Aruba Instant & Cloud Wi-Fi

Reply
Frequent Contributor I
Posts: 70
Registered: ‎01-03-2013

Max Mac Address Entries and Login Accts.

Hi,

 

1. Can anyone here tell me that how many mac address entries (for authentication) IAP-105 support? I want to know the max limit in case of IAPs.

 

2. Can we create different login accounts with different rights for IAPs? If yes, how? I remember we can do it with controller but I'm not sure about IAP. 

 

 

Thanks.

Aruba
Posts: 105
Registered: ‎11-03-2011

Re: Max Mac Address Entries and Login Accts.

max clients on IAP is configurable up to 255, but is 64 by default. Of course, I would caution you about pinning that many clients on an IAP(s). We always need to ensure proper capacity and client experience. In current code, we QA up to 64 IAP's in a cluster and 1048 clients.

 

At the moment, there is not different tiered access for login to the IAP but its something that has been submitted on the idea's portal.



| Adam Kennedy, Systems Engineer - adamk@hpe.com

| Service Providers – Aruba, an HPE Company

| Twitter: @adam8021x | Airheads: akennedy
Frequent Contributor I
Posts: 70
Registered: ‎01-03-2013

Re: Max Mac Address Entries and Login Accts.

I think you misunderstood my first point :smileyhappy:

 

I didn't ask about the maximum number of clients that can get connected to IAP.

 

I asked about the maximum number of mac address entries we can add in the internal database of IAP for mac based authentication.

 

Please help.

Aruba
Posts: 105
Registered: ‎11-03-2011

Re: Max Mac Address Entries and Login Accts.

Ah...gotcha. I was looking that up a few weeks back, let me dig it up for you. standby....



| Adam Kennedy, Systems Engineer - adamk@hpe.com

| Service Providers – Aruba, an HPE Company

| Twitter: @adam8021x | Airheads: akennedy
Aruba
Posts: 105
Registered: ‎11-03-2011

Re: Max Mac Address Entries and Login Accts.

MAC Auth Address entries are 256 for the IAP-92/92 and 512 for all other IAP platforms.

 

Adam



| Adam Kennedy, Systems Engineer - adamk@hpe.com

| Service Providers – Aruba, an HPE Company

| Twitter: @adam8021x | Airheads: akennedy
Frequent Contributor I
Posts: 70
Registered: ‎01-03-2013

Re: Max Mac Address Entries and Login Accts.

Thank you akennedy for sharing your findings :smileyhappy:

 

But is that number for per virtual controller or based on the individuals IAP?

 

Lets assume there is a cluster of 16 IAP-92 and in other case there is a cluster of 100 IAP-105 so it means we cannot add more that 256 user's mac address for mac authentication in the virtual controller for iap-92. And for IAP-105, we cannot add more than 512 mac address in the internal database of the virtual controller no matter how many IAPs are in a cluster. Am i right?

 

 

 

Aruba
Posts: 105
Registered: ‎11-03-2011

Re: Max Mac Address Entries and Login Accts.

Correct, the MAC auth funciton is performed by the elected VC. Can you detail the auth mechanism you're trying to achieve? is this simply for employee usage? If requirements are beyond the spec'd DB size limits of the IAP - is there means to leverage a radius server for this?



| Adam Kennedy, Systems Engineer - adamk@hpe.com

| Service Providers – Aruba, an HPE Company

| Twitter: @adam8021x | Airheads: akennedy
Occasional Contributor II
Posts: 25
Registered: ‎01-12-2016

Re: Max Mac Address Entries and Login Accts.

Hi akennedy, do the 512 mac address entries also apply to IAP's 205 and 225?

 

Greetings and thanks for your time.

Guru Elite
Posts: 21,031
Registered: ‎03-29-2007

Re: Max Mac Address Entries and Login Accts.

Flazaro,

 

Yes it does.  Your challenge at that point is attempting to manage that number of addresses or accounts.  It would be best placed into an external radius server or active directory for easier management.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II
Posts: 25
Registered: ‎01-12-2016

Re: Max Mac Address Entries and Login Accts.

Thank you cjoseph

Search Airheads
Showing results for 
Search instead for 
Did you mean: