Network Management

Reply
MVP
Posts: 562
Registered: ‎11-28-2011

Airwave and IAP-GUI-Config role rules (IP)

Hi All,

I'm currently deploying a customer's AMP-8.0.9.2, with IAPs on v6.4.2.6-4.1.1.10_51810.

We're also using the Instant-GUI-Config in the groups.

When configuring rules within a user role on the IAPs in this way, it doesn't seem to be possible to add a custom rule for anything other than TCP or UDP protocols. For example, I can't add IP protocol 51 for (ah).

Is there a way to do this?

Kudos appreciated, but I'm not hunting! (ACMX 104)
Aruba Employee
Posts: 151
Registered: ‎02-14-2013

Re: Airwave and IAP-GUI-Config role rules (IP)

Hi, 

 

There are options to configure customer rules other than TCP and UDP. 

 

CLI command is for protocol 51 (ah), 

 rule any any match ah any any permit 

 

 

GUI can be configured as below, 

IAP-AH-1.JPG-- 

IAP-AH-2.JPG

 

Thanks, 

Rajaguru Vincent 

Thanks,
Rajaguru Vincent
MVP
Posts: 562
Registered: ‎11-28-2011

Re: Airwave and IAP-GUI-Config role rules (IP)

Looking at those images you pasted, you're doing it directly in the IAP yes?

I tried that, and agree, it's possible in there.

When you try the same in the Instant-GUI within Airwave itself, that "other" option doesn't exist. Only TCP or UDP.

Any thoughts?

Kudos appreciated, but I'm not hunting! (ACMX 104)
Aruba Employee
Posts: 151
Registered: ‎02-14-2013

Re: Airwave and IAP-GUI-Config role rules (IP)

Hi, 

 

You are correct. I tried that directly from IAP. I checked on Airwave and couldn't find the OTHERS option in Airwave IGC. Please raise a TAC case. 

 

Thanks, 

Rajaguru Vincent 

Thanks,
Rajaguru Vincent
MVP
Posts: 562
Registered: ‎11-28-2011

Re: Airwave and IAP-GUI-Config role rules (IP)

Thanks for the confirmation. Thought that might be the situation.

Unfortunately I won't have time to log it with TAC (project timescales are tight on this one).

I'll just work-around it.

Kudos appreciated, but I'm not hunting! (ACMX 104)
Search Airheads
Showing results for 
Search instead for 
Did you mean: