Wireless Access

Hello team, i have Aruba configured already few years ago with Windows 2003 AD, CA and IAS server on the same box. I would like to upgrade now my AD to Windows 2008 R2 along with CA and NPS.

can you please advise if we need to make changes on the Aruba side? and is Windows 2008 R2 AD and NPS (IAS) is supported?

Thanks in advance.

Hey,

What is the AOS that your controller is running?

for AOS 6.1 yes, Windows 2008 R2 AD and NPS are supported. Although not 100% sure but as long as your current controller support WinServ 2003 then it shall support WinServ 2008.

if you will use same IP address on server and same PSK between MC and WinServ. Then you do not have to change MC configuration.

you can wait to get reply from other people with more hands on AD migration exp.

:)

---

@omersiddiqui wrote:

Hello team, i have Aruba configured already few years ago with Windows 2003 AD, CA and IAS server on the same box. I would like to upgrade now my AD to Windows 2008 R2 along with CA and NPS.

can you please advise if we need to make changes on the Aruba side? and is Windows 2008 R2 AD and NPS (IAS) is supported?

Thanks in advance.

---

Like Abi said, if you simply upgrade the server, you should have to change nothing.

Thanks team for your reply.

We have Aurba Controller 6000 with OS version 3.3.1.10

Please advise if anyone has used it with Windows Server 2008 R2.

Also is there a way i can define a test SSID with test AD,NPS environment that i created.

---

@omersiddiqui wrote:

Thanks team for your reply.

 

We have Aurba Controller 6000 with OS version 3.3.1.10

Please advise if anyone has used it with Windows Server 2008 R2.

Also is there a way i can define a test SSID with test AD,NPS environment that i created.

---

The protocol (Radius) in ArubaOS 3.3.1.10 is a standard and the handling of that protocol has not changed.  There are companies on ArubaOS 3.3.x that use Windows Server 2008 R2 and it still works.

If you use the instructions in the forum here on how to configure a Windows 2008 NPS server, you can add that server to your Aruba Controller and use the AAA test server function in the Diagnostics menu of the Aruba Controller to test it.

Thansk for the prompt reply. please advise the link for setting up NPS server, as I couldnt find it in this forum.

It is right here:  http://community.arubanetworks.com/t5/ArubaOS-and-Controllers/Step-by-Step-How-to-Configure-Microsoft-NPS-2008-Radius-Server/m-p/14392/highlight/true#M6113

Many thanks. I will review and post if anything further is needed.

However for my understanding, I would like to know the role of CA, as we have just one root CA in current environment and all PCs have root certificate installed, however I dont see this root certificate in Aruba configuration? and client connects fine even if CA services is OFF?

The configuration of certificates is strictly between the client and the server.  No configuration is needed on the Aruba controller, because is has the role of the authenticator, which simply passes the radius messages back and forth.  This is why upgrading the OS on the Aruba controller has little effect on radius.

Hi,

How can i change one wireless configuration on Aruba to use only "Computer authentication" instead of username and password?

Thanks in advance,

Omer

Set the client to use only machine authentication.  The Aruba gear will authenticate whatever credentials the client sends it, assuming your NPS server passes back an accept message.