Contents. Aruba Instant 6.5.2.0, RAP-155, IAP-207, RAP-108, IAP-305, Instant
Add to My manuals466 Pages
advertisement
Contents
About this Guide
About Aruba Instant
Setting up an IAP
Automatic Retrieval of Configuration
Configuring Managed Mode Parameters
Instant User Interface
Initial Configuration Tasks
Aruba Instant 6.5.2.0 | User Guide
Contents
31
19
28
60
3
12
14
Contents | 3
4 | Contents
Customizing IAP Settings
Configuring Zone Settings on an IAP
Specifying a Method for Obtaining IP Address
Configuring Radio Profiles for an IAP
Configuring Uplink VLAN for an IAP
Changing the IAP Installation Mode
Master Election and Virtual Controller
Removing an IAP from the Network
Support for BLE Asset Tracking
Transmit Power Calculation Support on 200 Series and 300 Series Access Points
VLAN Configuration
Uplink VLAN Monitoring and Detection on Upstream Devices
IPv6 Support
Enabling IPv6 Support for IAP Configuration
Wireless Network Profiles
Configuring Wireless Network Profiles
Configuring Fast Roaming for Wireless Clients
Aruba Instant 6.5.2.0 | User Guide
67
84
88
85
Configuring Modulation Rates on a WLAN SSID
Disabling Short Preamble for Wireless Client
Editing Status of a WLAN SSID Profile
Wired Profiles
Assigning a Profile to Ethernet Ports
Link Aggregation Control Protocol
Understanding Hierarchical Deployment
Captive Portal for Guest Access
Configuring a WLAN SSID for Guest Access
Configuring Wired Profile for Guest Access
Configuring Internal Captive Portal for Guest Network
Configuring External Captive Portal for a Guest Network
Configuring Guest Logon Role and Access Rules for Guest Users
Configuring Captive Portal Roles for an SSID
Configuring Walled Garden Access
Authentication and User Management
Supported Authentication Methods
Supported EAP Authentication Frameworks
Configuring Authentication Servers
Aruba Instant 6.5.2.0 | User Guide
122
146
113
Contents | 5
6 | Contents
Understanding Encryption Types
Configuring Authentication Survivability
Configuring 802.1X Authentication for a Network Profile
Enabling 802.1X Supplicant Support
Configuring MAC Authentication for a Network Profile
Configuring MAC Authentication with 802.1X Authentication
Configuring MAC Authentication with Captive Portal Authentication
Configuring WISPr Authentication
Roles and Policies
Using Advanced Expressions in Role and VLAN Derivation Rules
DHCP Configuration
Configuring the Default DHCP Scope for Client IP Assignment
Configuring Time-Based Services
Configuring a Time Range Profile
Applying a Time Range Profile to a WLAN SSID
Dynamic DNS Registration
Configuring Dynamic DNS Updates for DL3 Clients
226
223
185
214
Aruba Instant 6.5.2.0 | User Guide
VPN Configuration
Configuring a Tunnel from an IAP to a Mobility Controller
IAP-VPN Deployment
Understanding IAP-VPN Architecture
Configuring IAP and Controller for IAP-VPN Operations
Adaptive Radio Management
Configuring ARM Features on an IAP
Deep Packet Inspection and Application Visibility
Enabling Application Visibility
Configuring ACL Rules for Application and Application Categories
Configuring Web Policy Enforcement Service
Voice and Video
Wi-Fi Multimedia Traffic Management
Media Classification for Voice and Video Calls
Enabling Enhanced Voice Call Tracking
Services
Configuring an IAP for RTLS Support
Configuring an IAP for Analytics and Location Engine Support
Configuring OpenDNS Credentials
Aruba Instant 6.5.2.0 | User Guide
276
282
265
229
243
254
Contents | 7
8 | Contents
Integrating an IAP with Palo Alto Networks Firewall
Integrating an IAP with an XML API Interface
CALEA Integration and Lawful Intercept Compliance
Cluster Security
Cluster Security Debugging Logs
IAP Management and Monitoring
Managing IAP from Aruba Central
Uplink Configuration
Uplink Preferences and Switching
Intrusion Detection
Detecting and Classifying Rogue IAPs
Configuring Wireless Intrusion Protection and Detection Levels
Mesh IAP Configuration
Setting up Instant Mesh Network
Configuring Wired Bridging on Ethernet 0 for Mesh Point
Mobility and Client Management
Spectrum Monitor
Configuring Spectrum Monitors and Hybrid IAPs
341
333
344
347
307
310
323
Aruba Instant 6.5.2.0 | User Guide
IAP Maintenance
Backing up and Restoring IAP Configuration Data
Converting an IAP to a Remote AP and Campus AP
Resetting a Remote AP or Campus AP to an IAP
Monitoring Devices and Logs
Hotspot Profiles
Understanding Hotspot Profiles
Mobility Access Switch Integration
Mobility Access Switch Overview
Configuring IAPs for Mobility Access Switch Integration
ClearPass Guest Setup
Verifying ClearPass Guest Setup
IAP-VPN Deployment Scenarios 402
Scenario 1—IPsec: Single Datacenter Deployment with No Redundancy
Scenario 2—IPsec: Single Datacenter with Multiple Controllers for Redundancy
Scenario 4—GRE: Single Datacenter Deployment with No Redundancy 421
396
379
367
394
355
Aruba Instant 6.5.2.0 | User Guide Contents | 9
Glossary of Terms 427
10 | Contents Aruba Instant 6.5.2.0 | User Guide
Revision History
The following table lists the revisions of this document.
Table 1: Revision History
Revision
Revision 01
Change Description
Initial release.
Aruba Instant 6.5.2.0 | User Guide Contents | 11
advertisement
Related manuals
advertisement
Table of contents
- 3 Contents
- 11 Revision History
- 12 About this Guide
- 12 Intended Audience
- 12 Related Documents
- 12 Conventions
- 13 Contacting Support
- 14 About Aruba Instant
- 14 Instant Overview
- 17 What is New in this Release
- 19 Setting up an IAP
- 19 Setting up Instant Network
- 20 Provisioning an IAP
- 23 Logging in to the Instant UI
- 24 Accessing the Instant CLI
- 28 Automatic Retrieval of Configuration
- 28 Managed Mode Operations
- 28 Prerequisites
- 29 Configuring Managed Mode Parameters
- 30 Verifying the Configuration
- 31 Instant User Interface
- 31 Login Screen
- 32 Main Window
- 60 Initial Configuration Tasks
- 60 Configuring System Parameters
- 66 Changing Password
- 67 Customizing IAP Settings
- 67 IAP Discovery Logic
- 72 Modifying the IAP Host Name
- 72 Configuring Zone Settings on an IAP
- 73 Specifying a Method for Obtaining IP Address
- 73 Configuring External Antenna
- 75 Configuring Radio Profiles for an IAP
- 76 Enabling Flexible Radio
- 77 Configuring Uplink VLAN for an IAP
- 77 Changing the IAP Installation Mode
- 78 Changing USB Port Status
- 79 Master Election and Virtual Controller
- 80 Adding an IAP to the Network
- 81 Removing an IAP from the Network
- 81 Support for BLE Asset Tracking
- 82 Intelligent Power Monitoring
- 83 Transmit Power Calculation Support on 200 Series and 300 Series Access Points
- 84 VLAN Configuration
- 84 VLAN Pooling
- 84 Uplink VLAN Monitoring and Detection on Upstream Devices
- 85 IPv6 Support
- 85 IPv6 Notation
- 85 Enabling IPv6 Support for IAP Configuration
- 87 Firewall Support for IPv6
- 87 Debugging Commands
- 88 Wireless Network Profiles
- 88 Configuring Wireless Network Profiles
- 106 Configuring Fast Roaming for Wireless Clients
- 110 Configuring Modulation Rates on a WLAN SSID
- 110 Multi-User-MIMO
- 111 Management Frame Protection
- 111 Disabling Short Preamble for Wireless Client
- 112 Editing Status of a WLAN SSID Profile
- 112 Editing a WLAN SSID Profile
- 112 Deleting a WLAN SSID Profile
- 113 Wired Profiles
- 113 Configuring a Wired Profile
- 118 Assigning a Profile to Ethernet Ports
- 118 Editing a Wired Profile
- 119 Deleting a Wired Profile
- 119 Link Aggregation Control Protocol
- 121 Understanding Hierarchical Deployment
- 122 Captive Portal for Guest Access
- 122 Understanding Captive Portal
- 123 Configuring a WLAN SSID for Guest Access
- 128 Configuring Wired Profile for Guest Access
- 129 Configuring Internal Captive Portal for Guest Network
- 132 Configuring External Captive Portal for a Guest Network
- 138 Configuring Facebook Login
- 139 Configuring Guest Logon Role and Access Rules for Guest Users
- 141 Configuring Captive Portal Roles for an SSID
- 143 Configuring Walled Garden Access
- 146 Authentication and User Management
- 146 Managing IAP Users
- 151 Supported Authentication Methods
- 152 Supported EAP Authentication Frameworks
- 153 Configuring Authentication Servers
- 167 Understanding Encryption Types
- 168 Configuring Authentication Survivability
- 170 Configuring 802.1X Authentication for a Network Profile
- 172 Enabling 802.1X Supplicant Support
- 173 Configuring MAC Authentication for a Network Profile
- 175 Configuring MAC Authentication with 802.1X Authentication
- 177 Configuring MAC Authentication with Captive Portal Authentication
- 178 Configuring WISPr Authentication
- 179 Blacklisting Clients
- 182 Uploading Certificates
- 185 Roles and Policies
- 185 Firewall Policies
- 198 Content Filtering
- 202 Configuring User Roles
- 204 Configuring Derivation Rules
- 211 Using Advanced Expressions in Role and VLAN Derivation Rules
- 214 DHCP Configuration
- 214 Configuring DHCP Scopes
- 221 Configuring the Default DHCP Scope for Client IP Assignment
- 223 Configuring Time-Based Services
- 223 Time Range Profiles
- 223 Configuring a Time Range Profile
- 224 Applying a Time Range Profile to a WLAN SSID
- 225 Verifying the Configuration
- 226 Dynamic DNS Registration
- 226 Enabling Dynamic DNS
- 227 Configuring Dynamic DNS Updates for DL3 Clients
- 227 Verifying the Configuration
- 229 VPN Configuration
- 229 Understanding VPN Features
- 230 Configuring a Tunnel from an IAP to a Mobility Controller
- 241 Configuring Routing Profiles
- 243 IAP-VPN Deployment
- 243 Understanding IAP-VPN Architecture
- 246 Configuring IAP and Controller for IAP-VPN Operations
- 254 Adaptive Radio Management
- 254 ARM Overview
- 255 Configuring ARM Features on an IAP
- 261 Configuring Radio Settings
- 265 Deep Packet Inspection and Application Visibility
- 265 Deep Packet Inspection
- 265 Enabling Application Visibility
- 266 Application Visibility
- 271 Enabling URL Visibility
- 271 Configuring ACL Rules for Application and Application Categories
- 274 Configuring Web Policy Enforcement Service
- 276 Voice and Video
- 276 Wi-Fi Multimedia Traffic Management
- 279 Media Classification for Voice and Video Calls
- 280 Enabling Enhanced Voice Call Tracking
- 282 Services
- 282 Configuring AirGroup
- 291 Configuring an IAP for RTLS Support
- 292 Configuring an IAP for Analytics and Location Engine Support
- 293 Managing BLE Beacons
- 294 Clarity Live
- 296 Configuring OpenDNS Credentials
- 296 Integrating an IAP with Palo Alto Networks Firewall
- 298 Integrating an IAP with an XML API Interface
- 301 CALEA Integration and Lawful Intercept Compliance
- 307 Cluster Security
- 307 Overview
- 308 Enabling Cluster Security
- 309 Cluster Security Debugging Logs
- 309 Verifying the Configuration
- 310 IAP Management and Monitoring
- 310 Managing an IAP from AirWave
- 321 Managing IAP from Aruba Central
- 323 Uplink Configuration
- 323 Uplink Interfaces
- 328 Uplink Preferences and Switching
- 333 Intrusion Detection
- 333 Detecting and Classifying Rogue IAPs
- 333 OS Fingerprinting
- 334 Configuring Wireless Intrusion Protection and Detection Levels
- 339 Configuring IDS
- 341 Mesh IAP Configuration
- 341 Mesh Network Overview
- 342 Setting up Instant Mesh Network
- 342 Configuring Wired Bridging on Ethernet 0 for Mesh Point
- 344 Mobility and Client Management
- 344 Layer-3 Mobility Overview
- 345 Configuring L3-Mobility
- 347 Spectrum Monitor
- 347 Understanding Spectrum Data
- 352 Configuring Spectrum Monitors and Hybrid IAPs
- 355 IAP Maintenance
- 355 Upgrading an IAP
- 358 Backing up and Restoring IAP Configuration Data
- 359 Converting an IAP to a Remote AP and Campus AP
- 365 Resetting a Remote AP or Campus AP to an IAP
- 365 Rebooting the IAP
- 367 Monitoring Devices and Logs
- 367 Configuring SNMP
- 370 Configuring a Syslog Server
- 372 Configuring TFTP Dump Server
- 373 Running Debug Commands
- 377 Uplink Bandwidth Monitoring
- 379 Hotspot Profiles
- 379 Understanding Hotspot Profiles
- 380 Configuring Hotspot Profiles
- 391 Sample Configuration
- 394 Mobility Access Switch Integration
- 394 Mobility Access Switch Overview
- 395 Configuring IAPs for Mobility Access Switch Integration
- 396 ClearPass Guest Setup
- 396 Configuring ClearPass Guest
- 400 Verifying ClearPass Guest Setup
- 401 Troubleshooting
- 402 IAP-VPN Deployment Scenarios
- 402 Scenario 1—IPsec: Single Datacenter Deployment with No Redundancy
- 408 Scenario 2—IPsec: Single Datacenter with Multiple Controllers for Redundancy
- 414 Scenario 3—IPsec: Multiple Datacenter Deployment with Primary and Backup Cont...
- 421 Scenario 4—GRE: Single Datacenter Deployment with No Redundancy
- 427 Glossary of Terms