Table of Contents
Advertisement
10.40.0.0/16 subnet is reserved for L3 mode –used by Contractor SSID.
l
172.16.20.0/24 subnet is used for NAT mode – used for wired network.
l
Client count in each branch is 200.
l
Contractors are only permitted to reach 10.16.0.0/16 network.
l
IAP Configuration
This section provides information on configuration steps performed through the CLI and the UI.
Table 86: IAP Configuration for Scenario 3—IPsec: Multiple Datacenter Deployment
Configuration Steps
1. Configure the primary IP
address. This IP address
is the Public IP address of
the controller. Fast
Failover is enabled for
fast convergence.
2. Configure routing
profiles to tunnel traffic
through IPsec.
3. Configure Enterprise
DNS for split DNS. The
example in the next
column uses a specific
enterprise domain to
tunnel all DNS queries
matching that domain to
corporate.
4. Configure Distributed, L3
DHCP profiles with VLAN
30 and VLAN 40.
Aruba Instant 6.5.0.0-4.3.0.0 | User Guide
CLI Commands
(Instant AP)(config)# vpn primary <public IP of
primary controller>
(Instant AP)(config)# vpn backup <public IP of
backup controllers>
(Instant AP)(config)# vpn preemption
(Instant AP)(config)# vpn fast-failover
(Instant AP)(config)# routing-profile
(Instant AP)(routing-profile)# route 0.0.0.0 0.0.0.0
<public IP of primary controller>
(Instant AP)(routing-profile)# route 10.0.0.0
255.0.0.0 <public IP of backup controller>
(Instant AP)(config)# internal-domains
(Instant AP)(domains)# domain-name corpdomain.com
Distributed, L3 profile with VLAN 30
(Instant AP)(config)# ip dhcp l3-dhcp
(Instant AP)(DHCP profile "l3-dhcp")# server-type
Distributed,L3
(Instant AP)(DHCP profile "l3-dhcp")# server-vlan 30
(Instant AP)(DHCP profile "l3-dhcp")# ip-range
10.30.0.0 10.30.255.255
(Instant AP)(DHCP profile "l3-dhcp")# dns-server
10.1.1.50,10.1.1.30
(Instant AP)(DHCP profile "l3-dhcp")# domain-name
corpdomain.com
(Instant AP)(DHCP profile "l3-dhcp")# client-count
200
Distributed, L3 profile with VLAN 40
(Instant AP)(config)# ip dhcp l3-dhcp
(Instant AP)(DHCP profile "l3-dhcp")# server-type
Distributed,L3
(Instant AP)(DHCP profile "l3-dhcp")# server-vlan 40
(Instant AP)(DHCP profile "l3-dhcp")# ip-range
10.40.0.0 10.40.255.255
(Instant AP)(DHCP profile "l3-dhcp")# dns-server
10.1.1.50,10.1.1.30
UI Procedure
See
Configuring an
IPsec Tunnel
See
Configuring
Routing
Profiles
See
Configuring
Enterprise
Domains
See
Configuring
Distributed
DHCP Scopes
and
Configuring
Local DHCP
Scopes
IAP-VPN Deployment Scenarios |
406
Hide quick links:
Advertisement
Table of Contents
