| |
|
1 |
Choose Manage→Service→Services from the NFM-P main menu. The Manage Services form opens.
|
2 |
Choose a VPRN service and click Properties. The VPRN Service (Edit) form opens.
|
3 |
On the service navigation tree, expand Sites→routing_instance→Subscriber Interfaces→subscriber_interface.
|
4 |
Right-click on a WLAN GW group interface. The VPRN Group Interface (Edit) form opens.
|
5 |
Click on the WLAN GW tab and configure the required parameters.
The Interim Update parameter must be enabled if the Include Counters and Hold Down Time parameters are to be configured.
|
6 |
Select a WLAN GW group in the WLAN GW Group panel.
|
7 |
Select a tunnel router instance in the Tunnel Router Instance panel.
|
8 |
Select a default retail VPRN service in the Default Retail Service panel.
|
9 |
Configure egress QoS, if required.
-
In the Egress QoS panel, configure the required parameters.
Do not configure the Aggregate Rate Limit parameter with a positive value if you specify a scheduler policy in
3 .
-
Select a QoS policy.
-
Select a Scheduler Policy.
|
10 |
If the WLAN GW is part of the home LAN extension configuration, configure the Maximum Number of Bridged Domains parameter on the LAN Extension panel.
This parameter can only be configured when the administrative state of the WLAN GW is Out of Service.
|
11 |
Select an authentication policy.
|
12 |
To configure an authentication hold time:
-
Enable the check box in the Authentication Hold Time panel.
-
Specify an authentication hold time in the Hours, Minutes, and Seconds fields.
|
13 |
Click on the SAP Parameters tab to configure SAP parameters, as required.
-
Configure the required parameters.
If the Default ID Type parameter is set to Use String, configure the Default ID String parameter.
If the WLAN GW is supporting managed routes, set the Anti-Spoofing parameter to Next Hop IP and MAC Address. To enhance security for MAC-only anti-spoofing, configure unicast RPF on the group interface; see
To configure a group interface on a VPRN .
-
Select a subscriber profile.
-
Select an SLA profile.
-
Select an application profile.
-
Select a subscriber identification policy.
|
14 |
Click on the Gateway Addresses tab to configure gateway addresses for the WLAN GW.
-
Click Create or choose a gateway address entry and click Properties. The Gateway Address (Create|Edit) form opens.
-
Type a gateway IP address in the field and click OK.
You can configure up to 10 gateway addresses (six IPv6 and four IPv4).
One IPv6 address can be configured with the XConnect option.
|
15 |
Click on the VLAN Tag Ranges tab to configure VLAN tag ranges, as required.
-
Click Create or choose a VLAN tag range entry and click Properties. The VLAN Tag Range (Create|Edit) form opens.
-
Configure the required parameters.
-
Select a retail service.
-
Select a NAT policy.
-
Select an HTTP redirect policy.
-
Select an authentication policy.
-
Select a RADIUS proxy cache server.
-
If the VLAN tag range is part of an L2 wholesale-retail configuration, select a VPLS site in the L2 Retail panel, and configure the Administrative State and Description parameters as required.
-
Click on the DHCP tab and configure DHCP parameters, as required.
-
Click on the Distributed Subscriber Management tab to configure distributed subscriber management.
-
Configure the required parameters.
-
Select an accounting policy.
-
Select an ingress policer policy.
-
Select an egress policer policy.
-
Select an IP filter policy.
-
Select an application profile string, if required.
-
Click on the SLAAC tab to configure lifetimes for SLAAC-configured IPv6 hosts.
The Administrative State parameter must be Up to configure parameters on the SLAAC tab.
- Disable the Default check box and configure the lifetime parameters (in hours, minutes, and seconds) for any of the following categories:
-
Preferred Lifetime (Initial State)
-
Preferred Lifetime (Active State)
-
Valid Lifetime (Initial State)
-
Valid Lifetime (Active State)
-
Click on the DHCP6 tab to configure lifetimes for DHCPv6-configured IPv6 hosts.
The Administrative State parameter must be Up to configure parameters on the DHCP6 tab.
- Disable the Default check box and configure the lifetime parameters (in hours, minutes, and seconds) for any of the following categories:
-
Preferred Lifetime (Initial State)
-
Preferred Lifetime (Active State)
-
Valid Lifetime (Initial State)
-
Valid Lifetime (Active State)
- Click on the BRG Configuration tab to configure BRG for the VLAN tag range.
-
Configure the Administrative State parameter.
-
Select a default BRG profile.
-
Enable the Authenticate BRG Only parameter, if only authenticated BRGs are permitted.
-
If the VLAN tag range is part of a LAN extension configuration, click on the Cross Connect tab.
Configure the required parameters and select an ISA RADIUS policy.
You must enable Authentication on DHCP on the VLAN Tag Range - General tab in order to set the Cross Connect configuration admin state to In Service
-
If the VLAN tag range is part of a home LAN extension configuration, click on the Home LAN Extension tab.
Configure the required parameters.
You must enable Authentication on DHCP on the VLAN Tag Range - General tab, and enable the Administrative State of the BRG on the VLAN Tag Range - BRG Configuration tab in order to enable the home LAN extension configuration.
-
Save the changes and close the form.
|
16 |
Click on the L2 AP tab to configure an L2 access point.
-
Click Create or select an existing L2 AP entry and click Properties. The WLAN GW L2 Access Point (Create|Edit) form opens.
-
Select a port.
-
Configure the required parameters.
|
17 |
Save the changes and close the forms.
End of steps |