We have used Aruba for a few years now but only recently have we purchased and played with the RAP products. I have them working with our controller, but I have had a small problem with them.
As it stands, I have the secure ports on the RAP5 and RAP2 set to MAC authenticate against our NAC to ensure that no unregistered devices are able to utilize their wired ports. When an unregistered device plugs in, they are given the 'unregistered' role and are able to access the appropriate registration pages. After they complete the registration process, it then gives them their appropriate role ('employee' for example). However, they are still in the VLAN assigned to the 'unregistered' role until they either reset the device or physically unplug/replug their ethernet cable. Releasing and renewing the IP (Windows) has no effect.
I'm guessing it has something to do with the link-state on the RAP's port, but I'm not sure. This isn't a deal breaker by any means, but I was wondering if the RAP is acting as intended or if there is something I can do to smooth out the registration process for the end-user.