Aruba Instant & Cloud Wi-Fi

Reply
Contributor I
Posts: 31
Registered: ‎07-24-2014

Aruba Airwave DMZ design with instants connecting from internet

Hey guys, I am looking to deploy an Airwave server in a DMZ and then allow instant AP's to connect from the internet. Looking at the configuration it looks like I need to allow 443 inbound from the internet to allow this connection, however that also opens up mgmt login for users. Is there a way to designate a seperate mgmt interface so that I don't open it up for logins like with clearpass or configure instants to connect on a different port than 443 as some examples? Obviously I can lock down the firewall to only the source IP's of the instants but I am trying to avoid that initally for various reasons. 


Thanks, 

Valued Contributor II
Posts: 804
Registered: ‎12-01-2014

Re: Aruba Airwave DMZ design with instants connecting from internet

Hi,

 

It is possible.

We can configure a customised port in AMP server. AMP Setup->General-->"Aruba Instant Options" section you find an option to change the default port number 443 to any other port # ranges from 1000 to 65534.

For your Ref :

L_BCAE.tmp.PNG

Try and let me know if you need any further help on this.

Cheers,
Venu Puduchery,
[Is my post helped you ? Give Kudos :) ]
New Contributor
Posts: 3
Registered: ‎04-29-2009

Re: Aruba Airwave DMZ design with instants connecting from internet

Thanks and good that we can use the diff TCP port to listen only for IAPs. How about the below scenario?

1. Airwave on the Datacenter,

2. Some of IAP Branch locations are connecting through WAN to reach Airwave at DC

3. we have some of the IAP on the plain internet and want to manage using same airwave @ DC

 

What is your recommendation?

Can i seperate Internal IAP land External IAP listening ports?

Guru Elite
Posts: 21,024
Registered: ‎03-29-2007

Re: Aruba Airwave DMZ design with instants connecting from internet

Unfortunately, they can only use the same listening port.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
Showing results for 
Search instead for 
Did you mean: