This topic describes the following procedures:
l Enforcing Uplinks on page 100
l Setting an Uplink Priority on page 100
l Enabling Uplink Preemption on page 101
l Switching Uplinks Based on VPN and Internet Availability on page 101
l Viewing Uplink Status and Configuration on page 102 Enforcing Uplinks
The following configuration conditions apply to the uplink enforcement:
l When an uplink is enforced, the IAP uses the specified uplink regardless of uplink preemption configuration and the current uplink status.
l When an uplink is enforced and multiple Ethernet ports are configured and uplink is enabled on the wired profiles, the IAP tries to find an alternate Ethernet link based on the priority configured.
l When no uplink is enforced and preemption is not enabled, and if the current uplink fails, the IAP tries to find an available uplink based on the priority configured.
l When no uplink is enforced and preemption is enabled, and if the current uplink fails, the IAP tries to find an available uplink based on in the priority configured. If current uplink is active, the IAP periodically tries to use a higher priority uplink and switches to the higher priority uplink even if the current uplink is active.
You can enforce a specific uplink on an IAP by using the Instant UI or CLI.
In the Instant UI To enforce an uplink:
1. Click the System > show advanced settings > Uplink. The Uplink tab contents are displayed.
2. Under Uplink Management, select the type of uplink from the Enforce Uplink drop-down list. If Ethernet uplink is selected, the Port field is displayed.
3. Specify the Ethernet interface port number.
4. Click OK. The selected uplink is enforced on the IAP.
In the CLI
To enforce an uplink:
(Instant Access Point)(config)# uplink
(Instant Access Point)(uplink)# enforce {cellular|ethernet|wifi|none}
(Instant Access Point)(uplink)# end (Instant Access Point)# commit apply
Setting an Uplink Priority
You can set an uplink priority by using the Instant UI or CLI.
In the Instant UI
1. Click the System > show advanced settings > Uplink. The Uplink tab contents are displayed.
2. Under Uplink Priority List, select the uplink, and click the icons at the bottom of the Uplink Priority List section, to increase or decrease the priority. By default, the Eth0 uplink is set as a high priority uplink.
In the CLI
To set an uplink priority:
(Instant Access Point)(config)# uplink
(Instant Access Point)(uplink)# uplink-priority {cellular <priority> | ethernet <priority>|
[port <Interface-number> <priority>]|wifi <priority>}
(Instant Access Point)(uplink)# end (Instant Access Point)# commit apply For example, to set a priority for Ethernet uplink:
(Instant Access Point)(uplink)# uplink-priority ethernet port 0 1 (Instant Access Point)(uplink)# end
(Instant Access Point)# commit apply
Enabling Uplink Preemption
The following configuration conditions apply to uplink preemption:
l Preemption can be enabled only when no uplink is enforced.
l When preemption is disabled and the current uplink goes down, the IAP tries to find an available uplink based on the uplink priority configuration.
l When preemption is enabled and if the current uplink is active, the IAP periodically tries to use a higher priority uplink, and switches to a higher priority uplink even if the current uplink is active.
You can enable uplink preemption using Instant UI or CLI.
In the Instant UI
1. Click the System > show advanced settings > Uplink. The Uplink tab contents are displayed.
2. Under Uplink Management, ensure that the Enforce Uplink is set to none.
3. Select Enabled from the Pre-emption drop-down list.
4. Click OK.
(Instant Access Point)# commit apply
Switching Uplinks Based on VPN and Internet Availability
The default priority for uplink switchover is Ethernet and then 3G/4G. The IAP can switch to the lower priority uplink if the current uplink is down.
Switching Uplinks Based on VPN Status
Instant supports switching uplinks based on the VPN status when deploying multiple uplinks (Ethernet, 3G/4G, and Wi-Fi). When VPN is used with multiple backhaul options, the IAP switches to an uplink connection based on the VPN connection status, instead of only using the Ethernet or the physical backhaul link.
The following configuration conditions apply to uplink switching:
l If the current uplink is Ethernet and the VPN connection is down, the IAP tries to reconnect to VPN. The retry time depends on the fast failover configuration and the primary or backup VPN tunnel. If this fails, the IAP waits for the VPN failover timeout and selects a different uplink such as 3G/4G or Wi-Fi.
l If the current uplink is 3G or Wi-Fi, and Ethernet has a physical link, the IAP periodically suspends user traffic to try and connect to the VPN on the Ethernet. If the IAP succeeds, the IAP switches to Ethernet. If the IAP does not succeed, it restores the VPN connection to the current uplink.
This feature is automatically enabled when VPN is configured on the IAP. IAP monitors the VPN status and when the VPN connection is not available for 3 minutes, the uplink switches to another available connection (if a low priority uplink is detected and the uplink preference is set to none).
Switching Uplinks Based on Internet Availability
You can configure Instant to switch uplinks based on Internet availability.
When the uplink switchover based on Internet availability is enabled, the IAP continuously sends ICMP packets to some well-known Internet servers. If the request is timed out due to a bad uplink connection or uplink interface failure, and the public Internet is not reachable from the current uplink, the IAP switches to a different connection.
You can set preferences for uplink switching using Instant UI and CLI.
In the Instant UI
To configure uplink switching:
1. Click the System > show advanced settings > Uplink. The Uplink tab contents are displayed.
2. Under Uplink Management, configure the following parameters:
l VPN failover timeout — To configure uplink switching based on VPN status, specify the duration to wait for an uplink switch. The default duration is set to 180 seconds.
l Internet failover — To configure uplink switching based on Internet availability, perform the following steps:
a. Select Enabled from the Internet failover drop-down list.
b. Specify the required values for Failover detection Count and Failover detection frequence.
c. Click OK.
WhenInternet failoveris enabled, the IAP ignores the VPN status, although uplink switching based on VPN status is enabled.
In the CLI
To enable uplink switching based on VPN status:
(Instant Access Point)(config)# uplink
(Instant Access Point)(uplink)# failover-vpn-timeout <seconds>
(Instant Access Point)(uplink)# end (Instant Access Point)# commit apply
To enable uplink switching based on Internet availability:
(Instant Access Point)(config)# uplink
(Instant Access Point)(uplink)# failover-internet
(Instant Access Point)(uplink)# failover-internet-pkt-lost-cnt <count>
(Instant Access Point)(uplink)# failover-internet-pkt-send-freq <frequency>
(Instant Access Point)(uplink)# end (Instant Access Point)# commit apply
Viewing Uplink Status and Configuration To view the uplink status and configuration in the CLI:
Instant Access Point# show uplink status
Uplink preemption :enable
Uplink enforce :none
Ethernet uplink bond0 :DHCP Uplink Table
--- --- ---
---eth0 UP 0 Yes
Wifi-sta LOAD 6 No
3G/4G INIT 7 No
Internet failover :disable
Max allowed test packet loss:10 Secs between test packets :30 VPN failover timeout (secs) :180
ICMP pkt sent :0
ICMP pkt lost :0
Continuous pkt lost :0
VPN down time :0
Instant Access Point# show uplink config
Uplink preemption :enable
Uplink enforce :none
Ethernet uplink bond0 :DHCP
Internet failover :disable
Max allowed test packet loss:10 Secs between test packets :30 VPN failover timeout (secs) :180
Chapter 9 Wired Profiles
This chapter describes the following procedures:
l Configuring a Wired Profile on page 105
l Assigning a Profile to Ethernet Ports on page 112
l Understanding Hierarchical Deployment on page 110
l Configuring Wired Bridging on Ethernet 0 on page 111
l Editing a Wired Profile on page 112
l Deleting a Wired Profile on page 112