Controllerless Networks

last person joined: 2 days ago 

Instant Mode - the controllerless Wi-Fi solution that's easy to set up, is loaded with security and smarts, and won't break your budget
Back to discussions
Expand all | Collapse all

Controller configuration for Instant AP VPN

This thread has been viewed 4 times

  • 1.  Controller configuration for Instant AP VPN

    Posted Nov 17, 2012 07:28 PM

    Hello

    Im trying to test this but im unable to find a document or something that tells me how to configure the VPN PART on the controller i know how to do it on the IAP but not on the controller

    Does anyone have a documentation on how to do this?  or its easy can you tell me how do you set it up on the controller site?

    For now i got a controller 620 with 6.1.3.5 code

     

    Cheers

    Carlos

     



  • 2.  RE: Controller configuration for Instant AP VPN

    Posted Nov 19, 2012 10:47 AM
      |   view attached

    See the attached document.

     

    You will need a different version of SW on your controller.   Contact TAC for a copy of 6.1.3.1-RNG.   This will be merged into AOS 6.2 as GA by mid-December.

    Attachment(s)

    pdf
    ArubaOS 6 1 3 1-RNG_ Release Notes.pdf   92 KB 1 version


  • 3.  RE: Controller configuration for Instant AP VPN

    Posted Nov 19, 2012 10:57 AM

    so i need this firmware to make it work?

    If im on 6.1.3.5 it willl be like a downgrade to that firmware?

     

    So as far i understand this is possible with that firmawre but it will be like really released when the 6.2 GA gets out? i mean that it will be native in the normal  Firmwares?



  • 4.  RE: Controller configuration for Instant AP VPN
    Best Answer

    Posted Nov 19, 2012 11:24 AM
    @NightShade1 wrote:

    so i need this firmware to make it work?

    If im on 6.1.3.5 it willl be like a downgrade to that firmware?

     

    So as far i understand this is possible with that firmawre but it will be like really released when the 6.2 GA gets out? i mean that it will be native in the normal  Firmwares?

    Correct - 6.1.3.1-RNG is required.

    Correct- you need to downgrade

    Correct - this feature will be included in AOS 6.2 onward as a GA feature.

     



  • 5.  RE: Controller configuration for Instant AP VPN

    Posted Nov 19, 2012 11:28 AM

    Thank you very much Marcus!

     

    Cheers

    Carlos



  • 6.  RE: Controller configuration for Instant AP VPN

    Posted Feb 21, 2013 02:14 PM

    Marcus, 

     

    Is the PEFV license required on the controller for the Instant VPN?



  • 7.  RE: Controller configuration for Instant AP VPN

    Posted Feb 21, 2013 02:16 PM
    @AgentEd wrote:

    Marcus, 

     

    Is the PEFV license required on the controller for the Instant VPN?

    Nope.  VPN termination is part of the Base OS on the controller.



  • 8.  RE: Controller configuration for Instant AP VPN

    Posted Mar 07, 2013 09:09 PM
    Marcus, are there successful deployment out there yet? I've been working with TAC for the last 3 days and we cannot get routing to the remote network functioning.

    They even setup a lab to test for the last day and they haven't been able to route traffic between the RAP and the controller LAN.

    I'm supposed to deploy tomorrow and I'm getting no love. It seems that TAC is completely unfamiliar with the Instant VPN capability.

    If there is anyone who has successfully deployed that could shed some light it would help immensely.


  • 9.  RE: Controller configuration for Instant AP VPN

    EMPLOYEE
    Posted Mar 11, 2013 04:56 AM

    I've set this up in the lab and couldn't seem to get the ipsec tunnel up from IAP to controller.  I tried it with v6.2 on controller but same thing.  Didn't really spend much time on it though.

     

    Having said said that, the GRE tunnel does seem to work fine.



  • 10.  RE: Controller configuration for Instant AP VPN

    Posted Apr 19, 2013 12:35 AM

    Anyone seem to get anywhere with this? I have a potential client project that this functionality would be ideal for but am concerned that the MVP's weren't having the best of luck getting it operational. 

     

    Cheers! 



  • 11.  RE: Controller configuration for Instant AP VPN

    Posted May 22, 2013 08:10 AM

    I don't know if you got this working but we have sites using IAP swarms with VPN's back to mc3600 controllers with L2 centralised switching.

     

    There were some bugs in the 3.2 IAP code and some undocumented requirements to get it working.