Controllerless Networks

last person joined: yesterday 

Instant Mode - the controllerless Wi-Fi solution that's easy to set up, is loaded with security and smarts, and won't break your budget
Back to discussions
Expand all | Collapse all

Aruba Networks Security Advisory ARUBA-PSA-2015-004 (ArubaOS)‏

This thread has been viewed 2 times

  • 1.  Aruba Networks Security Advisory ARUBA-PSA-2015-004 (ArubaOS)‏

    Posted Mar 29, 2015 11:22 AM
      |   view attached

    Does this affect RAPs running with InstantOS?

     

    The most recent instant one has the date of 3.13.15.

     

    If so I can't find that recent of a firmware image for two RAP109s.

     

    screenshot attatched since the forum software won't let me insert image due to "invalid html"



  • 2.  RE: Aruba Networks Security Advisory ARUBA-PSA-2015-004 (ArubaOS)‏
    Best Answer

    Posted Mar 30, 2015 07:26 AM

    HI,

     

    No. not at all, once you convert any IAP as a RAP it's primary partition will be updated with AOS  same version of it's terminated Controller therefore this should not effect any RAPs those are converted from IAP to RAP.

     

    Hope got some clarity, please feel free for any further clarity on this.



  • 3.  RE: Aruba Networks Security Advisory ARUBA-PSA-2015-004 (ArubaOS)‏

    Posted Mar 30, 2015 07:41 AM

    These came with the "Instant" OS loaded by default though.

     

    I got 2 RAP109s in VC mode "instant"

     

     

    So you say that that advisory does NOT affect the "Instant" APs even when the "instant" firmware is loaded on the RAP109s?



  • 4.  RE: Aruba Networks Security Advisory ARUBA-PSA-2015-004 (ArubaOS)‏

    Posted Mar 30, 2015 07:53 AM

    Hi,

     

    Instant OS will sit in the backup partition :).

     

    IAPs will have 2 partitions, backup and primary partition, when you factory reset it image from the backup partition will be copied in to primary. when you convert an IAP in to either CAP or RAP, controller will update only the primary partition hence the backup partition will be untouched.

    Hope you got some more clarity on this.



  • 5.  RE: Aruba Networks Security Advisory ARUBA-PSA-2015-004 (ArubaOS)‏

    Posted Mar 30, 2015 09:22 AM

    I never converted from a RAP to an IAP the RAP came with the Instant AP firmware.



  • 6.  RE: Aruba Networks Security Advisory ARUBA-PSA-2015-004 (ArubaOS)‏

    Posted Mar 30, 2015 09:29 AM

    HI,

     

    Are you talking about RAP3 ? now a days all RAPs will support Instant functionality.

    As long as it is deployed as RAP it's primary partition will have Image of AOS and backup will have  Image of Instant OS. hence, when you upgrade the VC, it will not effect RAP.

     

    Feel free for any further query on this.



  • 7.  RE: Aruba Networks Security Advisory ARUBA-PSA-2015-004 (ArubaOS)‏

    Posted Mar 30, 2015 12:00 PM

    As I read the advisory:

     

    If your RAP is running as an Instant, it's not vulnerable.

    If it's running converted to a controller-based code then it will inherit the controller's vulnerabilities, and you will want to upgrade to 6.3.1.15 or later, or 6.4.2.4 or later.



  • 8.  RE: Aruba Networks Security Advisory ARUBA-PSA-2015-004 (ArubaOS)‏

    Posted Mar 30, 2015 12:49 PM
     
     
     
    @msabin wrote:

    As I read the advisory:

     

    If your RAP is running as an Instant, it's not vulnerable.

    If it's running converted to a controller-based code then it will inherit the controller's vulnerabilities, and you will want to upgrade to 6.3.1.15 or later, or 6.4.2.4 or later.

    This is what I am talking about. It runs as Instant and not as RAP or controller.