Filter
Top Products
Using the WebUI to configure a Local Controller PSK
1. Navigate to the Configuration > Network > Controller > System Settings page.
2. The procedure to configure a local PSK varies, depending upon whether it is configured using a local controller or
a master controller.
l On a local controller, enter the IPSec key in the IPSec Key (IKE PSK) and Retype IPSec Key (IKE PSK)
fields.
l On a master controller, click New under Local Controller IPSec Keys. then enter the local controller IP
address and then enter and retype the IPSec key. Click Add.
3. Click Apply.
Using the WebUI to configure a Master Controller PSK
Use the procedure below to configures the IP address and preshared key for the master controller.
1. Navigate to the Configuration > Network > Controller > System Settings page.
2. In the IPSEC Key (IKE PSK) field, enter the IPSec key. Reenter this key in the Retype IPSEC Key (IKE PSK)
field.
3. (Optional) In the FQDN field, enter a fully qualified domain name used in IKE.
4. (Optional) Click the Source IP address field and select the VLAN ID of Vlan interface to initiate IKE. The
controller IP address will be used if the VLAN is not specified.
5. Click Apply.
Using the CLI to configure a PSK
Master Controller
On the master controller you can configure a specific IPSec PSK for a local controller and use the localip 0.0.0.0
ipsec command:
NOTE: You need to change the secret key to a non-default PSK key value even if you use a per-local controller PSK key
configuration.
localip 0.0.0.0 ipsec <secret_key>
localip <ipaddr> ipsec <secret_key>
Local Controller
On the local controller the secret key (PSK) must match the master controller’s PSK.
masterip <ipaddr> ipsec <secret_key> [fqdn <fqdn>][uplink][vlan <id>]
Configuring a Controller Certificate
The following sections describe how to use the command-line interface to select a factory-installed or custom
certificate for secure inter-controller communication.
Using the CLI to configure a Local Controller Certificate
l Issue the following command on a master controller to configure the factory-installed certificate for secure
communication between that master and a local controller.
local-factory-cert local-mac <lmac>
In this command, <lmac> is the MAC address of the local controller’s factory-installed certificate.
l Issue the following command on a master controller to configure a custom certificate for secure communication
between that master and a local controller.
DellPowerConnectW-SeriesArubaOS6.2 | User Guide AddingLocalControllers | 668