Siemens SCALANCE W1750D UI User Manual

AP-VPN Deployment Scenarios
35.3 Scenario 3 - IPsec: Multiple Datacenter Deployment with Primary and Backup Controllers for Redundancy
SCALANCE W1750D UI
Configuration Manual, 02/2018, C79000-G8976-C451-02
543
● 172.16.20.0/24 subnet is used for NAT mode – used for wired network.
● Client count in each branch is 200.
● Contractors are only permitted to reach 10.16.0.0/16 network.
AP Configuration
This section provides information on configuration steps performed through the CLI and the
UI.
Table 35- 3 AP Configuration for Scenario 3—IPsec: Multiple Datacenter Deployment
Configuration Steps
CLI Commands
UI Procedure
1. Configure the primary IP address.
This IP address is the Public IP ad-
dress of the controller.
Fast Failover
is
enabled for fast convergence.
(scalance)(config)# vpn primary <public IP
of primary controller>
(scalance)(config) # vpn backup <public IP
of backup controllers>
(scalance)(config)# vpn preemption
(scalance)(config)# vpn fast-failover
See Configuring an IPsec
Tunnel
2. Configure routing profiles to tunnel
traffic through IPsec.
(scalance)(config)# routing-profile
(scalance)(routing-profile)# route 0.0.0.0
0.0.0.0
<public IP of primary controller>
(scalance)(routing-profile)# route 10.0.0.0
255.0.0.0 <public IP of backup controller>
See Configuring Routing
Profiles
3. Configure Enterprise DNS for split
DNS. The example in the next column
uses a specific enterprise domain to
tunnel all DNS queries matching that
domain to corporate.
(scalance)(config)# internal-domains
(scalance)(domains)# domain-name corpdo-
main.com
See Configuring Enterpri-
se Domains

Siemens SCALANCE W1750D UI Specifications

General

Brand	Siemens
Model	SCALANCE W1750D UI
Category	Wireless Access Point
Language	English