Wireless Access

Reply
Occasional Contributor I
Posts: 6
Registered: ‎01-29-2015

Control Plane Security

Hi,

.

Can anyone tell me what implications might occur should Control Plane Security be enabled within a large production enviroment?

 

The production enviroment currently has Control Plane Security disabled and a solution I have labbed using Bridge mode for a particular problem requires Control Plane Security to be enabled.

 

Many thanks,

Shaun

Guru Elite
Posts: 21,515
Registered: ‎03-29-2007

Re: Control Plane Security

You are looking at a 20 minute outage minimum to reboot APs twice and distribute keys to them..  It could even be more than that...



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor I
Posts: 6
Registered: ‎01-29-2015

Re: Control Plane Security

Hi Colin,

 

Thanks for you help,

 

Can you also tell me if we'd have any problems with APs not being supported please?

 

The reason I ask is because I've stumbled across the following recent thread and it has given me the shivers since the production enviroment also uses AP-105s and the first reply was to try disabling CPsec.

 

https://community.arubanetworks.com/t5/Wireless-Access/Can-t-provision-the-AP105-on-Aruba-3200/td-p/297754

 

Many thanks,

Shaun

Guru Elite
Posts: 21,515
Registered: ‎03-29-2007

Re: Control Plane Security

The access points have to reboot and rediscover the controller, so if you removed or changed discovery methods for your network, your AP possibly will not be able to come up.  If you are worried about that, you should just provision the few APs that you need to be bridged as RAPs.  Enabling CPSEC for an entire network is alot of risk just to allow some APs to be bridged.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor I
Posts: 6
Registered: ‎01-29-2015

Re: Control Plane Security

Perfect, thanks Colin

Search Airheads
Showing results for 
Search instead for 
Did you mean: