Controller Based WLANs

How to set a password for the console access of an AP?
Requirement:

Controller running AOS: 6.4.4.x and above.



Solution:

On controllers running AOS: 6.4.4.x we have the option to set the password for the console access of an AP in the ap system profile.

This restricts unauthorized access to the console of an AP.  By default the ap console password is enabled.



Configuration:

 

Below are the commands to update the password for the console of an AP

(Aruba) #configure terminal
Enter Configuration commands, one per line. End with CNTL/Z

(Aruba) (config) #ap system-profile Test-AP
(Aruba) (AP system profile "Test-AP") #shell-passwd Aruba@123                          ------>User defined password
(Aruba) (AP system profile "Test-AP") #exit
(Aruba) (config) #write memory
Saving Configuration...

Configuration Saved.

(Aruba) (config) #

To Disable the password for the ap console access:

(Aruba) #configure terminal
Enter Configuration commands, one per line. End with CNTL/Z

(Aruba) (config) #ap system-profile Test-AP
(Aruba) (AP system profile "Test-AP") #shell-passwd passworddisabled
(Aruba) (AP system profile "Test-AP") #exit
(Aruba) (config) #write memory
Saving Configuration...

Configuration Saved.

(Aruba) (config) #

 

NOTE: The passworddisabled is a special character string. On entering this string, the controller disables the AP console password.

 



Verification

To view the default password or the user defined password of the AP console please use the below procedure

 

The Output is truncated

 

(Aruba) #encrypt disable
(Aruba) #show ap system-profile Test-AP

AP system profile "Test-AP"
---------------------------
Parameter                               Value
---------                               -----
RF Band                                 g
RF Band for AM mode scanning            all
Native VLAN ID                          1
SAP MTU                                 N/A
RAP MTU                                 1200 bytes
LMS IP                                  N/A
Backup LMS IP                           N/A
AP multicast aggregation                Disabled
AP ARP attack protection                Disabled
AP multicast aggregation allowed VLANs  none
Console enable                          Enabled
AP Console Password                     Aruba@123

(Aruba-Master7240) #encrypt enable
 

Version History
Revision #:
2 of 2
Last update:
‎11-25-2015 04:17 PM
Updated by:
 
Labels (1)
Contributors
Search Airheads
Showing results for 
Search instead for 
Did you mean: 
Is this a frequent problem?

Request an official Aruba knowledge base article to be written by our experts.