01-18-2012 07:08 AM
We are running ArubaOS 18.104.22.168 currently with all M3 controllers.
We are running the wireless for a multiple campus university. The master and two of our locals are at our main campus and we just brought a second campus online with it's own local pointed at our master. Both the guest and enterprise wireless clients are on the same vlan on our main campus. However, the second campus would like to keep the guest traffic on a different IP subnet. That campus has a content filter in place and they do not want to filter the guest traffic.
Our SE recommended we reference the VLAN by name instead of ID that way the name could reference a different ID at each location. However, both campuses use the same name and ID. So, even if I switch over to the name, it is still going to reference the same VLAN ID.
So, we have VLAN 14 "Users" setup on the master and local and all users are currently in VLAN 14. We setup VLAN 666 for the guest users at the second campus. I called it "Public". Is there anyway to have the guest SSID reference VLAN 666 and the enterprise reference VLAN 14 at the second campus and then both reference VLAN 14 at the main campus?
I thought about creating a second guest SSID for the second campus but we are trying to homogenize the campus wireless setups as they were both being done separately and differently before.
Solved! Go to Solution.
01-18-2012 07:19 AM
This can easily be done with different AP groups per location (each location having its own AP group). For each AP group, you can create a new config to meet your requirements.
01-18-2012 07:23 AM
In addition you can also use a VLAN name. Link below provides information on configuration. Based on what you are trying to do, minimize the configuration, the VLAN name would be the way to go. You can use the same name in both locations and then have the local controller tie to the correct VLAN.
01-18-2012 07:34 AM
In this instance you would use a named VLAN for for Guest. On the main campus it would tie to VLAN 14 on the second campus it would tie to 666. The enterprise VLAN would be untouched. Provided I follow correctly.
01-18-2012 08:03 AM
Ok. So, on my local I have:
vlan 14 "Users"
vlan 25 "Management"
vlan 666 "Public"
On my HQ, I have:
vlan 14 "Users"
vlan 10 "Management"
I do have different AP groups. But, the SSIDs are shared amongst the groups since you cannot create multiple SSIDs with the same name. So, how would I alter the WLAN settings so that it only impacts that group. Don't I make a change to the entire WLAN in all groups when altering the settings?
01-18-2012 08:57 AM
Ok, so I followed the KB article posted earlier in the thread.
On the master i did:
vlan Enterprise 14
vlan Public 14
wlan virtual-ap "enterprise-vap_prof"
wlan virtual-ap "guest-vap_prof"
Then on the local, I did:
vlan Enterprise 14
vlan Public 666
Saved all of that and for a few minutes it all worked. While I was troubleshooting DHCP on VLAN 666 however, both the enterprise and guest WLANs stopped working at HQ. Any thoughts as to what I missed or did wrong?
01-18-2012 11:33 AM
Type "show profile-errors" to see if you have an error on your configuration on your master.
Aruba Customer Engineering
Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base
01-19-2012 07:36 AM
Ok. I tried this again this morning. I started with just the guest VAP. I converted it to the "Public" vlan which is pointed at VLAN 14 which is the same VLAN ID it was on. When I did that, I applied and saved to push the config out to the locals. Almost immediately, the guest SSID went away. I tried the 'show profile-errors' and got nothing:
(ARUBA-MASTER) #show profile-errors
I went back in and put it back to VLAN 14 and applied and saved and it came right back up. Very strange.