Wireless Access

Reply
Regular Contributor I
Posts: 359
Registered: ‎03-02-2017

CPSec and master/local controllers

Hi guys,

 

I would like to clear a doubt about CPSec and master and local controllers.

 

When CPSec is enabled, master and local controllers exchange clear and unencrypted information over IPSec tunnels. This is the default.

 

When CPSec is disabled, master and local controllers exchange clear and unencrypted information.

 

Am I right?

 

Regards,

Julián

MVP
Posts: 4,307
Registered: ‎07-20-2011

Re: CPSec and master/local controllers

CPSec is not use between controllers .

 

It is used between the AP > Controllers 

 

Here;s more info:

https://community.arubanetworks.com/aruba/attachments/aruba/unified-wired-wireless-access/64310/1/Aruba%20OS-%20Understanding%20control%20plane%20security%20feature.pdf 

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
MVP
Posts: 4,307
Registered: ‎07-20-2011

Re: CPSec and master/local controllers

CPSec is not use between controllers it is use between the AP > Controllers

https://community.arubanetworks.com/aruba/attachments/aruba/unified-wired-wireless-access/64310/1/Aruba%20OS-%20Understanding%20control%20plane%20security%20feature.pdf
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Regular Contributor I
Posts: 359
Registered: ‎03-02-2017

Re: CPSec and master/local controllers

Hi guys,

 

Any idea?

 

Regards,

Julián

MVP
Posts: 4,307
Registered: ‎07-20-2011

Re: CPSec and master/local controllers

CPSec is meant to be use between AP and controllers
https://community.arubanetworks.com/aruba/attachments/aruba/unified-wired-wireless-access/64310/1/Aruba%20OS-%20Understanding%20control%20plane%20security%20feature.pdf

Get Outlook for iOS
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Regular Contributor I
Posts: 359
Registered: ‎03-02-2017

Re: CPSec and master/local controllers

Hi Victor,

 

Thank you, you are right, I was confused. Then another question.

In an Aruba document I have found that in a master/local arquitecture IPSec tunnels are automatically created between the master and each local for inter-controller communication, but it also explains the commands to use to setup the IPSec tunnel.

Then, in a master/local arquitecture, do these IPSec tunnels automatically created or do they have to be manualy created?

 

Regards,

Julián

MVP
Posts: 4,307
Registered: ‎07-20-2011

Re: CPSec and master/local controllers

It is a manual process :
https://youtu.be/bE3tst09-RM

Get Outlook for iOS
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Regular Contributor I
Posts: 359
Registered: ‎03-02-2017

Re: CPSec and master/local controllers

Hi Víctor,

 

Everything clear :)

Thanks for you interest.

 

Best regards,

Julián

Search Airheads
Showing results for 
Search instead for 
Did you mean: