Aruba JX993A User guide

Aruba Instant 8.11.2.0 User Guide

Copyright Information

This product includes code licensed under certain open source licenses which require source

compliance. The corresponding source for these components is available upon request. This offer

is valid to anyone in receipt of this information and shall expire three years following the date of

the final distribution of this product version by Hewlett Packard Enterprise Company. To obtain

such source code, please check if the code is available in the HPE Software Center at

https://myenterpriselicense.hpe.com/cwp-ui/software but, if not, send a written request for

specific software version and product for which you want the open source code. Along with the

request, please send a check or money order in the amount of US $10.00 to:

Hewlett Packard Enterprise Company

Attn: General Counsel

WW Corporate Headquarters

1701 E Mossy Oaks Rd Spring, TX 77389

United States of America.

Contents

Contents 3

Revision History 8

About this Guide 9

Intended Audience 9

Related Documents 9

Conventions 9

Terminology Change 10

Contacting Support 10

About Aruba Instant 12

Aruba Instant Overview 12

What is New in the Release 15

Setting up an Instant AP 18

Setting up Instant Network 18

Connecting to a Provisioning Wi-Fi Network 20

Instant AP Cluster 20

Disabling the Provisioning Wi-Fi Network 20

Disabling Activate Communication with Instant AP for Provisioning 21

Logging in to the Instant UI 24

Accessing the Instant CLI 25

Instant AP Degraded State 27

Automatic Retrieval of Configuration 29

Managed Mode Operations 29

Prerequisites 29

Configuring Managed Mode Parameters 29

Verifying the Configuration 31

Instant Web User Interface 32

Login Screen 32

Home Page 32

Initial Configuration Tasks 42

Configuring System Parameters Using the Instant WebUI 42

Changing Password 46

Customizing Instant AP Settings 48

Discovery Logic 48

Modifying the Instant AP Host Name 54

Configuring Zone Settings on an Instant AP 54

Disabling APFactory Reset 57

Specifying a Method for Obtaining IP Address 57

Enabling Low Power Mode 57

Air Slice 58

Configuring Uplink VLANfor an Instant AP 60

Changing the Instant AP Installation Mode 61

Aruba Instant 8.11.2.0 User Guide 3

Contents | 4

Changing USB Port Status 61

Conductor Election and Virtual Controller 62

Adding an Instant AP to the Network 63

Removing an Instant AP from the Network 64

Intelligent Power and Temperature Monitoring (IPTM) 64

Transmit Power Calculation 68

Hardware Offloading for Increased Transmission Performance 68

VLAN Configuration 70

VLAN Pooling 70

Uplink VLAN Monitoring and Detection on Upstream Devices 70

Multiple Management Interface 70

IPv6 Support 72

IPv6 Notation 72

Enabling IPv6 Support for Instant AP Configuration 72

IPv6 Address Generation 74

Firewall Support for IPv6 74

GREBackup Tunnel 75

Debugging Commands 76

Wireless Network Profiles 77

Configuring Wireless Network Profiles 77

Wi-Fi 6E (6 GHz Networks) 96

Fast Roaming for Wireless Clients 99

Configuring Modulation Rates on a WLAN SSID 103

Multi-User-MIMO 104

Management Frame Protection 105

High Efficiency WLAN (HEW) 105

Multi Band Operation (MBO) 106

Disabling Short Preamble for Wireless Client 107

Disabling a WLAN SSID Profile 108

Editing a WLAN SSID Profile 108

Deleting a WLAN SSID Profile 108

Wireless Features 108

Wireless Client Bridge 111

Wired Profiles 112

Configuring a Wired Profile 112

Assigning a Profile to Ethernet Ports 117

Enabling 802.3az Energy Efficient Ethernet Standard 118

Editing a Wired Profile 118

Deleting a Wired Profile 118

LACP 118

Understanding Hierarchical Deployment 120

Loop Protection 121

Captive Portal for Guest Access 123

Understanding Captive Portal 123

Configuring a WLANSSID for Guest Access 124

Configuring Wired Profile for Guest Access 130

IGMP 131

Configuring Internal Captive Portal for Guest Network 132

Configuring External Captive Portal for a Guest Network 135

Configuring External Captive Portal Authentication Using ClearPass Guest 139

Configuring Facebook Login 141

Configuring FacebookExpress Wi-Fi 142

Aruba Instant 8.11.2.0 User Guide 5

Configuring Guest Logon Role and Access Rules for Guest Users 146

Configuring Captive Portal Roles for an SSID 147

Configuring Walled Garden Access 149

Disabling Captive Portal Authentication 150

Authentication and User Management 151

Overview of Instant AP Users 151

Supported Authentication Methods 156

Supported EAP Authentication Frameworks 166

Supported Authentication Servers 167

Configuring Authentication Servers 172

Supported Encryption Types 182

Authentication Survivability 183

WPA3 Security 186

802.1X Supplicant Support 189

Denylisting Clients 192

Authentication Certificates 194

Roles and Policies 199

Firewall Policies 199

Content Filtering 211

Configuring User Roles 214

Configuring Derivation Rules 218

DHCP Configuration 228

Configuring DHCP Scopes 228

Configuring the Default DHCP Scope for Client IP Assignment 239

DHCPReporting 240

Configuring Time-Based Services 242

Time Range Profiles 242

Configuring a Time Range Profile 243

Assigning a Time Range Profile to a WLAN SSID 244

Verifying the Configuration 244

Assigning a Time Range Profile to a Role 245

IoT 246

IoT Concepts 246

IoT Configuration 259

IoT User Case Sample Configuration 281

VPN Configuration 291

Understanding VPN Features 291

Configuring a Tunnel from an Instant AP to a Mobility Controller 293

Configuring Routing Profiles 301

IAP-VPN Deployment 302

Understanding IAP-VPN Architecture 302

Configuring Instant AP and Controller for IAP-VPN Operations 306

IAP-VPN Deployment Scenarios 316

Radio Settings 339

Configuring Radio Settings for an Instant AP 339

Adaptive Radio Management 342

Configuring Radio Profiles 351

Split 5 GHz Radio for 550 Series Access Points 358

Flexible Dual Band Radios 361

Contents | 6

Configuring External Antenna 362

Transmit Power Calculation 363

DPI and Application Visibility 364

DPI 364

Enabling Application Visibility 364

Application Visibility 365

Enabling URL Visibility 365

Configuring ACL Rules for Application and Application Categories 366

Configuring Web Policy Enforcement Service 369

Voice and Video 374

WMM Traffic Management 374

Media Classification for Voice and Video Calls 377

WebRTC Prioritization 378

Enabling Enhanced Voice Call Tracking 378

Wi-Fi Calling 379

Unified Communications Manager 380

Services 382

Configuring AirGroup 382

Configuring an Instant AP for RTLSSupport 390

Configuring an Instant AP for ALE Support 392

Clarity Live 393

Dynamic DNS Registration 395

Deny Intra-VLAN Traffic 399

Integrating an Instant AP with Palo Alto Networks Firewall 401

Integrating an Instant AP with an XMLAPIInterface 402

CALEA Integration and Lawful Intercept Compliance 405

Support for 802.11mc 410

SDN 411

Functionalities of SDN 411

OpenFlow for WLAN 411

Clickstream Analysis 412

Wildcard ACLSupport 413

Cluster Security 414

Cluster Security Using DTLS 414

Locked Mode Member Instant AP 414

Enabling Cluster Security 415

ZTPwith Cluster Security 415

Low Assurance Devices 416

Cluster Security Debugging Logs 417

Verifying the Configuration 417

Instant AP Management and Monitoring 419

Managing an Instant AP from AirWave 419

Managing Instant AP from Aruba Central 429

WebSocket Connection 433

Support for RESTAPI 433

Uplink Configuration 435

Uplink Interfaces 435

Ethernet Uplink 435

Cellular Uplink 440

Wi-Fi Uplink 444

Aruba Instant 8.11.2.0 User Guide 7

Uplink Preferences and Switching 447

Intrusion Detection 453

Detecting and Classifying Rogue APs 453

OS Fingerprinting 453

Configuring WIP and Detection Levels 454

Configuring IDS 459

Ghost Tunnel Attack Detection 460

Mesh Instant AP Configuration 462

Mesh Network Overview 462

Setting up Instant Mesh Network 464

Configuring Wired Bridging on Ethernet 0 for Mesh Point 465

Mesh Cluster Function 466

Radio Selection for Mesh Links 468

Fast Roaming in Mesh Networks 468

Mesh Scanning 469

Mobility and Client Management 471

Layer-3 Mobility Overview 471

Configuring Layer-3 Mobility 472

Spectrum Monitor 474

Understanding Spectrum Data 474

In the WebUI 474

Configuring Spectrum Monitors and Hybrid Instant APs 479

Instant AP Maintenance 481

Generating Default Certificates 481

Certificate Enrollment Using EST 482

Backing up and Restoring Instant AP Configuration Data 483

Converting an Instant AP to a Remote AP and Campus AP 485

Converting an Instant AP to Stand-Alone Mode 488

Converting an Instant AP to SingleAP Mode 488

Resetting a Remote AP or Campus AP to an Instant AP 490

Rebooting the Instant AP 490

DRT Upgrade 491

Release Type Identifier 492

Monitoring Devices and Logs 493

Configuring SNMP 493

Configuring Syslog Servers 496

Configuring TFTP Dump Server 497

Running Debug Commands 498

Uplink Bandwidth Monitoring 501

WANLink Health Monitoring 502

Hotspot Profiles 505

Understanding Hotspot Profiles 505

Configuring Hotspot Profiles 507

Sample Configuration 525

Mobility Access Switch Integration 529

Mobility Access Switch Overview 529

Configuring Instant APs for Mobility Access Switch Integration 530

Glossary of Terms 531

Revision History | 8

Revision History

The following table lists the revisions of this document.

Revision Change Description

Revision 01 Initial release.

Table 1: Revision History

Chapter 1

About this Guide

This User Guide describes the features supported by Aruba Instant and provides detailed instructions

for setting up and configuring the Instantnetwork.

Intended Audience

This guide is intended for administrators who configure and use Instant APs.

Related Documents

In addition to this document, the Instant AP product documentation includes the following:

nAruba Instant Access Point Installation Guides

nAruba Instant CLI Reference Guide

nAruba Instant Quick Start Guide

nAruba Instant Release Notes

nAruba Instant RESTAPIGuide

Conventions

The following conventions are used throughout this manual to emphasize important concepts:

Style Type Description

Italics

This style is used to emphasize important terms and to mark the titles of books.

System items This fixed-width font depicts the following:

nSample screen output

nSystem prompts

nFilenames, software devices, and specific commands when mentioned in the text.

Commands In the command examples, this style depicts the keywords that must be typed exactly as

shown.

<Arguments> In the command examples, italicized text within angle brackets represents items that you

should replace with information appropriate to your specific situation. For example:

#send <text message>

In this example, you would type “send” at the system prompt exactly as shown, followed by

the text of the message you wish to send. Do not type the angle brackets.

Table 2:

Typographical Conventions

Aruba Instant 8.11.2.0 User Guide 9

About this Guide | 10

Style Type Description

[Optional] Command examples enclosed in square brackets are optional. Do not type the square

brackets.

{Item A |

Item B}

In the command examples, items within curly brackets and separated by a vertical bar

represent the available choices. Enter only one choice. Do not type the curly brackets or bars.

Table 2:

Typographical Conventions

The following informational icons are used throughout this guide:

Indicates helpful suggestions, pertinent information, and important things to remember.

Indicates a risk of damage to your hardware or loss of data.

Indicates a risk of personal injury or death.

Terminology Change

As part of advancing HPE's commitment to racial justice, we are taking a much-needed step in

overhauling HPE engineering terminology to reflect our belief system of diversity and inclusion. Some

legacy products and publications may continue to include terminology that seemingly evokes bias

against specific groups of people. Such content is not representative of our HPE culture and moving

forward, Aruba will replace racially insensitive terms and instead use the following new language:

Usage Old Language New Language

Campus Access Points + Controllers Master-Slave Conductor-Member

Instant Access Points Master-Slave Conductor-Member

Switch Stack Master-Slave Conductor-Member

Wireless LAN Controller Mobility Master Mobility Conductor

Firewall Configuration Blacklist, Whitelist Denylist, Allowlist

Types of Hackers Black Hat, White Hat Unethical, Ethical

Contacting Support

Main Site arubanetworks.com

Support Site https://asp.arubanetworks.com/

Table 3: Contact Information

Aruba Instant 8.11.2.0 User Guide 11

Airheads Social Forums and Knowledge

Base

community.arubanetworks.com

North American Telephone 1-800-943-4526 (Toll Free)

1-408-754-1200

International Telephone arubanetworks.com/support-services/contact-support/

Software Licensing Site lms.arubanetworks.com

End-of-life Information arubanetworks.com/support-services/end-of-life/

Security Incident Response Team Site: arubanetworks.com/support-services/security-bulletins/

Email: [email protected]

Chapter 2

About Aruba Instant

This chapter contains the following topics:

Aruba Instant Overview 12

What is New in the Release 15

Aruba Instant Overview

Aruba Instant virtualizes Aruba Mobility Controller capabilities on 802.1 capable access points creating a

feature-rich enterprise-grade WLAN that combines affordability and configuration simplicity.

Instant is a simple, easy to deploy turnkey WLAN solution consisting of one or more Instant APs. An

Ethernet port with routable connectivity to the Internet or a self-enclosed network is used for deploying

an Instant Wireless Network. An Instant AP can be installed at a single site or deployed across multiple

geographically dispersed locations. Designed specifically for easy deployment and proactive

management of networks, Instant is ideal for small customers or remote locations without requiring any

on-site IT administrator.

An Instant AP cluster consists of member Instant APs and a conductor Instant AP in the same VLAN, as

they communicate with broadcast messages. A virtual controller is a combination of the whole cluster,

as the member Instant APs and conductor Instant AP coordinate to provide a controller-less Instant

solution. In an Instant deployment scenario, the first Instant AP that comes up becomes the conductor

Instant AP. All other Instant APs joining the cluster after that Instant AP, become the member Instant

APs.

In an Instant deployment scenario, only the first Instant AP or the conductor Instant AP needs to be

configured. The other Instant APs download configurations from the first Instant AP that is configured.

The Instant solution constantly monitors the network to determine the Instant AP that must function as

a conductor Instant AP at a given time. The conductor Instant AP may change as necessary from one

Instant AP to another without impacting network performance.

Each Instant AP model has a minimum required software version. When a new Instant AP is added into

an existing cluster, it can join the cluster only if the existing cluster is running at least the minimum

required version of that Instant AP. If the existing cluster is running a version prior to the minimum

required version of the new Instant AP, the new Instant AP will not come up and may reboot with the

reason Image sync fail. To recover from this condition, upgrade the existing cluster to at least the

minimum required version of the new Instant AP first, and add the new Instant AP. For more

information about supported Instant AP platforms, refer to the Supported Instant AP Platforms table

and the Aruba Instant Release Notes.

Aruba recommends that networks with more than 128 Instant APs be designed as multiple, smaller

virtual controller networks with Layer-3 mobility enabled between these networks.

Aruba APs are available in the following variants:

nUS (United States)

nJP (Japan)

Aruba Instant 8.11.2.0 User Guide 12

About Aruba Instant | 13

nIL (Israel)

nEG (Egypt)

nRW (Rest of the World)

Aruba APs supported with Aruba Instant 8.11.0.x versions are available in all of the variants mentioned

above.

For information on regulatory domains and the list of countries supported by the Instant AP-###-RW

type, see the Specifying Country Code section in Logging in to the Instant UI on page 24.

Supported AP Models

The following table lists the AP models supported by Aruba Instant 8.11.0.0:

Instant AP Platform APModels

Indoor APs

650 Series AP-655

630 Series AP-635

610 Series AP-615

550 Series AP-555

530 Series AP-534 and AP-535

510 Series AP-514 and AP-515

500 Series AP-504 and AP-505

310 Series IAP-314 and IAP-315

303 Series AP-303 and AP-303P

300 Series IAP-304 and IAP-305

Outdoor APs

580 Series AP-584, AP-585, and AP-587

580EX Series AP-585EX and AP-587EX

570 Series AP-574, AP-575, and AP-577

570EX Series AP-575EX and AP-577EX

560 Series AP-565 and AP-567

518 Series AP-518

370 Series AP-374, AP-375, and AP-377

370EX Series AP-375EX and AP-375EX

Table 4: Supported Instant AP Platforms

Aruba Instant 8.11.2.0 User Guide 14

Instant AP Platform APModels

360 Series AP-365 and AP-367

318 Series AP-318

Remote and Hospitality APs

500H Series AP-503H and AP-505H

303H Series AP-303H

Table 4: Supported Instant AP Platforms

Instant WebUI

The Instant webUI provides a standard web-based interface that allows you to configure and monitor a

Wi-Fi network. Instant is accessible through a standard web browser from a remote management

console or workstation and can be launched using the following browsers:

Web Browser Operating System

Microsoft Edge (Microsoft Edge 92.0.902.62 and

Microsoft EdgeHTML 18.19041) or later

nWindows 10 or later

nmacOS

Firefox 107.0.1 or later nWindows 10 or later

nmacOS

Apple Safari 15.4 (17613.1.17.1.13) or later nmacOS

Google Chrome 108.0.5359.71 or later nWindows 10 or later

nmacOS

If the Instant webUI is launched through an unsupported browser, a warning message is displayed

along with a list of recommended browsers. However, the users are allowed to log in using the

Continue login link on the Login page.

To view the Instant webUI, ensure that JavaScript is enabled on the web browser.

The Instant webUI logs out automatically if the window is inactive for 15 minutes.

Instant CLI

The Instant CLI is a text-based interface that is accessible through an SSH session.

SSH access requires that you configure an IP address and a default gateway on the Instant AP and

connect the Instant AP to your network. This is typically performed when the Instant network on an

Instant AP is set up.

Aruba Instant 8.11.2.0 User Guide 15

What is New in the Release

This section lists the new features, enhancements, or hardware platforms introduced in Aruba Instant

8.11.2.0.

New Features and Enhancements

Feature Description

Enhanced Support for Instant

AP IPv6 Address Generation

In the updated IPv6 address generation process, users can now seamlessly

switch between address generation methods. While the default method

remains the Instant AP MAC address (EUI-64) format, an option to change to

the Stable Privacy method is now available. This enhancement introduces the

following set of commands.

nipv6 addr-gen-mode eui64

nipv6 addr-gen-mode stable-privacy

nno ipv6 addr-gen-mode

Wi-Fi Stats Enhancement Several 802.11ax performance metrics statistics have been enhanced in this

release.

Enable Certificate Validation to

Upgrade 630 Series and 650

Series Aruba Instant Access

Points

Software upgrades performed in Aruba Central or Aruba Central On-

Premises, will enforce certificate validation for APs in FIPS mode. Aruba

Central or Aruba Central On-Premises, will check FIPS mode and turn the

certificate check ON or OFF accordingly. The default behavior will be same for

non-central connected APs

Regulatory Information Added

to show tech-support

Command

The output of the show tech-support command is enhanced to include the

AP regulatory information. This will shorten tickets resolution for customers

and partners raising TAC cases.

Table 5: New Features in Aruba Instant 8.11.2.0

New Hardware Platforms

Hardware Description

Support for AP-654 Access

Points

The AP-654 access point is the external antenna platform variant of the 650

Series, supporting two sets of antenna interfaces for 2.4 GHz and 5 GHz (A,

left side) as well as 6 GHz (B, right side). The Aruba 650 Series access points

are high performance, multi-radio access points that can be deployed in

either controller-based (ArubaOS) or controller-less (Aruba Instant) network

environments. These APs deliver comprehensive tri-band coverage across 2.4

GHz, 5 GHz, and 6 GHz 802.11ax Wi-Fi (Wi-Fi 6E) functionality with concurrent

4x4 MU-MIMO radios for both uplink and downlink in the 5 GHz and 6 GHz

bands, while also supporting 802.11a, 802.11b, 802.11g, 802.11n, 802.11ac,

and 802.11ax wireless services.

Additional features include:

Table 6: New Hardware Platforms in Aruba Instant 8.11.2.0

About Aruba Instant | 16

Hardware Description

nUp to 7.8 Gbps combined peak datarate

nDual wired 5 Gbps Smart Rate ethernet ports for hitless failover

nOrthogonal Frequency Division Multiple Access (OFDMA)

nAruba Advanced Cellular Coexistence (ACC)

nIoT-ready (integrated Bluetooth 5 and 802.15.4 radio for Zigbee support)

nUltra Tri-Band (UTB) filtering

nMaximum ratio combining (MRC)

nIntelligent Power Monitoring (IPM)

nDynamic frequency selection (DFS)

For complete technical details and installation instructions, see the Aruba 650

Series Access Points Installation Guide.

Support for AP-634 Access

Points

The AP-634access point is the external antenna platform variant of the 630

Series, supporting two sets of antenna interfaces for 2.4 GHz and 5 GHz (A,

left side) as well as 6 GHz (B, right side). The Aruba 630 Series access points

are high performance, multi-radio access points that can be deployed in

either controller-based (ArubaOS) or controller-less (Aruba Instant) network

environments. These APs deliver comprehensive tri-band coverage across 2.4

GHz, 5 GHz, and 6 GHz 802.11ax Wi-Fi (Wi-Fi 6E) functionality with concurrent

2x2 MIMO radios for both uplink and downlink in the 5 GHz and 6 GHz bands,

while also supporting 802.11a, 802.11b, 802.11g, 802.11n, 802.11ac, and

802.11ax wireless services.

Additional features include:

nUp to 3.9 Gbps combined peak datarate

nDual wired 2.5 Gbps Smart Rate ethernet ports for hitless failover

nOrthogonal Frequency Division Multiple Access (OFDMA)

nAruba Advanced Cellular Coexistence (ACC)

nIoT-ready (integrated Bluetooth 5 and 802.15.4 radio for Zigbee support)

nUltra Tri-Band (UTB) filtering

nMaximum ratio combining (MRC)

nIntelligent Power Monitoring (IPM)

nDynamic frequency selection (DFS)

For complete technical details and installation instructions, see theAruba630

Series Access Points Installation Guide.

NOTE: Check with your local Aruba sales representative on new managed devices and access points availability

in your country.

Table 6: New Hardware Platforms in Aruba Instant 8.11.2.0

Deprecated Platforms

The following APs are no longer supported from Aruba Instant 8.11.0.0 onwards:

Aruba Instant 8.11.2.0 User Guide 17

n203H Series — AP-203H

n203R Series — AP-203R and AP-203RP

n207 Series — IAP-207

n320 Series — IAP-324 and IAP-325

n330 Series — IAP-334 and IAP-335

n340 Series — AP-344 and AP-345

nAP-387

Chapter 3

Setting up an Instant AP

This chapter contains the following topics:

Setting up Instant Network 18

Connecting to a Provisioning Wi-Fi Network 20

Instant AP Cluster 20

Disabling the Provisioning Wi-Fi Network 20

Disabling Activate Communication with Instant AP for Provisioning 21

Logging in to the Instant UI 24

Accessing the Instant CLI 25

Instant AP Degraded State 27

Setting up Instant Network

Before installing an Instant AP:

nEnsure that you have an Ethernet cable of the required length to connect an Instant AP to the home

router.

nEnsurethat you have one of the following power sources:

lIEEE 802.3af/at-compliant PoE source. The PoE source can be any power source equipment switch

or a midspan power source equipment device.

lInstant AP power adapter kit.

To set up the Instant network, perform the following procedures :

1. Connecting an Instant AP on page 18

2. Assigning an IP address to the Instant AP on page 18

Connecting an Instant AP

Based on the type of the power source used, perform one of the following steps to connect an Instant

AP to the power source:

nPoE switch—Connect the Ethernet 0 port of the Instant AP to the appropriate port on the PoE switch.

nPoE midspan—Connect the Ethernet 0 port of the Instant AP to the appropriate port on the PoE

midspan.

nAC to DC power adapter—Connect the 12V DC power jack socket to the AC to DC power adapter.

Assigning an IP address to the Instant AP

The Instant AP needs an IP address for network connectivity. When you connect an Instant AP to a

network, it receives an IP address from a DHCP server.

To obtain an IP address for an Instant AP:

Aruba Instant 8.11.2.0 User Guide 18

Setting up an Instant AP | 19

1. Ensure that the DHCP service is enabled on the network.

2. Connect the Ethernet 0 port of Instant AP to a switch or router using an Ethernet cable.

3. Connect the Instant AP to a power source. The Instant AP receives an IP address provided by the

switch or router.

If there is no DHCP service on the network, the Instant AP can be assigned a static IP address. If a

static IP is not assigned, the Instant AP obtains an IPautomatically within the 169.254 subnet.

Assigning a Static IP

To assign a static IP to an Instant AP:

1. Connect a terminal, PC, or workstation running a terminal emulation program to the Console

port on the Instant AP.

2. Turn on the Instant AP. An autoboot countdown prompt that allows you to interrupt the normal

startup process and access apboot is displayed.

3. Press Enter key before the timer expires. The Instant AP goes into the apboot mode.

4. In the apboot mode, execute the following commands to assign a static IP to the Instant AP.

Hit <Enter> to stop autoboot: 0

apboot>

apboot> setenv ipaddr 192.0.2.0

apboot> setenv netmask 255.255.255.0

apboot> setenv gatewayip 192.0.2.2

apboot> save

Saving Environment to Flash...

Un-Protected 1 sectors

.done

Erased 1 sectors

Writing

5. Use the printenv command to view the configuration.

apboot> printenv

Provisioning an Instant AP

This section provides the following information:

nZTP and NTP Server and Synchronization

nProvisioning IAPs though Aruba Central

nProvisioning Instant APs through AirWave

ZTP of Instant APs

ZTP eliminates the traditional method of deploying and maintaining devices and allows you to provision

new devices in your network automatically, without manual intervention. Following are the ZTP

methods for Instant.

Aruba Activate is a cloud-based service designed to enable more efficient deployment and maintenance

of Instant APs. ArubaActivate is hosted in the cloud and is available at

https://activate.arubanetworks.com. You can register for a free account by using the serial number and

MACaddress of the device you currently own. For more information on how to setup your device and

provision using Aruba Activate, refer to the Aruba Activate User Guide.

NTP Server and Instant AP Synchronization

Aruba Instant 8.11.2.0 User Guide 20

In order for ZTP to be successful, the timezone of the Instant AP must be in synchronization with the

NTPserver.

To facilitate ZTP using the AMP, Central, or Activate, you must configure the firewall and wired

infrastructure to either allow the NTP traffic to pool.ntp.org, or provide alternative NTP servers

under DHCP options. For more information on configuring an NTPserver, see NTPServer.

In a scenario where the NTP server is unreachable, the connection between the Instant AP and Activate

will fall back to the unsecured status. The NTPclient process running in the back end will continuously

attempt to reconnect to the NTPserver until a secure connection is established. The NTPclient process

receives a response from the NTP server on successfully establishing a connection and notifies the

CLIprocess which runs a series of checks to ensure the NTPserver is reachable.

Connecting to a Provisioning Wi-Fi Network

The Instant APs boot with factory default configuration and try to provision automatically. If the

automatic provisioning is successful, the Instant SSID will not be available. If AirWave and Activate are

not reachable and the automatic provisioning fails, the Instant SSID becomes available and the users

can connect to a provisioning network by using the Instant SSID.

To connect to a provisioning Wi-Fi network:

1. Ensure that the client is not connected to any wired network.

2. Connect a wireless-enabled client to a provisioning Wi-Fi network: for example, Instant.

3. If the Windows operating system is used:

a. Click the wireless network connection icon in the system tray. The Wireless Network

Connection window is displayed.

b. Click the Instant network and then click Connect.

4. If the Mac operating system is used:

a. Click the AirPort icon. A list of available Wi-Fi networks is displayed.

b. Click the instant network.

The Instant SSIDs are broadcast in 2.4 GHz only.

The provisioning SSID for all APs running Instant 6.5.2.0 onwards, including legacy Instant APs is

SetMeUp-xx:xx:xx.

Instant AP Cluster

Instant APs in the same VLAN automatically find each other and form a single functioning network

managed by a virtual controller.

Moving anInstant AP from one cluster to another requires a factory reset of the Instant AP.

Disabling the Provisioning Wi-Fi Network

The provisioning network is enabled by default. Instant provides the option to disable the provisioning

network through the console port. Use this option only when you do not want the default SSID Instant

to be broadcast in your network.

Page is loading ...

Aruba JX993A User guide

This manual is also suitable for

Aruba JX993A User guide