07-27-2015 09:56 AM
Hey guys, I am looking to deploy an Airwave server in a DMZ and then allow instant AP's to connect from the internet. Looking at the configuration it looks like I need to allow 443 inbound from the internet to allow this connection, however that also opens up mgmt login for users. Is there a way to designate a seperate mgmt interface so that I don't open it up for logins like with clearpass or configure instants to connect on a different port than 443 as some examples? Obviously I can lock down the firewall to only the source IP's of the instants but I am trying to avoid that initally for various reasons.
Solved! Go to Solution.
07-28-2015 03:46 AM
It is possible.
We can configure a customised port in AMP server. AMP Setup->General-->"Aruba Instant Options" section you find an option to change the default port number 443 to any other port # ranges from 1000 to 65534.
For your Ref :
Try and let me know if you need any further help on this.
[Is my post helped you ? Give Kudos :) ]
05-17-2016 03:48 AM
Thanks and good that we can use the diff TCP port to listen only for IAPs. How about the below scenario?
1. Airwave on the Datacenter,
2. Some of IAP Branch locations are connecting through WAN to reach Airwave at DC
3. we have some of the IAP on the plain internet and want to manage using same airwave @ DC
What is your recommendation?
Can i seperate Internal IAP land External IAP listening ports?
05-17-2016 04:48 AM
Unfortunately, they can only use the same listening port.
Aruba Customer Engineering
Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base
Validated Reference Design Guides : http://community.arubanetworks.com/t5/Validated-Reference-Design/tkb-p/Aruba-VRDs