Wireless Access

Reply
Frequent Contributor II
Posts: 134
Registered: ‎03-01-2013

RAP configuration on 6.4

I'm having some trouble creating the config for a RAP. Its for an exec and the SSID is one already in our environment.

 

Does anyone have a clear config guide for this? I've followed the wizard with no luck, and see some user guide stuff, but it seems all over the place or its older 6.0 stuff and doesn't apply...

 

I've configured the group with the profiles, VPN addreses and keys, and whitelisted the aps.

Guru Elite
Posts: 8,458
Registered: ‎09-08-2010

Re: RAP configuration on 6.4

It hasn't changed much from the current VRD except you can use Activate now.

 

Where are you getting hung up? Are you seeing the IPSec traffic on the controller?


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Frequent Contributor II
Posts: 134
Registered: ‎03-01-2013

Re: RAP configuration on 6.4

 Not on the controller, I can see it coming across the NAT device but no return.

 

Thats one place I didn't check... I'll take a look.

Guru Elite
Posts: 8,458
Registered: ‎09-08-2010

Re: RAP configuration on 6.4

OK. You can run show datapath session table | include 4500.

 

Also, check the security logs (show log security 50)


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Frequent Contributor II
Posts: 134
Registered: ‎03-01-2013

Re: RAP configuration on 6.4

I'm seeing an IKE Xauth failure for the username/password. Now I can't find where that was! (facepalm)

 

 

Guru Elite
Posts: 8,458
Registered: ‎09-08-2010

Re: RAP configuration on 6.4

Hm. You shouldn't need XAUTH. Can you post a screenshot of your VPN configuration screen from the controller?


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Guru Elite
Posts: 21,023
Registered: ‎03-29-2007

Re: RAP configuration on 6.4

Xauth failure would be if you accidentally provisioned the rap with username and password instead of certificate.


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Frequent Contributor II
Posts: 134
Registered: ‎03-01-2013

Re: RAP configuration on 6.4

I unchecked it. I'll purge it and reconfigure accordingly. 

 

Do I need to generate a certificate for the RAP anywhere?

Guru Elite
Posts: 21,023
Registered: ‎03-29-2007

Re: RAP configuration on 6.4

Noap


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Guru Elite
Posts: 8,458
Registered: ‎09-08-2010

Re: RAP configuration on 6.4

As long as you're using modern RAPs, the certificates are built-in.


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Search Airheads
Showing results for 
Search instead for 
Did you mean: