Security

Reply
Super Contributor II
Posts: 429
Registered: ‎01-19-2011

separate services on devices

I have a cluster of devices across the world and I would like to have separate services running on the subscriber devices. Is this possible? it looks like the services are pushed out from the publisher and cannot be disabled/enabled on the subscriber.The issue here is that SSIDs etc will be the same in each region so devices in the US will match the same service as devices in the UK - however I would like them to authenticate to local sources. If I configure a service to point to the UK AD, devices in the US will authenticate against this source - traversing the WAN instead of locally. Will I need to find a way to match a service depending on where the NAD is located.

Aruba
Posts: 1,548
Registered: ‎06-12-2012

Re: separate services on devices

[ Edited ]
In your services you could add a filter on the NAD ID and/or IP, ap name, etc along with the ssid.

Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Super Contributor II
Posts: 429
Registered: ‎01-19-2011

Re: separate services on devices

It would be a good solution if I could group all the UK NAD devices under Network>Device groups and then match the service on the group - can this be done i've looked under the service rule type/name but cant find a match.

Guru Elite
Posts: 8,765
Registered: ‎09-08-2010

Re: separate services on devices

That sounds like a good idea! You should create a feature request.

 

https://arubanetworkskb.secure.force.com/cp/ideas/ideaList.apexp


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Aruba
Posts: 1,644
Registered: ‎04-13-2009

Re: separate services on devices

[ Edited ]

Yes, you can do this; I"ve used it many times.  The filter is:

 

Connection --> NAD-IP-Address --> BELONGS_TO_GROUP --> Name of your group 

 

cp-nad-group.jpg

 

This coupled with services for each region will allow UK controllers to authenticate against UK domain controllers and so on.

------------------------------------------------
Systems Engineer, Northeast USA
ACCX | ACDX | ACMX

Super Contributor II
Posts: 429
Registered: ‎01-19-2011

Re: separate services on devices

That seems to be exactly what I need - thanks for the solution.

Search Airheads
Showing results for 
Search instead for 
Did you mean: