Aruba Instant & Cloud Wi-Fi

Reply
New Contributor
Posts: 3
Registered: ‎02-24-2013

Hanging IAP-105s off RAP5

I'm a little new to Aruba products and WiFi configuration in general...so bare with me. We have an off-site showroom that needs VPN access several times a year. Last year we used a couple of RAP-5s to VPN back to the corporate network, which worked great, but the two devices weren't enough to handle all the users (100+ devices). So what I am wanting to do is have one RAP-5 at the location and have 6 IAP-105s to handle the devices. Can this be done? Can the IAPs broadcast the VPN SSIDs from the RAP5? If yes, how would you configure this?

 

Any feedback is appreciated!

 

Troy

Aruba
Posts: 1,635
Registered: ‎04-13-2009

Re: Hanging IAP-105s off RAP5

[ Edited ]

You may consider just using the IAPs to handle your clients and do without the RAP-5s.   The virtual controller of the IAP can then VPN back to your office location; removing the need for the RAP-5 in your case.        Review the VPN Configuration chapter in the IAP User Guide to see if it will provide you with what you need.

 

High level summary from the guide:

 

The IAP supports termination of a VPN tunnel on the Aruba controller.  VPN features are ideal for:

  • enterprises with many branches that do not have a dedicated VPN connection to the corporate office.
  • branch offices that require multiple APs.
  • individuals working from home, connecting to the VPN.

This new architecture and form factor seamlessly adds the survivability feature of Instant APs with the VPN
connectivity of RAPs — providing corporate connectivity to non-corporates

------------------------------------------------
Systems Engineer, Northeast USA
ACCX | ACDX | ACMX

New Contributor
Posts: 3
Registered: ‎02-24-2013

Re: Hanging IAP-105s off RAP5

Thank you for the reply!

 

I will review the user guide and see if I can get this working.

 

Troy

New Contributor
Posts: 3
Registered: ‎02-24-2013

Re: Hanging IAP-105s off RAP5

Another question pertaining to this topic. After the VPN connection from the IAP to the Controller is established could I also broadcast another network for public access? In other words, have one wireless network with VPN access and have another wireless network with public internet access? Could both of these networks be broadcast from the same IAPs?

 

Troy

Super Contributor II
Posts: 354
Registered: ‎09-26-2012

Re: Hanging IAP-105s off RAP5

As far as RAP is concerns its works.. i think it may also be work in case of IAP.
Expert will confirm it
Thanks & Regards
Syed Murad Ali
ACMP ACMA CCNA
Aruba
Posts: 1,635
Registered: ‎04-13-2009

Re: Hanging IAP-105s off RAP5

Yes, you can still have a second guest network that is not tunneled back through the VPN.     Despite teh VPN connectivity, you still need to add the specific network routes that need to go back throug the tunnel.    It is under the VPN link:

 

instant-vpn-tunnel.jpg

------------------------------------------------
Systems Engineer, Northeast USA
ACCX | ACDX | ACMX

Search Airheads
Showing results for 
Search instead for 
Did you mean: