Reset Search
 

 

Article

How to use auto IPsec for WiNG device adoption?

« Go Back

Information

 
TitleHow to use auto IPsec for WiNG device adoption?
Objective
What are prerequisites and how to use auto IPsec for WiNG device adoption?
Environment
  • All Summit WM3000 Series Controllers
  • ExtremeWireless WiNG Controllers
  • ExtremeWireless WiNG Access Points
  • WiNG 5 Software
Procedure
In order to use IPsec enabled adoption links for AP traffic, all you need to do is to create groupID under crypto auto-IPsec and set adoption mode to IPsecured

Using Web UI navigate to deivce profile (or override) and find tab for Security
Define Group ID as well as Authentication Key (PSK prefered)

User-added image

Repeat the same for adopting controller

Next step is to set adoption to use IPsec.
Navigate to AP profile (or override) and find tab for Adoption.
Configure adopting controller details with use of IPsec Secure

User-added image

To do the same using CLI, just follow this sequence
 
WiNG(config)# profile ap7532 default-ap7532
WiNG(config-profile-default-ap7532)# crypto auto-ipsec-secure
WiNG(config-profile-default-ap7532-crypto-auto-ipsec-secure)# groupid IPsec psk 0 PassWord

Repeate the same for adopting controller

WiNG(config-profile-default-ap7532)# controller host <IP.address> level 2 ipsec-secure

New adoption request will be handled with IPsec tab and will establish secured links.
You can confirm this by checking MINT link details 
 
WiNG# show mint links details
2 mint links on 12.EE.3A.DC:
link ip-192.168.88.100:24576 at level 2, 1 adjacencies, (used), (secured by ipsec):
  local IP 192.168.10.205
  cost 100, hello-interval 15, adj-hold-time 46
  created: by MLCP
  adjacency with 4D.18.8C.74, state UP (52 minutes), last hello 11 seconds ago

link ip-192.168.88.99:24576 at level 2, 1 adjacencies, (used), (secured by ipsec):
  local IP 192.168.10.205
  cost 100, hello-interval 15, adj-hold-time 46
  created: by MLCP
  adjacency with 75.5C.46.E5, state UP (50 minutes), last hello 15 seconds ago
Additional notes
You can find more details in archived Auto IPsec Secure docummentation 

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255