Table of Contents
Advertisement
Table 84: IAP Configuration for Scenario 1—IPsec: Single Datacenter Deployment with No Redundancy
Configuration Steps
6. Configure wired port and
wireless SSIDs using the
authentication servers.
7. Create access rule for
wired and wireless
authentication. In this
example, the rule
permits all traffic.
399
| IAP-VPN Deployment Scenarios
CLI Commands
(Instant AP)(Auth Server "server2")# acctport 1813
(Instant AP)(Auth Server "server2")# key
"presharedkey"
Configure wired ports to operate in L2 mode and associate
Centralized, L2 mode VLAN 20 to the wired port profile.
(Instant AP)(config) # wired-port-profile wired-port
(Instant AP)(wired-port-profile "wired-port")#
switchport-mode access
(Instant AP)(wired-port-profile "wired-port")#
allowed-vlan all
(Instant AP)(wired-port-profile "wired-port")#
native-vlan 20
(Instant AP)(wired-port-profile "wired-port")# no
shutdown
(Instant AP)(wired-port-profile "wired-port")#
access-rule-name wired-port
(Instant AP)(wired-port-profile "wired-port")# type
employee
(Instant AP)(wired-port-profile "wired-port")# auth-
server server1
(Instant AP)(wired-port-profile "wired-port")# auth-
server server2
(Instant AP)(wired-port-profile "wired-port")# dot1x
(Instant AP)(wired-port-profile "wired-port")# exit
(Instant AP)(config)# enet1-port-profile wired-port
Configure a wireless SSID to operate in L3 mode and associate
Distributed, L3 mode VLAN 30 to the WLAN SSID profile.
(Instant AP)(config) # wlan ssid-profile wireless-
ssid
(Instant AP)(SSID Profile "wireless-ssid")# enable
(Instant AP)(SSID Profile "wireless-ssid")# type
employee
(Instant AP)(SSID Profile "wireless-ssid")# essid
wireless-ssid
(Instant AP)(SSID Profile "wireless-ssid")# opmode
wpa2-aes
(Instant AP)(SSID Profile "wireless-ssid")# vlan 30
(Instant AP)(SSID Profile "wireless-ssid")# auth-
server server1
(Instant AP)(SSID Profile "wireless-ssid")# auth-
server server2
(Instant AP)(SSID Profile "wireless-ssid")# auth-
survivability
For wired profile:
(Instant AP)(config)# wlan access-rule wired-port
(Instant AP)(Access Rule "wired-port")# rule any any
match any any any permit
For WLAN SSID:
(Instant AP)(config)# wlan access-rule wireless-ssid
UI Procedure
See
Configuring a
Wired Profile
and
Network
Profiles
See
Configuring
ACL Rules for
Network
Services
Aruba Instant 6.5.0.0-4.3.0.0 | User Guide
Wireless
Hide quick links:
Advertisement
Table of Contents
