ArubaOS and Controllers

Reply
Occasional Contributor I

Can you assign more then 1 IP to an Interface?

Anyone know if you can assign more then 1 IP address to an interface on a controller?
Aruba Employee

Re: Can you assign more then 1 IP to an Interface?

The controllers do not support secondary addressing. There is a request for enhancement to support this. Have your local Aruba SE enter your requirements on the RFE and when enough people ask for it, we will include it.

The controllers support 802.1q trunking, however, so you can have a single link service multiple VLANs.
Occasional Contributor I

Re: Can you assign more then 1 IP to an Interface?

Thanks for the reply Olin. Our internet provider gives us 3 external address and we have those mapped to internal servers using our current Firebox firewall. Can this be done on the controller using some sort of external NAT pool. Any other way to get around this?

Thanks
Aruba Employee

Re: Can you assign more then 1 IP to an Interface?

ArubaOS supports NATing, so I think you can do what you want. You would have to apply a session ACL to the interface. The session ACL would have to do something like:

any host x.x.x.x svc-https dst-nat ip y.y.y.y 443

That rule would NAT x.x.x.x to y.y.y.y for https from any source. You would need one of these per host on the inside and per port/protocol (unless you used any instead of svc-https in the example above). I would recommend NOT allowing all ports/protocols inbound, however.
Occasional Contributor I

Re: Can you assign more then 1 IP to an Interface?

Worked like a champ Olin. I created a rule for each external IP/port and dts-nat to the correct internal ip/port. This worked as long as I had a NAT pool created for the range of our external addresses.
So for example our assigned outside address was X.X.X.162 on the firebox
We have a block of addresses from 163-169.
I assigned 162 to the outside VLAN on the controller, and created a NAT pool called Outside-NAT with 163-169. I then created session policy including all of the correct external-to-internal mappings and applied to my outside port.
Thanks again for assist!
James
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: