Vpn Configuration; Whitelist Database Configuration - Aruba IAP-335 User Manual

0.0.0.15 ROUTER
0.0.0.15 NETWORK
0.0.0.15 NSSA
0.0.0.15 NSSA
0.0.0.15 NSSA
0.0.0.15 NSSA
0.0.0.15 NSSA
0.0.0.15 NSSA
0.0.0.15 NSSA
N/A AS_EXTERNAL
N/A AS_EXTERNAL
N/A AS_EXTERNAL
N/A AS_EXTERNAL
N/A AS_EXTERNAL
N/A AS_EXTERNAL
N/A AS_EXTERNAL
To verify if the redistributed routes are installed or not:
(Instant AP)# show ip route
Codes: C - connected, O - OSPF, R - RIP, S - static
M - mgmt, U - route usable, * - candidate default, V - RAPNG VPN
Gateway of last resort is Imported from DHCP to network 0.0.0.0 at cost 10
Gateway of last resort is Imported from CELL to network 0.0.0.0 at cost 10
Gateway of last resort is Imported from PPPOE to network 0.0.0.0 at cost 10
Gateway of last resort is 10.15.148.254 to network 0.0.0.0 at cost 1
S* 0.0.0.0/0
V 12.12.2.0/24 [10/0] ipsec map
V 12.12.12.0/25 [10/0] ipsec map
V 12.12.12.32/27 [10/0] ipsec map
V 50.40.40.0/24 [10/0] ipsec map
V 51.41.41.128/25 [10/0] ipsec map
V 53.43.43.32/27 [10/0] ipsec map
V 54.44.44.16/28 [10/0] ipsec map
C 9.9.9.0/24 is directly connected, VLAN9
C 10.15.148.0/24 is directly connected, VLAN1
C 43.43.43.0/24 is directly connected, VLAN132
C 42.42.42.0/24 is directly connected, VLAN123
C 44.44.44.0/24 is directly connected, VLAN125
C 182.82.82.12/32 is an ipsec map 10.15.149.69-182.82.82.12
C 182.82.82.14/32 is an ipsec map 10.17.87.126-182.82.82.14

VPN Configuration

The following VPN configuration steps on the controller enable the IAPs to terminate their VPN connection on
the controller:

Whitelist Database Configuration

The whitelist database is a list of the MAC addresses of the IAPs that are allowed to establish VPN connections
with the controller. This list can be either stored in the controller database or on an external server.
You can use the following CLI command to configure the whitelist database entries if the controller is acting as
the whitelist database:
(host)# whitelist-db rap add mac-address 00:11:22:33:44:55 ap-group test
The ap-group parameter is not used for any configuration, but needs to be configured. The parameter can be
any valid string.
If an external server is used as the location for the whitelist database, add the MAC addresses of the valid IAPs
in the external database or external directory server and then configure a RADIUS server to authenticate the
IAPs using the entries in the external database or external directory server.
249 | IAP-VPN Deployment
10.15.148.12
10.15.148.12
12.12.2.0
12.12.12.0
12.12.12.32
50.40.40.0
51.41.41.128
53.43.43.32
54.44.44.16
12.12.2.0
12.12.12.0
12.12.12.32
50.40.40.0
51.41.41.128
53.43.43.32
54.44.44.16
[1/0] via 10.15.148.254*
10.15.148.12 166
10.15.148.12 167
9.9.9.9 29
9.9.9.9 164
9.9.9.9 164
9.9.9.9 164
9.9.9.9 164
9.9.9.9 164
9.9.9.9 164
9.9.9.9 29
9.9.9.9 169
9.9.9.9 169
9.9.9.9 169
9.9.9.9 169
9.9.9.9 169
9.9.9.9 169
0x80000016 0x4c0d
0x80000001 0x9674
0x80000003 0x7b54
0x80000008 0x63a
0x80000008 0x7b8
0x80000007 0x8ed4
0x80000007 0x68f6
0x80000007 0x2633
0x80000007 0x353
0x80000003 0x8c06
0x80000001 0x25e4
0x80000001 0x2663
0x80000001 0xab80
0x80000001 0x85a2
0x80000001 0x43de
0x80000001 0x20fe
Aruba Instant 6.5.0.0-4.3.0.0 | User Guide