Wireless Access

Reply
New Contributor

Aruba IAP VRRP

I am programming a large amount of Aruba IAP 325 access points for a customer that we normally provide controller based solutions for and I am having some issues mimicing our controller config onto an IAP. I know it is impossible to get all of the features, but I would figure VRRP settings would be pretty standard unfortunately I am unable to find any VRRP settings or settings to mimic what I do with VRRP on our aruba controllers.

 

We run the following commands on our Aruba controller:

 

vrrp 129

  priority 110

  authentication [Password]

  ip address xx.xx.xx.xx

  vlan 129

  preempt delay 0

  tracking master-up-time 30 add 20

  no shutdown

!

vrrp 118

  authentication [Password]

  priority 110

  ip address xx.xx.xx.xx

  vlan 118

  preempt delay 0

  tracking master-up-time 30 add 20

  no shutdown

 

I am sure it is somewhere obvious, but Is there a way to mimic these specific commands function within the aruba IAP?. Authentication is absolutely needed.

Guru Elite

Re: Aruba IAP VRRP

Why is the VRRP needed?


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

New Contributor

Re: Aruba IAP VRRP

From what I understand they use 129 for master redundancy and they tie VRRP 129 into the following command:

 

master-redundancy
master-vrrp 129
peer-ip-address xx.xx.xx.xx ipsec [Password]

 

Guru Elite

Re: Aruba IAP VRRP

You can create a virtual IP on the IAP management subnet that the virtual controller will always answer to. If that AP goes down, another IAP in the cluster is elected as the virtual controller and will immediately answer to that IP address. That construct replaces master redundancy.


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

New Contributor

Re: Aruba IAP VRRP

I figured this would be the answer to 129 after thinking about it, but for 118 I think they use this VRRP authentication for their captive portal I see a command for:

 

ip cp-redirect-address 

 

Pointing back to the same IP as the VRRP setup for 118 which is their VLAN for the guest network.

Guru Elite

Re: Aruba IAP VRRP

The internal captive portal page on IAP is rudimentary. If you want it to look good the page would be hosted on an external web server. There is no IP cp-redirect equivalent in IAP.


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

New Contributor

Re: Aruba IAP VRRP

Thanks a lot for your help I guess I just needed a second set of eyes

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: