Aruba AP-587 User guide

Aruba Instant 8.11.1.0

User Guide

Copyright Information

This product includes code licensed under certain open source licenses which require source

compliance. The corresponding source for these components is available upon request. This

offer is valid to anyone in receipt of this information and shall expire three years following the

date of the final distribution of this product version by Hewlett Packard Enterprise Company. To

obtain such source code, please check if the code is available in the HPE Software Center at

https://myenterpriselicense.hpe.com/cwp-ui/software but, if not, send a written request for

specific software version and product for which you want the open source code. Along with the

request, please send a check or money order in the amount of US $10.00 to:

Hewlett Packard Enterprise Company

Attn: General Counsel

WW Corporate Headquarters

1701 E Mossy Oaks Rd Spring, TX 77389

United States of America.

Contents

Contents 3

Revision History 8

About this Guide 9

Intended Audience 9

Related Documents 9

Conventions 9

Terminology Change 10

Contacting Support 10

About Aruba Instant 12

Aruba Instant Overview 12

What is New in the Release 15

Setting up an Instant AP 17

Setting up Instant Network 17

Connecting to a Provisioning Wi-Fi Network 19

Instant AP Cluster 19

Disabling the Provisioning Wi-Fi Network 19

Disabling Activate Communication with Instant AP for Provisioning 20

Logging in to the Instant UI 23

Accessing the Instant CLI 24

Instant AP Degraded State 26

Automatic Retrieval of Configuration 28

Managed Mode Operations 28

Prerequisites 28

Configuring Managed Mode Parameters 28

Verifying the Configuration 30

Instant Web User Interface 31

Login Screen 31

Home Page 31

Initial Configuration Tasks 41

Configuring System Parameters Using the Instant WebUI 41

Changing Password 45

Customizing Instant AP Settings 47

Discovery Logic 47

Modifying the Instant AP Host Name 53

Configuring Zone Settings on an Instant AP 53

Disabling APFactory Reset 56

Specifying a Method for Obtaining IP Address 56

Enabling Low Power Mode 56

Air Slice 57

Configuring Uplink VLANfor an Instant AP 59

Changing the Instant AP Installation Mode 60

Aruba Instant 8.11.1.0 3

Contents | 4

Changing USB Port Status 60

Conductor Election and Virtual Controller 61

Adding an Instant AP to the Network 62

Removing an Instant AP from the Network 63

Intelligent Power and Temperature Monitoring (IPTM) 63

Transmit Power Calculation 67

Hardware Offloading for Increased Transmission Performance 67

VLAN Configuration 69

VLAN Pooling 69

Uplink VLAN Monitoring and Detection on Upstream Devices 69

Multiple Management Interface 69

IPv6 Support 71

IPv6 Notation 71

Enabling IPv6 Support for Instant AP Configuration 71

Firewall Support for IPv6 73

GREBackup Tunnel 73

Debugging Commands 74

Wireless Network Profiles 75

Configuring Wireless Network Profiles 75

Wi-Fi 6E (6 GHz Networks) 94

Fast Roaming for Wireless Clients 97

Configuring Modulation Rates on a WLAN SSID 101

Multi-User-MIMO 101

Management Frame Protection 103

High Efficiency WLAN (HEW) 103

Multi Band Operation (MBO) 104

Disabling Short Preamble for Wireless Client 105

Disabling a WLAN SSID Profile 105

Editing a WLAN SSID Profile 106

Deleting a WLAN SSID Profile 106

Wireless Features 106

Wireless Client Bridge 108

Wired Profiles 110

Configuring a Wired Profile 110

Assigning a Profile to Ethernet Ports 115

Enabling 802.3az Energy Efficient Ethernet Standard 116

Editing a Wired Profile 116

Deleting a Wired Profile 116

LACP 116

Understanding Hierarchical Deployment 118

Loop Protection 119

Captive Portal for Guest Access 121

Understanding Captive Portal 121

Configuring a WLANSSID for Guest Access 122

Configuring Wired Profile for Guest Access 128

IGMP 129

Configuring Internal Captive Portal for Guest Network 130

Configuring External Captive Portal for a Guest Network 133

Configuring External Captive Portal Authentication Using ClearPass Guest 137

Configuring Facebook Login 139

Configuring FacebookExpress Wi-Fi 140

Configuring Guest Logon Role and Access Rules for Guest Users 144

Aruba Instant 8.11.1.0 5

Configuring Captive Portal Roles for an SSID 145

Configuring Walled Garden Access 147

Disabling Captive Portal Authentication 148

Authentication and User Management 149

Overview of Instant AP Users 149

Supported Authentication Methods 154

Supported EAP Authentication Frameworks 164

Supported Authentication Servers 165

Configuring Authentication Servers 170

Supported Encryption Types 180

Authentication Survivability 181

WPA3 Security 184

802.1X Supplicant Support 187

Denylisting Clients 190

Authentication Certificates 192

Roles and Policies 197

Firewall Policies 197

Content Filtering 209

Configuring User Roles 212

Configuring Derivation Rules 216

DHCP Configuration 226

Configuring DHCP Scopes 226

Configuring the Default DHCP Scope for Client IP Assignment 237

DHCPReporting 238

Configuring Time-Based Services 240

Time Range Profiles 240

Configuring a Time Range Profile 241

Assigning a Time Range Profile to a WLAN SSID 242

Verifying the Configuration 242

Assigning a Time Range Profile to a Role 243

IoT 244

IoT Concepts 244

IoT Configuration 257

IoT User Case Sample Configuration 279

VPN Configuration 289

Understanding VPN Features 289

Configuring a Tunnel from an Instant AP to a Mobility Controller 291

Configuring Routing Profiles 299

IAP-VPN Deployment 300

Understanding IAP-VPN Architecture 300

Configuring Instant AP and Controller for IAP-VPN Operations 304

IAP-VPN Deployment Scenarios 314

Radio Settings 337

Configuring Radio Settings for an Instant AP 337

Adaptive Radio Management 340

Configuring Radio Profiles 349

Split 5 GHz Radio for 550 Series Access Points 356

Flexible Dual Band Radios 359

Configuring External Antenna 360

Contents | 6

Transmit Power Calculation 361

DPI and Application Visibility 362

DPI 362

Enabling Application Visibility 362

Application Visibility 363

Enabling URL Visibility 363

Configuring ACL Rules for Application and Application Categories 364

Configuring Web Policy Enforcement Service 367

Voice and Video 372

WMM Traffic Management 372

Media Classification for Voice and Video Calls 375

WebRTC Prioritization 376

Enabling Enhanced Voice Call Tracking 376

Wi-Fi Calling 377

Unified Communications Manager 378

Services 380

Configuring AirGroup 380

Configuring an Instant AP for RTLSSupport 388

Configuring an Instant AP for ALE Support 390

Clarity Live 391

Dynamic DNS Registration 393

Deny Intra-VLAN Traffic 397

Integrating an Instant AP with Palo Alto Networks Firewall 399

Integrating an Instant AP with an XMLAPIInterface 400

CALEA Integration and Lawful Intercept Compliance 403

Support for 802.11mc 408

SDN 409

Functionalities of SDN 409

OpenFlow for WLAN 409

Clickstream Analysis 410

Wildcard ACLSupport 411

Cluster Security 412

Cluster Security Using DTLS 412

Locked Mode Member Instant AP 412

Enabling Cluster Security 413

ZTPwith Cluster Security 413

Low Assurance Devices 414

Cluster Security Debugging Logs 415

Verifying the Configuration 415

Instant AP Management and Monitoring 417

Managing an Instant AP from AirWave 417

Managing Instant AP from Aruba Central 427

WebSocket Connection 431

Support for RESTAPI 431

Uplink Configuration 433

Uplink Interfaces 433

Ethernet Uplink 433

Cellular Uplink 438

Wi-Fi Uplink 442

Uplink Preferences and Switching 445

Aruba Instant 8.11.1.0 7

Intrusion Detection 451

Detecting and Classifying Rogue APs 451

OS Fingerprinting 451

Configuring WIP and Detection Levels 452

Configuring IDS 457

Ghost Tunnel Attack Detection 458

Mesh Instant AP Configuration 460

Mesh Network Overview 460

Setting up Instant Mesh Network 462

Configuring Wired Bridging on Ethernet 0 for Mesh Point 463

Mesh Cluster Function 464

Radio Selection for Mesh Links 466

Fast Roaming in Mesh Networks 466

Mesh Scanning 467

Mobility and Client Management 469

Layer-3 Mobility Overview 469

Configuring Layer-3 Mobility 470

Spectrum Monitor 472

Understanding Spectrum Data 472

In the WebUI 472

Configuring Spectrum Monitors and Hybrid Instant APs 477

Instant AP Maintenance 479

Generating Default Certificates 479

Certificate Enrollment Using EST 480

Backing up and Restoring Instant AP Configuration Data 481

Converting an Instant AP to a Remote AP and Campus AP 483

Converting an Instant AP to Stand-Alone Mode 486

Converting an Instant AP to SingleAP Mode 486

Resetting a Remote AP or Campus AP to an Instant AP 488

Rebooting the Instant AP 488

DRT Upgrade 489

Release Type Identifier 490

Monitoring Devices and Logs 491

Configuring SNMP 491

Configuring Syslog Servers 494

Configuring TFTP Dump Server 495

Running Debug Commands 496

Uplink Bandwidth Monitoring 499

WANLink Health Monitoring 500

Hotspot Profiles 503

Understanding Hotspot Profiles 503

Configuring Hotspot Profiles 505

Sample Configuration 523

Mobility Access Switch Integration 527

Mobility Access Switch Overview 527

Configuring Instant APs for Mobility Access Switch Integration 528

Glossary of Terms 529

Revision History | 8

Revision History

The following table lists the revisions of this document.

Revision Change Description

Revision 02 Updated the list of supported APs in the Air Slice chapter.

Revision 01 Initial release.

Table 1: Revision History

Chapter 1

About this Guide

This User Guide describes the features supported by Aruba Instant and provides detailed instructions

for setting up and configuring the Instantnetwork.

Intended Audience

This guide is intended for administrators who configure and use Instant APs.

Related Documents

In addition to this document, the Instant AP product documentation includes the following:

nAruba Instant Access Point Installation Guides

nAruba Instant CLI Reference Guide

nAruba Instant Quick Start Guide

nAruba Instant Release Notes

nAruba Instant RESTAPIGuide

Conventions

The following conventions are used throughout this manual to emphasize important concepts:

Style Type Description

Italics

This style is used to emphasize important terms and to mark the titles of books.

System items This fixed-width font depicts the following:

nSample screen output

nSystem prompts

nFilenames, software devices, and specific commands when mentioned in the text.

Commands In the command examples, this style depicts the keywords that must be typed exactly as

shown.

<Arguments> In the command examples, italicized text within angle brackets represents items that you

should replace with information appropriate to your specific situation. For example:

#send <text message>

In this example, you would type “send” at the system prompt exactly as shown, followed by

the text of the message you wish to send. Do not type the angle brackets.

Table 2:

Typographical Conventions

Aruba Instant 8.11.1.0 9

About this Guide | 10

Style Type Description

[Optional] Command examples enclosed in square brackets are optional. Do not type the square

brackets.

{Item A |

Item B}

In the command examples, items within curly brackets and separated by a vertical bar

represent the available choices. Enter only one choice. Do not type the curly brackets or bars.

Table 2:

Typographical Conventions

The following informational icons are used throughout this guide:

Indicates helpful suggestions, pertinent information, and important things to remember.

Indicates a risk of damage to your hardware or loss of data.

Indicates a risk of personal injury or death.

Terminology Change

As part of advancing HPE's commitment to racial justice, we are taking a much-needed step in

overhauling HPE engineering terminology to reflect our belief system of diversity and inclusion. Some

legacy products and publications may continue to include terminology that seemingly evokes bias

against specific groups of people. Such content is not representative of our HPE culture and moving

forward, Aruba will replace racially insensitive terms and instead use the following new language:

Usage Old Language New Language

Campus Access Points + Controllers Master-Slave Conductor-Member

Instant Access Points Master-Slave Conductor-Member

Switch Stack Master-Slave Conductor-Member

Wireless LAN Controller Mobility Master Mobility Conductor

Firewall Configuration Blacklist, Whitelist Denylist, Allowlist

Types of Hackers Black Hat, White Hat Unethical, Ethical

Contacting Support

Main Site arubanetworks.com

Support Site https://asp.arubanetworks.com/

Table 3: Contact Information

Aruba Instant 8.11.1.0 11

Airheads Social Forums and Knowledge

Base

community.arubanetworks.com

North American Telephone 1-800-943-4526 (Toll Free)

1-408-754-1200

International Telephone arubanetworks.com/support-services/contact-support/

Software Licensing Site lms.arubanetworks.com

End-of-life Information arubanetworks.com/support-services/end-of-life/

Security Incident Response Team Site: arubanetworks.com/support-services/security-bulletins/

Email: [email protected]

Chapter 2

About Aruba Instant

This chapter contains the following topics:

Aruba Instant Overview 12

What is New in the Release 15

Aruba Instant Overview

Aruba Instant virtualizes Aruba Mobility Controller capabilities on 802.1 capable access points creating a

feature-rich enterprise-grade WLAN that combines affordability and configuration simplicity.

Instant is a simple, easy to deploy turnkey WLAN solution consisting of one or more Instant APs. An

Ethernet port with routable connectivity to the Internet or a self-enclosed network is used for deploying

an Instant Wireless Network. An Instant AP can be installed at a single site or deployed across multiple

geographically dispersed locations. Designed specifically for easy deployment and proactive

management of networks, Instant is ideal for small customers or remote locations without requiring any

on-site IT administrator.

An Instant AP cluster consists of member Instant APs and a conductor Instant AP in the same VLAN, as

they communicate with broadcast messages. A virtual controller is a combination of the whole cluster,

as the member Instant APs and conductor Instant AP coordinate to provide a controller-less Instant

solution. In an Instant deployment scenario, the first Instant AP that comes up becomes the conductor

Instant AP. All other Instant APs joining the cluster after that Instant AP, become the member Instant

APs.

In an Instant deployment scenario, only the first Instant AP or the conductor Instant AP needs to be

configured. The other Instant APs download configurations from the first Instant AP that is configured.

The Instant solution constantly monitors the network to determine the Instant AP that must function as

a conductor Instant AP at a given time. The conductor Instant AP may change as necessary from one

Instant AP to another without impacting network performance.

Each Instant AP model has a minimum required software version. When a new Instant AP is added into

an existing cluster, it can join the cluster only if the existing cluster is running at least the minimum

required version of that Instant AP. If the existing cluster is running a version prior to the minimum

required version of the new Instant AP, the new Instant AP will not come up and may reboot with the

reason Image sync fail. To recover from this condition, upgrade the existing cluster to at least the

minimum required version of the new Instant AP first, and add the new Instant AP. For more

information about supported Instant AP platforms, refer to the Supported Instant AP Platforms table

and the Aruba Instant Release Notes.

Aruba recommends that networks with more than 128 Instant APs be designed as multiple, smaller

virtual controller networks with Layer-3 mobility enabled between these networks.

Aruba APs are available in the following variants:

nUS (United States)

nJP (Japan)

Aruba Instant 8.11.1.0 12

About Aruba Instant | 13

nIL (Israel)

nEG (Egypt)

nRW (Rest of the World)

Aruba APs supported with Aruba Instant 8.11.0.x versions are available in all of the variants mentioned

above.

For information on regulatory domains and the list of countries supported by the Instant AP-###-RW

type, see the Specifying Country Code section in Logging in to the Instant UI on page 23.

Supported AP Models

The following table lists the AP models supported by Aruba Instant 8.11.0.0:

Instant AP Platform APModels

Indoor APs

650 Series AP-655

630 Series AP-635

610 Series AP-615

550 Series AP-555

530 Series AP-534 and AP-535

510 Series AP-514 and AP-515

500 Series AP-504 and AP-505

310 Series IAP-314 and IAP-315

303 Series AP-303 and AP-303P

300 Series IAP-304 and IAP-305

Outdoor APs

580 Series AP-584, AP-585, and AP-587

580EX Series AP-585EX and AP-587EX

570 Series AP-574, AP-575, and AP-577

570EX Series AP-575EX and AP-577EX

560 Series AP-565 and AP-567

518 Series AP-518

370 Series AP-374, AP-375, and AP-377

370EX Series AP-375EX and AP-375EX

Table 4: Supported Instant AP Platforms

Aruba Instant 8.11.1.0 14

Instant AP Platform APModels

360 Series AP-365 and AP-367

318 Series AP-318

Remote and Hospitality APs

500H Series AP-503H and AP-505H

303H Series AP-303H

Table 4: Supported Instant AP Platforms

Instant WebUI

The Instant webUI provides a standard web-based interface that allows you to configure and monitor a

Wi-Fi network. Instant is accessible through a standard web browser from a remote management

console or workstation and can be launched using the following browsers:

Web Browser Operating System

Microsoft Edge (Microsoft Edge 92.0.902.62 and

Microsoft EdgeHTML 18.19041) or later

nWindows 10 or later

nmacOS

Firefox 107.0.1 or later nWindows 10 or later

nmacOS

Apple Safari 15.4 (17613.1.17.1.13) or later nmacOS

Google Chrome 108.0.5359.71 or later nWindows 10 or later

nmacOS

If the Instant webUI is launched through an unsupported browser, a warning message is displayed

along with a list of recommended browsers. However, the users are allowed to log in using the

Continue login link on the Login page.

To view the Instant webUI, ensure that JavaScript is enabled on the web browser.

The Instant webUI logs out automatically if the window is inactive for 15 minutes.

Instant CLI

The Instant CLI is a text-based interface that is accessible through an SSH session.

SSH access requires that you configure an IP address and a default gateway on the Instant AP and

connect the Instant AP to your network. This is typically performed when the Instant network on an

Instant AP is set up.

Aruba Instant 8.11.1.0 15

What is New in the Release

This section lists the new features, enhancements, or hardware platforms introduced in Aruba Instant

8.11.1.0.

New Features and Enhancements

Feature Description

Auto Dump Collection

Commands The following commands have been introduced to support the automatic

uploading of dump files for crash events:

nshow ap debug ctb-status

nshow ap debug subscribe-event-statistics

nshow log event-to-cloud

ndebug-ctb-test data-chunk-upload-interval

Support for UNII-4 Channels on

AP-615

Aruba Instant provides support for UNII-4 channels (169-177) on 610 Series

access points (AP-615) only when the operational mode of the AP is set to

2.4GHz-and-5GHz static mode.

Table 5: New Features in Aruba Instant 8.11.1.0

New Hardware Platforms

Hardware Description

Aruba 503 Series access points

(AP-503)

The Aruba503 Series access points (AP-503) are high performance, dual-radio

indoor access points that support the IEEE 802.11ax standard for high

efficiency Wi-Fi, and can be deployed in either controller-based (ArubaOS) or

controller-less (Aruba Instant) network environments. These APs deliver high

performance 2.4 GHz and 5 GHz 802.11ax Wi-Fi (Wi-Fi 6) functionality with 2x2

radios, while also supporting 802.11a, 802.11b, 802.11g, 802.11n, and

802.11ac wireless services.

Additional features include:

nSpectrum analysis (dedicated or hybrid mode).

nWireless air monitor.

n1000BASE-T uplink Ethernet port.

nIEEE 802.3af (class 3) PoE support.

nMesh.

nThermal management.

For complete technical details and installation instructions, see Aruba 503

Series Access Points Installation Guide.

NOTE: Check with your local Aruba sales representative on new managed devices and access points availability

in your country.

Table 6: New Hardware Platforms in Aruba Instant 8.11.1.0

Deprecated Platforms

About Aruba Instant | 16

The following APs are no longer supported from Aruba Instant 8.11.0.0 onwards:

n203H Series — AP-203H

n203R Series — AP-203R and AP-203RP

n207 Series — IAP-207

n320 Series — IAP-324 and IAP-325

n330 Series — IAP-334 and IAP-335

n340 Series — AP-344 and AP-345

nAP-387

Chapter 3

Setting up an Instant AP

This chapter contains the following topics:

Setting up Instant Network 17

Connecting to a Provisioning Wi-Fi Network 19

Instant AP Cluster 19

Disabling the Provisioning Wi-Fi Network 19

Disabling Activate Communication with Instant AP for Provisioning 20

Logging in to the Instant UI 23

Accessing the Instant CLI 24

Instant AP Degraded State 26

Setting up Instant Network

Before installing an Instant AP:

nEnsure that you have an Ethernet cable of the required length to connect an Instant AP to the home

router.

nEnsurethat you have one of the following power sources:

lIEEE 802.3af/at-compliant PoE source. The PoE source can be any power source equipment switch

or a midspan power source equipment device.

lInstant AP power adapter kit.

To set up the Instant network, perform the following procedures :

1. Connecting an Instant AP on page 17

2. Assigning an IP address to the Instant AP on page 17

Connecting an Instant AP

Based on the type of the power source used, perform one of the following steps to connect an Instant

AP to the power source:

nPoE switch—Connect the Ethernet 0 port of the Instant AP to the appropriate port on the PoE switch.

nPoE midspan—Connect the Ethernet 0 port of the Instant AP to the appropriate port on the PoE

midspan.

nAC to DC power adapter—Connect the 12V DC power jack socket to the AC to DC power adapter.

Assigning an IP address to the Instant AP

The Instant AP needs an IP address for network connectivity. When you connect an Instant AP to a

network, it receives an IP address from a DHCP server.

To obtain an IP address for an Instant AP:

Aruba Instant 8.11.1.0 17

Setting up an Instant AP | 18

1. Ensure that the DHCP service is enabled on the network.

2. Connect the Ethernet 0 port of Instant AP to a switch or router using an Ethernet cable.

3. Connect the Instant AP to a power source. The Instant AP receives an IP address provided by the

switch or router.

If there is no DHCP service on the network, the Instant AP can be assigned a static IP address. If a

static IP is not assigned, the Instant AP obtains an IPautomatically within the 169.254 subnet.

Assigning a Static IP

To assign a static IP to an Instant AP:

1. Connect a terminal, PC, or workstation running a terminal emulation program to the Console

port on the Instant AP.

2. Turn on the Instant AP. An autoboot countdown prompt that allows you to interrupt the normal

startup process and access apboot is displayed.

3. Press Enter key before the timer expires. The Instant AP goes into the apboot mode.

4. In the apboot mode, execute the following commands to assign a static IP to the Instant AP.

Hit <Enter> to stop autoboot: 0

apboot>

apboot> setenv ipaddr 192.0.2.0

apboot> setenv netmask 255.255.255.0

apboot> setenv gatewayip 192.0.2.2

apboot> save

Saving Environment to Flash...

Un-Protected 1 sectors

.done

Erased 1 sectors

Writing

5. Use the printenv command to view the configuration.

apboot> printenv

Provisioning an Instant AP

This section provides the following information:

nZTP and NTP Server and Synchronization

nProvisioning IAPs though Aruba Central

nProvisioning Instant APs through AirWave

ZTP of Instant APs

ZTP eliminates the traditional method of deploying and maintaining devices and allows you to provision

new devices in your network automatically, without manual intervention. Following are the ZTP

methods for Instant.

Aruba Activate is a cloud-based service designed to enable more efficient deployment and maintenance

of Instant APs. ArubaActivate is hosted in the cloud and is available at

https://activate.arubanetworks.com. You can register for a free account by using the serial number and

MACaddress of the device you currently own. For more information on how to setup your device and

provision using Aruba Activate, refer to the Aruba Activate User Guide.

NTP Server and Instant AP Synchronization

Aruba Instant 8.11.1.0 19

In order for ZTP to be successful, the timezone of the Instant AP must be in synchronization with the

NTPserver.

To facilitate ZTP using the AMP, Central, or Activate, you must configure the firewall and wired

infrastructure to either allow the NTP traffic to pool.ntp.org, or provide alternative NTP servers

under DHCP options. For more information on configuring an NTPserver, see NTPServer.

In a scenario where the NTP server is unreachable, the connection between the Instant AP and Activate

will fall back to the unsecured status. The NTPclient process running in the back end will continuously

attempt to reconnect to the NTPserver until a secure connection is established. The NTPclient process

receives a response from the NTP server on successfully establishing a connection and notifies the

CLIprocess which runs a series of checks to ensure the NTPserver is reachable.

Connecting to a Provisioning Wi-Fi Network

The Instant APs boot with factory default configuration and try to provision automatically. If the

automatic provisioning is successful, the Instant SSID will not be available. If AirWave and Activate are

not reachable and the automatic provisioning fails, the Instant SSID becomes available and the users

can connect to a provisioning network by using the Instant SSID.

To connect to a provisioning Wi-Fi network:

1. Ensure that the client is not connected to any wired network.

2. Connect a wireless-enabled client to a provisioning Wi-Fi network: for example, Instant.

3. If the Windows operating system is used:

a. Click the wireless network connection icon in the system tray. The Wireless Network

Connection window is displayed.

b. Click the Instant network and then click Connect.

4. If the Mac operating system is used:

a. Click the AirPort icon. A list of available Wi-Fi networks is displayed.

b. Click the instant network.

The Instant SSIDs are broadcast in 2.4 GHz only.

The provisioning SSID for all APs running Instant 6.5.2.0 onwards, including legacy Instant APs is

SetMeUp-xx:xx:xx.

Instant AP Cluster

Instant APs in the same VLAN automatically find each other and form a single functioning network

managed by a virtual controller.

Moving anInstant AP from one cluster to another requires a factory reset of the Instant AP.

Disabling the Provisioning Wi-Fi Network

The provisioning network is enabled by default. Instant provides the option to disable the provisioning

network through the console port. Use this option only when you do not want the default SSID Instant

to be broadcast in your network.

Setting up an Instant AP | 20

To disable the provisioning network:

1. Connect a terminal, PC, or workstation running a terminal emulation program to the Console

port on the Instant AP.

2. Configure the terminal or terminal emulation program to use the following communication

settings:

Baud Rate Data Bits Parity Stop Bits Flow Control

9600 8 None 1 None

Table 7: Terminal Communication Settings

3. Turn on the Instant AP. An autoboot countdown prompt that allows you to interrupt the normal

startup process and access apboot is displayed.

4. Click Enterkey before the timer expires. The Instant AP goes into the apboot mode through

console.

5. In the apboot mode, execute the following commands to disable the provisioning network:

apboot> factory_reset

apboot> setenv disable_prov_ssid 1

apboot> saveenv

apboot> reset

Disabling Activate Communication with Instant AP for Provisioning

Some customers do not use Activate either because of their security policy or because it is a new site

and they do not have internet connectivity when the Instant AP is initially brought up. These customers

prefer to disable all communications between the Instant AP and Activate during initial provisioning.

Under these circumstances, Aruba Instant provides 3 methods to disable Activate provisioning. You may

choose either of the following methods to disable Activate provisioning during the initial setup:

nUse the configuration command to disable provisioning by Activate using the Instant CLI.

(Instant AP)(config)# activate-disable

nConfigure a DHCP profile with a DHCPoption <type> 43 and the <value> activate-disable=True. The

DHCPoption 43 will broadcast the provisioning information to the Instant AP from the DHCPserver

instead of Activate.

(Instant AP)(config)# ip dhcp <profile-name>

(Instant AP)(DHCP profile <profile-name>)# option 43 activate-disable=True

nConfigure a DHCPprofile with a DHCPoption <type> 60 and the <value> ArubaInstantAP.

(Instant AP)(config)# ip dhcp <profile-name>

(Instant AP)(DHCP profile <profile-name>)# option 60 ArubaInstantAP

Provisioning Instant APs through Central

The Aruba Central Central UI provides a standard web-based interface that allows you to configure and

monitor multiple Aruba Instant networks from anywhere with a connection to the Internet. Aruba

Central supports all the Instant APs running Instant 6.2.1.0-3.3.0.0 or later versions.

Page is loading ...

Aruba AP-587 User guide

This manual is also suitable for

Aruba AP-587 User guide