
(Instant Access Point)(SSID Profile <name># set-role <attribute>{{equals|not-equals|starts-wit
h|ends-with|contains}<operator><role>|value-of}
(Instant Access Point)(SSID Profile <name># end
(Instant Access Point)(SSID Profile <name># commit apply
To associate the access rule with a wired profile:
(Instant Access Point)(config)# wired-port-profile <name>
(Instant Access Point)(Wired ap profile <name>)# access-rule-name <name>
(Instant Access Point)(Wired ap profile <name>)# end
(Instant Access Point)# commit apply
Verifying the configuration
To verify the CALEA configuration:
(Instant Access Point)# show calea config
To view the tunnel encapsulation statistics:
(Instant Access Point)# show calea statistics
Example
To enable CALEA integration:
(Instant Access Point)(config)# calea
(Instant Access Point)(calea)# ip 192.0.2.7
(Instant Access Point)(calea)# ip mtu 1500
(Instant Access Point)(calea)# encapsulation-type GRE
(Instant Access Point)(calea)# gre-type 255
(Instant Access Point)(calea)# end
(Instant Access Point)(config)# wlan access-rule ProfileCalea
(Instant Access Point)(Access Rule "ProfileCalea")# calea
(Instant Access Point)(Access Rule "ProfileCalea")# end
(Instant Access Point)# commit apply
(Instant Access Point)(config)# wlan ssid-profile Calea-Test
(Instant Access Point)(SSID Profile"Calea-Test")# enable
(Instant Access Point)(SSID Profile"Calea-Test")# index 0
(Instant Access Point)(SSID Profile"Calea-Test")# type employee
(Instant Access Point)(SSID Profile"Calea-Test")# essid QA-Calea-Test
(Instant Access Point)(SSID Profile"Calea-Test")# opmode wpa2-aes
(Instant Access Point)(SSID Profile"Calea-Test")# max-authentication-failures 0
(Instant Access Point)(SSID Profile"Calea-Test")# auth-server server1
(Instant Access Point)(SSID Profile"Calea-Test")# set-role Filter-Id equals 123456 calea-test
(Instant Access Point)(SSID Profile"Calea-Test")# rf-band 5.0
(Instant Access Point)(SSID Profile"Calea-Test")# captive-portal disable
(Instant Access Point)(SSID Profile"Calea-Test")# dtim-period 1
(Instant Access Point)(SSID Profile"Calea-Test")# inactivity-timeout 1000
(Instant Access Point)(SSID Profile"Calea-Test")# broadcast-filter none
(Instant Access Point)(SSID Profile"Calea-Test")# dmo-channel-utilization-threshold 90
(Instant Access Point)(SSID Profile"Calea-Test")# local-probe-req-thresh 0
(Instant Access Point)(SSID Profile"Calea-Test")# max-clients-threshold 64
(Instant Access Point)(SSID Profile"Calea-Test")# end
(Instant Access Point)(SSID Profile"Calea-Test")# commit apply
To verify the configuration:
(Instant Access Point)# show calea config
calea-ip :10.0.0.5
encapsulation-type :gre
gre-type :25944
AOS-W Instant 6.3.1.1-4.0 | User Guide Lawful Intercept and CALEA Integration | 285
Komentarze do niniejszej Instrukcji