Extreme Networks ExtremeCloud Appliance Series - Page 73

Table 24: Advanced Configuration Profile Settings
Field Description
Band Steering Band steering is intended to relieve congestion by encouraging dual-
band client devices to use the higher capacity 5 GHz band. To make
use of this feature, ensure that networks are assigned to both radios.
The system always enables both radios when Band Steering is
enabled.
For band steering to work eectively, the coverage areas for the 2.4
and 5 GHz bands should be similar. Design your network for both 5
GHz and 2.4 GHz coverage. For networks where coverage quality
diers between bands, disable band steering.
Enable or disable band steering for the entire device group.
Client Balancing Enable Client Balancing to distribute client trac evenly between APs
in the same device group. In an availability pair, create a device group
on each appliance. The APs within each group will manage the user
trac within that group.
Secure Tunnel
Note: Supported on APs in a Centralized site and on AP5xx in a
Distributed site.
Provides encryption, authentication, and key management between
the APs and/or the appliance.
Valid values are:
•
O — Secure Tunnel is turned o and no trac is encrypted. All
SFTP/SSH/HTTPtrac works normally.
•
Control — An IPSEC tunnel is established from the AP to the
appliance and all SFTP/SSH/HTTP/WASSP control trac is
encrypted. The AP skips the registration and authentication phases
and when selected, the Secure Tunnel Lifetime feature can be
configured.
•
Control & Data — This mode only benefits bridged@AC VLAN
Topologies. An IPSEC tunnel is established from the AP to the
appliance and all SFTP/SSH/HTTP/WASSPcontrol and data trac
is encrypted. The AP skips the registration and authentication
phases, and when selected, the Secure Tunnel feature can be
configured. This is the default setting.
•
Debug — An IPSEC tunnel is established from the AP to the
appliance, no trac is encrypted, and all SFTP/SSH/HTTP/WASSP
trac works normally. The AP skips the registration and
authentication phases and when selected, the Secure Tunnel
feature can be configured.
Enable SSH
Determines if the Secure Shell (SSH) protocol is enabled. Enable SSH
for direct access to an AP. When enabling SSH, configure a password.
To configure an SSH password, go to Admin > System > Maintenance.
You can enable SSH for each AP profile. By default, this setting is
disabled.
Configure
ExtremeCloud Appliance User Guide for version 4.36.03 73