Controller-less WLANs

 View Only
last person joined: one year ago 

Articles relating to existing and legacy HPE Aruba Networking products and solutions including IAP, Central / HPE Aruba Networking Central, MSR, and Outdoor Mesh

How to restrict Instant AP management access only to certain subnets? 

Jul 05, 2014 09:14 PM

Introduction :

 

WLAN administrators, have always been asking for a way to restrict employees and guest users from accessing Instant management. With this feature of "Management Subnets", administrator can make sure that Instant CLI, SSH and UI are accessed only from management subnets.

Instant allows you to configure management subnets and restrict access to the corporate network in order to prevent unauthorized users from accessing the corporate network

 

Feature Notes :

 

Clients initiating connection from subnets other than the one mentioned in "Managed Subnets" is denied to manage IAP

 

Environment : This article applies to Aruba Access Points running InstantOS version 6.3.1.1-4.0 and above.

 

Configuration Steps :

 

Following screenshots from IAP web interface shows how to configure management subnets:

1. Login to IAP web interface and from the main menu, click Security:
 





2. Click on 'Firewall Settings" tab and add the management subnets along with subnet mask:





Following figure shows the configuration from CLI:
 


Statistics
0 Favorited
3 Views
0 Files
0 Shares
0 Downloads

Related Entries and Links

No Related Resource entered.