Aruba Apps

Just a quick note to let everyone know that VIA 2.1 for Windows has been released.  It can be downloaded from the support site.  Major new features include "Domain Pre-Connect", which is intended to let a client machine establish a connection to the controller even when the user is not logged in.  This lets the machine be in contact with a domain controller, which can be handy for password changes/expiration.  Another feature added is controller load balancing.  This lets the client, when fed a list of controllers, choose one controller out of the list at random.  It's not true load balancing in the sense that controllers don't know about the current load of other controllers, but it does let some statistical load balancing take place.

You'll want to run AOS 6.1.3.1 or later on the controller to take advantage of all the latest features, although VIA 2.1 is backwards compatible with previous versions if you don't need the new features.

-Jon

where can we find more documentation about Domain Pre-Connect ?

Domain Pre-Connect allows the VIA client to start when the computer is at the ctrl-alt-delete screen and submit machine credentials in the background.  The machine would of course have to be wired, or connected to a wifi network that would allow it to pass IPSEC traffic at the ctrl-alt-delete prompt.

You would have to already have downloaded and installed the VIA client 2.1.0.0 and above and connected once using a VIA connection profile that has the "domain pre-connect" checkbox enabled.  This checkbox is only available in ArubaOs 6.1.3.1 and above and is located in the VIA Connection Profile:

The idea of this feature is to connect you to the enterprise network as if you have the ethernet cable plugged in, but over VPN.  That will allow you to do things like run login scripts, and be able to change an expiring password at the ctrl-alt delete screen.

Hi Joseph,

Just a brief comment about the Pre connect option. We have just tested it (to solve the problem of password expiration) and we don`t see any connection attempt in the NPS. Is there something that we have forgotten to configure? We only have checked the Preconnect option in the Connection Profile.

Thanks in advance.

Regards,

---

@SPF wrote:

 

Hi Joseph,

 

Just a brief comment about the Pre connect option. We have just tested it (to solve the problem of password expiration) and we don`t see any connection attempt in the NPS. Is there something that we have forgotten to configure? We only have checked the Preconnect option in the Connection Profile.

 

Thanks in advance.

 

Regards,

---

It  requires IKE v2 and will not work without this.  If you are not already using IKE v2, it is not available.

Please take a look at the VIA app note in the thread here:  http://community.arubanetworks.com/t5/Unified-Wired-Wireless-Access/VIA-client-initial-connection-and-authentication-phases-etc/td-p/37550

Hi Joseph,

We are already using IKEv2 ( we have tested it  with EAP-MSCHAPv2 and user certificates) but it  still does not work. Maybe, is there anything else we have to configure?

Thanks and regards,

Please check out the article here:  https://arubanetworkskb.secure.force.com/pkb/articles/FAQ/What-is-Domain-Pre-connect-in-VIA-and-how-does-it-work

If you still cannot get it to work, please open a support case.  There could be something that is not obvious that you need to do.

Hi Joseph,

We have checked the article and followed every step and we still have the same problem.

Thanks for the information, we have already open a case with the support team.

When they contact us with the resolution, we will inform you.

Regards.