Home
Alcatel-Lucent
Controller
AOS-W 6.5.3.x
Alcatel-Lucent AOS-W 6.5.3.x User Manual
4
of 1
of 1 rating
1160 pages
Give review
Manual
Specs
To Next Page
To Next Page
Loading...
A
O
S
-
W
6
.
5
.
3
.
x
User
Guid
e
2
Table of Contents
Contents
3
Table of Contents
3
Revision History
18
About this Guide
19
What's New in AOS-W 6.5.X
19
Fundamentals
31
Related Documents
32
Conventions
32
Contacting Support
34
The Basic User-Centric Networks
35
Understanding Basic Deployment and Configuration Tasks
35
Switch Configuration Workflow
38
Connect the Switch to the Network
39
OAW-40Xx Series and OAW-4X50 Series Switches
40
Using the LCD Screen
42
Configuring a VLAN to Connect to the Network
45
Enabling Wireless Connectivity
49
Configuring Your User-Centric Network
49
Replacing a Switch
49
Control Plane Security
56
Control Plane Security Overview
57
Configuring Control Plane Security
57
Managing AP Whitelists
59
Managing Whitelists on Master and Local Switches
66
Working in Environments with Multiple Master Switches
70
Replacing a Switch on a Multi-Switch Network
73
Configuring Control Plane Security after Upgrading
76
Troubleshooting Control Plane Security
77
Software Licenses
79
Getting Started with AOS-W Licenses
79
License Types and Usage
79
Licensing Best Practices and Limitations
82
Centralized Licensing Overview
83
Configuring Centralized Licensing
89
Installing a License
91
Deleting a License
93
Monitoring and Managing Centralized Licenses
94
Network Configuration Parameters
97
Campus WLAN Workflow
97
Understanding VLAN Assignments
98
Configuring Vlans
105
Configuring Ports
110
Configuring Static Routes
113
Configuring the Loopback IP Address
113
Configuring the Switch IP Address
114
Configuring GRE Tunnels
115
Configuring GRE Tunnel Groups
124
Jumbo Frame Support
127
Ipv6 Support
130
Understanding Ipv6 Notation
130
Understanding Ipv6 Topology
130
Enabling Ipv6
131
Enabling Ipv6 Support for Switch and Aps
131
Filtering an Ipv6 Extension Header (EH)
139
Configuring a Captive Portal over Ipv6
139
Working with Ipv6 Router Advertisements (Ras)
140
RADIUS over Ipv6
144
TACACS over Ipv6
145
Dhcpv6 Server
146
Understanding AOS-W Supported Network Configuration for Ipv6 Clients
148
Understanding AOS-W Authentication and Firewall Features that Support Ipv6
149
Managing Ipv6 User Addresses
154
Understanding Ipv6 Exceptions and Best Practices
155
Link Aggregation Control Protocol
157
Understanding LACP Best Practices and Exceptions
157
Configuring LACP
158
LACP Sample Configuration
160
Ospfv2
161
Understanding OSPF Deployment Best Practices and Exceptions
161
Understanding Ospfv2 by Example Using a WLAN Scenario
162
Understanding Ospfv2 by Example Using a Branch Scenario
163
Configuring OSPF
165
Sample Topology and Configuration
166
Authentication Servers
178
Understanding Authentication Server Best Practices and Exceptions
178
Understanding Servers and Server Groups
178
Configuring Authentication Servers
179
Managing the Internal Database
196
Configuring Server Groups
199
Assigning Server Groups
205
Configuring Authentication Timers
210
Authentication Server Load Balancing
211
MAC-Based Authentication
212
Configuring MAC-Based Authentication
212
Configuring Clients
213
Branch Switch Config for Cloud Services Switches
215
Branch Deployment Features
216
Scalable Site-To-Site VPN Tunnels
217
Layer-3 Redundancy for Branch Switch Masters
217
WAN Failure (Authentication) Survivability
218
WAN Health Check
224
WAN Optimization through IP Payload Compression
224
Interface Bandwidth Contracts
225
Branch Integration with a Palo Alto Networks (PAN) Portal
226
Branch Switch Routing Features
229
Cloud Management
230
Zero-Touch Provisioning
230
Using Smart Config to Create a Branch Config Group
233
Portfast and BPDU Guard
254
Preventing WAN Link Failure on Virtual Aps
257
Branch WAN Dashboard
257
802.1X Authentication
259
Understanding 802.1X Authentication
259
Configuring 802.1X Authentication
262
Enabling 802.1X Supplicant Support on an AP
270
Sample Configurations
271
Performing Advanced Configuration Options for 802.1X
287
Application Single Sign-On Using L2 Authentication
287
Device Name as User Name for Non-802.1X Authentication
290
Stateful and Wispr Authentication
291
Working with Stateful Authentication
291
Working with Wispr Authentication
292
Understanding Stateful Authentication Best Practices
292
Configuring Stateful 802.1X Authentication
292
Configuring Stateful NTLM Authentication
293
Configuring Stateful Kerberos Authentication
294
Configuring Wispr Authentication
295
Certificate Revocation
298
Understanding OCSP and CRL
298
Configuring the Switch as an OCSP Client
299
Configuring the Switch as a CRL Client
301
Configuring the Switch as an OCSP Responder
302
Certificate Revocation Checking for SSH Pubkey Authentication
303
OCSP Configuration for AOS-W VIA
304
Captive Portal Authentication
306
Understanding Captive Portal
306
Configuring Captive Portal in the Base Operating System
307
Using Captive Portal with a PEFNG License
309
Sample Authentication with Captive Portal
312
Configuring Guest Vlans
318
Configuring Captive Portal Authentication Profiles
319
Enabling Optional Captive Portal Configurations
324
Personalizing the Captive Portal Page
328
Creating and Installing an Internal Captive Portal
330
Creating Walled Garden Access
339
Enabling Captive Portal Enhancements
341
Netdestination for AAAA Records
345
Virtual Private Networks
346
Planning a VPN Configuration
346
Working with VPN Authentication Profiles
350
Configuring a Basic VPN for L2Tp/Ipsec
352
Configuring a VPN for L2Tp/Ipsec with Ikev2
356
Configuring a VPN for Smart Card Clients
361
Configuring a VPN for Clients with User Passwords
362
Configuring Remote Access Vpns for Xauth
363
Working with Remote Access Vpns for PPTP
364
Working with Site-To-Site Vpns
365
Working with VPN Dialer
373
Roles and Policies
375
Configuring Firewall Policies
375
User Roles
385
Assigning User Roles
387
Understanding Global Firewall Parameters
393
Using Apprf 2.0
397
Clearpass Policy Manager Integration
402
Introduction
402
Important Points to Remember
402
Enabling Downloadable Role on a Switch
403
Sample Configuration
403
Virtual Aps
411
Virtual AP Configuration Workflow
411
Virtual AP Profiles
412
Changing a Virtual AP Forwarding Mode
420
Radio Resource Management (802.11K)
420
BSS Transition Management (802.11V)
428
Fast BSS Transition ( 802.11R)
428
SSID Profiles
430
WLAN Authentication
438
High-Throughput Virtual Aps
441
Guest Wlans
446
Changing a Virtual AP Forwarding Mode
449
Adaptive Radio Management
450
Understanding ARM
450
Client Match
452
ARM Coverage and Interference Metrics
454
Configuring ARM Profiles
455
Assigning an ARM Profile to an AP Group
465
Using Multi-Band ARM for 802.11A/802.11G Traffic
465
Band Steering
466
Dynamic Bandwidth Switch
467
Enabling Traffic Shaping
468
Traffic Steering
470
Spectrum Load Balancing
471
Reusing Channels to Control RX Sensitivity Tuning
471
Configuring Non-802.11 Noise Interference Immunity
472
Troubleshooting ARM
472
Wireless Intrusion Prevention
474
Working with the Reusable Wizard
474
Monitoring the Dashboard
477
Detecting Rogue Aps
478
Working with Intrusion Detection
481
Configuring Intrusion Protection
493
Configuring the WLAN Management System
497
Understanding Client Blacklisting
501
Working with WIP Advanced Features
503
Configuring Totalwatch
504
Administering Totalwatch
506
Tarpit Shielding Overview
507
Configuring Tarpit Shielding
507
Access Points
509
Important Points to Remember
509
AP Discovery Logic
510
Basic Functions and Features
523
Naming and Grouping Aps
524
Understanding AP Configuration Profiles
526
Before You Deploy an AP
533
Enable Switch Discovery
533
Enable DHCP to Provide Aps with IP Addresses
534
AP Provisioning Profiles
535
Configuring Installed Aps
538
Optional AP Configuration Settings
543
RF Management
558
Optimizing Aps over Low-Speed Links
572
AP Scanning Optimization
580
Channel Group Scanning
582
Configuring AP Channel Assignments
583
Managing AP Console Settings
585
Link Aggregation Support on OAW-AP220 Series, OAW-AP270 Series, and OAW-AP320 Series
588
Recording Consolidated AP-Provisioned Information
592
Intelligent Power Monitoring
593
Secure Enterprise Mesh
595
Mesh Overview Information
595
Mesh Configuration Procedures
595
Understanding Mesh Access Points
595
Understanding Mesh Links
597
Understanding Mesh Profiles
599
Understanding Remote Mesh Portals (Rmps)
603
Understanding the AP Boot Sequence
604
Mesh Deployment Solutions
605
Mesh Deployment Planning
607
Configuring Mesh Cluster Profiles
609
Creating and Editing Mesh Radio Profiles
613
Creating and Editing Mesh High-Throughput SSID Profiles
618
Configuring Ethernet Ports for Mesh
624
Provisioning Mesh Nodes
626
Verifying Your Mesh Network
628
Configuring Remote Mesh Portals (Rmps)
630
Increasing Network Uptime through Redundancy and VRRP
633
High Availability
633
VRRP-Based Redundancy
633
High Availability Deployment Models
634
Client State Synchronization
636
High Availability Inter-Switch Heartbeats
637
High Availability Extended Switch Capacity
637
Configuring High Availability
638
High Availability Alerting
640
Migrating from VRRP or Backup-LMS Redundancy
641
Configuring VRRP Redundancy
643
Rstp
651
Understanding RSTP Migration and Interoperability
651
Working with Rapid Convergence
651
Configuring RSTP
652
Troubleshooting RSTP
654
Pvst
655
Understanding PVST+ Interoperability and Best Practices
655
Enabling PVST+ in the CLI
655
Enabling PVST+ in the Webui
656
Link Layer Discovery Protocol
657
Important Points to Remember
657
LLDP Overview
657
Configuring LLDP
658
Monitoring LLDP Configuration
659
IP Mobility
663
Understanding Alcatel-Lucent Mobility Architecture
663
Configuring Mobility Domains
664
Tracking Mobile Users
668
Configuring Advanced Mobility Functions
670
Understanding Bridge Mode Mobility Deployments
679
Enabling Mobility Multicast
680
External Firewall Configuration
684
Understanding Firewall Port Configuration Among Alcatel-Lucent Devices
684
Enabling Network Access
685
Ports Used for Virtual Intranet Access (VIA)
685
Configuring Ports to Allow Other Traffic Types
685
PAPI Enhanced Security
687
Interoperability
687
Configuring PAPI Enhanced Security
687
Verifying PAPI Enhanced Security
688
Palo Alto Networks Firewall Integration
689
Limitation
689
Preconfiguration on the PAN Firewall
689
Configuring PAN Firewall Integration
692
Remote Access Points
695
About Remote Access Points
695
Configuring the Secure Remote Access Point Service
697
Deploying a Branch/Home Office Solution
703
Enabling Remote AP Advanced Configuration Options
709
Understanding Split Tunneling
723
Understanding Bridge
729
Provisioning Wi-Fi Multimedia
734
Reserving Uplink Bandwidth
734
Provisioning 4G USB Modems on Remote Access Points
735
Provisioning Raps at Home
737
Configuring OAW-RAP3WN and OAW-RAP3WNP Access Points
740
Converting an IAP to RAP or CAP
741
Enabling Bandwidth Contract Support for Raps
742
RAP TFTP Image Upgrade
745
Virtual Intranet Access
748
Spectrum Analysis
749
Understanding Spectrum Analysis
749
Creating Spectrum Monitors and Hybrid Aps
754
Connecting Spectrum Devices to the Spectrum Analysis Client
756
Configuring the Spectrum Analysis Dashboards
759
Customizing Spectrum Analysis Graphs
762
Working with Non-Wi-Fi Interferers
787
Understanding the Spectrum Analysis Session Log
788
Viewing Spectrum Analysis Data
788
Recording Spectrum Analysis Data
789
Troubleshooting Spectrum Analysis
792
Dashboard Monitoring
794
Wan
794
Performance
795
Usage
796
Potential Issues
797
Traffic Analysis
797
Airgroup
819
Security
820
Ucc
820
Controller
822
Wlans
824
Access Points
825
Clients
826
Firewall
827
Management Access
833
Configuring Certificate Authentication for Webui Access
833
Secure Shell (SSH)
834
Webui Session Timer
835
Enabling RADIUS Server Authentication
836
Connecting to an Omnivista Server
842
Custom Certificate Support for RAP
846
Implementing a Specific Management Password Policy
848
Configuring AP Image Preload
850
Configuring Centralized Image Upgrades
852
Managing Certificates
854
Configuring SNMP
860
Enabling Capacity Alerts
862
Configuring Logging
864
Enabling Guest Provisioning
868
Managing Files on the Switch
882
Setting the System Clock
885
Clearpass Profiling with IF-MAP
887
Whitelist Synchronization
888
Downloadable Regulatory Table
889
802.11U Hotspots
892
Hotspot Profile Configuration Tasks
892
Hotspot 2.0 Overview
892
Configuring Hotspot 2.0 Profiles
895
Configuring Hotspot Advertisement Profiles
899
Configuring ANQP Venue Name Profiles
901
Configuring ANQP Network Authentication Profiles
903
Configuring ANQP Domain Name Profiles
904
Configuring ANQP IP Address Availability Profiles
905
Configuring ANQP NAI Realm Profiles
906
Configuring ANQP Roaming Consortium Profiles
909
Configuring ANQP 3GPP Cellular Network Profiles
909
Configuring H2QP Connection Capability Profiles
910
Configuring H2QP Operator Friendly Name Profiles
912
Configuring H2QP Operating Class Indication Profiles
913
Configuring H2QP WAN Metrics Profiles
914
Configuring H2QP OSU Provider List Profiles
915
Adding Local Switches
920
Moving to a Multi-Switch Environment
920
Configuring Local Switches
923
Uplink Monitoring and Management
925
Voice and Video
927
Voice and Video License Requirements
927
Configuring Voice and Video
927
Working with Qos for Voice and Video
936
Unified Communication and Collaboration
945
Understanding Extended Voice and Video Features
964
Advanced Voice Troubleshooting
988
Airgroup
994
Zero Configuration Networking
994
Airgroup Solution
994
Airgroup Integrated Deployment Model
998
Features Supported in Airgroup
999
Clearpass Policy Manager and Clearpass Guest Features
1004
Auto-Association and Switch-Based Policy
1004
Best Practices and Limitations
1006
Integrated Deployment Model
1010
Switch Dashboard Monitoring
1018
Configuring the Airgroup-CPPM Interface
1021
Bluetooth-Based Discovery and Airgroup
1028
Airgroup Mdns Static Records
1029
Mdns AP VLAN Aggregation
1031
Mdns Multicast Response Propagation
1033
Troubleshooting and Log Messages
1035
Instant AP VPN Support
1038
Overview
1038
VPN Configuration
1043
Viewing Branch Status
1044
External Services Interface
1046
Sample ESI Topology
1046
Understanding the ESI Syslog Parser
1048
Configuring ESI
1051
Sample Route-Mode ESI Topology
1058
Sample NAT-Mode ESI Topology
1063
Understanding Basic Regular Expression (BRE) Syntax
1066
External User Management
1069
Overview
1069
How the AOS-W XML API Works
1069
Creating an XML Request
1069
XML Response
1072
Using the XML API Server
1076
Sample Scripts
1080
Behavior and Defaults
1086
Understanding Mode Support
1086
Understanding Basic System Defaults
1088
Understanding Default Management User Roles
1096
Understanding Default Open Ports
1099
DHCP with Vendor-Specific Options
1102
Configuring a Windows-Based DHCP Server
1102
Enabling DHCP Relay Agent Information Option (Option-82)
1105
Enabling Linux DHCP Servers
1107
802.1X Configuration for IAS and Windows Clients
1109
Configuring Microsoft IAS
1109
Configuring Management Authentication Using IAS
1111
Window XP Wireless Client Sample Configuration
1113
Glossary of Terms
1116
4
Based on 1 rating
Ask a question
Give review
Questions and Answers:
Need help?
Do you have a question about the Alcatel-Lucent AOS-W 6.5.3.x and is the answer not in the manual?
Ask a question
Alcatel-Lucent AOS-W 6.5.3.x Specifications
General
Brand
Alcatel-Lucent
Model
AOS-W 6.5.3.x
Category
Controller
Language
English
Need help?
General
To Next Page