Controller-less WLANs

With EAP termination, do I need to upload certificate on every IAP in the cluster? Do I need to get one certificate for each IAP in the cluster?

by on ‎07-01-2014 02:38 PM

Environment  :  This article applies to all Aruba Instant platforms and versions.

 

No, the certificate has to be uploaded on the virtual controller only.

Aruba Instant has a built-in FreeRadius server that can support:

• LEAP
• EAP-TTLS (MSCHAPv2)
• EAP-PEAP (MSCHAPv2)

However; note that EAP-PEAP and EAP-TTLS require a server certificate. Instant APs do not get shipped with a server certificate. Each time user uploads a new certificate file to Aruba Instant AP through the webUI, the master AP distributes that same certificate to all the member APs in the cluster. This allows a single certificate to be available for use on all the Instant APs in the cluster and ensures that 802.1x authentication still happens if the master AP (Virtual Controller) goes down.

Search Airheads
Showing results for 
Search instead for 
Did you mean: 
Is this a frequent problem?

Request an official Aruba knowledge base article to be written by our experts.