Wireless Access

Reply
Occasional Contributor II

single ssid with multiple vlans using mac address

how do I implement single ssid with multiple vlans with mac address authentication?

 

Any step by step guide available?

Guru Elite

Re: single ssid with multiple vlans using mac address

Is this an Aruba Controller or instant?  Are you already doing mac authentication on a single vlan?



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II

Re: single ssid with multiple vlans using mac address

It will be a controller based deployment..

Guru Elite

Re: single ssid with multiple vlans using mac address

You should break your problem into two parts.  Mac authentication is something that you add to an open or a preshared key network.  Have you set those up yet?  After that you add mac authentication:  http://community.arubanetworks.com/t5/Community-Tribal-Knowledge-Base/For-the-Beginner-MAC-Authentication-using-the-Controller/ta-p/32188

 

By the way, mac authentication does not scale.  Adding/removing and managing mac addresses adds alot of administrative overhead.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II

Re: single ssid with multiple vlans using mac address

I actually had configured in this way and it worked for 2 days. Issue came when we wanted to have a captivate portal for guest login. 

As per captivate portal requirement, need to have a interface ip from the same vlan where clients will be connecting.

 

We ran in to problem and had to reset the entire configuration. Unfortunately, TAC couldn't fix it. Client was unable to get the ip from dhcp.

 

At this moment, when I have reset the controller and reconfigured it. Everything is working again. Just wanted to confirm if my approach is correct or no. Would need assistance with captivate portal configuration though..

 

Thanks a ton...

Guru Elite

Re: single ssid with multiple vlans using mac address

You need tri-session with DNAT enabled if you want to do captive portal on more than one VLAN:  http://community.arubanetworks.com/t5/Wireless-Access/Tri-Session-with-DNAT-vs-Controller-IP-Address-on-Client-VLAN/m-p/280237

 

If you want to add more than one VLAN, typically you would use VLAN pooling (put more than one VLAN in the Virtual AP VLAN).



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: