Controller-less WLANs

1. How it works
   1. When configuring a SSID profile, a VLAN needs to be specified.
   2. The VLAN can either be ‘Virtual controller assigned’ or ‘Network assigned’.
   3. For using the External DHCP server, VLAN has to be configured as Network Assigned.
   4. There are 3 types of VLAN allocation for Network Assigned.
      1. Default – Uplink native VLAN (by default VLAN 1)
      2. Static – Assign a static VLAN, which is part of the uplink
      3. Dynamic – VLAN derived based on VLAN derivation rule configured
   5. Configure a DHCP server or relay agent in the uplink.
   6. IAP cluster acts like a pass through L2 switch in this scenario.
   7. Client gets an IP address from the DHCP server through the uplink.

1. How to configure
   1. While configuring a SSID profile, in the VLAN tab, choose “Network Assigned” in “Client IP Assignment”. 
   2. Under “Client VLAN Assignment”, choose one of the 3 values “Default”, “Static” or “Dynamic”. Discussion how each of these methods work is out of the scope of this topic. So let us take an example of Static VLAN assignment.
   3. Configure the VLAN ID as the VLAN on which the DHCP server is available on the uplink.
   4. Ensure that the uplink switch has the necessary VLANs allowed and trusted. By default all VLANs are allowed on an IAP uplink port.
   5. Complete the remaining configuration of the SSID profile of “Security” and “Access”.

Troubleshooting :

1. To enable debugging for logging in ‘Aruba Central’, goto Configuration -> System -> Logging. Change level to ‘Debug’ for necessary fields.
2. Ensure that the client is associated to the AP, run the below command in Virtual AP. 
3. This would give client association status along with the VLAN in which it is connected.
4. The client is correctly connected to VLAN 1.

1. To check if the authentication was completed for the user, run the below command in the Virual controller. Incase of using any PSK, the 4 way handshake has to complete for the client to ahead and get an IP address.
2. To verify if a client has authenticated and got an IP address, verify it by means of checking at “Event log”.
3. To check the user details from the user table along with IP address and MAC address, check in the VC GUI.