Search the Community
- ClearPass Recipe Review
- ClearPass Recipe Submission
- Admin Tool - Assign Role in Bulk
- Admin Tool - User Search
- CWNP Conf 2015
- Airheads Conference Vegas 2015
- Wlan Pro Conference 2015
- Airheads Conference Shanghai 2014
- WLAN Pro Conf EU 2014
- CWNP Conference 2014 (Sep 22 - 24)
- Airheads Local 2014
- Wireless Field Day 7 (Aug 6-8, 2014)
- Black Hat 2014 Contest
- Airheads EMEA Italy 2014 (June 9 - 13)
- Americas Airheads Conference 2014
- WLAN Professionals Summit 2014
- Airheads Roadshow 2013
- EMEA Airheads Conference 2013
- APJ Airheads Conference 2013
- Americas Airheads Conference 2013
- Americas Airheads Conference 2012
- APJ Airheads Conference 2012
- EMEA Airheads Conference 2012
- Airheads EMEA 2012 Contest: How to Enter - Contest Terms & Conditions
- Airheads EMEA 2012 Contest: Create your Entry to Win Here!
- Airheads Conferences Prior to 2012
- Americas Airheads Local Events 2012
- EMEA Airheads Local Events 2012
- Wireless Field Day 3 @ Aruba Networks
- Wireless Tech Field Day 2- Silicon Valley
- Wi-Fi Mobility Symposium- San Jose, CA USA
- SDN Apps
- Connector Translation Testing area
HI, We have a location with several AP-105 access points mixed with AP-225's I ...
We have a location with several AP-105 access points mixed with AP-225's I want to disable 80 mhz because of the issues with few channels availble, and mixed capablites of the AP-225 and 105 enviroment someone asked me how many clients are using 80 MHZ channels. I'm trying to find a CLI command to do this. Our controllers are on code level 6.4.4.x
show ap association | include -80 You honestly can go all the way down to 20 mh...
show ap association | include -80
You honestly can go all the way down to 20 mhz channels without difficulty and quite frankly that is where you should be starting.
Hello, Are SFP 10G backward compatible with 1G speed ? One of our customer has so...
Are SFP 10G backward compatible with 1G speed ?
One of our customer has some errors on fiber link and suspect it is not compatible with such speed and asks to downgrade speed in the configuration.
Is it possible or should I recommend to swap 10G SFPs with 1G SFPs on this uplink ?
AFAIK a SFP+ (read: SFP Plus) Transceiver goes at 10 Gbps Full Duplex, not any lower speed like 1 G...
AFAIK a SFP+ (read: SFP Plus) Transceiver goes at 10 Gbps Full Duplex, not any lower speed like 1 Gbps (a SFP Transceiver - withouth the Plus suffix - works at 1 Gbps Full Duplex), so you can't down rate a 10 Gbps SFP+ Transceiver's port speed as you would do on a typical RJ45 10/100/1000 Mbps copper port (the SFP/SFP+ Transceiver sets the speed and the Switch slot in which that Transceiver is inserted lets it to communicate with other switched ports, you can't change the Full/Half Duplex Mode or the Speed).
So if you're using a SFP+ Transceivers pair the fiber optical link should be up at 10 Gbps Full Duplex (provided that the Fiber Optic link is clean OK).
The only way to go at 1 Gbps Full Duplex is not using a SFP+ Transceiver but using, instead, a SFP one.
Which SFP+ Transceiver(s) and which Switch(es) are you working on exactly (HPE/Aruba SKUs would help)?
Cannot convert AP-203H from instant to campus. Running 126.96.36.199_61959 on AP, 188.8.131.52 o...
Cannot convert AP-203H from instant to campus.
Running 184.108.40.206_61959 on AP, 220.127.116.11 on controller.
From everything i've read should be compatible but keep getting the error above.
According to the datasheet here: http://www.arubanetworks.com/assets/ds/DS_AP203H.pdf 6....
According to the datasheet here: http://www.arubanetworks.com/assets/ds/DS_AP203H.pdf 18.104.22.168 is the minimum version of ArubaOS required for the AP203H.
We are going to purchase 2 x 2930F switch and use vsf to form a stack. Considering the actual requi...
We are going to purchase 2 x 2930F switch and use vsf to form a stack. Considering the actual requirement, we have some technical questions.
1. The switches are going to be located on different floor and connect by the fiber cable. Can a single fiber cable be used to setup vsf and transmitting the network traffice? Does it need seperate cable for vsf stacking and traffic?
2. Is the vsf on 2930F function similar as the modular backplane stack cable, the larger the line rate (e.g. use 10G SFP+ interface), the more the backpane bandwidth it can offer between the stack member?
Thank very much.
Hi @tomohk, VSF between two Aruba 2930F can be deployed using a VSF Chain Topology (VSF logical po...
VSF between two Aruba 2930F can be deployed using a VSF Chain Topology (VSF logical port 1 on Member A <---> VSF logical port 1 on Member B), you can use a single physical interface bound to the VSF logical port (on each side) or, if you can reserve more physical similar interfaces, you can aggregate more ports together as VSF logical port's members.
In your scenario (just one single 10 Gbps link between A and B) you:
- can use that single link and bind it to the VSF logical port you're going to create (on each side). The VSF port carries all the traffic between the daisy chained VSF Members so you don't need anything more than that.
- basically yes, VSF is a software implementation Virtual Switching technology that uses frontplane traditional 1G/10G/40G Ethernet ports (40G on selected Aruba models) instead of using dedicated backplane stacking ports (through dedicated stacking cables and stacking modules). The more you bind the better the VSF link resiliency and throughput (basically as it happens when you use dual stacking cables - instead of just a single one - from a 2-ports stacking module on Switch 1 to a 2-ports stacking module on Switch 2...see Aruba 2920 as example).
Hi , is it possible to get Clearpass guest authenticated by both Aruba and Cisco WLC at the same ti...
Hi , is it possible to get Clearpass guest authenticated by both Aruba and Cisco WLC at the same time?
We have CPPM 22.214.171.124381 installed and in Configuration » Network » Devices, there are both controllers configured.
End goal is to get BOYD guest to connect either Aruba WLAN guest wi-fi or Cisco WLAN guest wi-fi via Clearpass CPPM plus Clearpass guest.
But I found out that I can only put in 1 NAS as below, is Clearpass guest authentication possible to support both Aruba and Cisco WLC as the NAS? if so, anyone can point me to the right direction? Thanks.
Same as the NAS vendor setting under Home » Configuration » Pages » Guest Self-Registrations
Probably the easiest solution is to have two separate login pages or guest registration pages, one ...
Probably the easiest solution is to have two separate login pages or guest registration pages, one for both solutions and redirect to the right page on each of them. You can base one on the configuration of the other, so you only need to override the NAS vendor setting (option Duplicate, use the original as new parent).
Hi, I do have two 7210 controllers with a VRRP HA between them. I want to change that to be...
I do have two 7210 controllers with a VRRP HA between them. I want to change that to be master-local HA. Any advice how to approach this scenario?
This should help http://www.arubanetworks.com/techdocs/ArubaOS_63_Web_Help/Content/ArubaFrameStyle...This should help
Get Outlook for iOS
Greetings! New to the HP/Aruba world. I have a 2530 running YA.16.02.0012 and there are...
Greetings! New to the HP/Aruba world. I have a 2530 running YA.16.02.0012 and there are certain things I'm trying to configure, but I can't find a syntax reference for this software image.
I'm trying to figure out how to set a native VLAN (4) on some ports, but leave the rest in native VLAN (1). Anyone point me in the right direction for that?
Since your Switch is currently still running on YA.16.02 Software Branch...have a look at these gui...
Since your Switch is currently still running on YA.16.02 Software Branch...have a look at these guides: here (for Management and Configuration) and here (specifically for VLAN concepts and implementations).
Actually it's a little bit difficult (or not easy as before) to look for and find documents about all HPE products (see reasons explained in this hot thread on HPE Community forum...basically because HPE redesigned very recently the HPE Support Center launching in a sort of still-Beta phase breaking the way we are used to look for and find documents and softwares)...so please take my links as examples (I had to filter with "16.02" all provided results for 2530 to find those links).
Good afternoon, I'm trying to setup CPPM IF-MAP for additional profiling to ClearPass, but...
I'm trying to setup CPPM IF-MAP for additional profiling to ClearPass, but having some issues with establishing the connection. In most of the controllers, the status shows "401 error". I have tried doing the IP and port 443, which I thought might be a problem, so I tried the IP and port 80 and that also failed. I tried the hostname, but don't have DNS servers configured on the controller, so getting can't resolve name. When I do IP:443 or DNS:443 in my browser, it gives the same error. Any ideas why this isn't establishing? Not sure if I should use a different port or not. I've setup the user account in ClearPass, so I know that's valid, but not even seeing the request. Controllers use CPPM for RADIUS auth, so I know they can communicate.
Controller is 126.96.36.199 and ClearPass is 6.6.5.
It has to be in Admin Users
Hello! I've got running a CP as radius server in my LAB. Clearpass offers the controller ...
I've got running a CP as radius server in my LAB.
Clearpass offers the controller a value for role derivation.
Now, I want to use CP as radius server for inernal and RAP Users.
The RAP asers should get a role with split tunneling ACL.
BUT: I do not want to use a second derived role for RAP users from the Radius. For RAP Userse the 802.1X Authentication Default Role should be used.
Internal users would associate with both AP groups/VAP's.
To achieve this, I created a second radius server group without a server rule.
I thought, in this case the radius value would be ignored.
Now, if I deassociate my test user from the internal SSID where the radius group with server rule is active and associate with the RAP SSID, the user also gets the derived role from the radius server.
Even if I "execute aaa user delete all" before.
Why does this happen?
Is the role for the user cashed by the controller?
Or does the ROLE_DERIVATION_DOT1X_VSA override the default role even if there is no role derivation rule set under the radius server group profile?
Is there a way to block role derivation for specific AAA profiles?
Thank you for your advice!
Unfortunately, there is no way to block a VSA from setting a role.
Hi, Can't find any doc that specifie the VSF throughtput capacity. thanks for your help. &...
Can't find any doc that specifie the VSF throughtput capacity.
thanks for your help.
IMHO that data is probably a maximum value...since VSF maximum throughput strictly depends (and var...
IMHO that data is probably a maximum value...since VSF maximum throughput strictly depends (and varies with) the number (and type) of VSF logical port's physical members interfaces that are aggregable together to form the VSF logical port (forming a "load-balanced aggregate VSF connection with redundancy").
AFAIK the Aruba 2930F supports up to four (4) 10G physical interfaces (ports) for VSF logical port...and can use up to two (2) VSF logical ports (called simply VSF ports)...so the 80G limit is the maximum in a 2 VSF logical ports configuration made using 4+4 10Gbps interfaces.
Using specifically 1G physical interfaces (a scenario not permitted on Aruba 5400R zl2 VSF implementation) will let you - if I've read it correctly - to aggregate (to bind) up to 8 1G physical interfaces per VSF logical port (so a grandtotal of 8+8 1G - so a maximum of 16Gbps VSF throughput - considering you can deploy up to 2 VSF logical ports).
In Aruba 5400R zl2 with v3 zl2 Modules the (2 members) VSF can be deployed using single (or aggregated) 10G and 40G physical interfaces only...not 1G (and in a either/or implementation, not mixed)...so it boils down to the number of 10G or 40G ports you're going to reserve for each VSF logical port.
If my algebra is still OK and rules above are valid...on the Aruba 5400R zl2 you can deploy up to 8 40G physical interfaces per VSF logical port, up to two VSF logical ports as in Aruba 2930F? NO...as of today I think that Ring topology (so 2 VSF logical ports on the same VSF Member) is not permitted on Aruba 5400R zl2...it supports only VSF in Chain topology...so we go back to the 8 40G physical interfaces per one VSF logical port case on each VSF Member...this means a theoretical 320Gbps VSF throughput between the two Aruba 5400R zl2 VSF Members when using up to 8 40G ports...or just a theoretical 80G VSF throughput when using up to 8 10G ports to form the single VSF logical port as is actually permitted (not considering the potential oversubscriptions behind the corner and/or the 80Gbps bandwidth limit per slot on V3 zl2 Modules when the Aruba 5400R zl2 works in "v3 only mode").