Aruba Central 2.5.4 User guide

User Guide for Aruba Central and

SD-Branch

Copyright Information

Open Source Code

This product includes code licensed under the GNU General Public License, the GNU Lesser General

Public License, and/or certain other open source licenses. A complete machine-readable copy of the

source code corresponding to such code is available upon request. This offer is valid to anyone in

receipt of this information and shall expire three years following the date of the final distribution of this

product version by Hewlett Packard Enterprise Company. To obtain such source code, send a check or

money order in the amount of US $10.00 to:

Hewlett Packard Enterprise Company

6280 America Center Drive

San Jose, CA 95002

USA

Contents

Contents 3

About this Guide 12

Intended Audience 12

Related Documents 12

Conventions 12

Terminology Change 13

Contacting Support 13

What is Aruba Central? 14

Key Features 14

Supported Web Browsers 15

Operational Modes and Interfaces 15

Supported Devices 17

What's New in 2.5.4 28

New Features 28

Enhancements 38

Getting Started with Aruba Central 49

Key Terms and Concepts 49

Workflow Summary 50

Overview of Aruba Central Foundation and Advanced Licenses 51

Aruba Central Licenses Feature Details 60

Starting Your Free Trial 71

Creating an Aruba Central Account 77

Accessing Aruba Central Portal 81

Accessing Aruba Central Mobile Application 82

About the Network Operations App User Interface 82

Setting up Your Aruba Central Instance 122

Configuring Email Notifications for Software Upgrades 129

Configuring Idle Timeout 130

Opening Firewall Ports for Device Communication 130

Connecting Devices to Aruba Central 137

Device Configuration and Network Management 146

Using the Search Bar 146

Next-Generation Support Experience 166

Administering Aruba Central 174

Apps 174

Global Settings 175

Users and Roles 175

Managing License Keys 188

Managing Your Device Inventory 193

Managing License Assignments 199

Data Collectors 205

Streaming API 240

API Gateway 244

Webhooks 277

SAML SSO for Aruba Central 337

Viewing Audit Trails in the Account Home Page 377

Maintaining Aruba Central 379

Network Structure 379

Viewing Configuration Status 423

Viewing the Configuration Audit Page 424

Aruba Central | User Guide 3

Contents | 4

Applying Configuration Changes 424

Viewing Configuration Overrides and Errors 427

Backing up and Restoring Configuration Templates 430

Managing Software Upgrades 431

ViewingAudit Trail in the Standard Enterprise Mode and MSP Mode 441

Removing Devices 442

Managed Service Provider 443

Terminology 443

Getting Started with MSP Solution 444

Enabling Managed Service Mode 444

Managing MSP Licenses 447

System Users and User Roles in MSP Mode 452

Groups in the MSP Mode 458

About Provisioning Tenant or Customer Accounts 464

Assigning Devices to Tenant Accounts 468

MSP Dashboard 469

MSP Certificates 475

Navigating to the Tenant Account 477

MSPAlerts 477

MSP Audit Trails 482

MSP Reports 484

Firmware Upgrades for MSP Mode 491

Customizing the Portal in MSP Mode 496

MSP Deployment Models 497

Frequently Asked Questions 504

IAPs 507

Supported Deployment Modes 507

Configuration and Management 507

Supported Instant APs 508

Provisioning Instant APs 511

Configuring APs Using Templates 512

Viewing APs Configuration Tabs 521

Navigating to Virtual Controller Configuration Dashboard 521

Deploying a Wireless Network Using IAPs 522

AOS-CX Overview 686

Supported AOS-CX Platforms 686

Getting Started with AOS-CX Deployments 688

Configuring AOS-CX Using Templates 708

Configuring AOS-CX Switches in UI Groups 712

Managing an AOS-CX VSF Stack 773

Troubleshooting AOS-CX Switch Onboarding Issues 798

AOS-S Switches Overview 800

Supported AOS-S Platforms 800

Getting Started with AOS-S Deployments 802

Provisioning Workflow 803

Group Assignment 803

Configuration and Management 804

Switch Monitoring 805

Troubleshooting and Diagnostics 805

Configuring AOS-S Switches 819

Using Configuration Templates for AOS-S Management 820

Configuring or Viewing AOS-S Properties in UI Groups 824

AOS-S Stack 875

Troubleshooting Aruba Switches 883

Aruba SD-Branch Solution 885

Why SD-WAN? 885

Key Features and Benefits 885

Understanding SD-WAN 886

What are the Solution Requirements? 888

Supported SD-Branch Components 889

Aruba Central | User Guide 5

Supported 4G Modems for Aruba SD-Branch 890

SD-Branch What's New 891

Getting Started 899

Creating an Aruba Central Account 899

Accessing Aruba Central Portal 904

Managing License Keys 905

Managing License Assignments 910

Onboarding Devices to Aruba Central 913

Assigning Subscriptions to Aruba Gateways 914

Assigning Gateways to a Group 916

Assigning Gateways to Sites 917

Assigning Labels to Gateways 918

Recovering an Aruba Gateway 918

Assigning a Group Role to an Aruba Gateway Group 919

Connecting Aruba Gateways to Aruba Central 920

Configuring Communication Ports 921

Certificates 922

Provisioning Aruba Gateways in Aruba Central 925

Different Modes of Configuring Gateways and Gateway Groups 925

Configuring Branch Gateway Groups Using the Guided Setup 926

Configuring Branch Gateways Using the Guided Setup 939

Configuring VPNC Group Using the Guided Setup 945

Configuring VPNCs Using the Guided Setup 955

Configuring AOS 10.x Branch Gateways Using the Guided Setup 968

Configuring AOS 10.x Branch Gateway Groups Using the Guided Setup 973

Configuring AOS 10.x VPNCs Using the Guided Setup 980

Configuring AOS 10.x VPNC Groups Using the Guided Setup 990

Configuring AOS 10.x Mobility Gateways Using the Guided Setup 999

Configuring AOS 10.x Mobility Gateway Groups Using the Guided Setup 1002

Configuring an SD-Branch Network Using the Advanced Setup 1007

Configuration Checklist 1007

Configuring Address Pools for Aruba Gateways 1007

Uploading Bulk Configuration Template 1014

Configuring System Information on Aruba Gateways 1015

Configuring VLANs on Aruba Gateways 1034

Configuring SLB using NAT 1040

Configuring Ports 1042

Configuring Uplinks 1047

Configuring IP-SLA Profiles 1055

Managing 9004-LTE Branch Gateway 1057

Configuring WAN Health Check 1061

Configuring WAN Interface Bandwidth Priorities 1063

SD-WANOverlay Tunnel and Route Orchestration 1065

Configuring the SD-Branch Overlay Network 1106

Configuring the SD-WAN Hub Mesh Topology 1113

Branch Mesh Topology in SD-Branch 1115

Configuring Site-to-Site VPN 1117

Configuring Site-to-Site VPN with GRE Tunnel 1123

Configuring IKE Policies 1129

Routing 1135

Configuring Policies for PBR 1177

Configuring Policies for Dynamic Path Steering 1181

SaaS Application Traffic Management with SaaS Express 1187

Configuring Aruba Gateways for Application Visibility and Control 1222

Enforcing a Common Security Policy for Wired and Wireless Users 1232

Configuring Firewall Policies and ACLs 1232

Configuring User Roles for Clients 1244

Configuring Authentication Profiles 1251

Applying Policies to Gateway Interfaces 1287

SD-Branch Redundancy 1290

Configuring Aruba Gateways for Certificate-Based Authentication 1296

Configuring Aruba Gateways for SNMP-Based Reporting 1300

Contents | 6

Configuring Captive Portal IP Redirect Address 1302

Viewing Gateway Configuration Status 1302

Managing Configuration Overrides 1303

Configuring Aruba Gateways for Syslog Message Collection 1304

SD-Branch Advanced Setup for AOS 10.x Personas 1307

Configuration Checklist for AOS 10.x Branch Gateway or Branch Gateway Group Persona 1308

Configuration Checklist for AOS 10.x VPNC or VPNC Group Persona 1310

Configuration Checklist for AOS 10.x Mobility Gateway or Mobility Gateway Group Persona 1312

Configuring an SD-Branch Network Using the Basic Setup 1315

Configuring an SD-Branch Network Using the Basic Setup for a Branch Gateway 1316

Configuring an SD-Branch Network Using the Basic Setup for a Branch Gateway Group 1318

Configuring an SD-Branch Network Using the Basic Setup for a VPNC 1320

Configuring an SD-Branch Network Using the Basic Setup for a VPNC Group 1322

Configuring System Information on Aruba Gateways 1324

Configuring a LAN Interface 1328

Configuring Overlay Routing Profiles 1339

Configuring Route Maps 1340

Configuring LANRedundancy for High Availability 1356

Configuring VPN Pools 1357

Configuring Policies for a Branch Gateway Group 1357

SD-Branch Basic Setup for AOS 10.x Personas 1364

Configuration Checklist for AOS 10.x Branch Gateway Persona 1365

Configuration Checklist for AOS 10.x Branch Gateway Group Persona 1366

Configuring Preferred Leader and VRRP for Cluster Management 1366

Configuration Checklist for AOS 10.x VPNC Persona 1368

Configuration Checklist for AOS 10.x VPNC Group Persona 1369

Configuration Checklist for AOS 10.x Mobility Gateway Persona 1370

Configuration Checklist for AOS 10.x Mobility Gateway Group Persona 1371

Overview of Aruba IDPS 1372

Why Aruba IDPS? 1372

Key Features and Benefits 1372

How does Aruba IDPS Work? 1373

Preparing to add the Aruba IDPS Supported Gateways 1373

Configuring Aruba IDPS 1374

Monitoring Aruba IDPS 1389

Threat Categories 1396

Integration with AWS Public Cloud through Cloud Connect Service 1400

Additional References 1401

Generating API Token in AWS Console 1401

Configuring Aruba Branch Gateway in Aruba Central 1401

Onboarding AWS Account in Aruba Central 1402

Orchestrating Tunnel to the AWS VPC through Cloud Connect Service 1403

Verifying the Instantiation Status 1404

Integration with Microsoft Azure Public Cloud through Cloud Connect Service 1407

Additional References 1408

Configuring Azure Application in Azure Admin Portal 1408

Configuring Azure Application for API Access in Azure Admin Portal 1408

Configuring Aruba Branch Gateway in Aruba Central 1409

Onboarding Azure Account in Aruba Central 1409

Orchestrating Tunnels to Azure Virtual WAN and Vhub through Cloud Connect Service 1410

Verifying the Instantiation Status 1412

Integration with Zscaler through Cloud Connect Service 1415

Additional References 1416

Configuring ZIA for API Access in Zscaler Admin Portal 1416

Onboarding a Cloud Provider Account in Aruba Central 1417

Orchestrating Tunnels to the Nearest ZIA Public Service Edge 1418

Configuring the Locations for Cloud Hub 1420

Important Points to Note 1426

Aruba Central | User Guide 7

Manual Tunnel Establishment 1426

Configuring Zscaler Nexthop List 1429

Adding Nexthop List to PBR Policy 1429

Verifying Tunnel Status 1429

Integration with Zscaler Cloud Security Service 1430

Integrating SD-Branch with ZIA 1431

Setting up Tunnels to ZIA 1431

Additional References 1432

Integration with Prisma Access 1433

Deployment Scenarios 1433

Configuring Prisma Access 1436

Integration with Check Point 1441

Supported IKE and IPsec Cryptographic Profiles 1441

Configuration Steps 1441

Configuring Aruba Gateways for Integration with Check Point 1446

Integration with Symantec WSS 1453

Integration Overview 1453

Role-Based and Application-Based Routing 1454

Supported IKE and IPSec Cryptographic Profiles 1456

Configuring Symantec WSS 1456

Microbranch Redundancy Architectures 1465

Supported Topologies 1466

Configuring a Microbranch with Instant APs 1470

Configuring Support for Aruba VIA Service 1474

Configuring VIA 1474

Configuring VPN IP Pool 1474

Defining IKEv1 Shared Secret 1476

Configuring VIA User Role 1476

Creating VIA Server Group for Authenticating VIA Users 1476

Configuring VIA Authentication Parameters 1476

Loading and Applying VIA Certificates 1478

Configuring and Attaching VIA Connection Profile 1479

Uploading VIA Installer to VPNC 1484

Provisioning Gateways Using ConfigurationTemplates 1486

Important Points to Note 1486

Configuring Gateways Using a Template 1486

Creating a Template Group 1487

Assigning a Gateway to a Template Group 1487

Creating a Configuration Template for Gateways 1488

Customizing a Template Using Variable Definitions 1489

Downloading a Sample Variables File 1489

Modifying a Variables File 1490

Uploading a Variables File 1490

Sample Template and Variables Files 1491

Sample Variables File 1493

Verifying Configuration Status 1495

Backing up and Restoring Templates 1495

Monitoring SD-Branch 1496

Monitoring Gateway 1496

WAN Health—Global 1555

WAN Health—Transport 1556

WAN Health—Site 1559

Monitoring Sites in the Topology Tab 1560

Gateway Firewall Logging 1574

Monitoring SaaS Express 1580

Gateway Alerts 1588

Gateway Reports 1590

Contents | 8

Maintenance 1599

Troubleshooting Devices 1599

Enabling Gateway Logs 1599

Gateway Diagnostic Tests 1601

Updating Software Images on Aruba Gateways 1607

APIs 1609

Updating Software Images on Aruba Gateways 1610

Feature Availability Across Multiple Software Versions 1610

Upgrading Software 1610

Deploying Aruba Virtual Gateways 1611

Features Supported by Virtual Gateway 1611

Virtual Gateway Redundancy 1611

Software Image for Virtual Gateways 1611

Deploying Aruba Virtual Gateways in AWS 1612

Deploying Aruba Virtual Gateways in Microsoft Azure 1636

Deploying Aruba Virtual Gateways in VMware ESXi (Unmanaged Mode) 1680

Deploying Aruba Virtual Gateways in Google Cloud Platform (Unmanaged Mode) 1691

Deploying Aruba Virtual Gateways in MSP (Unmanaged Mode) 1698

Provisioning Virtual Gateways to Groups 1699

Troubleshooting Deployment Issues 1699

High Availability Support for Aruba Virtual Gateways 1700

Monitoring Virtual Gateways 1706

Monitoring APs 1708

Monitoring APs in Summary View 1708

Monitoring APs in List View 1708

Access Point >Overview > Summary 1722

Access Point >Overview >AI Insights 1730

Access Point >Overview >Floor Plan 1732

Access Point >Overview > Performance 1733

Access Point >Overview >RF 1734

Access Point >Overview > Spectrum 1737

Access Point >Security > VPN 1740

Rebooting an IAP 1741

Rebooting an IAP Cluster 1741

Tech Support for an IAP 1741

Opening a Remote Console 1742

Enabling Live IAP Monitoring 1742

AP Live Events 1743

Access Point >Clients > Clients 1744

Access Point >Alerts & Events >Alerts & Events 1745

About RAPIDS 1745

Monitoring Switches and Switch Stacks 1749

Monitoring Switches in List View 1749

Monitoring Switches in Summary View 1752

Switch >Overview > Summary 1752

Switch >Overview >Hardware 1757

Switch >Overview >Routing 1760

Switch >Overview > AI Insights 1762

Switch >Clients >Clients 1764

Switch >Clients >Neighbours 1766

Switch >LAN >Ports 1767

Switch > LAN > PoE 1770

Switch >LAN >VLAN 1773

Switch >VSX 1776

Switch > Alerts & Events > Events 1778

Monitoring Your Network 1780

Network Overview 1780

Network HealthDashboard 1780

Global—Summary 1796

Aruba Central | User Guide 9

Wi-Fi Connectivity 1798

Monitoring Sites in the Topology Tab 1802

About Floor plan 1816

Viewing Audit Trail 1825

The AI Insights Dashboard 1829

Viewing the AI Insights Dashboard 1829

Insights Context 1831

Cards 1844

Baselines 1846

Access Points with High Number of Reboots 1847

Access Points with Excessive Number of Channel Changes 1848

Access Points with High CPU Utilization 1850

Access Points Impacted by High 2.4 GHz Usage 1851

Access Points Radios with Frequent Transmit Power Changes 1854

Access Point Transmit Power can be Optimized 1855

Access Points Impacted by High 5 GHz Usage 1856

Access Points with High Memory Usage 1859

Clients with High Roaming Latency 1860

Clients with Low SNR Minutes 1862

Clients with High MAC Authentication Failures 1864

Clients with DHCP Server Connection Problems 1866

Clients with High 802.1X Authentication Failures 1868

Clients with High Wi-Fi Security Key-Exchange Failures 1870

Clients who Roamed Excessively 1871

Clients with Captive Portal Authentication Problems 1873

Clients with High Number of Wi-Fi Association Failures 1875

Coverage Holes Identified 1876

Dual-band (2.4/5 GHz) Clients Primarily using 2.4 GHz 1878

Delayed DNS Request or Response 1880

DNS Queries Failed to Reach or Return from the Server 1882

DNS Servers Rejected High Number of Queries 1884

Gateways with High Memory Usage 1886

Gateways with High CPU Utilization 1887

Failure to Establish Gateway Tunnels 1889

Gateways with Uncommon Health-Probe IPs 1891

Gateways with Underperforming WAN Links 1892

Gateways WAN Uplinks Having Higher Latency than Peers 1894

Improve RF Resiliency by Switching APs between Switches in the Stack 1895

Telemetry Information not Received from APs or Radios 1896

Outdoor Clients Impacting Wi-Fi Performance 1898

AOS-CX Switches with High CPU Utilization 1901

AOS-CX Switches with High Memory Usage 1902

AOS-CX Switch Ports with High Power-over-Ethernet Problems 1904

AOS-CX Switches with High Port Errors 1906

AOS-CX Switches with High Port Flaps 1907

AOS-S Switches with High Port Errors 1909

AOS-S Switches with High Port Flaps 1911

AOS-S Switches with High CPU Utilization 1912

AOS-S Switches with High Memory Usage 1914

AOS-S Switch Ports with High Power-over-Ethernet Problems 1916

All Clients 1918

Clients 1918

Client Overview 1927

Client Status Changes 1928

Clients > Wireless Client > Overview 1929

Clients > Wired Client > Overview 1943

Clients > Remote Client > Overview 1949

Classifying Clients 1954

Client Events 1956

Clients Profile 1958

Alerts & Events 1967

Alerts & Events Dashboard 1968

Contents | 10

Configuring Alerts 1973

Adding Default Recipients 1985

Suppressing Alert Notifications in the Site Dashboard 1985

Configuring Site-specific Email Notifications 1986

Viewing Enabled Alerts 1987

Supported IAP Events 1987

Supported Client Events 1989

Dynamic Logs 1992

Client Live Events 1996

Troubleshooting a Client 1997

Packet Capture 1998

Starting Packet Capture 1998

Reports 1999

Viewing the Reports Page 1999

Report Categories 1999

Report Configuration Options 2009

Previewing a Report 2012

Creating a Report 2013

Editing a Report 2014

Viewing the Generated Report 2014

Viewing the Scheduled Report 2016

Downloading a Report 2019

Deleting a Report 2020

Aruba Cloud Authentication and Policy Overview 2020

Aruba Cloud Authentication and Policy Architecture 2021

Roles Applicable for Configuring Cloud Authentication and Policy 2022

Supported Devices and Operating Systems 2022

Supported Deployment Types 2023

Prerequisites for Configuring Cloud Authentication and Policy 2024

Caveats for using Cloud Authentication and Policy 2025

Configuring Cloud Authentication and Policy Server in a WLAN Network 2027

Configuring Cloud Authentication and Policy Server in a Wired Network 2029

Cloud Identity 2030

Configuring Aruba Cloud Authentication and Policy 2035

Updating Aruba Cloud Authentication and Policy 2040

Provisioning Clients 2042

Monitoring Access Requests and Sessions 2051

Client Security 2062

Application Visibility 2065

Viewing Visibility Dashboard 2065

Graph View in Visibility Dashboard 2066

Applications 2067

Websites 2068

Blocked Traffic 2069

Service Apps 2071

Guest Access 2072

Presence Analytics 2087

Unified Communications 2092

Using Troubleshooting Tools 2099

Troubleshooting Network Issues 2099

Enabling Gateway Logs 2112

Troubleshooting Device Issues 2114

Advanced Device Troubleshooting 2117

Remote Console Session 2122

Troubleshooting Workflows 2126

Client Connectivity 2126

Device Issues 2153

AI Insights 2156

Aruba Central | User Guide 11

Network Check 2160

Allowlist Features 2168

Project SDE 2168

Clients with no Response from the DHCP Server 2168

Insight Summary 2168

Time Series Graph 2170

Cards 2170

AirGroup 2176

Applying Packet Capture Filters 2189

Enabling Air Slice on APs 2190

IoT Operations 2193

Managing Site Installations for MSPs 2203

Replacing a Branch Gateway 2217

Replacing an Access Point 2223

Rogues 2231

Streaming API—Auditlogs 2235

WAN Health Alerts 2236

Chapter 1

About this Guide

This user guide describes the features supported by Aruba Central and provides detailed instructions to set up

and configure devices such as Instant APs, Aruba Switches, and Aruba SD-WAN Gateways.

Intended Audience

This guide is intended for system administrators who configure and monitor their networks using Aruba Central.

Related Documents

In addition to this document, the Aruba Central product documentation includes the following documents:

n

Aruba Central Help Center

n

Aruba Central Getting Started Guide

n

Aruba Central Managed Service Provider User Guide

n

Aruba Central SD Branch Solution Guide

Conventions

The following conventions are used throughout this guide to emphasize important concepts:

Type Style Description

Italics

This style is used to emphasize important terms and to mark the titles of books.

System items This fixed-width font depicts the following:

nSample screen output

nSystem prompts

Table 1:

Typographical Conventions

The following informational icons are used throughout this guide:

Indicates helpful suggestions, pertinent information, and important things to remember.

Indicates a risk of damage to your hardware or loss of data.

Indicates a risk of personal injury or death.

Aruba Central | User Guide 12

About this Guide | 13

Terminology Change

As part of advancing HPE's commitment to racial justice, we are taking a much-needed step in overhauling

HPE engineering terminology to reflect our belief system of diversity and inclusion. Some legacy products and

publications may continue to include terminology that seemingly evokes bias against specific groups of people.

Such content is not representative of our HPE culture and moving forward, Aruba will replace racially

insensitive terms and instead use the following new language:

Usage Old Language New Language

Campus Access Points + Controllers Master-Slave Conductor-Member

Instant Access Points Master-Slave Conductor-Member

Switch Stack Master-Slave Conductor-Member

Wireless LAN Controller Mobility Master Mobility Conductor

Firewall Configuration Blacklist, Whitelist Denylist, Allowlist

Types of Hackers Black Hat, White Hat Unethical, Ethical

Contacting Support

Main Site arubanetworks.com

Support Site asp.arubanetworks.com

Airheads Social Forums and Knowledge

Base

community.arubanetworks.com

North American Telephone 1-800-943-4526 (Toll Free)

1-408-754-1200

International Telephone arubanetworks.com/support-services/contact-support/

Software Licensing Site lms.arubanetworks.com

End-of-life Information arubanetworks.com/support-services/end-of-life/

Security Incident Response Team Site: arubanetworks.com/support-services/security-bulletins/

Email: [email protected]

Table 2:

Contact Information

Chapter 2

What is Aruba Central?

Aruba Central offers unified network management, AI-based analytics, and IoT device security for wired,

wireless, and SD-WAN networks. All of these capabilities are combined into one easy-to-use platform, which

includes the following apps:

nNetwork Operations—Provides unified network management by consolidating wired, wireless, and SD-WAN

deployment and management tasks, real-time diagnostics, and live monitoring, for simple and fast problem

resolution.

nClearPass Device Insight—Provides a single pane of glass for device visibility employing automated device

discovery, machine learning (ML) based fingerprinting and identification. For more information, see Aruba

ClearPass Device Insight Information Center.

This section includes the following topics:

nKey Features

nWhat is Aruba Central?

nSupported Web Browsers

nOperational Modes and Interfaces

Key Features

Aruba Central offers the following key features and benefits:

nStreamlined configuration and deployment of devices—Leverages the ZTP capability of Aruba devices to

bring up your network in no time. Aruba Central supports group configuration of devices, which allows you to

provision and manage multiple devices with similar configuration requirements with less administrative

overhead.

nIntegrated wired, WAN, and wireless Infrastructure management—Offers a centralized management

interface for managing wireless, WAN, and wired networks in distributed environments, and thus help

organizations save time and improve efficiency.

nAdvanced analytics and assurance—With continuous monitoring, AI-based analytics provide real-time

visibility and insight into what’s happening in the Wi-Fi network. The insights utilize machine learning that

leverage a growing pool of network data and deep domain experience.

nSecure cloud-based platform—Offers a secure cloud platform with HTTPS connection, certificate-based

authentication, and Cloud Authentication and Policy.

nInterface for Managed Service Providers—Offers an additional interface for MSPs to provision and manage

their respective tenant accounts. Using the MSP mode, service provider organizations can administer

network infrastructure for multiple organizations in a single interface.

nSD-Branch management—Offers a simplified solution for managing and monitoring SD Branch devices such

as Branch Gateways, VPNConcentrators, Instant APs, and Aruba Switches. It also provides detailed

dashboards showing WAN health and pictorial depictions of the branch setup. The Aruba SD-Branch

solution extends the SD-WAN concepts to all elements in a branch setup to deliver a full-stack solution for

managing WLAN, LAN and WAN connections. The SD-Branch solution provides a common cloud-

Aruba Central | User Guide 14

What is Aruba Central? | 15

management model that simplifies deployment, configuration, and management of all components of a

branch setup. The solution leverages the ZTP and cloud management capabilities of Aruba devices to

integrate management and infrastructure for WAN, WLAN, and LAN and provide a holistic solution from

access network to edge with end-to-end security. It also addresses all communications in distributed

deployments, from micro branches to medium or large branches. For more information, see the Aruba SD-

Branch Solution.

nHealth and usage monitoring—Provides a comprehensive view of your network, device status and health,

and application usage. You can monitor, identify, and address issues by using data-driven dashboards,

alerts, reports, and troubleshooting workflows. Aruba Central also utilizes the DPI feature of the devices to

monitor, analyze and block traffic based on application categories, application type, web categories and

website reputation. Using this data, you can prioritize business critical applications, limit the use of

inappropriate content, and enforce access policies on a per user, device or location basis.

nGuest Access—Allows you to manage access for your visitors with a secure guest Wi-Fi experience. You

can create guest sponsor roles and social logins for your guest networks. You can also design your guest

landing page with custom logos, color, and banner text.

nPresence Analytics—Offers a value added service for Instant AP based networks to get an insight into user

presence and loyalty. The Presence Analytics dashboard allows you to view the presence of users at a

specific site and the frequency of user visits at a given location or site. Using this data, you can make

business decisions to improve customer engagement.

Supported Web Browsers

To view the Aruba Central UI, ensure that JavaScript is enabled on the web browser.

Browser Versions Operating System

Google Chrome 39.0.2171.65 or later Windows and macOS

Mozilla Firefox 34.0.5 or later Windows and macOS

Safari 7 or later macOS

Microsoft Edge version 79 or later Windows

Table 3:

Browser Compatibility Matrix

Operational Modes and Interfaces

Aruba offers the following variants of the Aruba Central web interface:

nStandard Enterprise Mode

nManaged Service Provider Mode

Standard Enterprise Mode

The Standard Enterprise interface is intended for users who manage their respective accounts end-to-end. In

the Standard Enterprise mode, the customers have complete access to their accounts. They can also provision

devices and subscriptions to manage their respective accounts.

The following figure illustrates a typical Standard Enterprise mode deployment.

Aruba Central | User Guide 16

Figure 1

Standard Enterprise Mode

Managed Service Provider Mode

Aruba Central offers the MSP mode for managed service providers who need to manage multiple customer

networks. The MSP administrators can provision tenant accounts, allocate devices, assign licenses, and

monitor tenant accounts and their networks. The administrators can also drill down to a specific tenant account

and perform administration and configuration tasks. Tenants can access only their respective accounts, and

only those features and application services to which they have subscribed.

The following figure illustrates a typical MSP mode deployment.

What is Aruba Central? | 17

Figure 2

Managed Service Provider Mode

Supported Devices

This section provides the following information:

nSupported Instant APs

nSupported AOS-S Platforms

nSupported AOS-CX Platforms

nSupported SD-Branch Components

nSupported 4G Modems for Aruba SD-Branch

Supported Instant APs

The following table lists the Instant AP platforms, the installation mode, the minimum supported Aruba Instant

software versions, and the Instant APs supporting power draw:

Instant AP

Platform Installation Mode Minimum Supported Aruba

Instant Software Version

Power

Draw

Support

AP-655 Indoor Aruba Instant 8.10.0.0 Yes

AP-635 Indoor Aruba Instant 8.9.0.0 Yes

AP-567EX Outdoor Aruba Instant 8.7.1.0 No

AP-567 Outdoor Aruba Instant 8.7.1.0 Yes

AP-565EX Outdoor Aruba Instant 8.7.1.0 No

Table 4:

Supported Instant AP Platforms

Aruba Central | User Guide 18

Instant AP

Platform Installation Mode Minimum Supported Aruba

Instant Software Version

Power

Draw

Support

AP-565 Outdoor Aruba Instant 8.7.1.0 Yes

AP-503H Indoor Aruba Instant 8.7.1.0 Yes

AP-577EX Outdoor Aruba Instant 8.7.0.0 Yes

AP-577 Outdoor Aruba Instant 8.7.0.0 Yes

AP-575EX Outdoor Aruba Instant 8.7.0.0 Yes

AP-575 Outdoor Aruba Instant 8.7.0.0 Yes

AP-574 Outdoor Aruba Instant 8.7.0.0 Yes

AP-518 Outdoor Aruba Instant 8.7.0.0 Yes

AP-505H Indoor Aruba Instant 8.7.0.0 Yes

AP-505 Indoor Aruba Instant 8.6.0.0 Yes

AP-504 Indoor Aruba Instant 8.6.0.0 Yes

AP-555 Indoor Aruba Instant 8.5.0.0 No

AP-535 Indoor Aruba Instant 8.5.0.0 No

AP-534 Indoor Aruba Instant 8.5.0.0 No

AP-515 Indoor Aruba Instant 8.4.0.0 Yes

AP-514 Indoor Aruba Instant 8.4.0.0 Yes

AP-387 Outdoor Aruba Instant 8.4.0.0 Yes

AP-303P Indoor Aruba Instant 8.4.0.0 No

AP-377EX Outdoor Aruba Instant 8.3.0.0 No

AP-377 Outdoor Aruba Instant 8.3.0.0 Yes

AP-375EX Outdoor Aruba Instant 8.3.0.0 No

AP-375 Outdoor Aruba Instant 8.3.0.0 Yes

AP-374 Outdoor Aruba Instant 8.3.0.0 Yes

AP-345 Indoor Aruba Instant 8.3.0.0 Yes

AP-344 Indoor Aruba Instant 8.3.0.0 Yes

AP-318 Indoor Aruba Instant 8.3.0.0 Yes

AP-303 Indoor Aruba Instant 8.3.0.0 No

What is Aruba Central? | 19

Instant AP

Platform Installation Mode Minimum Supported Aruba

Instant Software Version

Power

Draw

Support

AP-203H Indoor Aruba Instant 6.5.3.0 No

AP-367 Outdoor Aruba Instant 6.5.2.0 No

AP-365 Outdoor Aruba Instant 6.5.2.0 No

AP-303HR Indoor Aruba Instant 6.5.2.0 No

AP-303H Indoor Aruba Instant 6.5.2.0 Yes

AP-203RP Indoor Aruba Instant 6.5.2.0 No

AP-203R Indoor Aruba Instant 6.5.2.0 No

IAP-305 Indoor Aruba Instant 6.5.1.0-4.3.1.0 Yes

IAP-304 Indoor Aruba Instant 6.5.1.0-4.3.1.0 Yes

IAP-207 Indoor Aruba Instant 6.5.1.0-4.3.1.0 No

IAP-335 Indoor Aruba Instant 6.5.0.0-4.3.0.0 Yes

IAP-334 Indoor Aruba Instant 6.5.0.0-4.3.0.0 Yes

IAP-315 Indoor Aruba Instant 6.5.0.0-4.3.0.0 No

IAP-314 Indoor Aruba Instant 6.5.0.0-4.3.0.0 Yes

IAP-325 Indoor Aruba Instant 6.4.4.3-4.2.2.0 No

IAP-324 Indoor Aruba Instant 6.4.4.3-4.2.2.0 No

IAP-277 Outdoor Aruba Instant 6.4.3.1-4.2.0.0 No

IAP-228 Indoor Aruba Instant 6.4.3.1-4.2.0.0 No

IAP-205H Indoor Aruba Instant 6.4.3.1-4.2.0.0 No

IAP-215 Indoor Aruba Instant 6.4.2.0-4.1.1.0 No

IAP-214 Indoor Aruba Instant 6.4.2.0-4.1.1.0 No

IAP-205 Indoor Aruba Instant 6.4.2.0-4.1.1.0 No

IAP-204 Indoor Aruba Instant 6.4.2.0-4.1.1.0 No

IAP-275 Outdoor Aruba Instant 6.4.0.2-4.1.0.0 No

IAP-274 Outdoor Aruba Instant 6.4.0.2-4.1.0.0 No

IAP-103 Indoor Aruba Instant 6.4.0.2-4.1.0.0 No

IAP-225 Indoor Aruba Instant 6.3.1.1-4.0.0.0 No

Aruba Central | User Guide 20

Instant AP

Platform Installation Mode Minimum Supported Aruba

Instant Software Version

Power

Draw

Support

IAP-224 Indoor Aruba Instant 6.3.1.1-4.0.0.0 No

IAP-115 Indoor Aruba Instant 6.3.1.1-4.0.0.0 No

IAP-114 Indoor Aruba Instant 6.3.1.1-4.0.0.0 No

RAP-155P Indoor Aruba Instant 6.2.1.0-3.3.0.0 No

RAP-155 Indoor Aruba Instant 6.2.1.0-3.3.0.0 No

RAP-109 Indoor Aruba Instant 6.2.0.0-3.2.0.0 No

RAP-108 Indoor Aruba Instant 6.2.0.0-3.2.0.0 No

RAP-3WN Indoor Aruba Instant 6.1.3.1-3.0.0.0 No

RAP-3WNP Indoor Aruba Instant 6.1.3.1-3.0.0.0 No

nAP-635 and AP-655 IAPs are Wi-Fi 6E capable APs that support 6 GHz radio band, in addition to 2.4 GHz and 5

GHz radio bands.

nRAP-155, RAP-155P, IAP-214, IAP-215, IAP-224, IAP-225, IAP-228, IAP-274, IAP-275, and IAP-277 IAPs are

no longer supported from Aruba Instant 8.7.0.0 onwards.

nIAP-103, RAP-108, RAP-109, IAP-114, IAP-115,IAP-204, IAP-205, and IAP-205H IAPs are no longer supported

from Aruba Instant 8.3.0.0 onwards.

nBy default, AP-318, AP-374, AP-375, and AP-377 IAPs have Eth1 as the uplink port and Eth0 as the downlink

port. Aruba does not recommend you to upgrade these IAPs to Aruba Instant 8.5.0.0 or 8.5.0.1 firmware

versions, as the upgrade process changes the uplink port from Eth1 to Eth0 port thereby making the devices

unreachable.

nFor more information about Aruba's End-of-life policy and the timelines for hardware and software products at the

end of their lives, see: https://www.arubanetworks.com/support-services/end-of-life/

nData sheets and technical specifications for the supported AP platforms are available at:

https://www.arubanetworks.com/products/networking/access-points/

Page is loading ...

Aruba Central 2.5.4, Central User guide

Related papers

Other documents