Users/Devices And Policy Enforcement Recommendations - HP Aruba JL253A Management And Configuration Manual

Access and firewall policy is then implemented on the controller to isolate guest access to the rest of the campus
network.
Figure 103: Wired Guest Traffic Segmentation

Users/Devices and Policy Enforcement Recommendations

The following table specifies the enforcement recommendations for different type of users and devices. While it is
recommended to tunnel the traffic in some cases, other cases can be met by simply using local forwarding on the
switch.
Type
Access Point
Voice/Video Device
Employee on Managed
Device
Employee on Unmanaged
device
New/Unknown Device
Guest User
Chapter 18 Dynamic Segmentation
Primary Mobility
Controller
10/100/1000 BASE-T Ports (1-24T) 10/100/1000 BASE-T Ports (1-24T) Speed Mode: Speed Mode: Of = 10 or 100 Mbps Of = 10 or 100 Mbps Slow Flash = 1 Gbps Slow Flash = 1 Gbps 2X Flash = 2.5 Gbps 2X Flash = 2.5 Gbps 3x Flash = 5 Gbps 3x Flash = 5 Gbps On =10Gbps On =10Gbps Fast Flash = 40 Gbps Fast Flash = 40 Gbps
10/100/1000 BASE-T PoE+ Ports (1-48 10/100/1000 BASE-T PoE+ Ports (1-48 T T ) )
10/100/1000 BASE-T Ports (1-24T) 10/100/1000 BASE-T Ports (1-24T) 10/100/1000 BASE-T PoE+ Ports (1-48 10/100/1000 BASE-T PoE+ Ports (1-48 T T ) )
10/100/1000 BASE-T PoE+ Ports (1-48 10/100/1000 BASE-T PoE+ Ports (1-48 T T ) )
HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-8) HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-8) 10/100/1000 BASE-T PoE+ Ports (1-48 10/100/1000 BASE-T PoE+ Ports (1-48 T T ) )
HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-24) HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-24) 10/100/1000 BASE-T PoE+ Ports (1-48 10/100/1000 BASE-T PoE+ Ports (1-48 T T ) )
10/100/1000 BASE-T Ports (1-24T) 10/100/1000 BASE-T Ports (1-24T) Speed Mode: Speed Mode: Of = 10 or 100 Mbps Of = 10 or 100 Mbps Slow Flash = 1 Gbps Slow Flash = 1 Gbps 2X Flash = 2.5 Gbps 2X Flash = 2.5 Gbps 3x Flash = 5 Gbps 3x Flash = 5 Gbps On =10Gbps On =10Gbps Fast Flash = 40 Gbps Fast Flash = 40 Gbps
10/100/1000 BASE-T PoE+ Ports (1-48 10/100/1000 BASE-T PoE+ Ports (1-48 T T ) )
10/100/1000 BASE-T Ports (1-24T) 10/100/1000 BASE-T Ports (1-24T) 10/100/1000 BASE-T PoE+ Ports (1-48 10/100/1000 BASE-T PoE+ Ports (1-48 T T ) )
10/100/1000 BASE-T PoE+ Ports (1-48 10/100/1000 BASE-T PoE+ Ports (1-48 T T ) )
HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-8) HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-8) 10/100/1000 BASE-T PoE+ Ports (1-48 10/100/1000 BASE-T PoE+ Ports (1-48 T T ) )
HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-24) HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-24) 10/100/1000 BASE-T PoE+ Ports (1-48 10/100/1000 BASE-T PoE+ Ports (1-48 T T ) )
Guest Users/Devices
Enforcement Description
Local
Local
Local
Tunnel
Tunnel
Tunnel
ClearPass Policy Manager
RADIUS/Local Mac Authentication
Spd Spd PoE PoE Usr Usr Back Back UID UID
LED Mode LED Mode Reset Clear Status Console Reset Clear Status Console
Mgmt Mgmt
2930M 2930M
JL319A JL319A
Console Console
Dual Personality Ports: 10/100/1000BASE-T PoE+( Dual Personality Ports: 10/100/1000BASE-T PoE+( T ) or SFP( T ) or SFP( ) ) S S Aux Port Aux Port 10/100/1000 BASE-T Ports (1-24T) 10/100/1000 BASE-T Ports (1-24T) Speed Mode: Speed Mode: Of = 10 or 100 Mbps Of = 10 or 100 Mbps Slow Flash = 1 Gbps Slow Flash = 1 Gbps 2X Flash = 2.5 Gbps 2X Flash = 2.5 Gbps 3x Flash = 5 Gbps 3x Flash = 5 Gbps On =10Gbps On =10Gbps Fast Flash = 40 Gbps Fast Flash = 40 Gbps
Spd Spd PoE PoE Usr Usr Back Back UID UID
LED Mode LED Mode Reset Clear Status Console Reset Clear Status Console
Mgmt Mgmt
2930M 2930M
JL320A JL320A
Console Console
Dual Personality Ports: Dual Personality Ports: Aux Port Aux Port 10/100/1000 BASE-T PoE+ Ports (1-48 10/100/1000 BASE-T PoE+ Ports (1-48 T T ) )
10/100/1000BASE-T PoE+( 10/100/1000BASE-T PoE+( T ) or SFP( T ) or SFP( ) S ) S
Spd Spd PoE PoE Usr Usr Back Back UID UID
LED Mode LED Mode Reset Clear Status Console Reset Clear Status Console
Mgmt Mgmt 2930M 2930M
JL321A JL321A
Console Console
Dual Personality Ports: 10/100/1000BASE-T PoE+( 10/100/1000BASE-T PoE+( Dual Personality Ports: ) or SFP( T ) or SFP( T ) S S ) Aux Port Aux Port 10/100/1000 BASE-T PoE+ Ports (1-48 10/100/1000 BASE-T Ports (1-24T) 10/100/1000 BASE-T PoE+ Ports (1-48 10/100/1000 BASE-T Ports (1-24T) T T ) )
Spd Spd PoE PoE Usr Usr Back Back UID UID
LED Mode LED Mode Reset Clear Status Console Reset Clear Status Console
Mgmt Mgmt
2930M 2930M
JL322A JL322A
Console Console
Dual Personality Ports: Dual Personality Ports: Aux Port Aux Port 10/100/1000 BASE-T PoE+ Ports (1-48 10/100/1000 BASE-T PoE+ Ports (1-48 T T ) )
10/100/1000BASE-T PoE+( 10/100/1000BASE-T PoE+( ) or SFP( ) or SFP( T T S S ) )
Spd Spd PoE PoE Usr Usr Back Back UID UID
LED Mode LED Mode Reset Clear Status Console Reset Clear Status Console
Mgmt Mgmt 2930M 2930M
JL323A JL323A JL323A JL323A
Console Console
Dual Personality Ports: 10/100/1000BASE-T PoE+( 10/100/1000BASE-T PoE+( Dual Personality Ports: T ) or SFP( T ) or SFP( S S ) ) Aux Port Aux Port HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-8) HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-8) 10/100/1000 BASE-T PoE+ Ports (1-48 10/100/1000 BASE-T PoE+ Ports (1-48 T T ) )
Spd Spd PoE PoE Usr Usr Back Back UID UID
LED Mode LED Mode Reset Clear Status Console Reset Clear Status Console
Mgmt Mgmt
2930M 2930M
JL322A JL322A
Console Console
Aux Port Aux Port HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-24) HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-24) 10/100/1000 BASE-T PoE+ Ports (1-48 10/100/1000 BASE-T PoE+ Ports (1-48 T T ) )
Spd Spd PoE PoE Usr Usr Back Back UID UID
LED Mode LED Mode Reset Clear Status Console Reset Clear Status Console
Mgmt Mgmt
2930M 2930M
JL319A JL319A
Console Console
Dual Personality Ports: Dual Personality Ports: Aux Port Aux Port 10/100/1000 BASE-T Ports (1-24T) 10/100/1000 BASE-T Ports (1-24T) Speed Mode: Speed Mode: Of = 10 or 100 Mbps Of = 10 or 100 Mbps Slow Flash = 1 Gbps Slow Flash = 1 Gbps 2X Flash = 2.5 Gbps 2X Flash = 2.5 Gbps 3x Flash = 5 Gbps 3x Flash = 5 Gbps On =10Gbps On =10Gbps Fast Flash = 40 Gbps Fast Flash = 40 Gbps
10/100/1000BASE-T PoE+( 10/100/1000BASE-T PoE+( ) or SFP( T ) or SFP( T ) S ) S
Spd Spd PoE PoE Usr Usr Back Back UID UID
LED Mode LED Mode Reset Clear Status Console Reset Clear Status Console
Mgmt Mgmt
2930M 2930M
JL320A JL320A
Console Console
10/100/1000BASE-T PoE+( Dual Personality Ports: Dual Personality Ports: 10/100/1000BASE-T PoE+( ) or SFP( T ) or SFP( T S ) S ) Aux Port Aux Port 10/100/1000 BASE-T PoE+ Ports (1-48 10/100/1000 BASE-T PoE+ Ports (1-48 T T ) )
Spd Spd PoE PoE Usr Usr Back Back UID UID
LED Mode LED Mode Reset Clear Status Console Reset Clear Status Console
Mgmt Mgmt
2930M 2930M
JL321A JL321A
Console Console
Dual Personality Ports: Dual Personality Ports: Aux Port Aux Port 10/100/1000 BASE-T PoE+ Ports (1-48 10/100/1000 BASE-T PoE+ Ports (1-48 10/100/1000 BASE-T Ports (1-24T) 10/100/1000 BASE-T Ports (1-24T) T T ) )
10/100/1000BASE-T PoE+( 10/100/1000BASE-T PoE+( ) or SFP( T T ) or SFP( S ) ) S
Spd Spd PoE PoE Usr Usr Back Back UID UID
LED Mode LED Mode Reset Clear Status Console Reset Clear Status Console
Mgmt Mgmt
2930M 2930M
JL322A JL322A
Console Console
10/100/1000BASE-T PoE+( Dual Personality Ports: 10/100/1000BASE-T PoE+( Dual Personality Ports: ) or SFP( ) or SFP( T T ) S ) S Aux Port Aux Port 10/100/1000 BASE-T PoE+ Ports (1-48 10/100/1000 BASE-T PoE+ Ports (1-48 T T ) )
Spd Spd PoE PoE Usr Usr Back Back UID UID
LED Mode LED Mode Reset Clear Status Console Reset Clear Status Console
Mgmt Mgmt
2930M 2930M
JL323A JL323A JL323A JL323A
Console Console
Dual Personality Ports: Dual Personality Ports: Aux Port Aux Port HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-8) HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-8) 10/100/1000 BASE-T PoE+ Ports (1-48 10/100/1000 BASE-T PoE+ Ports (1-48 T T ) )
10/100/1000BASE-T PoE+( 10/100/1000BASE-T PoE+( ) or SFP( T ) or SFP( T S ) S )
Spd Spd PoE PoE Usr Usr Back Back UID UID
LED Mode LED Mode Reset Clear Status Console Reset Clear Status Console
Mgmt Mgmt
2930M 2930M
JL322A JL322A
Console Console
Aux Port Aux Port HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-24) HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-24) 10/100/1000 BASE-T PoE+ Ports (1-48 10/100/1000 BASE-T PoE+ Ports (1-48 T T ) )
Local infrastructure device.
Desk and conference phones, security cameras, and room media
systems.
Users connecting from a healthy and managed device can stay
local to the Aruba switch.
Users connecting from an unmanaged or potentially untrusted
device can be tunneled.
Tunnel new or unknown devices, potentially untrusted devices used
for profiling, potential onboarding, guest registration, and
quarantine.
Guest users to DMZ guest network.
Spd Spd PoE PoE Usr Usr Back Back UID UID
LED Mode LED Mode Reset Clear Status Console Reset Clear Status Console
Mgmt Mgmt
2930M 2930M
JL319A JL319A
Console Console
Dual Personality Ports: Dual Personality Ports:
10/100/1000BASE-T PoE+( 10/100/1000BASE-T PoE+( T T ) or SFP( ) or SFP( ) ) S S Aux Port Aux Port
Spd Spd PoE PoE Usr Usr Back Back UID UID
LED Mode LED Mode Reset Clear Status Console Reset Clear Status Console
Mgmt Mgmt
2930M 2930M
JL320A JL320A
Console Console
Dual Personality Ports: Dual Personality Ports: Aux Port Aux Port
10/100/1000BASE-T PoE+( 10/100/1000BASE-T PoE+( ) or SFP( T ) or SFP( T S ) S )
Spd Spd PoE PoE Usr Usr Back Back UID UID
LED Mode LED Mode Reset Clear Status Console Reset Clear Status Console
Mgmt Mgmt
2930M 2930M
JL321A JL321A
Console Console
Dual Personality Ports: Dual Personality Ports:
10/100/1000BASE-T PoE+( 10/100/1000BASE-T PoE+( ) or SFP( T ) or SFP( T ) ) S S Aux Port Aux Port
Spd Spd PoE PoE Usr Usr Back Back UID UID
LED Mode LED Mode Reset Clear Status Console Reset Clear Status Console
Mgmt Mgmt
2930M 2930M
JL322A JL322A
Console Console
Dual Personality Ports: Dual Personality Ports: Aux Port Aux Port
10/100/1000BASE-T PoE+( 10/100/1000BASE-T PoE+( T ) or SFP( ) or SFP( T S ) S )
Spd Spd PoE PoE Usr Usr Back Back UID UID
LED Mode LED Mode Reset Clear Status Console Reset Clear Status Console
Mgmt Mgmt
2930M 2930M
JL323A JL323A JL323A JL323A
Console Console
Dual Personality Ports: Dual Personality Ports:
10/100/1000BASE-T PoE+( 10/100/1000BASE-T PoE+( ) or SFP( T ) or SFP( T S ) S ) Aux Port Aux Port
Spd Spd PoE PoE Usr Usr Back Back UID UID
LED Mode LED Mode Reset Clear Status Console Reset Clear Status Console
Mgmt Mgmt
2930M 2930M
JL322A JL322A
Console Console
Aux Port Aux Port
Spd Spd PoE PoE Usr Usr Back Back UID UID
LED Mode LED Mode Reset Clear Status Console Reset Clear Status Console
Mgmt Mgmt
2930M 2930M
JL319A JL319A
Console Console
Dual Personality Ports: Dual Personality Ports: Aux Port Aux Port
10/100/1000BASE-T PoE+( 10/100/1000BASE-T PoE+( T ) or SFP( T ) or SFP( S ) ) S
Spd Spd PoE PoE Usr Usr Back Back UID UID
LED Mode LED Mode Reset Clear Status Console Reset Clear Status Console
Mgmt Mgmt
2930M 2930M
JL320A JL320A
Console Console
Dual Personality Ports: Dual Personality Ports:
10/100/1000BASE-T PoE+( 10/100/1000BASE-T PoE+( ) or SFP( ) or SFP( T T ) S ) S Aux Port Aux Port
Spd Spd PoE PoE Usr Usr Back Back UID UID
LED Mode LED Mode Reset Clear Status Console Reset Clear Status Console
Mgmt Mgmt
2930M 2930M
JL321A JL321A
Console Console
Dual Personality Ports: Dual Personality Ports: Aux Port Aux Port
10/100/1000BASE-T PoE+( 10/100/1000BASE-T PoE+( T ) or SFP( T ) or SFP( ) S ) S
Spd Spd PoE PoE Usr Usr Back Back UID UID
LED Mode LED Mode Reset Clear Status Console Reset Clear Status Console
Mgmt Mgmt
2930M 2930M
JL322A JL322A
Console Console
Dual Personality Ports: Dual Personality Ports:
10/100/1000BASE-T PoE+( 10/100/1000BASE-T PoE+( ) or SFP( T ) or SFP( T S ) ) S Aux Port Aux Port
Spd Spd PoE PoE Usr Usr Back Back UID UID
LED Mode LED Mode Reset Clear Status Console Reset Clear Status Console
Mgmt Mgmt
2930M 2930M
JL323A JL323A JL323A JL323A
Console Console
Dual Personality Ports: Dual Personality Ports: Aux Port Aux Port
10/100/1000BASE-T PoE+( 10/100/1000BASE-T PoE+( ) or SFP( T ) or SFP( T S ) S )
Spd Spd PoE PoE Usr Usr Back Back UID UID
LED Mode LED Mode Reset Clear Status Console Reset Clear Status Console
Mgmt Mgmt
2930M 2930M
JL322A JL322A
Console Console
Aux Port Aux Port
Table Continued
611