AP-503

Aruba AP-503, AP-584, AP-585, AP-587, AP-615, Instant 8.11.1.0 User guide

  • Hello, I'm your chat assistant. I have reviewed the Aruba Instant User Guide and am ready to assist you with questions about the Aruba Instant Wireless Access Points. This manual covers many topics related to setting up, configuring, and managing these devices, including how they function in clusters, various network settings, security features, and integration with services. I'm here to help you navigate all of these features.
  • What is an Instant AP cluster?
    How do Instant APs obtain IP addresses?
    How do I disable the provisioning Wi-Fi network?
    What are the methods to disable Activate provisioning?
Aruba Instant 8.11.1.0
User Guide
Copyright Information
© Copyright 2023 Hewlett Packard Enterprise Development LP.
This product includes code licensed under certain open source licenses which require source
compliance. The corresponding source for these components is available upon request. This
offer is valid to anyone in receipt of this information and shall expire three years following the
date of the final distribution of this product version by Hewlett Packard Enterprise Company. To
obtain such source code, please check if the code is available in the HPE Software Center at
https://myenterpriselicense.hpe.com/cwp-ui/software but, if not, send a written request for
specific software version and product for which you want the open source code. Along with the
request, please send a check or money order in the amount of US $10.00 to:
Hewlett Packard Enterprise Company
Attn: General Counsel
WW Corporate Headquarters
1701 E Mossy Oaks Rd Spring, TX 77389
United States of America.
Contents
Contents
Contents 3
Revision History 8
About this Guide 9
Intended Audience 9
Related Documents 9
Conventions 9
Terminology Change 10
Contacting Support 10
About Aruba Instant 12
Aruba Instant Overview 12
What is New in the Release 15
Setting up an Instant AP 17
Setting up Instant Network 17
Connecting to a Provisioning Wi-Fi Network 19
Instant AP Cluster 19
Disabling the Provisioning Wi-Fi Network 19
Disabling Activate Communication with Instant AP for Provisioning 20
Logging in to the Instant UI 23
Accessing the Instant CLI 24
Instant AP Degraded State 26
Automatic Retrieval of Configuration 28
Managed Mode Operations 28
Prerequisites 28
Configuring Managed Mode Parameters 28
Verifying the Configuration 30
Instant Web User Interface 31
Login Screen 31
Home Page 31
Initial Configuration Tasks 41
Configuring System Parameters Using the Instant WebUI 41
Changing Password 45
Customizing Instant AP Settings 47
Discovery Logic 47
Modifying the Instant AP Host Name 53
Configuring Zone Settings on an Instant AP 53
Disabling APFactory Reset 56
Specifying a Method for Obtaining IP Address 56
Enabling Low Power Mode 56
Air Slice 57
Configuring Uplink VLANfor an Instant AP 59
Changing the Instant AP Installation Mode 60
Aruba Instant 8.11.1.0 3
Contents | 4
Changing USB Port Status 60
Conductor Election and Virtual Controller 61
Adding an Instant AP to the Network 62
Removing an Instant AP from the Network 63
Intelligent Power and Temperature Monitoring (IPTM) 63
Transmit Power Calculation 67
Hardware Offloading for Increased Transmission Performance 67
VLAN Configuration 69
VLAN Pooling 69
Uplink VLAN Monitoring and Detection on Upstream Devices 69
Multiple Management Interface 69
IPv6 Support 71
IPv6 Notation 71
Enabling IPv6 Support for Instant AP Configuration 71
Firewall Support for IPv6 73
GREBackup Tunnel 73
Debugging Commands 74
Wireless Network Profiles 75
Configuring Wireless Network Profiles 75
Wi-Fi 6E (6 GHz Networks) 94
Fast Roaming for Wireless Clients 97
Configuring Modulation Rates on a WLAN SSID 101
Multi-User-MIMO 101
Management Frame Protection 103
High Efficiency WLAN (HEW) 103
Multi Band Operation (MBO) 104
Disabling Short Preamble for Wireless Client 105
Disabling a WLAN SSID Profile 105
Editing a WLAN SSID Profile 106
Deleting a WLAN SSID Profile 106
Wireless Features 106
Wireless Client Bridge 108
Wired Profiles 110
Configuring a Wired Profile 110
Assigning a Profile to Ethernet Ports 115
Enabling 802.3az Energy Efficient Ethernet Standard 116
Editing a Wired Profile 116
Deleting a Wired Profile 116
LACP 116
Understanding Hierarchical Deployment 118
Loop Protection 119
Captive Portal for Guest Access 121
Understanding Captive Portal 121
Configuring a WLANSSID for Guest Access 122
Configuring Wired Profile for Guest Access 128
IGMP 129
Configuring Internal Captive Portal for Guest Network 130
Configuring External Captive Portal for a Guest Network 133
Configuring External Captive Portal Authentication Using ClearPass Guest 137
Configuring Facebook Login 139
Configuring FacebookExpress Wi-Fi 140
Configuring Guest Logon Role and Access Rules for Guest Users 144
Aruba Instant 8.11.1.0 5
Configuring Captive Portal Roles for an SSID 145
Configuring Walled Garden Access 147
Disabling Captive Portal Authentication 148
Authentication and User Management 149
Overview of Instant AP Users 149
Supported Authentication Methods 154
Supported EAP Authentication Frameworks 164
Supported Authentication Servers 165
Configuring Authentication Servers 170
Supported Encryption Types 180
Authentication Survivability 181
WPA3 Security 184
802.1X Supplicant Support 187
Denylisting Clients 190
Authentication Certificates 192
Roles and Policies 197
Firewall Policies 197
Content Filtering 209
Configuring User Roles 212
Configuring Derivation Rules 216
DHCP Configuration 226
Configuring DHCP Scopes 226
Configuring the Default DHCP Scope for Client IP Assignment 237
DHCPReporting 238
Configuring Time-Based Services 240
Time Range Profiles 240
Configuring a Time Range Profile 241
Assigning a Time Range Profile to a WLAN SSID 242
Verifying the Configuration 242
Assigning a Time Range Profile to a Role 243
IoT 244
IoT Concepts 244
IoT Configuration 257
IoT User Case Sample Configuration 279
VPN Configuration 289
Understanding VPN Features 289
Configuring a Tunnel from an Instant AP to a Mobility Controller 291
Configuring Routing Profiles 299
IAP-VPN Deployment 300
Understanding IAP-VPN Architecture 300
Configuring Instant AP and Controller for IAP-VPN Operations 304
IAP-VPN Deployment Scenarios 314
Radio Settings 337
Configuring Radio Settings for an Instant AP 337
Adaptive Radio Management 340
Configuring Radio Profiles 349
Split 5 GHz Radio for 550 Series Access Points 356
Flexible Dual Band Radios 359
Configuring External Antenna 360
Contents | 6
Transmit Power Calculation 361
DPI and Application Visibility 362
DPI 362
Enabling Application Visibility 362
Application Visibility 363
Enabling URL Visibility 363
Configuring ACL Rules for Application and Application Categories 364
Configuring Web Policy Enforcement Service 367
Voice and Video 372
WMM Traffic Management 372
Media Classification for Voice and Video Calls 375
WebRTC Prioritization 376
Enabling Enhanced Voice Call Tracking 376
Wi-Fi Calling 377
Unified Communications Manager 378
Services 380
Configuring AirGroup 380
Configuring an Instant AP for RTLSSupport 388
Configuring an Instant AP for ALE Support 390
Clarity Live 391
Dynamic DNS Registration 393
Deny Intra-VLAN Traffic 397
Integrating an Instant AP with Palo Alto Networks Firewall 399
Integrating an Instant AP with an XMLAPIInterface 400
CALEA Integration and Lawful Intercept Compliance 403
Support for 802.11mc 408
SDN 409
Functionalities of SDN 409
OpenFlow for WLAN 409
Clickstream Analysis 410
Wildcard ACLSupport 411
Cluster Security 412
Cluster Security Using DTLS 412
Locked Mode Member Instant AP 412
Enabling Cluster Security 413
ZTPwith Cluster Security 413
Low Assurance Devices 414
Cluster Security Debugging Logs 415
Verifying the Configuration 415
Instant AP Management and Monitoring 417
Managing an Instant AP from AirWave 417
Managing Instant AP from Aruba Central 427
WebSocket Connection 431
Support for RESTAPI 431
Uplink Configuration 433
Uplink Interfaces 433
Ethernet Uplink 433
Cellular Uplink 438
Wi-Fi Uplink 442
Uplink Preferences and Switching 445
Aruba Instant 8.11.1.0 7
Intrusion Detection 451
Detecting and Classifying Rogue APs 451
OS Fingerprinting 451
Configuring WIP and Detection Levels 452
Configuring IDS 457
Ghost Tunnel Attack Detection 458
Mesh Instant AP Configuration 460
Mesh Network Overview 460
Setting up Instant Mesh Network 462
Configuring Wired Bridging on Ethernet 0 for Mesh Point 463
Mesh Cluster Function 464
Radio Selection for Mesh Links 466
Fast Roaming in Mesh Networks 466
Mesh Scanning 467
Mobility and Client Management 469
Layer-3 Mobility Overview 469
Configuring Layer-3 Mobility 470
Spectrum Monitor 472
Understanding Spectrum Data 472
In the WebUI 472
Configuring Spectrum Monitors and Hybrid Instant APs 477
Instant AP Maintenance 479
Generating Default Certificates 479
Certificate Enrollment Using EST 480
Backing up and Restoring Instant AP Configuration Data 481
Converting an Instant AP to a Remote AP and Campus AP 483
Converting an Instant AP to Stand-Alone Mode 486
Converting an Instant AP to SingleAP Mode 486
Resetting a Remote AP or Campus AP to an Instant AP 488
Rebooting the Instant AP 488
DRT Upgrade 489
Release Type Identifier 490
Monitoring Devices and Logs 491
Configuring SNMP 491
Configuring Syslog Servers 494
Configuring TFTP Dump Server 495
Running Debug Commands 496
Uplink Bandwidth Monitoring 499
WANLink Health Monitoring 500
Hotspot Profiles 503
Understanding Hotspot Profiles 503
Configuring Hotspot Profiles 505
Sample Configuration 523
Mobility Access Switch Integration 527
Mobility Access Switch Overview 527
Configuring Instant APs for Mobility Access Switch Integration 528
Glossary of Terms 529
Revision History | 8
Revision History
The following table lists the revisions of this document.
Revision Change Description
Revision 02 Updated the list of supported APs in the Air Slice chapter.
Revision 01 Initial release.
Table 1: Revision History
Chapter 1
About this Guide
About this Guide
This User Guide describes the features supported by Aruba Instant and provides detailed instructions
for setting up and configuring the Instantnetwork.
Intended Audience
This guide is intended for administrators who configure and use Instant APs.
Related Documents
In addition to this document, the Instant AP product documentation includes the following:
nAruba Instant Access Point Installation Guides
nAruba Instant CLI Reference Guide
nAruba Instant Quick Start Guide
nAruba Instant Release Notes
nAruba Instant RESTAPIGuide
Conventions
The following conventions are used throughout this manual to emphasize important concepts:
Style Type Description
Italics
This style is used to emphasize important terms and to mark the titles of books.
System items This fixed-width font depicts the following:
nSample screen output
nSystem prompts
nFilenames, software devices, and specific commands when mentioned in the text.
Commands In the command examples, this style depicts the keywords that must be typed exactly as
shown.
<Arguments> In the command examples, italicized text within angle brackets represents items that you
should replace with information appropriate to your specific situation. For example:
#send <text message>
In this example, you would type “send” at the system prompt exactly as shown, followed by
the text of the message you wish to send. Do not type the angle brackets.
Table 2:
Typographical Conventions
Aruba Instant 8.11.1.0 9
About this Guide | 10
Style Type Description
[Optional] Command examples enclosed in square brackets are optional. Do not type the square
brackets.
{Item A |
Item B}
In the command examples, items within curly brackets and separated by a vertical bar
represent the available choices. Enter only one choice. Do not type the curly brackets or bars.
Table 2:
Typographical Conventions
The following informational icons are used throughout this guide:
Indicates helpful suggestions, pertinent information, and important things to remember.
Indicates a risk of damage to your hardware or loss of data.
Indicates a risk of personal injury or death.
Terminology Change
As part of advancing HPE's commitment to racial justice, we are taking a much-needed step in
overhauling HPE engineering terminology to reflect our belief system of diversity and inclusion. Some
legacy products and publications may continue to include terminology that seemingly evokes bias
against specific groups of people. Such content is not representative of our HPE culture and moving
forward, Aruba will replace racially insensitive terms and instead use the following new language:
Usage Old Language New Language
Campus Access Points + Controllers Master-Slave Conductor-Member
Instant Access Points Master-Slave Conductor-Member
Switch Stack Master-Slave Conductor-Member
Wireless LAN Controller Mobility Master Mobility Conductor
Firewall Configuration Blacklist, Whitelist Denylist, Allowlist
Types of Hackers Black Hat, White Hat Unethical, Ethical
Contacting Support
Main Site arubanetworks.com
Support Site https://asp.arubanetworks.com/
Table 3: Contact Information
Aruba Instant 8.11.1.0 11
Airheads Social Forums and Knowledge
Base
community.arubanetworks.com
North American Telephone 1-800-943-4526 (Toll Free)
1-408-754-1200
International Telephone arubanetworks.com/support-services/contact-support/
Software Licensing Site lms.arubanetworks.com
End-of-life Information arubanetworks.com/support-services/end-of-life/
Security Incident Response Team Site: arubanetworks.com/support-services/security-bulletins/
Chapter 2
About Aruba Instant
About Aruba Instant
This chapter contains the following topics:
Aruba Instant Overview 12
What is New in the Release 15
Aruba Instant Overview
Aruba Instant virtualizes Aruba Mobility Controller capabilities on 802.1 capable access points creating a
feature-rich enterprise-grade WLAN that combines affordability and configuration simplicity.
Instant is a simple, easy to deploy turnkey WLAN solution consisting of one or more Instant APs. An
Ethernet port with routable connectivity to the Internet or a self-enclosed network is used for deploying
an Instant Wireless Network. An Instant AP can be installed at a single site or deployed across multiple
geographically dispersed locations. Designed specifically for easy deployment and proactive
management of networks, Instant is ideal for small customers or remote locations without requiring any
on-site IT administrator.
An Instant AP cluster consists of member Instant APs and a conductor Instant AP in the same VLAN, as
they communicate with broadcast messages. A virtual controller is a combination of the whole cluster,
as the member Instant APs and conductor Instant AP coordinate to provide a controller-less Instant
solution. In an Instant deployment scenario, the first Instant AP that comes up becomes the conductor
Instant AP. All other Instant APs joining the cluster after that Instant AP, become the member Instant
APs.
In an Instant deployment scenario, only the first Instant AP or the conductor Instant AP needs to be
configured. The other Instant APs download configurations from the first Instant AP that is configured.
The Instant solution constantly monitors the network to determine the Instant AP that must function as
a conductor Instant AP at a given time. The conductor Instant AP may change as necessary from one
Instant AP to another without impacting network performance.
Each Instant AP model has a minimum required software version. When a new Instant AP is added into
an existing cluster, it can join the cluster only if the existing cluster is running at least the minimum
required version of that Instant AP. If the existing cluster is running a version prior to the minimum
required version of the new Instant AP, the new Instant AP will not come up and may reboot with the
reason Image sync fail. To recover from this condition, upgrade the existing cluster to at least the
minimum required version of the new Instant AP first, and add the new Instant AP. For more
information about supported Instant AP platforms, refer to the Supported Instant AP Platforms table
and the Aruba Instant Release Notes.
Aruba recommends that networks with more than 128 Instant APs be designed as multiple, smaller
virtual controller networks with Layer-3 mobility enabled between these networks.
Aruba APs are available in the following variants:
nUS (United States)
nJP (Japan)
Aruba Instant 8.11.1.0 12
About Aruba Instant | 13
nIL (Israel)
nEG (Egypt)
nRW (Rest of the World)
Aruba APs supported with Aruba Instant 8.11.0.x versions are available in all of the variants mentioned
above.
For information on regulatory domains and the list of countries supported by the Instant AP-###-RW
type, see the Specifying Country Code section in Logging in to the Instant UI on page 23.
Supported AP Models
The following table lists the AP models supported by Aruba Instant 8.11.0.0:
Instant AP Platform APModels
Indoor APs
650 Series AP-655
630 Series AP-635
610 Series AP-615
550 Series AP-555
530 Series AP-534 and AP-535
510 Series AP-514 and AP-515
500 Series AP-504 and AP-505
310 Series IAP-314 and IAP-315
303 Series AP-303 and AP-303P
300 Series IAP-304 and IAP-305
Outdoor APs
580 Series AP-584, AP-585, and AP-587
580EX Series AP-585EX and AP-587EX
570 Series AP-574, AP-575, and AP-577
570EX Series AP-575EX and AP-577EX
560 Series AP-565 and AP-567
518 Series AP-518
370 Series AP-374, AP-375, and AP-377
370EX Series AP-375EX and AP-375EX
Table 4: Supported Instant AP Platforms
Aruba Instant 8.11.1.0 14
Instant AP Platform APModels
360 Series AP-365 and AP-367
318 Series AP-318
Remote and Hospitality APs
500H Series AP-503H and AP-505H
303H Series AP-303H
Table 4: Supported Instant AP Platforms
Instant WebUI
The Instant webUI provides a standard web-based interface that allows you to configure and monitor a
Wi-Fi network. Instant is accessible through a standard web browser from a remote management
console or workstation and can be launched using the following browsers:
Web Browser Operating System
Microsoft Edge (Microsoft Edge 92.0.902.62 and
Microsoft EdgeHTML 18.19041) or later
nWindows 10 or later
nmacOS
Firefox 107.0.1 or later nWindows 10 or later
nmacOS
Apple Safari 15.4 (17613.1.17.1.13) or later nmacOS
Google Chrome 108.0.5359.71 or later nWindows 10 or later
nmacOS
If the Instant webUI is launched through an unsupported browser, a warning message is displayed
along with a list of recommended browsers. However, the users are allowed to log in using the
Continue login link on the Login page.
To view the Instant webUI, ensure that JavaScript is enabled on the web browser.
The Instant webUI logs out automatically if the window is inactive for 15 minutes.
Instant CLI
The Instant CLI is a text-based interface that is accessible through an SSH session.
SSH access requires that you configure an IP address and a default gateway on the Instant AP and
connect the Instant AP to your network. This is typically performed when the Instant network on an
Instant AP is set up.
Aruba Instant 8.11.1.0 15
What is New in the Release
This section lists the new features, enhancements, or hardware platforms introduced in Aruba Instant
8.11.1.0.
New Features and Enhancements
Feature Description
Auto Dump Collection
Commands The following commands have been introduced to support the automatic
uploading of dump files for crash events:
nshow ap debug ctb-status
nshow ap debug subscribe-event-statistics
nshow log event-to-cloud
ndebug-ctb-test data-chunk-upload-interval
Support for UNII-4 Channels on
AP-615
Aruba Instant provides support for UNII-4 channels (169-177) on 610 Series
access points (AP-615) only when the operational mode of the AP is set to
2.4GHz-and-5GHz static mode.
Table 5: New Features in Aruba Instant 8.11.1.0
New Hardware Platforms
Hardware Description
Aruba 503 Series access points
(AP-503)
The Aruba503 Series access points (AP-503) are high performance, dual-radio
indoor access points that support the IEEE 802.11ax standard for high
efficiency Wi-Fi, and can be deployed in either controller-based (ArubaOS) or
controller-less (Aruba Instant) network environments. These APs deliver high
performance 2.4 GHz and 5 GHz 802.11ax Wi-Fi (Wi-Fi 6) functionality with 2x2
radios, while also supporting 802.11a, 802.11b, 802.11g, 802.11n, and
802.11ac wireless services.
Additional features include:
nSpectrum analysis (dedicated or hybrid mode).
nWireless air monitor.
n1000BASE-T uplink Ethernet port.
nIEEE 802.3af (class 3) PoE support.
nMesh.
nThermal management.
For complete technical details and installation instructions, see Aruba 503
Series Access Points Installation Guide.
NOTE: Check with your local Aruba sales representative on new managed devices and access points availability
in your country.
Table 6: New Hardware Platforms in Aruba Instant 8.11.1.0
Deprecated Platforms
About Aruba Instant | 16
The following APs are no longer supported from Aruba Instant 8.11.0.0 onwards:
n203H Series — AP-203H
n203R Series — AP-203R and AP-203RP
n207 Series — IAP-207
n320 Series — IAP-324 and IAP-325
n330 Series — IAP-334 and IAP-335
n340 Series — AP-344 and AP-345
nAP-387
Chapter 3
Setting up an Instant AP
Setting up an Instant AP
This chapter contains the following topics:
Setting up Instant Network 17
Connecting to a Provisioning Wi-Fi Network 19
Instant AP Cluster 19
Disabling the Provisioning Wi-Fi Network 19
Disabling Activate Communication with Instant AP for Provisioning 20
Logging in to the Instant UI 23
Accessing the Instant CLI 24
Instant AP Degraded State 26
Setting up Instant Network
Before installing an Instant AP:
nEnsure that you have an Ethernet cable of the required length to connect an Instant AP to the home
router.
nEnsurethat you have one of the following power sources:
lIEEE 802.3af/at-compliant PoE source. The PoE source can be any power source equipment switch
or a midspan power source equipment device.
lInstant AP power adapter kit.
To set up the Instant network, perform the following procedures :
1. Connecting an Instant AP on page 17
2. Assigning an IP address to the Instant AP on page 17
Connecting an Instant AP
Based on the type of the power source used, perform one of the following steps to connect an Instant
AP to the power source:
nPoE switch—Connect the Ethernet 0 port of the Instant AP to the appropriate port on the PoE switch.
nPoE midspan—Connect the Ethernet 0 port of the Instant AP to the appropriate port on the PoE
midspan.
nAC to DC power adapter—Connect the 12V DC power jack socket to the AC to DC power adapter.
Assigning an IP address to the Instant AP
The Instant AP needs an IP address for network connectivity. When you connect an Instant AP to a
network, it receives an IP address from a DHCP server.
To obtain an IP address for an Instant AP:
Aruba Instant 8.11.1.0 17
Setting up an Instant AP | 18
1. Ensure that the DHCP service is enabled on the network.
2. Connect the Ethernet 0 port of Instant AP to a switch or router using an Ethernet cable.
3. Connect the Instant AP to a power source. The Instant AP receives an IP address provided by the
switch or router.
If there is no DHCP service on the network, the Instant AP can be assigned a static IP address. If a
static IP is not assigned, the Instant AP obtains an IPautomatically within the 169.254 subnet.
Assigning a Static IP
To assign a static IP to an Instant AP:
1. Connect a terminal, PC, or workstation running a terminal emulation program to the Console
port on the Instant AP.
2. Turn on the Instant AP. An autoboot countdown prompt that allows you to interrupt the normal
startup process and access apboot is displayed.
3. Press Enter key before the timer expires. The Instant AP goes into the apboot mode.
4. In the apboot mode, execute the following commands to assign a static IP to the Instant AP.
Hit <Enter> to stop autoboot: 0
apboot>
apboot> setenv ipaddr 192.0.2.0
apboot> setenv netmask 255.255.255.0
apboot> setenv gatewayip 192.0.2.2
apboot> save
Saving Environment to Flash...
Un-Protected 1 sectors
.done
Erased 1 sectors
Writing
5. Use the printenv command to view the configuration.
apboot> printenv
Provisioning an Instant AP
This section provides the following information:
nZTP and NTP Server and Synchronization
nProvisioning IAPs though Aruba Central
nProvisioning Instant APs through AirWave
ZTP of Instant APs
ZTP eliminates the traditional method of deploying and maintaining devices and allows you to provision
new devices in your network automatically, without manual intervention. Following are the ZTP
methods for Instant.
Aruba Activate is a cloud-based service designed to enable more efficient deployment and maintenance
of Instant APs. ArubaActivate is hosted in the cloud and is available at
https://activate.arubanetworks.com. You can register for a free account by using the serial number and
MACaddress of the device you currently own. For more information on how to setup your device and
provision using Aruba Activate, refer to the Aruba Activate User Guide.
NTP Server and Instant AP Synchronization
Aruba Instant 8.11.1.0 19
In order for ZTP to be successful, the timezone of the Instant AP must be in synchronization with the
NTPserver.
To facilitate ZTP using the AMP, Central, or Activate, you must configure the firewall and wired
infrastructure to either allow the NTP traffic to pool.ntp.org, or provide alternative NTP servers
under DHCP options. For more information on configuring an NTPserver, see NTPServer.
In a scenario where the NTP server is unreachable, the connection between the Instant AP and Activate
will fall back to the unsecured status. The NTPclient process running in the back end will continuously
attempt to reconnect to the NTPserver until a secure connection is established. The NTPclient process
receives a response from the NTP server on successfully establishing a connection and notifies the
CLIprocess which runs a series of checks to ensure the NTPserver is reachable.
Connecting to a Provisioning Wi-Fi Network
The Instant APs boot with factory default configuration and try to provision automatically. If the
automatic provisioning is successful, the Instant SSID will not be available. If AirWave and Activate are
not reachable and the automatic provisioning fails, the Instant SSID becomes available and the users
can connect to a provisioning network by using the Instant SSID.
To connect to a provisioning Wi-Fi network:
1. Ensure that the client is not connected to any wired network.
2. Connect a wireless-enabled client to a provisioning Wi-Fi network: for example, Instant.
3. If the Windows operating system is used:
a. Click the wireless network connection icon in the system tray. The Wireless Network
Connection window is displayed.
b. Click the Instant network and then click Connect.
4. If the Mac operating system is used:
a. Click the AirPort icon. A list of available Wi-Fi networks is displayed.
b. Click the instant network.
The Instant SSIDs are broadcast in 2.4 GHz only.
The provisioning SSID for all APs running Instant 6.5.2.0 onwards, including legacy Instant APs is
SetMeUp-xx:xx:xx.
Instant AP Cluster
Instant APs in the same VLAN automatically find each other and form a single functioning network
managed by a virtual controller.
Moving anInstant AP from one cluster to another requires a factory reset of the Instant AP.
Disabling the Provisioning Wi-Fi Network
The provisioning network is enabled by default. Instant provides the option to disable the provisioning
network through the console port. Use this option only when you do not want the default SSID Instant
to be broadcast in your network.
Setting up an Instant AP | 20
To disable the provisioning network:
1. Connect a terminal, PC, or workstation running a terminal emulation program to the Console
port on the Instant AP.
2. Configure the terminal or terminal emulation program to use the following communication
settings:
Baud Rate Data Bits Parity Stop Bits Flow Control
9600 8 None 1 None
Table 7: Terminal Communication Settings
3. Turn on the Instant AP. An autoboot countdown prompt that allows you to interrupt the normal
startup process and access apboot is displayed.
4. Click Enterkey before the timer expires. The Instant AP goes into the apboot mode through
console.
5. In the apboot mode, execute the following commands to disable the provisioning network:
apboot> factory_reset
apboot> setenv disable_prov_ssid 1
apboot> saveenv
apboot> reset
Disabling Activate Communication with Instant AP for Provisioning
Some customers do not use Activate either because of their security policy or because it is a new site
and they do not have internet connectivity when the Instant AP is initially brought up. These customers
prefer to disable all communications between the Instant AP and Activate during initial provisioning.
Under these circumstances, Aruba Instant provides 3 methods to disable Activate provisioning. You may
choose either of the following methods to disable Activate provisioning during the initial setup:
nUse the configuration command to disable provisioning by Activate using the Instant CLI.
(Instant AP)(config)# activate-disable
nConfigure a DHCP profile with a DHCPoption <type> 43 and the <value> activate-disable=True. The
DHCPoption 43 will broadcast the provisioning information to the Instant AP from the DHCPserver
instead of Activate.
(Instant AP)(config)# ip dhcp <profile-name>
(Instant AP)(DHCP profile <profile-name>)# option 43 activate-disable=True
nConfigure a DHCPprofile with a DHCPoption <type> 60 and the <value> ArubaInstantAP.
(Instant AP)(config)# ip dhcp <profile-name>
(Instant AP)(DHCP profile <profile-name>)# option 60 ArubaInstantAP
Provisioning Instant APs through Central
The Aruba Central Central UI provides a standard web-based interface that allows you to configure and
monitor multiple Aruba Instant networks from anywhere with a connection to the Internet. Aruba
Central supports all the Instant APs running Instant 6.2.1.0-3.3.0.0 or later versions.
/