Mobility Access Switch Overview; Mobility Access Switch Integration With An Iap - Aruba IAP-335 User Manual

This chapter provides the following information:
Mobility Access Switch Overview on page 388
l
Configuring IAPs for Mobility Access Switch Integration on page 389
l

Mobility Access Switch Overview

The Aruba Mobility Access Switch enables a secure, role-based network access for wired users and devices,
independent of their location or application. Installed in wiring closets, the Mobility Access Switch delivers up to
384 wire-speed Gigabit Ethernet switch ports and operates as a wired access point when deployed with an
Aruba Mobility Controller.
As a wired access point, users and their devices are authenticated and assigned a unique role by the Mobility
Controller. These roles are applied irrespective of whether the user is a Wi-Fi client, or is connected to a port on
the Mobility Access Switch. The use of Mobility Access Switchallows an enterprise workforce to have a
consistent and secure access to network resources based on the type of users, client devices, and connection
method used.
Instant supports S3500 and S2500 Mobility Access Switch models.
For more information on Mobility Access Switches, refer to ArubaOS User Guide.

Mobility Access Switch Integration with an IAP

You can integrate an IAP with a Mobility Access Switch by connecting it directly to the switch port. The following
integration features can be applied while integrating Mobility Access Switch with an IAP:
Rogue AP containment—When a rogue IAP is detected by an IAP, it sends the MAC Address of the rogue
l
IAP to the Mobility Access Switch. The Mobility Access Switch blacklists the MAC address of the rogue IAP
and turns off the PoE on the port.
PoE prioritization—When an IAP is connected directly into the switch port, the switch increases the PoE
l
priority of the port. This is done only if the PoE priority is set by default in the Mobility Access Switch.
The PoE Prioritization and Rogue AP Containment features are available for ArubaOS 7.2 release on Aruba
Mobility Access Switches.
GVRP Integration—Configuring GARP VLAN Registration Protocol (GVRP) enables the switch to
l
dynamically register or unregister VLAN information received from a GVRP applicant such as an IAP. GVRP
also enables the switch to propagate the registered VLAN information to the neighboring switches in the
network.
The associated static VLANs used in wired and wireless profiles are propagated to the upstream Mobility
Access Switch using GVRP messages.
For information on steps to integrate Mobility Access Switch with an IAP, see
Access Switch Integration on page
Aruba Instant 6.5.0.0-4.3.0.0 | User Guide
Mobility Access Switch Integration
389.
Chapter 33
Configuring IAPs for Mobility
Mobility Access Switch Integration | 388