Alcatel-Lucent AOS-W 6.5.3.x - Configuring the Secure Remote Access Point Service

Figure 95 Remote AP in a Multi-Switch Environment
Configuring the Secure Remote Access Point Service
The tasks for configuring an Alcatel-Lucent Access Points as a Secure Remote Access Point Service are:
n Configure a public IP address for the switch.
You must install one or more AP licenses in the switch. There are several AP licenses available that support
different maximum numbers of APs. The licenses are cumulative; each additional license installed increases
the maximum number of APs supported by the switch.
n Configure the VPN server on the switch. The remote AP will be a VPN client to the server.
n Provision the AP with IPSec settings, including the username and password for the AP, before you install it
at the remote location. You can also provision the RAP using the zero touch provisioning method. For more
information, see Provisioning 4G USB Modems on Remote Access Points on page 735.
Configure a Public IP Address for the Switch
The remote AP requires an IP address to which it can connect to establish a VPN tunnel to the switch. This can
be either a routable IP address you configure on the switch, or the address of an external router or firewall that
forwards traffic to the switch. The following procedure describes how to create a DMZ address on the switch.
In the WebUI
1. Navigate to the Configuration > Network > VLANs page.
2. Click Add to add a VLAN.
3. Enter the VLAN ID.
4. Select the port that belongs to this VLAN.
5. Click Apply.
6. Navigate to the Configuration > Network > IP page.
7. Click Edit for the VLAN you just created.
8. Enter the IP Address and Net Mask fields.
9. Click Apply.
In the CLI
(host) (config) #vlan <id>
(host) (config) #interface fastethernet <slot/module/<port>
switchport access vlan <id>
(host) (config) #interface vlan <id>
ip address <ipaddr> <mask>
AOS-W 6.5.3.x | User Guide Remote Access Points | 697