Dell 6.2 Server User Manual


 
Figure 163: Remote AP in aMulti-Controller Environment
Configuring the Secure Remote Access Point Service
The tasks for configuring a Dell Access Points as a Secure Remote Access Point Service are:
l Configure a public IP address for the controller.
You must install one or more AP licenses in the controller. There are several AP licenses available that support
different maximum numbers of APs. The licenses are cumulative; each additional license installed increases the
maximum number of APs supported by the controller.
l Configure the VPN server on the controller. The remote AP will be a VPN client to the server.
l Provision the AP with IPSec settings, including the username and password for the AP, before you install it at
the remote location. You can also provision the RAP using the zero-touch provisioning method. For more
information, see "Provisioning 4G USB Modems on Remote Access Points" on page 543.
Configure a Public IP Address for the Controller
The remote AP requires an IP address to which it can connect in order to establish a VPN tunnel to the controller.
This can be either a routable IP address that you configure on the controller, or the address of an external router or
firewall that forwards traffic to the controller. The following procedure describes how to create a DMZ address on the
controller.
Using the WebUI to create a DMZ address
1. Navigate to the Configuration > Network > VLANs page.
2. Click Add to add a VLAN.
3. Enter the VLAN ID.
4. Select the port that belongs to this VLAN.
5. Click Apply.
6. Navigate to the Configuration > Network > IP page.
7. Click Edit for the VLAN you just created.
8. Enter the IP Address and Net Mask fields.
9. Click Apply.
Using CLI
vlan <id>
interface fastethernet <slot>/<port>
switchport access vlan <id>
interface vlan <id>
ip address <ipaddr> <mask>
Configure the NAT Device
Communication between the AP and secure controller uses the UDP 4500 port. When both the controller and the
AP are behind NAT devices, configure the AP to use the NAT device’s public address as its master address. On the
DellPowerConnectW-SeriesArubaOS6.2 | User Guide RemoteAccessPoints | 512