Remote-access Guide

aruba networks remote access point configuration

by Meta Rolfson Published 2 years ago Updated 1 year ago
image

1. Navigate to Configuration > AP Installation (under Wireless.) 2. Select the required remote AP under the Provisioning tab and then click Provision. 3. Select Yes for Remote AP and Certificate for Remote AP Authentication Method. 4. Click Apply and Reboot to apply the configuration and reboot the AP as certificate RAP.

Navigate to Configuration > AP Installation (under Wireless.) Select the required remote AP under the Provisioning tab and then click Provision. Select Yes for Remote AP and Certificate for Remote AP Authentication Method. Click Apply and Reboot to apply the configuration and reboot the AP as certificate RAP.

Full Answer

How to configure Aruba access points as a secure remote access point service?

Make sure that the L2TP IP pool configured on the local controller (from which the remote AP obtains its address) is reachable in the network by the master controller. The tasks for configuring an Aruba Access Points as a Secure Remote Access Point Service are: Configure a public IP address for the controller.

What is the secure remote access point service?

The Secure Remote Access Point Service allows AP users, at remote locations, to connect to a n Aruba Managed Device over the Internet. As the Internet is involved, data traffic between the Managed Device and the remote AP

What types of APS does Aruba offer?

With a high-performance AP portfolio that covers all sorts of use cases and price points. Aruba Wi-Fi 5 and Wi-Fi 6 APs include enterprise, branch, plug-and-play for remote workers, outdoor, and hardened versions for a wide-range of use cases and price points.

When should I deploy an IPSec VPN tunnel in Aruba?

(Aruba recommends this deployment when AP-to-controllercommunications on a private network need to be secured.) In this scenario, the remote AP uses the controller’s IP address on the private network to establish the IPSec VPN tunnel.

image

How do I configure my Aruba Access Point?

Aruba Central - How to Configure AP SettingsClick Configuration, Wireless.Select a group and then click Access Points. ... Click the AP that user want to customize.Click Edit. ... Configure the parameters described in table below as required and then click Save Settings. ... Click Save Settings and reboot the AP.

What is Aruba remote Access Point?

Aruba Remote Access Points (RAPs) provide secure always-on network access to corporate enterprise resources from remote locations.

How do I setup my home network with access points in Aruba?

Connect the power cable to the power supply.Connect the power cable to the Aruba AP and plug the power into power.Connect the provided network cable to the black E0/PT connection on the bottom of the Aruba AP. ... Connect the other end of the network cable into an open port on your wireless router.More items...•

How do I add an Access Point to my Aruba controller?

To add an Instant AP to the network:Navigate to the Configuration > Access Points page.Click + in the Access Points table.In the New Access Point window, enter the MAC. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address for the new Instant AP.Click OK.

What is the differences between remote access and site to site VPN?

A remote access VPN connects remote users from any location to a corporate network. A site-to-site VPN, meanwhile, connects individual networks to each other.

Are Aruba access points good?

Access point Aruba is very reliable, efficient and stable. In the organization, we use the IAP version, which does not require a physical controller. All access points are managed from the central AirWave server, which also monitors devices and wifi networks.

What is the default IP address of Aruba access point?

The default IP address of the controller is 172.16. 0.254. Connect a PC or workstation to any line port on the controller, then enter this IP address into a supported Web browser to launch the Setup Wizard. To run the Setup Wizard: 1.

How do I set a static IP in Aruba AP?

Assigning a Static IP Connect a terminal, PC, or workstation running a terminal emulation program to the Console port on the IAP. 2. Power on the IAP. An autoboot countdown prompt that allows you to interrupt the normal startup process and access apboot is displayed.

How do I change my IP address on my Aruba access point?

To change the IP address of IAP:In the Access Points tab, click the IAP to modify. The edit link is displayed.Click the edit link. The edit window for modifying IAP details is displayed. ... Select either the Get IP address from DHCP server or Specify statically option.

Do Aruba APs need a controller?

Aruba Instant is a wireless access point operating system and platform that does not require the purchase of hardware/virtual controllers for deployment.

How do you associate AP with a controller?

0:598:38Lightweight Access Point Registration with Wireless LAN Controller (WLC)YouTubeStart of suggested clipEnd of suggested clipProcess first the AP needs to get an IP. Address. Next the access point needs to find candidateMoreProcess first the AP needs to get an IP. Address. Next the access point needs to find candidate controllers to which it can register.

How do I add an access point?

Simply connect the access point to one of the ports of your existing wired/wireless router then configure the access point's wireless settings.Open the access point's web-based setup page by entering the default IP Address “192.168. ... On the web-based setup page, click on Wireless.Enter the Network Name (SSID).More items...

What is IAP in Aruba?

An Ethernet port with routable connectivity to the Internet or a self-enclosed network is used for deploying an Instant Wireless Network. A n Instant Access Point (IAP) can be installed at a single site or deployed across multiple geographically-dispersed locations.

What is an Aruba RAP device?

The multifunctional Aruba RAP-3 delivers secure 802.11n wireless and wired network access to corporate resources from branch and home offices. Centrally managed by Aruba Mobility Controllers, the RAP-3 extends corporate resources to remote locations by establishing site-to-site VPN tunnels to the data center.

Can Aruba connect to WIFI?

The Aruba Instant On Solution requires you to connect Aruba Instant On APs to your wired network that provides internet connectivity. 1. Private Network Mode—Power on the Aruba Instant On AP using the power adapter or using a Power over Ethernet (PoE) port on a PoE capable switch.

How do I access my Aruba router?

Aruba Networks Router Login GuideOpen your internet browser (e.g. Chrome, Firefox, Opera or Internet Explorer)Click HERE to auto detect your router IP. ... You should see 2 text fields where you can enter a username and a password.The default username for your Aruba Networks router is admin.More items...

What is remote AP?

The remote AP requires an IP address to which it can connect to establish a VPN tunnel to the controller. This can be either a routable IP address you configure on the controller, or the address of an external router or firewall that forwards traffic to the controller.

How to configure L2TP IP pool?

To configure the L2TP IP pool, click Add in the Address Pools section. Configure the L2TP pool from which the APs will be assigned addresses, then click Done.

How to provision an AP?

The easiest way to provision an AP is to use the Provisioning page in the WebUI, as described in the following steps: 1. Navigate to the Configuration > Wireless > AP Installation > Provisioning page. Select the remote AP and click Provision. 2.

How to find IP address parameter in local database?

To view IP address parameter in the local database, navigate to the Configuration > Security > Authentication > Servers > Internal DB page .

What port does a secure controller use?

Communication between the AP and the secure controller uses the UDP 4500 port. When both the controller and the AP are behind NAT devices, configure the AP to use the NAT device’s public address as its master address. On the NAT device, you must enable NAT-T (UDP port 4500 only) and forward all packets to the public address of the NAT device on UDP port 4500 to the controller to ensure that the remote AP boots successfully.

What port is NAT T?

On the NAT device, you must enable NAT-T (UDP port 4500 only) and forward all packets to the public address of the NAT device on UDP port 4500 to the controller to ensure that the remote AP boots successfully.

Can a rap be authenticated?

RAPs can now establish a PPPoE session with a PPPoE server at the ISP side and get authenticated using the Challenge Handshake Authentication Protocol (CHAP). The PPPoE client running on a RAP is capable of handling the CHAP authentication requests from the PPPoE server.

Configure a Public IP Address for the Mobility Master

The remote AP requires an IP address to which it can connect to establish a VPN tunnel to the Mobility Master. This can be either a routable IP address you configure on the Mobility Master, or the address of an external router or firewall that forwards traffic to the Mobility Master.

Configure the NAT Device

Communication between the AP and the secure Mobility Master uses the UDP 4500 port. When both the Mobility Master and the AP are behind NAT devices, configure the AP to use the NAT device’s public address as its master address.

Configure the VPN Server

This section describes how to configure the IPsec VPN server on the Mobility Master. For more details, see Virtual Private Networks. The remote AP will be a VPN client that connects to the VPN server on the Mobility Master.

CHAP Authentication Support over PPPoE

RAPs can now establish a PPPoE session with a PPPoE server at the ISP side and get authenticated using the Challenge Handshake Authentication Protocol (CHAP). The PPPoE client running on a RAP is capable of handling the CHAP authentication requests from the PPPoE server.

Configuring Certificate RAP

You can configure the remote AP to use the internal certificate for authentication. You can use the WebUI or CLI to configure the certificate RAP.

Configuring PSK RAP

You can use Pre-Shared Key (PSK) authentication to provision an individual remote AP or a group of remote APs using an Internet Key Exchange Pre-Shared Key (IKE PSK).

RAP Static Inner IP Address

The RAP static inner IP address feature assigns a static inner IP address to a remote access point (RAP). A new remote-IP address parameter is added to the existing configuration commands.

Configure a Public IP Address for the Controller

The remote AP requires an IP address to which it can connect to establish a VPN tunnel to the controller. This can be either a routable IP address you configure on the controller, or the address of an external router or firewall that forwards traffic to the controller. The following procedure describes how to create a DMZ address on the controller.

Configure the NAT Device

Communication between the AP and the secure controller uses the UDP 4500 port. When both the controller and the AP are behind NAT devices, configure the AP to use the NAT device’s public address as its master address.

Configure the VPN Server

This section describes how to configure the IPSec VPN server on the controller. For more details, see Virtual Private Networks. The remote AP will be a VPN client that connects to the VPN server on the controller.

CHAP Authentication Support over PPPoE

RAPs can now establish a PPPoE session with a PPPoE server at the ISP side and get authenticated using the Challenge Handshake Authentication Protocol (CHAP). The PPPoE client running on a RAP is capable of handling the CHAP authentication requests from the PPPoE server.

Configuring Certificate RAP

You can configure the remote AP to use the internal certificate for authentication. You can use the WebUI or CLI to configure the certificate RAP.

Configuring PSK RAP

You can use Pre-Shared Key (PSK) authentication to provision an individual remote AP or a group of remote APs using an Internet Key Exchange Pre-Shared Key (IKE PSK).

RAP Static Inner IP Address

The RAP static inner IP address feature assigns a static inner IP address to a remote access point (RAP). A new remote-IP address parameter is added to the existing configuration commands.

What is Wi-Fi 5 in Aruba?

Aruba Wi-Fi 5 and Wi-Fi 6 APs include enterprise, branch, plug-and-play for remote workers, outdoor, and hardened versions for a wide-range of use cases and price points.

What is the difference between WPA3 and PEF?

WPA3 and Enhanced Open improve user and guest encryption, while PEF uses role-based access control and DPI to isolate and segment traffic. Aruba ESP enables Zero Trust Network Security for devices and IoT.

Can you work from home in Aruba?

Work from home or set up a temporary site with a solution that’s easy to deploy and manage. Aruba access points are automatically configured, so employees just plug them into any existing Internet connection and they’re ready to go.

image
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 1 2 3 4 5 6 7 8 9