0-3.3| User Guide IAP-VPN Configuration | 225
Chapter 22
IAP-VPN Configuration
Alcatel-Lucent switches provide an ability to terminate the IPSec and GRE VPNtunnels from the OAW-IAP and
provide corporate connectivity to the branch network.
This section describes the following topics:
l Overview on page 225
l VPN Configuration on page 226
l Viewing Branch Status on page 227
Overview
This section provides a brief summary of the features supported by the switches to allow VPN termination from an
OAW-IAP.
Termination of IPSec and GRE VPNTunnels
OAW-IAPscan terminate VPN tunnels on Switch. The IAP cluster creates an IPSec or GRE VPNtunnel from the
Virtual Controller to a Mobility Switch in your corporate office. The switch only acts an IPSec or GRE VPN end-point
and it does not configure the OAW-IAP. For more information on how to create an IPSec or GREVPN tunnel, see
VPN Configuration on page 221.
L2/L3 Forwarding Modes
The Virtual Controller enables different DHCP pools (various assignment modes) in addition to allocating IP subnets
for each branch. The Virtual Controller allows different modes of forwarding of traffic from the clients on a VLAN with
a VPN tunnel. The forwarding modes are associated with various modes of DHCP address assignment modes. For
more information on DHCP assignment modes and configuring DHCP scope for IAP-VPN, see Understanding
DHCP Assignment Modes on page 213.
The following DHCP modes are supported:
l NAT Mode: In this mode, the source IP for all client traffic is translated. The traffic destined for the corporate
network is translated using the VPN tunnel IP address of the OAW-IAP and is forwarded through the IPsec VPN
tunnel. The traffic destined for the non-corporate network is translated using the IP address of the IAP and is
forwarded through the uplink.
When the NAT mode is used for forwarding client traffic, hosts on the corporate network cannot establish
connections to the clients on the OAW-IAP, because the source address of the clients is translated.
l L2 Switching Mode: In this mode, the traffic destined for the corporate network is bridged through the VPN
tunnel to the switch and the destined for the non-corporate network is translated using the IP address of the
OAW-IAP and is forwarded through the uplink.
When an OAW-IAP registers with the switch, and is configured to use the L2 DHCP address assignment mode,
the switch automatically adds the VPN tunnel associated to this OAW-IAP into the VLAN multicast table. This
allows the clients connecting to the L2 mode VLAN to be part of the same L2 broadcast domain on the switch.
l L3 Routing Mode: In this mode, the traffic destined for the corporate network is routed through the VPN tunnel to
the switch and the traffic destined for the non corporate network is translated using the IP address of the OAW-
IAP and is forwarded through the uplink.
- AOS-W Instant 1
- 6.2.1.0-3.3 1
- User Guide 1
- Contents 3
- Mesh OAW-IAP Configuration 75 6
- Wireless Network Profiles 79 7
- Uplink Configuration 95 8
- Wired Profiles 109 8
- Authentication 117 9
- 1010 10
- Roles and Policies 155 12
- Spectrum Monitor 183 14
- Adaptive Radio Management 191 15
- Intrusion Detection 201 15
- Content Filtering 209 15
- DHCP Configuration 213 16
- VPN Configuration 221 16
- IAP-VPN Configuration 225 16
- AirGroup Configuration 241 17
- Hotspot Profiles 251 18
- OAW-IAP Management 263 19
- Regulatory Domain 281 20
- ClearPass Guest Setup 286 20
- Terminology 291 20
- Related Documents 21
- Conventions 21
- Intended Audience 21
- Contacting Support 22
- AOS-W Instant Overview 23
- AOS-W Instant UI 24
- AOS-W Instant CLI 24
- New Features in 6.2.1.0-3.3 25
- Setting up Instant Network 27
- Assigning a Static IP 28
- OAW-IAP Cluster 28
- 9600 8 None 1 None 29
- Accessing the Instant CLI 30
- Sequence-Sensitive Commands 32
- Chapter 6 33
- AOS-W Instant User Interface 33
- Networks Tab 34
- Access Points Tab 34
- Clients Tab 35
- New Version Available 35
- Security 38
- Maintenance 39
- Figure 8 VPN - Default View 41
- Monitoring 44
- RF Dashboard Icons 46
- Icon Name Description 47
- RF Trends 47
- Figure 16 Signal Graph 47
- Spectrum 53
- Types of Alerts 54
- Alerts List 55
- Configuration 57
- AirGroup 57
- Language 58
- OmniVista 3600 Setup 58
- Pause/Resume 58
- 0511361-01 60
- Chapter 7 61
- Modifying the OAW-IAP Name 62
- Configuring External Antenna 63
- Upgrading an OAW-IAP 64
- Upgrading an Image Using CLI 66
- Enabling Terminal Access 67
- Enabling Auto Join Mode 67
- Configuring a Preferred Band 68
- Configuring an NTP Server 70
- 0511361-01 72
- Virtual Controller Overview 73
- Mesh Network Overview 75
- Mesh Points 76
- 0511361-01 78
- Chapter 10 79
- Wireless Network Profiles 79
- VLAN Pooling 83
- Enabling the Extended SSID 93
- Editing a WLAN SSID Profile 94
- Deleting a WLAN SSID Profile 94
- Chapter 11 95
- Uplink Configuration 95
- Ethernet Uplink 96
- 3G/4G Uplink 97
- List of Supported 3G Modems 98
- Configuring Uplinks 99
- In the Instant UI 100
- In the CLI 100
- 102102 102
- Enforcing Uplinks 104
- Setting an Uplink Priority 104
- Enabling Uplink Preemption 105
- 106106 106
- 0511361-01 108
- Configuring a Wired Profile 109
- 112112 112
- Deleting a Wired Profile 116
- Editing a Wired Profile 116
- Chapter 13 117
- Authentication 117
- 118118 118
- External RADIUS Server 119
- Internal RADIUS Server 119
- WPA and WPA2 120
- WPA and WPA2 Features 121
- Access-Accept 121
- 122122 122
- Parameter Description 125
- Table 20: 125
- Management Interface 127
- Configuring Users 129
- 136136 136
- 140140 140
- RADIUS Services 141
- Field Description 143
- Table 23: 143
- Blacklisting Clients 148
- Blacklisting Clients Manually 149
- Uploading Certificates 150
- 152152 152
- OAW-IAP 153
- 0511361-01 154
- Chapter 14 155
- Roles and Policies 155
- Service Description 156
- Destination Options 157
- Configuring Access Rules 158
- Configuring Source NAT 159
- Examples for Access Rules 160
- Configuring ALG Protocols 162
- Configuring User Roles 165
- MAC-Address Attribute 167
- 802.1X-Authentication-Type 167
- Understanding VLAN Assignment 168
- Supported VSAs 170
- 172172 172
- VLAN Derivation Rule 173
- User Role 173
- VLANs Created for an SSID 174
- Creating a User VLAN Role 175
- 176176 176
- 4. Click OK 177
- 0511361-01 178
- Layer-3 Mobility Overview 179
- Configuring L3-Mobility 180
- 0511361-01 182
- Understanding Spectrum Data 183
- Non Wi-Fi Interferers 184
- Non Wi-Fi Interferer Types 185
- Channel Details 186
- Channel Metrics 187
- Spectrum Alerts 188
- ARM Overview 191
- Airtime Fairness Mode 192
- ARM Metrics 193
- To view ARM configuration: 196
- 0511361-01 200
- OS Fingerprinting 201
- 202202 202
- Table 38: 203
- Client Detection Policies 204
- Client Protection Policies 205
- Configuring IDSUsing CLI 206
- 0511361-01 208
- Content Filtering 209
- Enabling Content Filtering 209
- 0511361-01 212
- Chapter 20 213
- DHCP Configuration 213
- Configuring DHCP Scopes 214
- Name Description 215
- Table 42: 215
- DHCP Relay and Option 82 218
- Understanding VPN Features 221
- Configuring Routing Profiles 223
- Overview 225
- VPN Configuration 226
- Viewing Branch Status 227
- IAP Table Parameters 228
- OmniVista 3600 Features 229
- Trending Reports 230
- Intrusion Detection System 230
- Configuring OmniVista 3600 231
- Shared Key 238
- 6. Click OK 239
- 0511361-01 240
- AirGroup Overview 241
- AirGroup with Instant 242
- AirGroup Solution 243
- AirGroup Features 244
- AirGroup Components 245
- To configure AirGroup Service 247
- AirGroup RADIUS client 247
- Creating a RADIUS Server 248
- Assign a Server to AirGroup 248
- Configuring RTLS 249
- To configure Aeroscout RTLS 250
- Chapter 26 251
- Hotspot Profiles 251
- Access Network Types 252
- NAI Realm List 253
- Venue types 253
- 254254 254
- 256256 256
- Configuring a 3GPP Profile 258
- Configuring a Domain Profile 258
- Configuring H2QP Profiles 258
- Configuring a Hotspot Profile 260
- Table 48: 261
- 262262 262
- Configuring LED Display 263
- Restoring Configuration 264
- 266266 266
- Rebooting the OAW-IAP 268
- 0511361-01 270
- Configuring SNMP 271
- Configuring SNMP Traps 274
- Configuring TFTP Dump Server 274
- Configuring a Syslog Server 275
- Viewing Logs 276
- Support Commands 277
- Country Codes List 281
- Code Country Name 282
- ClearPass Guest Setup 286
- Troubleshooting 290
- Acronyms and Abbreviations 291
- List of abbreviations 292
- Glossary 293
- List of Terms 294
Relacionado con productos y manuales para Software Dell PowerConnect W Clearpass 100 Software
Software Dell 735N Manual de usuario
(4 paginas)
(4 paginas)
Software Dell PowerVault 755N Información técnica
(156 paginas)
(156 paginas)
Software Dell Symantec Backup Exec Manual de usuario
(247 paginas)
(247 paginas)
Software Dell Symantec Backup Exec Manual de usuario
(18 paginas)
(18 paginas)
Software Dell Data Protection Manual de usuario
(29 paginas)
(29 paginas)
Software Dell Wake-on-LAN Manual de usuario
(15 paginas)
(15 paginas)
© 2020, manymanuals.es. Todos los derechos reservados | 0.094 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentarios a estos manuales