Aruba IAP-335 User Manual page 412

Table 87: IAP Configuration for Scenario—GRE: Single Datacenter Deployment with No Redundancy
Configuration Steps
5. Create authentication
servers for user
authentication. The
example in the next
column assumes 802.1X
SSID.
6. Configure wired and
wireless SSIDs using the
authentication servers
and access rules; enable
authentication
survivability.
412 | IAP-VPN Deployment Scenarios
CLI Commands
(Instant AP)(config)# wlan auth-server server1
(Instant AP)(Auth Server "server1")# ip 10.2.2.1
(Instant AP)(Auth Server "server1")# port 1812
(Instant AP)(Auth Server "server1")# acctport 1813
(Instant AP)(Auth Server "server1")# key
"presharedkey"
(Instant AP)(Auth Server "server1")# exit
(Instant AP)(config)# wlan auth-server server2
(Instant AP)(Auth Server "server1")# ip 10.2.2.2
(Instant AP)(Auth Server "server1")# port 1812
(Instant AP)(Auth Server "server1")# acctport 1813
(Instant AP)(Auth Server "server1")# key
"presharedkey"
Configure wired ports to operate in Centralized, L2 mode and
associate VLAN 20 to the wired port profile.
(Instant AP)(config) # wired-port-profile wired-
port
(Instant AP)(wired-port-profile "wired-port")#
switchport-mode access
(Instant AP)(wired-port-profile "wired-port")#
allowed-vlan all
(Instant AP)(wired-port-profile "wired-port")#
native-vlan 20
(Instant AP)(wired-port-profile "wired-port")# no
shutdown
(Instant AP)(wired-port-profile "wired-port")#
access-rule-name wired-port
(Instant AP)(wired-port-profile "wired-port")# type
employee
(Instant AP)(wired-port-profile "wired-port")#
auth-server server1
(Instant AP)(wired-port-profile "wired-port")#
auth-server server2
(Instant AP)(wired-port-profile "wired-port")#
dot1x
(Instant AP)(wired-port-profile "wired-port")# exit
(Instant AP)(config)# enet1-port-profile wired-port
Configure a wireless SSID to operate in Centralized, L2 mode and
associate VLAN 20 to the WLAN SSID profile.
(Instant AP)(config) # wlan ssid-profile wireless-
ssid
(Instant AP)(SSID Profile "wireless-ssid")# enable
(Instant AP)(SSID Profile "wireless-ssid")# type
employee
(Instant AP)(SSID Profile "wireless-ssid")# essid
wireless-ssid
(Instant AP)(SSID Profile "wireless-ssid")# opmode
wpa2-aes
(Instant AP)(SSID Profile "wireless-ssid")# vlan 20
(Instant AP)(SSID Profile "wireless-ssid")# auth-
server server1
(Instant AP)(SSID Profile "wireless-ssid")# auth-
server server2
UI Procedure
See
Configuring an
External Server
for
Authentication
See
Configuring a
Wired Profile
and
Network
Profiles
Aruba Instant 6.5.0.0-4.3.0.0 | User Guide
Wireless