262 | VPN Configuration Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide1. Navigate to the VPN link at the top right corner of the Dell W-Series Instant UI. TheTunneling window appears.2. Select IPSec from the Protocol drop-down list.3. If you select GRE from the Protocol drop-down list then the packets are sent and receivedwithout encryption.a. GRE type — Enter the value for GRE type parameter.b. Per-AP tunnel — Select Enabled or Disabled from the Per-AP tunnel drop-down list.The user can create GRE tunnels from all of the APs instead of creating tunnels only fromthe AP that is acting as the Virtual Controller. The traffic going to the corporate is sent viaL2 GRE tunnel from the AP itself and does not have to be forwarded through the VirtualController.NOTE: By default, the Per-AP tunnel option is disabled.4. Enter the IP address or fully qualified domain name for the main VPN/GRE endpoint in thePrimary host field.5. Enter the IP address or fully qualified domain name for the backup VPN endpoint in theBackup host field. This entry is optional.6. Select Enabled from the Preemption drop-down list to switch back to the primary host whenand if it becomes available again. This step is optional.7. Select Enabled or Disabled from the Fast failover drop-down list.8. Enter Connection test frequency at which packets are sent to the controller. The unit isseconds per packet and the default value is 10 seconds which means that every 10 seconds theW-IAP will send one packet to the controller.NOTE: This value should be less than L3 user time out value in the Dell Controller. Forexample, if L3 user timeout in the Dell Controller is 5 minutes, the Connection test frequencyshould be less than 300 seconds.9. Enter Test packet count which is the number of lost packets and after which the W-IAP willmake the tunnel down. The default value is 2.10. Click Next to continue.Fast FailoverEnabling the fast failover feature allows the W-IAP to create a backup VPN tunnel to thecontroller along with the primary tunnel, and maintain both the primary and backup tunnelseparately. If the primary tunnel fails, the W-IAP can switch the data stream to the backuptunnel. This reduces the total failover time to less than one minute.Routing Profile ConfigurationW-Instant can terminate a single VPN connection on an Dell PowerConnect W-Series MobilityController. The Routing profile defines the corporate subnets which need to be tunneled throughthe IPSec tunnel.
