Controllerless Networks

Reply
Occasional Contributor II

Aruba Networks Security Advisory ARUBA-PSA-2015-004 (ArubaOS)‏

Does this affect RAPs running with InstantOS?

 

The most recent instant one has the date of 3.13.15.

 

If so I can't find that recent of a firmware image for two RAP109s.

 

screenshot attatched since the forum software won't let me insert image due to "invalid html"

Valued Contributor II

Re: Aruba Networks Security Advisory ARUBA-PSA-2015-004 (ArubaOS)‏

HI,

 

No. not at all, once you convert any IAP as a RAP it's primary partition will be updated with AOS  same version of it's terminated Controller therefore this should not effect any RAPs those are converted from IAP to RAP.

 

Hope got some clarity, please feel free for any further clarity on this.

Cheers,
Venu Puduchery,
[Is my post helped you ? Give Kudos :) ]
Occasional Contributor II

Re: Aruba Networks Security Advisory ARUBA-PSA-2015-004 (ArubaOS)‏

These came with the "Instant" OS loaded by default though.

 

I got 2 RAP109s in VC mode "instant"

 

 

So you say that that advisory does NOT affect the "Instant" APs even when the "instant" firmware is loaded on the RAP109s?

Valued Contributor II

Re: Aruba Networks Security Advisory ARUBA-PSA-2015-004 (ArubaOS)‏

Hi,

 

Instant OS will sit in the backup partition :).

 

IAPs will have 2 partitions, backup and primary partition, when you factory reset it image from the backup partition will be copied in to primary. when you convert an IAP in to either CAP or RAP, controller will update only the primary partition hence the backup partition will be untouched.

Hope you got some more clarity on this.

Cheers,
Venu Puduchery,
[Is my post helped you ? Give Kudos :) ]
Occasional Contributor II

Re: Aruba Networks Security Advisory ARUBA-PSA-2015-004 (ArubaOS)‏

I never converted from a RAP to an IAP the RAP came with the Instant AP firmware.

Valued Contributor II

Re: Aruba Networks Security Advisory ARUBA-PSA-2015-004 (ArubaOS)‏

HI,

 

Are you talking about RAP3 ? now a days all RAPs will support Instant functionality.

As long as it is deployed as RAP it's primary partition will have Image of AOS and backup will have  Image of Instant OS. hence, when you upgrade the VC, it will not effect RAP.

 

Feel free for any further query on this.

Cheers,
Venu Puduchery,
[Is my post helped you ? Give Kudos :) ]
MVP

Re: Aruba Networks Security Advisory ARUBA-PSA-2015-004 (ArubaOS)‏

As I read the advisory:

 

If your RAP is running as an Instant, it's not vulnerable.

If it's running converted to a controller-based code then it will inherit the controller's vulnerabilities, and you will want to upgrade to 6.3.1.15 or later, or 6.4.2.4 or later.

--Matthew

if I've helped, please give kudos
if I've provided a solution, please mark the solution so others can find it
Occasional Contributor II

Re: Aruba Networks Security Advisory ARUBA-PSA-2015-004 (ArubaOS)‏

 
 
 

msabin wrote:

As I read the advisory:

 

If your RAP is running as an Instant, it's not vulnerable.

If it's running converted to a controller-based code then it will inherit the controller's vulnerabilities, and you will want to upgrade to 6.3.1.15 or later, or 6.4.2.4 or later.


This is what I am talking about. It runs as Instant and not as RAP or controller.

 
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: