Page 2
, the registered Aruba the Mobile Edge Company logo, and Aruba Mobility Management System . Dell™, the DELL™ logo, and PowerConnect™ are trademarks of Dell Inc. All rights reserved. Specifications in this manual are subject to change without notice. Originated in the USA. All other trademarks are the property of their respective owners.
Overview of Dell PowerConnect W Configuration in AirWave........... 4 Device Setup > Dell PowerConnect W Configuration Page ..........5 Groups > Dell PowerConnect W Config Page With Global Configuration Enabled ..6 Groups > Dell PowerConnect W Config When Global Configuration is Disabled ... 6 Dell PowerConnect W Configuration Sections in the Tree View ........
Page 4
Changing Adaptive Radio Management (ARM) Settings ..........24 Changing SSID and Encryption Settings ................24 Changing the Dell PowerConnect W AP Group for an AP Device ........24 Using AirWave to Deploy Dell PowerConnect W-Series APs .......... 25 Using General AirWave Device Groups and Folders ............26 Visibility in Dell PowerConnect W Configuration................
Page 5
Security > Server Groups > Windows................. 150 Security > TACACS Accounting................... 150 Security > Time Ranges......................151 Security > User Rules ......................152 Local Config of SNMP Management................... 152 Advanced Services ........................154 Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
ArubaOS on the network and wish to manage it with AirWave Management Platform, or AMP. AirWave versions 6.3 and later support Dell PowerConnect W Configuration. This document provides instructions for using Dell PowerConnect W Configuration and contains the following chapters:...
Contacting Support Web Site Support dell.com Main Website support.dell.com Support Website support.dell.com/manuals Documentation Website 2 | Preface Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
NOTE: AirWave supports Dell PowerConnect W AP Groups which should not be confused with standard AirWave Device Groups. This document provides information about the configuration and use of Dell PowerConnect W AP Groups, and describes how Dell PowerConnect W AP Groups interoperate with standard AirWave Device Groups.
not supported by an older version will not be configured on controllers running that version. You can provision thin APs from the AP/Devices > Manage page. You can move APs into Dell PowerConnect W AP Groups from the Modify Devices option on the APs/Devices > List page.
Device Setup > Dell PowerConnect W Configuration Page NOTE: This page is not available if Use Global Dell PowerConnect W Configuration is disabled in AMP Setup > General. The Device Setup > Dell PowerConnect W Configuration page displays the expandable navigation pane shown...
Groups > Dell PowerConnect W Config When Global Configuration is Disabled If Use Global Dell PowerConnect W Configuration in AMP Setup > General is set to No, the Groups > Dell PowerConnect W Config page can be used to manage two or more distinctive configuration strategies using the same tree navigation as the Device Setup >...
Advanced Services Section NOTE: Only Dell PowerConnect W AP Groups, AP Overrides, and WLANs contain custom-created items in the navigation pane. For the remainder of this document, the navigation Dell PowerConnect W Configuration > refers to the tree view in Device Setup or Groups tabs, depending on whether global or group configuration is enabled.
The Dell PowerConnect W Configuration > Dell PowerConnect W AP Groups page displays all current Dell PowerConnect W AP groups. AP Override allows you to change some parameters for any specific device without having to create an Dell ...
Profiles Section Profiles provide a way to organize and deploy groups of configurations for Dell PowerConnect W AP Groups, WLANs, and other profiles. Profiles are assigned to folders; this establishes visibility to Dell PowerConnect W AP Groups and WLAN settings. Access Profiles with Dell PowerConnect W Configuration > Profiles, illustrated in...
The following general guidelines apply to Security profiles in Dell PowerConnect W configuration: Roles can have multiple policies; each policy can have numerous roles. Server groups are comprised of servers and rules. Security rules apply in Dell PowerConnect W Configuration in the same way as deployed in ArubaOS.
You can create controller overrides for entire profiles or a specific profile setting per profile. This allows you to avoid creating new profiles or Dell PowerConnect W AP Groups that differ by one more settings. Controller overrides can be added from the controller's APs/Devices > Manage page.
Customize settings to include/ignore during configuration audits View any mismatches Groups > Basic Page The Groups > Basic page deploys the following aspects of Dell PowerConnect W Configuration: 12 | Dell PowerConnect W Configuration in AirWave Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
AirWave allows you to add or reconfigure many configuration profiles while guiding you through a larger configuration sequence for an Dell PowerConnect W AP Group or WLAN. Consider the following example: When you create a new Dell PowerConnect W AP Group from the Device Setup > Dell PowerConnect W ...
Save—This button saves a configuration but does not apply it, allowing you to return to complete or apply the configuration at a later time. If you use this button, you may see the following alert on other Dell PowerConnect W Configuration pages. You can apply the configuration when all changes are complete at a later time.
AirWave removes the configuration of the controller before you have a chance to import the configuration, and this would remove critical network configuration and status. 4. Navigate to the AP/s/Devices > Audit page for the first controller to prepare for importing an existing Dell PowerConnect W-Series controller configuration file.
Page 22
PowerConnect W AP Groups that appear on the Groups > Dell PowerConnect W Config page. The folder for all the Profiles and Dell PowerConnect W AP Groups is set to the top folder of the AirWave user who imports the configuration. This folder is Top in the case of managing administrators with read/write privileges.
Page 23
W AP Groups Procedures and Guidelines” on page 21 8. Add or edit WLANs in Dell PowerConnect W Configuration as required. a. Navigate to the Dell PowerConnect W Configuration > WLANs page. This page can display all WLANs currently configured, or can display only selected WLANs.
Page 24
“Supporting APs with Dell PowerConnect W Configuration” on page 24 12. Each AP can be assigned to a single Dell PowerConnect W AP Group. Make sure to choose an AP Group that has been configured on that controller using that controller’s AirWave Group. Use the APs/Devices > List, Modify Devices field and the APs/Devices >...
System > Status page. For additional information, refer to the Dell PowerConnect W-AirWave 7.5 User Guide at support.dell.com/manuals. To resolve communication issues, review the credentials on the APs/Devices > Manage page.
You modify devices in Dell PowerConnect W AP Groups with the APs/Devices > List page, clicking Modify Devices. This is the page where you assign devices to a given group and Dell PowerConnect W AP Group. Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
“Dell PowerConnect W AP Groups” on page 32. 3. Click Add or Save to finish creating or editing the Dell PowerConnect W AP Group. Click Cancel to exit this screen and to cancel the AP Group configurations. 4. New AP groups appear in the AP Groups section of the Dell PowerConnect W Configuration navigation pane, and clicking the group name takes you to the Details page for that group.
You can determine additional details about what is specific to each controller by reviewing information on the Groups > Dell PowerConnect W Config page, and the Groups > Monitor page for any specific AP that lists its master and standby master controller.
Changing Adaptive Radio Management (ARM) Settings You can adjust ARM settings for the radios of a particular Dell PowerConnect W AP Group. To do so, refer to the following topics that describe ARM in relation to Dell PowerConnect W AP groups and device-level radio settings: “Configuring Dell PowerConnect W AP Groups”...
The APs/Devices > Manage page appears. 5. In the Settings section of the APs/Devices > Manage page, select the new Dell PowerConnect W AP Group to assign to the device. Change or adjust any additional settings as desired.
Move. NOTE: If the list of Dell PowerConnect W AP Groups are not there, ensure you either create these AP groups manually on the Device Setup > Dell PowerConnect W Configuration page, wherein you merely need the device names and not the settings, or import the configuration from one of your controllers to learn the groups.
Security > User Roles Security > Policies AirWave continues to support the standard operation of folders, users, and user roles as described in the Dell PowerConnect W-AirWave 7.5 User Guide. Defining Visibility for Dell PowerConnect W Configuration...
Page 34
Setup page now displays the new or revised role. 4. As required, add or edit one or more users to manage and support Dell PowerConnect W Configuration. This step creates or edits users to have rights appropriate to Dell PowerConnect W Configuration. This user 28 | Dell PowerConnect W Configuration in Daily Operations Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
Page 35
The user, role, and device folder created with this procedure are now available to configure, manage, and support Dell PowerConnect W Configuration and associated devices according to the visibility defined in this procedure. Any component of this setup can be adjusted or revised by referring to the steps and AirWave pages in this procedure.
Page 36
30 | Dell PowerConnect W Configuration in Daily Operations Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
Guide. NOTE: The default values of profile parameters or functions may differ slightly between ArubaOS releases. Access all pages and field descriptions in this appendix from the Device Setup > Dell PowerConnect W Configuration page, illustrated in Figure 23. The one exception is the additional Groups > Dell PowerConnect W Config page that you access from the standard AirWave navigation menu.
W AP Group. Any Dell PowerConnect W AP Group profiles can define device groups. (Used by) Displays the number of APs in this Dell PowerConnect W AP Group. A detailed list of each AP by name can be displayed by navigating to the Groups > List page and selecting that group.
Page 39
Select Add to create a new Dell PowerConnect W AP Group, or click the pencil icon next to an existing Dell PowerConnect W AP Group to edit that group. The Add/Edit Dell PowerConnect W AP Group page contains the following fields, describes in...
Page 40
Table 3 Dell PowerConnect W Configuration > Dell PowerConnect W AP Groups Details, Settings, and Default Values (Continued) Field Default Description Event Thresholds default Defines error event conditions, based on a customizable percentage of low-speed frames, Profile non-unicast frames, or fragmented, retry or error frames. The drop-down menu displays...
AP device without having to remove that device from an existing Dell PowerConnect W AP Group or create a new Dell PowerConnect W AP Group specifically for that device. The AP Overrides page is for custom AP devices that otherwise comply with most settings in the Dell PowerConnect W AP Group in which it is managed.
Page 42
Used By (Group) Displays the name of and link to the Dell PowerConnect W AP Group in which this AP Override applies. Additional details about the Dell PowerConnect W AP Group appear on the Groups > Dell PowerConnect W Config page when you click the name of the group.
Page 43
Select the pencil icon next to this field to edit or create additional profile settings in the RF > 802.11a/g Radio page of Dell PowerConnect W Configuration. Refer to “Profiles > RF > 802.11a/g Radio” on page 106.
Page 44
SSID when there is congestion on the wireless network, and sets the interval between bandwidth usage reports. This setting pertains specifically to 802.11a. Refer to “Profiles > QoS > Traffic Management” on page 102 38 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
Page 45
Select Add to complete the creation of the new AP Overrides profile, or click Save to preserve changes to an existing AP Overrides profile. The AP Overrides page and the Dell PowerConnect W Configuration navigation pane display the name of the AP Overrides profile.
The Device Setup > Dell PowerConnect W Configuration navigation pane displays custom-configured WLANs and Dell PowerConnect W AP Groups. All other components of the navigation pane are standard across all deployments of Dell PowerConnect W Configuration. You define or modify WLANs on the Device Setup > Dell PowerConnect W Configuration page. Select ...
WLANs > Basic From the Dell PowerConnect W Configuration > WLANs page, click Add to create a new WLAN, or click the pencil icon to edit an existing WLAN, then click Basic. This page provides a streamlined way to create or edit a WLAN.
Page 48
Forceful disassociation of on-hook voice clients Measurement mode for beacon reports. For more details, see the “Configuring 802.11k Protocol” topic in the Dell PowerConnect W-Series ArubaOS User Guide. WMM Traffic Manages settings for the bandwidth management profile for Wi-Fi Multimedia Management Profile (WMM).
Page 49
When a client is blacklisted in the Dell PowerConnect W system, the client is not allowed to associate with any AP in the network for a specified amount of time. If a client is connected to the network when it is blacklisted, a de-authentication message is sent to force the client to disconnect.
Advertisements to unicast Select Add to create the WLAN, or click Save to finish reconfiguring an existing WLAN. The WLAN appears on the WLANs page in the Dell PowerConnect W Configuration navigation pane. Profiles Understanding Dell PowerConnect W Configuration Profiles In ArubaOS, related configuration parameters are grouped into a profile that you can apply as needed to an AP group or to individual APs.
Perform the following initial steps to configure profiles. 1. Browse to the Device Setup > Dell PowerConnect W Configuration page, and click the Profiles heading in the navigation pane on the left. Expand the Profiles menu by clicking the plus sign (+) next to it. Several profile options appear.
This profile also references a server group. Refer to “Profiles > AAA > Management Auth” on page Stateful 802.11 Auth—Enables or disables 802.1x authentication for clients on non-Dell PowerConnect W-Series APs, and defines the default role for those users once they are authenticated. This profile also references a server group to be used for authentication.
Page 53
Add a new rule by clicking the add icon, or edit an existing rule by clicking the pencil icon. Refer to “Security > User Rules” on page 152. Wired to Wireless Enable or disable support for roaming from wired to wireless networks. Roaming Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 47...
Profiles > AAA > 802.1x Auth 802.1x authentication consists of three components: The supplicant, or client, is the device attempting to gain access to the network. You can configure the Dell PowerConnect W user-centric network to support 802.1x authentication for wired users as well as wireless users.
Page 55
In Dell PowerConnect W user-centric networks, you can terminate the 802.1x authentication on the controller. The controller passes user authentication to its internal database or to a “backend” non-802.1x server. This feature, also called “AAA FastConnect,” is useful for deployments where an 802.1x EAP-compliant RADIUS server is not available or required for authentication.
Page 56
Attempts (1-10) Maximum Number of Define whether a held state can be bypassed, and the number of times this is to be Times Held State Can allowed. Be Bypassed (0-3) 50 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
Page 57
Define the maximum transmission unit size in bytes. (1024 - 1500 Bytes) Termination Select this option to terminate 802.1x authentication on the controller. Termination EAP-Type Specify if the EAP termination type is TLS. Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 51...
Page 58
PMK, significantly reducing handover interruption. Check with the manufacturer of your handset to see if this feature is supported. This feature is disabled by default. 52 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
MAC address in the user table and removal of an “old” IP address. This can occur when a client (or an AP connected to an untrusted port on the controller) changes its IP address. Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 53...
Table 12 Profiles > AAA > Captive Portal Auth Profile Settings Field Default Description General Settings Name Blank Enter the name of the Captive Portal Authentication profile. Referenced Profiles 54 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
Page 61
This can be set to any URL. Show Welcome Page Enables the display of the welcome page. If this option is disabled, redirection to the web URL happens immediately after logon. Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 55...
Profiles > AAA > IPv6 Extension Header Profile Settings Field Default Description General Settings Folder Set the folder with which the profile is associated. The drop-down menu displays all folders available for association with the profile. 56 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
(use the client device’s OUI as a delimiter) - for 6.1.0.0 versions or later Case lower The case (upper or lower) used in the MAC string. Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 57...
The DNS suffix list (comma separated) that has be set on the client once the VPN list connection is established. VIA external download End users will use this URL to download VIA on their computers. 58 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
Page 65
Specify the ports (separated by comma) that will be monitored by the content security of HTTP Ports to Be service provider. Inspected (Apart from Do not add space before or after the comma. Default Port 80) Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 59...
A user friendly name or description for the authentication profile. 3. Select Add or Save. The added or edited VPN Auth profile appears on the Profiles > AAA page, and on the details page. 60 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
Validate the server certificate use-different-name: Use a different user name for the connection (and not the CN on the certificate) Inner EAP Type Select the inner EAP type. Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 61...
Perform these steps to configure a Stateful 802.1X Auth profile. 1. Select Profiles > AAA > Stateful 802.11 Auth in the Dell PowerConnect W Navigation pane. 2. Select the Add button to create a new Stateful 802.11 Auth profile, or click the pencil icon next to an existing profile to edit.
3. Select Add or Save. The added or edited Wired Auth profile appears on the AAA Profiles page, and on the Wired Auth details page. Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 63...
VPN Auth details page. Profiles > AAA > Management Auth Users who need to access the controller to monitor, manage, or configure the Dell PowerConnect W user-centric network can be authenticated with RADIUS, TACACS+, or LDAP servers or the internal database.
150. Perform these steps to configure a Stateful NTLM Auth profile. 1. Select Profiles > AAA > Stateful NTLM Auth in the Dell PowerConnect W Navigation pane. The details page summarizes the current profiles of this type. Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
WISPr authentication. Perform these steps to configure a WISPr Auth profile. 1. Select Profiles > AAA > WISPr Auth in the Dell PowerConnect W Navigation pane. The details page summarizes the current profiles of this type. 66 | Configuration Reference...
In ArubaOS, related configuration parameters are grouped into a profile that you can apply as needed to an AP group or to individual APs. This section lists each category of AP profiles that you can configure and apply to an Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 67...
1. Select the Profiles > AP profile heading in the navigation pane. Figure 25 Profiles > AP in Dell PowerConnect W Configuration 2. From the navigation pane, you can configure the following profile types. The following AP profiles configure AP operation parameters, regulatory domain, SNMP information, and more: Authorization—Allows you to assign a provisioned but unauthorized AP to a AP group with a restricted...
Referenced Profiles AP Authorization Group None Designates the Dell PowerConnect W AP Group profile to reference. Refer to “Dell PowerConnect W AP Groups” on page 3. Select Add or Save. The added or edited profile appears on the AP Authorization page, and on the details page.
Profiles > AP > Provisioning Perform these steps to define a provisioning profile for an AP or group of APs: 1. Select Profiles > AP > System in the Dell PowerConnect W Navigation pane. This page summarizes the current profiles of this type.
APs. Perform these steps to configure a Regulatory Domain profile. 1. Select Profiles > AP > Regulatory Domain in the Dell PowerConnect W Navigation pane. This page summarizes the current profiles of this type.
Dell PowerConnect W-Series controllers and APs support versions 1, 2c, and 3 of Simple Network Management Protocol (SNMP) for reporting purposes only. In other words, SNMP cannot be used for setting values in a Dell PowerConnect W system in the current ArubaOS version. Perform these steps to configure a SNMP profile.
LMS IP address and the backup LMS IP address. Perform these steps to configure a System profile. 1. Select Profiles > AP > System in the Dell PowerConnect W Navigation pane. This page summarizes the current profiles of this type.
Page 80
LMS IP address to point to the new local controller. LMS IPv6 The IPv6 address of the local management switch (LMS)—the Dell PowerConnect W controller which is responsible for terminating user traffic from the APs, and processing and forwarding the traffic to the wired network. Requires a minimum version of 6.1.0.0...
Page 81
Server IP When a Dell PowerConnect W controller is present in anDell PowerConnect W RFprotect system, an Dell PowerConnect W AP that is acting as an RFprotect sensor can be configured and managed from the controller. As a Managed Sensor, the Dell PowerConnect W AP is managed by the controller but sends collected security data about the wireless environment to an RFprotect Server.
Page 82
A name identifying the hotspot location. If no name is defined, the parameter will use the name of the AP to which the user has associated. Requires a minimum version of 5.0.0.0 and a version earlier than 6.0.0.0 76 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
Role that is assigned to a user if split-tunnel authentication fails. Time To Wait for Authentication timeout value, in seconds, for devices connecting the AP’s wired port. Authentication To The supported range is 1-65535 seconds. Succeed Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 77...
Enter a list or a range of numbers. The VLAN range is from 1 to 4096. You can enter a range of numbers, specific numbers or a combination of range and specific VLAN numbers, as desired. 78 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
RF environment but is not connected to the wired network. The top-level IDS profile, assigned to an Dell PowerConnect W AP group or AP name, references additional IDS profiles that are also described in this section. ArubaOS includes predefined top-level IDS profiles that provide different levels of sensitivity.
Page 86
General—Configures general AP attributes. Refer to “Profiles > IDS > General” on page Impersonation—Configures anomaly settings for impersonation attacks. Refer to “Profiles > IDS > Impersonation” on page 80 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
Profiles > IDS > General Perform these steps to configure a General IDS profile. 1. Select Profiles > IDS > General in the Dell PowerConnect W Navigation pane. The list of current IDS profiles appears on this page. Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
Page 88
Stats Update Interval Set the time interval, in seconds, for the AP to update the controller with statistics. NOTE: This setting takes effect only if the Dell PowerConnect W Mobility Manager is (60-36000 sec) configured. Otherwise, statistics update to the controller is disabled.
Perform these steps to configure a Signature Matching profile. 1. Select Profiles > IDS > Signature Matching in the Dell PowerConnect W Navigation pane. 2. Select the Add button to create a new Signature Matching profile, or click the pencil icon next to an existing profile to edit.
Dell PowerConnect W system. When a client is blacklisted in the Dell PowerConnect W system, the client is not allowed to associate with any AP in the network for a specified amount of time. If a client is connected to the network when it is blacklisted, a de-authentication message is sent to force the client to disconnect.
Page 91
DOC profile. 1. Select Profiles > IDS > Denial of Service in the Dell PowerConnect W Navigation pane. 2. Select the Add button to create a new Signature Matching profile, or click the pencil icon next to an existing profile to edit.
Page 92
AP Flood Detection After an alarm has been triggered by a Fake AP flood, the time (in seconds) that must Quiet Time elapse before an identical alarm may be triggered. 86 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
A channel threshold applies to an entire channel, while a node threshold applies to a particular client MAC address. Dell PowerConnect W provides predefined default IDS rate thresholds profiles for each of these types of frames. Default values depend upon the frame type.
Perform these steps to create Rate Threshold Profiles for use with Denial of Service profiles. 1. Select Profiles > IDS > Denial of Service > Rate Thresholds in the Dell PowerConnect W Navigation pane. This page summarizes the current thresholds available.
Impersonation page. Profiles > IDS > Unauthorized Device Unauthorized device detection includes the ability to detect and disable rogue APs and other devices that can potentially disrupt network operations. Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 89...
Page 96
PowerConnect W-AirWave 7.5 User Guide. You can enable a policy to automatically disable APs that are classified as a rogue APs by the Dell PowerConnect W system. When a rogue AP is disabled, no wireless stations are allowed to associate to that AP.
Page 97
WEP keys is to capture 802.11 frames over an extended period of time and searching for such weak implementations that are still used by many legacy devices. Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 91...
3. Select Add or Save. The added or edited profile appears on the Profiles > IDS > Unauthorized Devices page. Profiles > Mesh Mesh profiles help define and bring-up the mesh network. This section describes the mesh radio and mesh cluster 92 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
Enter the mesh cluster name. The name can have a maximum of 32 characters, which is used as the MSSID. When you create a new cluster profile, it is a member of the “dell- mesh” cluster. NOTE: Each mesh cluster profile should have a unique MSSID. Configure a new MSSID before you apply the mesh cluster profile.
Perform these steps to create or edit Mesh Radio profiles. 1. Select Profiles > Mesh > Radio in the Dell PowerConnect W Navigation pane. 2. Select the Add button to create a new Radio profile, or click the pencil icon to edit an existing profile.
Page 101
Indicate the transmit rates for the 802.11a radio. The AP attempts to use the highest transmission rate to establish a mesh link. If a rate is unavailable, the AP goes through the list and uses the next highest rate. Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 95...
32 characters. Perform these steps to configure a Mesh HT SSID profile. 1. Select Profiles > Mesh > Radio > Mesh HT SSID in the Dell PowerConnect W Navigation pane. The details page summarizes the current profiles of this type.
Page 103
(Supported on AP-90 series, AP-175, AP-130 Series and AP-105 only. The configured value will be adjusted based on AP capabilities.) Legacy Stations Allow or disallow associations from legacy (non-HT) stations. This parameter is enabled by default (legacy stations are allowed). Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 97...
3. Select Add or Save. The added or edited profile appears on the Mesh HT SSID page. Profiles > Mobility Switch Use the following profiles to configure a Dell PowerConnect W switch: IGMP Snooping — Create and configure the IGMP snooping profiles for VLANs. Refer to “Profiles >...
10000—10 Gbps. Flow Control Sets the flowcontrol to one of the following parameters: Auto—Configures auto mode. lossless—configures lossless mode. on—configures on mode. off—configures off mode. Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 99...
This profile creates a VLAN with the specified configuration parameters. To enable role-based access for wired clients connected to an untrusted VLAN and/or port on the switch, you must specify the wired AAA profile you 100 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
“Profiles > QoS > Traffic Management” on page 102. VoIP Call Admission Control—Dell PowerConnect W’s Voice Call Admission Control limits the number of active voice calls per AP by load-balancing or ignoring excess call requests. This profile enables active load...
Profiles > QoS > VoIP Call Admission Control Dell PowerConnect W’s Voice Call Admission Control limits the number of active voice calls per AP by load- balancing or ignoring excess call requests. This profile enables active load balancing and call admission controls,...
Page 109
Specify the total bandwidth to be reserved for call handoff. This field is a percentage of Reservation (0-100%) entire bandwidth. VoIP High-capacity Specify the threshold that defines high-capacity VoIP. This field is a percentage of Threshold (0-100%) entire bandwidth. Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 103...
NOTE: Configure the virtual AP traffic management profile before applying the WMM traffic management profile to the virtual AP profile. Perform these steps to configure a WMM Traffic Management profile. 104 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
In most network environments, ARM does not need any adjustments from its factory-configured settings. However, if you are using VoIP or have unusually high Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 105...
802.11a/g Radio profiles. 1. Select Profiles > RF > 802.11a/g in the Dell PowerConnect W Configuration navigation pane. 2. Select the appropriate Add button to create a new 802.11a or g profile, or click the pencil icon to edit an existing profile.
Page 113
The transmit power advertised in the TPC IE of beacons and probe responses. Range: 0-51 Advertise 802.11d Enable or disable the radio to advertise its 802.11d (Country Information) and 802.11h and 802.11h (Transmit Power Control) capabilities. Capabilities Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 107...
Page 114
APs on other channels. If an AP’s client load is at or over a predetermined threshold as compared to its immediate neighbors, or if a neighboring Dell PowerConnect W AP on another channel does not have any clients, load balancing will be enabled on that AP.
Page 115
Requires a Wireless Intrusion Protection license or an RFprotect license and a minimum version of 6.1.0.0. 3. Select Add or Save. The added or edited 802.11a/g profile appears on the Profiles > RF > 802.11a/g page. Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 109...
ARM profile associated with the 802.11a or 802.11g radio profile by setting the ARM profile’s assignment parameter to disable. The ARM power adjustment feature does not apply to all ARM-enabled Mesh portals. 110 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
Page 117
In the event that an AP is configured for a Max Tx Power setting it cannot support, this value will be reduced to the highest supported power setting. NOTE: Power settings will not change if the Assignment option is set to disabled or maintain. Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 111...
Page 118
Rogue AP Aware If you have enabled both the Scanning and Rogue AP options, Dell PowerConnect W APs may change channels to contain off-channel rogue APs with active clients. This security feature allows APs to change channels even if the Client Aware setting is disabled.
Page 119
Default Description Ideal Coverage The coverage index metric is a weighted calculation based on the RF coverage for all Dell Index PowerConnect W APs and neighboring APs on a specified channel. The Ideal Coverage Index specifies the ideal coverage that an AP should try to achieve on its channel. The denser the AP deployment, the lower this value should be.
Complete the settings as described in Table Table 56 Profiles > RF > Spectrum Profile Settings Field Default Description General Settings Name Blank Enter the name of the profile. 114 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
2. Select the Add button to create a new Event Thresholds profile, or click the pencil icon to edit an existing profile. Complete the settings as described in Table Table 57 Profiles > RF > Event Thresholds Profile Settings Field Default Description General Settings Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 115...
Page 122
Sets a high percentage watermark for frame retry levels. When the percentage of frame High Watermark retries exceeds the configured high watermark, the system generates an alert. Defining 0% disables this function. 116 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
AP load balancing (0-360,000 sec) restarts on the AP. The supported range is 0 to 360,000 seconds, and defining a value of 0 disables this function. Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 117...
Page 124
Sets the amount of time in seconds between RSSI coverage checks. (0-255) 3. Select Add or Save. The added or edited profile appears on the Profiles > RF > Optimization page. 118 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
Note that hiding the SSID does very little to increase security. ESSID Name that uniquely identifies a wireless network. The ESSID can be up to 31 characters. If the ESSID includes spaces, you must enclose it in quotation marks. Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 119...
Page 126
Enter the hex key to be used with Wi-Fi Protected Access. WPA Passphrase Enter a difficult-to-guess passphrase between eight and 63 characters. NOTE: WPA Hexkey overrides WPA passphrase when both are set. 120 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
Page 127
TSPEC request (the default is one second). You enable TSPEC signaling enforcement in the VoIP Call Admission Control profile. The supported range is 0 to 3,600,000 milliseconds. Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 121...
Page 128
For deployments where there are expected to be considerable delays between the controller Response and APs (for example, in a remote location where an AP is not in range of another Dell PowerConnect W AP), best practices are to enable the this option in the SSID profile.
Best Effort Traffic from legacy devices or traffic from applications or devices that do 0, 3 not support QoS Background Low priority traffic (file downloads, print jobs) 2, 1 Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 123...
Page 130
2. Select the Add button to create a new EDCA AP profile, or click the pencil icon to edit an existing profile. Complete the settings as described in Table Table 61 Dell PowerConnect W Configuration > Profiles > SSID > EDCA AP Profile Settings Field Default Description...
Page 131
Table 61 Dell PowerConnect W Configuration > Profiles > SSID > EDCA AP Profile Settings (Continued) Field Default Description Background Arbitrary Inter-frame WMM is an extension to the Carrier Sense Multiple Access with Collision Avoidance Space Number (CSMA/CA) protocol’s Distributed Coordination Function (DCF). The collision resolution...
Table 61 Dell PowerConnect W Configuration > Profiles > SSID > EDCA AP Profile Settings (Continued) Field Default Description Transmission For each AC, the backoff time is the sum of the AIFSN and a random value between 0 and Opportunity Slots in 32 the CW value.
Page 133
In addition, you can configure the TXOP duration for each AC. Define whether or not admission control mandatory (ACM) is to be supported on APs configured with this EDCA profile. Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 127...
Page 134
Define whether or not admission control mandatory (ACM) is to be supported on APs configured with this EDCA profile. 3. Select Add or Save. The added or edited profile appears on the Profiles > SSID > EDCA Station page. 128 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
MAC protocol data units (MDPUs) and Modulation and Coding Scheme (MCS) ranges. Dell PowerConnect W provides a “default” version of the mesh high-throughput SSID profile. You can use the “default” version or create a new instance of a profile which you can then edit as you need. High-throughput Mesh nodes operating in different cluster profiles can share the same high-throughput SSID radio profile.
Perform these steps to configure an 802.11K profile. 1. Select Profiles > SSID > 802.11K in the Navigation pane. The details page summarizes the current profiles of this type. 130 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
3. Select Add or Save. The added or edited profile appears on the 802.11K page, and on the details page. Security Dell PowerConnect W Configuration supports user roles, policies, server groups, and additional security parameters with profiles that are listed in the Security portion of the navigation pane on the Dell PowerConnect W Configuration page, as illustrated in Figure Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
Figure 27 Security Components in Dell PowerConnect W Configuration This section describes the profiles, pages, parameters and default settings for all Security components in Dell PowerConnect W Configuration, as follows: Security > User Roles Security > User Roles > BW Contracts ...
Page 139
In an Dell PowerConnect W system, you can configure roles for clients that use mostly data traffic, such as laptop computers, and roles for clients that use mostly voice traffic, such as VoIP phones. Although there are different ways for a client to derive a user role, in most cases the clients using data traffic will be assigned a role after they are authenticated through a method such as 802.1x, VPN, or captive portal.
Page 140
Policies Add New Policy Select this button to add a new policy to the user role. The following two columns appear: Policy Dell PowerConnect W AP Group 134 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
Refer to “Security > Policies” on page 139. Dell PowerConnect W AP Select the Dell PowerConnect W AP group in which this policy and user role will None Group apply. Refer to “Dell PowerConnect W AP Groups Procedures and Guidelines” on...
PPTP connections use Microsoft Point-to-Point Encryption (MPPE), which uses the Rivest-Shamir-Aldeman (RSA) RC-4 encryption algorithm. PPTP connections require user-level authentication through a PPP-based authentication protocol (MSCHAPv2) is the currently-supported method). 136 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
Page 143
The IKE SA in each peer is bi-directional. IKE Encryption 168-bit 3DES- Select the Internet Key Exchange (IKE) encryption method from the following two options: 168-bit 3DES-CBC 56-bit DES-CBC Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 137...
Page 144
VPN configuration. Set the VPN configuration on clients to match the choices made above. In case the Dell PowerConnect W dialer is used, these configuration need to be made on the dialer prior to downloading the dialer onto the local client.
Using this option, specify a different layer 4 protocol (other than TCP/UDP) by configuring the IP protocol value. icmpv6: Use this option to configure ICMPv6. Requires IPv6 enabled. Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 139...
Field Default Description General Settings Folder Set the folder with which the security policy is associated. The drop- down menu displays all folders available for association with the policy. 140 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
TCP/UDP Max Port Appears if Range is specified in Port Selection. Specify the highest port that will support the TCP/UDP service being configured. Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 141...
This feature is useful in environments where there are multiple, 142 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
Set the folder with which the server is associated. The drop-down menu displays all folders available for association with the server group. Name Blank Enter the name of the server group. Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 143...
Page 150
Select Add to complete the configuration of the Server Group, or click Save to complete the editing of an existing server. The new server group appears on the Security > Server Groups page. 144 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
Select Add to complete the configuration of the LDAP Server, or click Save to complete the editing of an existing server. The new LDAP server appears on the Security > Server Groups > LDAP Server page. This server is now available to be used by server groups. Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 145...
Select Add to complete the configuration of the RADIUS server, or click Save to complete the editing of an existing server. The new server appears on the Security > Server Groups > RADIUS page. This server is now available to be used by server groups. 146 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
Set the folder with which the server is associated. The drop-down menu displays all folders available for association with the server group. Name Enter the name of the server. Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 147...
Security > Server Groups > XML API Dell PowerConnect W Configuration supports server groups that can include XML API servers. XML API servers send and accept requests for information. XML API servers process such requests and act on these requests by performing requested actions.
Security > Server Groups > RFC 3576 RFC 3576 servers support dynamic authorization extensions to Remote Authentication Dial-In User Service (RADIUS). Dell PowerConnect W Configuration supports RFC 3576 servers that can be referenced by server groups. To view currently configured RFC 3576 servers and where they are used, navigate to the Security > Server Groups >...
TACACS+ accounting allows commands issued on the controller to be reported to TACACS+ servers. You can specify the types of commands that are reported, and these are action, configuration, or show commands. You can have all commands reported as desired. Dell PowerConnect W Configuration supports TACACS Accounting servers that can be referenced by server groups.
The Security > Time Ranges page displays all time ranges that are currently available in Dell PowerConnect W Configuration, time range profile type, the policy and WLAN that use time range profiles, and the folder in which each profile is visible.
Organizational Unit Identifier (OUI) of the client’s MAC address. Navigate to the Security > User Rules page in the Dell PowerConnect W Configuration navigation pane. This page displays user rules that are currently configured, the AAA profile that references these rules, and the folder.
Page 159
The port number to which trap notification messages are sent. Default is 162. Send Informs Whether to send SNMP inform messages to the configured host. Displays when 2c is selected in SNMP Version. Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 153...
Field Description SNMPv3 Users If you are using SNMPv3 to obtain values from the Dell PowerConnect W controller, navigate to Local Config > SNMP Management > SNMPv3 User to configure the following parameters: User name A string representing the name of the user.
On the foreign network, the foreign agent delivers the tunneled data to the mobile client. A mobility domain is a group of Dell PowerConnect W-Series controller among which a wireless user can roam without losing their IP address. Mobility domains are not tied with the master controller, thus it is possible for a user to roam between controller managed by different master controller as long as all of the controller belong to the same mobility domain.
Page 162
Select this option to support standalone APs on the IP Mobility domain. Log User Moves Enable this option to log client movement in the IP Mobility domain. This setting is derived from station association in a foreign network. 156 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
“default” and a user-defined mobility domain at the same time, you must explicitly configure the “default” domain as an active domain for the controllers. Navigate to Advanced Services > IP Mobility > Mobility Domain from the Dell PowerConnect W Configuration navigation pane. This page displays all currently configured IP Mobility domains. Select Add to create a new IP Mobility Domain, or click the pencil icon next to an existing profile to modify an existing domain.
For wireless networks, virtual private network (VPN) connections can be used to further secure the wireless data from attackers. The Dell PowerConnect W-Series controllers can be used as a VPN concentrator that terminates all VPN connections from both wired and wireless clients.
VPN Services page. Advanced Services > VPN Services > IKE Navigate to Advanced Services > VPN Services > IKE page from the Dell PowerConnect W Configuration navigation pane. This page displays all Internet Key Exchange (IKE) profiles currently available for VPN Services.
The profile appears on the Advanced Services > VPN Services > IKE page. Advanced Services > VPN Services > IKE > IKE Policy Navigate to Advanced Services > VPN Services > IKE > IKE Policy page from the Dell PowerConnect W Configuration navigation pane to add a new IKE policy, as follows:...
SAs. Navigate to Advanced Services > VPN Services > L2TP page from the Dell PowerConnect W Configuration navigation pane. This page lists all L2TP profiles that are currently available. Select Add to create a new L2TP 162 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide...
PPTP profile names, the VPN Services that reference these PPTP profiles, and the folder for each PPTP profile. Select Add to create a new PPTP profile, or click the pencil icon next to an existing profile to edit. The Add/Edit Details page appears. Dell PowerConnect W-AirWave 7.5 | Configuration Guide Configuration Reference | 163...
SAs. Navigate to Advanced Services > VPN Services > IPSEC from the Dell PowerConnect W Configuration navigation pane. This page displays the IPSEC profile name, the VPN services that use the IPSEC profile, and the folder associated with the IPSEC Profile.
IPSEC profile that supports VPN Services. Navigate to Advanced Services > VPN Services > IPSEC > Dynamic Map > Transform Set from the Dell PowerConnect W Configuration navigation pane. This page displays all currently configured Transform Sets, and which Dynamic Maps reference them.
To view and edit profile assignments for Dell PowerConnect W AP Groups, perform these steps. 1. Navigate to the Groups > List page. 2. Select the name of the Dell PowerConnect W AP Group to view and edit, and navigate to the Dell PowerConnect W Config page, illustrated in...
Page 174
Table 96 provides a summary of topics supporting these settings. Table 96 Information Resources for the Groups > List > Dell PowerConnect W Config Page Section Additional Information Available In These Locations “Dell PowerConnect W AP Groups” on page 32 Dell PowerConnect W AP Groups “Dell PowerConnect W AP Groups Procedures and Guidelines”...
...........26 ........72, 73 Device Setup Profiles > IDS ..............5 ............79 Profiles > IDS > Denial of Service ....... 84 Profiles > IDS > General Encryption ........81 ..............24 Dell PowerConnect W-AirWave 7.5 | Configuration Guide Index | 169...
Page 176
Security > Server Groups > TACACS ....147 Security > Server Groups > Windows ....150 Security > Server Groups > XML API ....148 Security > TACACS Accounting ......150 Security > Time Ranges ........151 170 | Index Dell PowerConnect W-AirWave 7.5 | Configuration Guide...