Wireless Access

Reply
Occasional Contributor II
Posts: 51
Registered: ‎12-16-2014

Typical Switchport Configuration for Aruba AP

Just curious what a typical switchport configuration should look like for a campus Aruba AP.  Currently, for example, we have an AP-225 plugged into an hp procurve switchport and the hp procurve switchport is configured like this:  

 

untagged vlan X (management vlan)

spanning-tree admin-edge-port
spanning-tree bpdu-protection
loop-protect

 

Are these spanning tree/loop protect commands necessary?  Harmful?  Beneficial?  Thanks.

Guru Elite
Posts: 8,456
Registered: ‎09-08-2010

Re: Typical Switchport Configuration for Aruba AP

In an ideal setup, the port where your AP connects should be configured the
exact same way as end user ports.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
MVP
Posts: 707
Registered: ‎12-01-2010

Re: Typical Switchport Configuration for Aruba AP

Rather it depends on whether you tunnel traffic back to the controller or drop users off on the local switch.

Tunnel configurations jest need an access port in whatever VLAN makes sense and the "client-like" port settings go at the controller's egress ports.

Local drop-off would need to be trunks (assuming AP-management VLAN is different from client VLAN) with both AP and client VLANs (or more) configured.

 

I tunnel so my APs are in the management VLAN, and client VLANs trunk to the controller.

--Matthew

if I've helped, please give kudos
if I've provided a solution, please mark the solution so others can find it
MVP
Posts: 707
Registered: ‎12-01-2010

Re: Typical Switchport Configuration for Aruba AP

the BPDU and Loop commands aren't necessary if you're sure that noone is going to plug the wrong devices in and that the port will always be used exclusively for an AP.

(That assumption always sounds good, until actual events leave you wondering what you were thinking)

--Matthew

if I've helped, please give kudos
if I've provided a solution, please mark the solution so others can find it
Search Airheads
Showing results for 
Search instead for 
Did you mean: