Remote-access Guide

aruba rap 3 remote access point installation guide

by Bryana Upton Published 2 years ago Updated 2 years ago
image

How do I add an Access Point to my Aruba controller?

To add an Instant AP to the network:Navigate to the Configuration > Access Points page.Click + in the Access Points table.In the New Access Point window, enter the MAC. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address for the new Instant AP.Click OK.

How do I connect to my Aruba RAP device?

0:332:26Aruba: How to set up your remote access point - YouTubeYouTubeStart of suggested clipEnd of suggested clipSo it can stand on its own like. This next find an Ethernet port on your wrap labeled e0. Take oneMoreSo it can stand on its own like. This next find an Ethernet port on your wrap labeled e0. Take one end of your Ethernet cable and plug it in until you hear it click into place.

How do you set up rap?

Navigate to Configuration > AP Installation (under Wireless.) Select the required remote AP under the Provisioning tab and then click Provision. Select Yes for Remote AP and Certificate for Remote AP Authentication Method. Click Apply and Reboot to apply the configuration and reboot the AP as certificate RAP.

What is an Aruba RAP device?

The multifunctional Aruba RAP-3 delivers secure 802.11n wireless and wired network access to corporate resources from branch and home offices. Centrally managed by Aruba Mobility Controllers, the RAP-3 extends corporate resources to remote locations by establishing site-to-site VPN tunnels to the data center.

How do I setup a remote access point?

0:482:26Remote access point set-up demo - YouTubeYouTubeStart of suggested clipEnd of suggested clipAnd plug it in until you hear it click into place. Now you need to locate an empty Ethernet port onMoreAnd plug it in until you hear it click into place. Now you need to locate an empty Ethernet port on your home router or modem and plug in the other end of the ethernet cable.

What is Aruba Remote Access Point?

Aruba Remote Access Points (RAPs) provide secure always-on network access to corporate enterprise resources from remote locations.

Is Aruba RAP in a router?

Aruba Networks RAP-5WN Wireless Router - IEEE 802.11n.

What is a rap network?

RAP is an open distance vector routing protocol that allows the routing information of devices used in computer networks to be distributed from Internet Service Provider (ISP) systems to LAN and WAN environments with devices with Internet connectivity.

What is the differences between remote access and site to site VPN?

A remote access VPN connects remote users from any location to a corporate network. A site-to-site VPN, meanwhile, connects individual networks to each other.

How do Aruba raps work?

Any Aruba access point can be provisioned to operate as a RAP. The purpose of deploying a RAP is to leverage the wireless and wired features of an Aruba access point from a remote location across the Internet. The RAP is configured to use IPsec to connect to a Mobility Controller's public IP over UDP 4500 for NAT-T.

How do I use Aruba network?

Connect the power cable to the power supply.Connect the power cable to the Aruba AP and plug the power into power.Connect the provided network cable to the black E0/PT connection on the bottom of the Aruba AP. ... Connect the other end of the network cable into an open port on your wireless router.More items...•

How can I start Aruba at home?

1:063:17Aruba Instant On Home - Setting Up Your Home Network - YouTubeYouTubeStart of suggested clipEnd of suggested clipAnd you are ready to start configuring your network. Type in your wireless. Network name and set aMoreAnd you are ready to start configuring your network. Type in your wireless. Network name and set a password. Set your country name your site. And click on activate. Site the network is now ready.

What is Aruba Activate?

Activate is a kick-start for your Aruba Instant deployment. Activate enables a network installer to simply plug a new Instant Access Point into an internet connection anywhere in the world, plug in power (or PoE), wait for the AP's radio LEDs to light up and move on to the next location!

How to connect a Rap 3?

To complete the installation of the RAP-3: 1. Connect one end of the provided RJ-45 cable to port E0 on the RAP-3. 2. Connect the other end of the RJ-45 cabl e to a free RJ-45 port on your modem.

How long is Aruba hardware warranty?

This hardware product is protected by the standard Aruba warrant y of one year parts/labor. For more informat ion,

What is the default username for Instant WebUI?

to the Instant WebUI. The default username is admin and the default

Does a D-Evice have an on/off switch?

does not have an On/ Off switch. The d evice turns on when the power adapter is

Is the Rap 3 powered on?

The RAP-3 is now powered on. To verify this, ensu re that the PWR LED is solid

Does the Rap 3 ship with Aruba?

The RAP-3 ships with Aruba Instant software. Therefore, out of the box, the

Does the Rap 3WNP come with a power cord?

Place the RAP-3 in the stand (see Figure 5) and place the stand on a flat, level surface. Top View The 48V power adapter that ships with the RAP-3WNP does not come with a country specific power cord. This cord must be ordered separately.

Is the Rap 3 a VC?

The RAP-3 ships with Aruba Instant software. Therefore, out of the box, the RAP-3 will operate as a Virtual Controller (VC) or an Instant AP. However, the RAP-3 can be converted to operate as a Remote AP (RAP). For information about the IAP to RAP conversion, see RAP Conversion.

What port do RAPs connect to?

RAPs connect to the controller on UDP port 4500 for establishing the IPsec connection. So this port should be opened on all the firewalls leading up to the controllers in the DMZ.

How does a rap connect to a controller?

1. A RAP initiates an IPsec connection to the specified FQDN or public IP address of the controller in the DMZ over any public network. This connection is analogous to the VPN connection initiated by a VPN client on a laptop or desktop to a VPN concentrator. However, for a RAP, there is no single user to be authenticated. Instead, the RAP itself is authenticated on the controller either by using a preprovisioned user name and password on the RAP or by using certificates installed on the RAP. After the RAP is authenticated, the controller assigns an inner IP address to the RAP and an IPsec tunnel is established. 2. A key difference between the Aruba VBN solution and a branch router network is that all configurations are centralized and uploaded to the RAP in real time. No remote configuration is required. After RAP authentication is completed by the controller and the IPsec tunnel has been established, all communication between the controller and the RAP occurs through this secure channel. This encrypted tunnel is now used to download and upgrade the image on the RAP and then to push the RAP configuration from the controller to the RAP. This configuration includes all security settings, firewall roles and policies, wired port policies, and wireless LAN (WLAN) policies. This process is referred to as “bootstrapping” the RAP. 3. After the RAP has bootstrapped successfully to a controller, the RAP applies the configuration it has received to the wired ports and wireless interfaces. Users and devices can now connect to the wired ports and wireless Service Set Identifiers (SSIDs) configured on the RAP during the bootstrap process. The wired ports and RAPs can be configured to provide role-based access control (RBAC). For information on the authentication and encryption types supported on the ArubaOS, see theAruba 802.11n Networks Validated Reference Design. The deployment scenario in this VRD portrays the needs of most remote deployments. However, the requirements of each organization are different. Your network may differ from the VRD example network in these ways:

What is a certificate for Aruba?

The Aruba controller comes with a default server certificate . This certificate demonstrates the secure login process of the controller for captive portal, secure shell (SSH), and WebUI management access. This certificate is not for use in a production network. Aruba strongly recommends that you replace this certificate with a unique certificate that is issued to the organization or its domain by a trusted certificate authority (CA). To receive a custom certificate from a trusted CA, generate a Certificate Signing Request (CSR) on the controller and submit it to the CA. After you receive the digitally signed certificate from the CA, import it to the controller. For more details about generating the CSR and importing certificates, see “Managing Certificates” in theArubaOS 6.1 User Guideavailable on the Aruba support site.

What is Aruba VRD?

The Aruba Validated Reference Design (VRD) series is a collection of technology deployment guides that include descriptions of Aruba technology, recommendations for product selections, network design decisions, configuration procedures, and best practices for deployment. Together these guides comprise a reference model for understanding Aruba technology and designs for common customer deployment scenarios. Each Aruba VRD network design has been constructed in a lab environment and thoroughly tested by Aruba engineers. Our customers use these proven designs to rapidly deploy Aruba solutions in production with the assurance that they will perform and scale as expected. The VRD series focuses on particular aspects of Aruba technologies and deployment models. Together the guides provide a structured framework to understand and deploy Aruba wireless LANs (WLANs). The VRD series has four types of guides:

How many layers are there in Aruba?

Aruba remote networks have a logical four-tier operating model that consists of these four layers:

What is remote user?

Users who work from locations other than the organization’s primary campus, headquarters facility, or large regional office are called “remote users.” Remote users typically work from home offices, small satellite offices, medium-sized branch offices, or on the road from hotels, hot spots, or customer locations. Each of these remote locations has different connectivity, capacity, and usage requirements. In general, we can categorize the remote deployments as follows:

Why can't M3 controllers be placed in the same chassis?

M3 controllers that are redundant should not be placed in the same chassis, because a chassis failure will cause the redundancy architecture to fail.

image
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 1 2 3 4 5 6 7 8 9