Security

Reply
Regular Contributor II
Posts: 202
Registered: ‎01-30-2013

some doubts on IAP vs Mobility controller

Hi guys,

Comparing IAP with A Mobility Controller are these needs cover on both ?

 

 

 

1. roaming between different ssid's - iamgine that we have two  floors , 2 ssid and the same  user.  Can he jump from one to another without re authenticate?

 

2. Is it possible to limit the power of certain AP's ( to for ex 50mw)? In IAP or only with Mobility Controller

 

3 . IAP permits to have captive portal configuration? Or only with a controller

 

4. APP RF is available in both IAP and controller 700 series ( OS rls 6.4.0.2-4.1) correct?

 

Thanks for the help

 

Regards

Guru Elite
Posts: 8,036
Registered: ‎09-08-2010

Re: some doubts on IAP vs Mobility controller

Yes to all of those questions. 

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
MVP
Posts: 288
Registered: ‎08-27-2012

Re: some doubts on IAP vs Mobility controller

However a side note. For IAPs the newer IAP-11x, 20x, 21x, 22x, RAP-10x, and RAP-155 support the DPI piece for full control of AppRF.
ACDX #419 | ACMP |
MVP
Posts: 288
Registered: ‎08-27-2012

Re: some doubts on IAP vs Mobility controller

And the 103.
ACDX #419 | ACMP |
Regular Contributor II
Posts: 202
Registered: ‎01-30-2013

Re: some doubts on IAP vs Mobility controller

Hi ,

 

Thanks for the help.

 

is there any document that stats the differences between IAP´s and Mobility Controllers?

 

Is it possible to IAP to have a DNS server internal?

 

All data between AP´s and mobility controllers is encrypted (GRE) . In IAP is the same? Is there any data passed in clear mode?

 

 

Guru Elite
Posts: 8,036
Registered: ‎09-08-2010

Re: some doubts on IAP vs Mobility controller

The GRE tunnel is NOT encrypted although the traffic that passes over the
GRE MAY be encrypted based on the wireless encryption.



In Instant, most traffic is bridged out the local AP. Things like
authentications, guest traffic, and traffic destined for a VPN tunnel are
sent through the virtual controller.

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Regular Contributor II
Posts: 202
Registered: ‎01-30-2013

Re: some doubts on IAP vs Mobility controller

Hi.

I am asking because we need to certify that no data passes in clear?
Assuming your words, i get a little confused.
Since encription is related to wireless encription, is ok to tought that data passes clear between iap and ap or controller and ap's ?

Regards
Aruba
Posts: 1,368
Registered: ‎12-12-2011

Re: some doubts on IAP vs Mobility controller

If your requirement is that no data passes in the clear, I would most certainly use a mobility controller as the encryption happens between the wlan client and the controller...vs the IAP where the encryption happens at the IAPs

Seth R. Fiermonti
Consulting Systems Engineer - ACCX, ACDX, ACMX
Email: seth@hpe.com
-----
If you found my post helpful, please give kudos
MVP
Posts: 1,405
Registered: ‎11-30-2011

Re: some doubts on IAP vs Mobility controller

of your original questions then certainly IAP does all four things. but the buildin captive portal is very limited in configuration options and the accounts don't have an expire function. doesn't have to be an issue, but might be.

Search Airheads
Showing results for 
Search instead for 
Did you mean: