Wireless Access

Reply
Contributor II
Posts: 72
Registered: ‎05-22-2011

Aruba Master/ Local

Hello,

 

I am fairly new with the master-local setup. When this is done, what configurations are pushed to the local from the master? Also, if the radius server exist locally where the master controller is, how will I setup the radius server in the local controller? Will the local controller send the authentication to the master and the master to the radius, or will a radius server IP and shared key be manually put into the local controller? Just wondering also if authentication can be sent from local to master to radius. Not sure if a route from local to master would be sufficient.

Guru Elite
Posts: 21,269
Registered: ‎03-29-2007

Re: Aruba Master/ Local


baboyero wrote:

Hello,

 

I am fairly new with the master-local setup. When this is done, what configurations are pushed to the local from the master? Also, if the radius server exist locally where the master controller is, how will I setup the radius server in the local controller? Will the local controller send the authentication to the master and the master to the radius, or will a radius server IP and shared key be manually put into the local controller? Just wondering also if authentication can be sent from local to master to radius. Not sure if a route from local to master would be sufficient.


Baboyero,

 

I would say 95% of the WLAN configuration is pushed to the local.  The radius server is part of that configuration, so on your radius server you would have to add an entry for that local controller's ip address with the same preshared key as the master.  The radius authentication is sent directly from the local controller and NOT through the master.

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Contributor II
Posts: 72
Registered: ‎05-22-2011

Re: Aruba Master/ Local

Hello Cjoseph,

 

I guess the master-local setup cannot be configured in such a way that the authentication goes from the local to master, and the master to radius?


cjoseph wrote:

baboyero wrote:

Hello,

 

I am fairly new with the master-local setup. When this is done, what configurations are pushed to the local from the master? Also, if the radius server exist locally where the master controller is, how will I setup the radius server in the local controller? Will the local controller send the authentication to the master and the master to the radius, or will a radius server IP and shared key be manually put into the local controller? Just wondering also if authentication can be sent from local to master to radius. Not sure if a route from local to master would be sufficient.


Baboyero,

 

I would say 95% of the WLAN configuration is pushed to the local.  The radius server is part of that configuration, so on your radius server you would have to add an entry for that local controller's ip address with the same preshared key as the master.  The radius authentication is sent directly from the local controller and NOT through the master.

 


 

Guru Elite
Posts: 21,269
Registered: ‎03-29-2007

Re: Aruba Master/ Local

Correct.  The radius requests always come from the local controller.  You don't want the master to be a single point of failure.  You also want to know where the radius requests are really coming from on your radius server.

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Contributor I
Posts: 67
Registered: ‎10-17-2012

Re: Aruba Master/ Local

Adding to the query, is it advisable to have a radius server at the site of each local controller ?

 

Thanks

 

Guru Elite
Posts: 21,269
Registered: ‎03-29-2007

Re: Aruba Master/ Local

Not necessary.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Contributor II
Posts: 72
Registered: ‎05-22-2011

Re: Aruba Master/ Local

Hello,

 

We have a master/ local setup and the radius server is located locally within the Master's network. Right now, our local controller (located remote from the radius' server) sends authentication requests to the radius server but the radius server is not receiving these packets possibly due to firewall issues. However, I noticed that the nas IP of the packets sent from our local controller is the IP of the master controller. I went ahead and changed the radius profile of the local controller (through the local's radius profile configuration within the master) to have a specific NAS IP which is the local controller's IP. However, when I ran the packet capture, it is still the master controller's IP. Am I doing this correctly? Does it even matter if the NAS IP are not correct? Any help would be appreciated. Thanks. 

Guru Elite
Posts: 21,269
Registered: ‎03-29-2007

Re: Aruba Master/ Local

The NASIP is an optional and configurable global variable for the server, but it plays no role from a network perspective.  Some radius servers use this variable to make decisons.  The source ip address of the radius request, however, should be the local controller.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Contributor II
Posts: 72
Registered: ‎05-22-2011

Re: Aruba Master/ Local

Hello,

 

We took some packet captures through our local controller since no user can authenticate successfully. We found out that the controller is generating the proper authentication requests, with the correct NAS-IP and NAS-Identifier etc.. However, we are not receiving any response from the radius server. When we checked the radius server logs, the authentication response is being sent to the master controller instead of being sent to the local. Has anyone of you experience this before? Thanks.

Guru Elite
Posts: 21,269
Registered: ‎03-29-2007

Re: Aruba Master/ Local

I guess the big question is why is the radius server sending it someplace else, if that is what is happening.

 

What radius server is this?  That is unusual.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
Showing results for 
Search instead for 
Did you mean: