Controllerless Networks

Reply
Frequent Contributor I

Aruba Instant - WPA2 Enterprise - PEAP or EAP?

How do you setup a IAP with WPA2 Enteprise using PEAP?  I am familiar with creating a CSR in a controller and creating a cert and all that jazz but have not done it on an IAP yet.

 

This documents i found applies to EAP-TLS:

http://community.arubanetworks.com/aruba/attachments/aruba/indoor-aps-raps-and-mesh-routers/1305/1/Aruba%20Instant%20Certificate%20generation%20and%20upload%20edited.pdf

 

Or is it not worth the hassle trying to setup an IAP with WPA2 Enteprise using PEAP? and just go with EAP-TLS by following the previously linked document?

 

Thanks.

Moderator

Re: Aruba Instant - WPA2 Enterprise - PEAP or EAP?

Protected EAP (PEAP) is an 802.1X authentication method that uses server-side public key certificates to authenticate clients with server.

 

You can upload a server certificate on Instant as shown in the attached screen shot.

 

Shashi

Frequent Contributor I

Re: Aruba Instant - WPA2 Enterprise - PEAP or EAP?

Do I still need to load a cert onto the Aruba Instant Virtual controller if I don't want to use termination on the controller?

Moderator

Re: Aruba Instant - WPA2 Enterprise - PEAP or EAP?

No. You can use an external RADIUS server and just specify the RADIUS server's IP in IAP.

 

 I though you were trying to use IAP's internal RADIUS server to authenticate and if so you will need a cert installed.

 

Does this answer your question?

 

thanks,

Shashi

Frequent Contributor I

Re: Aruba Instant - WPA2 Enterprise - PEAP or EAP?

Sorry, i misunderstood the capabilites of the Aruba IAP, didn't know you can use the internal RADIUS server built-in to the virtual controller or external Radius. I thought the only way to use PEAP-MsChapv2 or EAP-TLS was to use the internal RADIUS server, which now i understand you would need to load a certificate into the virtual controller to do so.

 

Knowing that, it seems like it would be easier to just use the external RADIUS server rather than go through the headache of creating a cert and loading it in the IAP? or am i wrong?

 

 

 

 

Guru Elite

Re: Aruba Instant - WPA2 Enterprise - PEAP or EAP?

YES!



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: