330| Virtual APs DellPowerConnect W- Series ArubaOS 6.2 | User Guide
SC Assembly# : 2010052B (Rev:02.01)
SC Serial# : F01629529 (Date:03/29/10)
SC Model# : W-3600-US
Configuring a G uest WLAN
To configurea Guest WLAN, the following basic steps are required.
lConfigurethe V LAN for guest users.
lConfigurethe guest role which only allows HTTP andHTTP St rafficfrom 9:00 a.m. to 5 p.m. on weekdays.
lCreate and configurethe vi rtualAP profile guest for the AP named “building3-lobby”:
nCreate a new virtual AP profile guest.
nSelect the predefinedAAA profile default-open.
nCreate a new SSID profileguest to configure“ Guest” for the SSID name and open system for the
authentication.
The followingsecti ons describehow to do this using the WebUI and the CLI.
Configuring a V LAN
In this example,users on the “Corpnet” WLAN are placed into VLAN 1, which is the defaultV LAN configuredon
the controller.For guest users, you need to create another VLAN and assign the VLAN interface an IP address.
In the WebUI
1. N avigate to the Configuration > Network > VLANs page.
2. Click A ddt o add a VLAN. Enter 2 in the VLAN ID , andclick A pply.
3. To assign an IP address and netmask to the VLAN you just created, navigate to the Configuration >Networ k >
IP > IP Interfaces page. Click Edit for VLAN 2. Enter an IP address andnetmask for the V LAN interface, and
then click Apply.
In the CLI
(host)(config) #vlan 2
interface vlan 2
ip address <address> <netmask>
Configuring a G uest Role
The guest role allowsw eb (HTTP and HTTPS) access only during normal business hours (9:00 a.m. to 5:00 p.m.
Monday throughFriday).
In the WebUI
1. N avigate to the Configuration > Security > Access Contro l > Time Ranges page.
2. Click A dd.E nter a name,s uchas “workhours”. SelectP eriodic. Click Add. Under Add Periodic Rule, select
Weekday.For Start Ti me,enter 9:00 . For End Time, enter 17:00. Click Done. Click Apply.
3. Select the Policies tab. Click Add. Enter a policy name, suchas “restricted”. From the Policy Type drop-down
list, select Session.
4. Click A dd.
5.
(Optional)
By default,firewall policies apply t o IPv4 clients only. To co nfigurea firewall policy for IP v6 clients,
click the IP Version drop-down list and select IPv6.
6. Click t he Service drop-downlist, select s ervice, then select svc-http.
7. Click t he Time Range drop-downlist and select t het ime rangeyo u previouslyco nfigured.