Table of Contents
Advertisement
Table 2: AP-Controller Certificate Matrix
AP
Default certificate
No certificate*
No certificate
NA
* The AP110 and AP1014i are shipped with factory-installed certificates. If an AP certificate is
accidently deleted or is not working as expected, a new certificate must be obtained.
** If you are already using third-party certificates for Captive Portal or Web UI, you can also
use those certificates for VPN.
*** Use the Download CA button to change the certificate used by VPN. Before changing the
certificate, it is important to copy the new certificate's CA to the APs; otherwise, the VPN
connectivity will be broken. After uploading the new certificates to the controller, download the
CA to the APs by using the Download CA button. A copy of the controller CA is pushed to each
AP, and the APs will trust the controller certificates the next time it negotiates the VPN
connection. After the CA is pushed to each AP and the VPN certificate is changed, issue the
command from the controller CLI.
reload-vpn
To download the controller CA for APs:
1.
Select Configuration > Certificates.
2.
Select the AP Certificates tab. The AP Certificate page appears, as shown in
3.
Select each AP for which to download the controller CA.
4.
Click Download CA.
After VPN certificate is changed, issue the
Controller
Default certificate or third-party
certificate
Default certificate
Third-party certificate**
While changing the certificate in
controller used by VPN
reload-vpn
For use by Meru Networks authorized partners and customers.
Action
Add the APs to VPN group.
Obtain the AP certificate from
Meru Support.
Obtain the AP certificate from
Meru Support. For third-party
certificates, generate the CSR
and get it signed from the CA,
and upload to the controller.
Upload the certificates to
controller and use the Download
CA button*** to copy the CA to
all APs.
command from the controller CLI.
Figure
2.
11
Advertisement
Table of Contents
