Security

Reply
Occasional Contributor I
Posts: 5
Registered: ‎02-27-2012

IAP 105 Guest Network Setup

I am making my first run at setting up the guest network in the instant AP's. I have it configured and even though in the instant OS PDF guide it says the network will deny traffic to the LAN of the AP by default the ACL states it's going to allow traffic to anywhere and it indeed does so.

 

So I then went in and changed this to allow to all destinations but then blocked traffic to the LAN subnet and at this point I then had no internet connectivity on the guest network and of course couldn't access the LAN either.

 

So I then thought, well maybe I need to be able to hit the gateway on the LAN in order to pass traffic to the internet so I put in an ACL that would allow traffic to the gateway IP as well and it still won't work.

 

I contacted support and since these are NFR units we didn't buy support and we only have 90 day email support. They have now sent me three responses basically telling me to do exactly what I've already done even though I've stated in my email that I've done those things. Maybe they didn't read my poriton of the email I don't know.

 

So I'm sure this is something stupid I'm either doing or not doing. Anyone have any idea as to what I am missing here? I assumed by the setup guide that it would work the way I'm trying to get it to work just by designating it a guest network.

Occasional Contributor I
Posts: 5
Registered: ‎02-27-2012

Re: IAP 105 Guest Network Setup

Nevermind.

 

I finally figured out what I was doing wrong. I had the ACL's in the wrong order.

 

Rookie mistake! 

Aruba Employee
Posts: 7
Registered: ‎01-05-2012

Re: IAP 105 Guest Network Setup

ACLs can get very complex and order does matter.  I would reccomend sharing your ACL from the config file.   You can view the config under maintenance >> configuration. 

 

Your config for ACL will look something like this:

 

wlan access-rule BigSmallCompany
index 1
rule any any match any any any permit

 

Hope that helps!

New Contributor
Posts: 2
Registered: ‎04-29-2013

Re: IAP 105 Guest Network Setup

Please can you let me know how you configured it using the GUI. Thanx

Search Airheads
Showing results for 
Search instead for 
Did you mean: