Wired Guest Access with Aruba Wireless Gear

Create new Network - Security

Reading Time: 6 minutes This is maybe an uncommon scenario but I was asked to write something about this topic. Let’s assume you have Aruba Wireless Gear but your switching stuff is not from Aruba. In this post, I will show how to configure Aruba Controllers or Aruba IAPs to provide Guest Access to wired users as well. I … Read more

Aruba Downloadable User Roles

Downloadable User Role Flow Chart

Reading Time: 16 minutes This post is all about Aruba Downloadable User Roles and how to use them for wired and wireless access with dot1x and mac authentication. If you use Downloadable User Roles, you get a central point of configuration for all access-related configurations. ClearPass, which is used as the radius server, will have all the roles available. … Read more

Aruba AP Authentication

Campus AP Authentication - Provision AP for EAP-TLS

Reading Time: 19 minutes Most organizations are moving to a network where all ports are authenticated. This could lead to problems when we try to connect an AP to a network port as AP authentication is more than just an accept. There are two types of AP that might be considered. First, the Campus AP, which needs to connect … Read more

LACP For AP’s With Two Ethernet Ports

LACP for AP's - Set GRE Striping IP

Reading Time: 9 minutes I was asked on how to configure LACP for AP’s connected to a controller and I was not able to answer this question out of my mind so I decided to figure it out for myself. And as always, when I need to test something, I write a post about it. This is my post … Read more

Aruba Instant Dynamic Proxy Settings via DHCP

Reading Time: 2 minutes I often get the question, how to connect our devices to central, as we do not allow direct access to the internet. Here is the answer, we can send the dynamic proxy settings via DHCP to our IAP’s, running at least firmware version 8.4. DHCP Part for Dynamic Proxy Settings First, you need to prepare … Read more

IAP VPN Guest Solution With Captive Portal

Reading Time: 7 minutes After my last post about an IAP VPN, I’ve got a lot of questions regarding an IAP VPN guest solution, either with or without a captive portal. This post is all about an IAP VPN guest solution. I use a controller as the VPN concentrator and for the captive portal. You can use ClearPass for the … Read more

Aruba Instant VPN with Central – IAP VPN

Reading Time: 10 minutes In this post, I describe how I use an Aruba Instant AP for tunnel all my traffic to my controller at home. This IAP VPN is very helpful when I need to show some lab scenarios. But you can also use it as your secure connection from a small branch office to the headquarter. Sure, you … Read more

ArubaOS Controller Whitelist Sync with ClearPass

Reading Time: 10 minutes I was writing some new posts and realized that I missed one basic post for you. If you ever went through the process of provisioning many new AP’s to a controller, you may be looked for a simpler way to do the provisioning work. The solution is the whitelist. Every ArubaOS controller has an internal whitelist … Read more

Wired Guest Access with IAP – Aruba Instant

Reading Time: 5 minutes Have you ever heard of someone asking for wired guest access? Why should you use wired guest access, when WLAN is available? For those, who need this kind of guest access, the following post is very interesting. I can think of the following scenarios, where you could need wired guest access: You have a WLAN … Read more

Change the Management VLAN for Aruba Instant

Reading Time: 4 minutes Aruba Instant is a very simple and easy to use WLAN solution. In some projects, I have the situation, that users are placed in VLAN 1. Which is easy with Aruba Instant. But unfortunately, VLAN 1 is the default management VLAN and the AP itself should not be placed in VLAN 1. This was impossible … Read more