Controllerless Networks

 View Only
last person joined: 23 hours ago 

Instant Mode - the controllerless Wi-Fi solution that's easy to set up, is loaded with security and smarts, and won't break your budget
Expand all | Collapse all

Instant and GRE VLAN Connection?

This thread has been viewed 35 times
  • 1.  Instant and GRE VLAN Connection?

    Posted Jan 12, 2022 09:45 AM
    Hello,

    I have some questions about Instant APs and tunneling.
    I want to create a tunnel from IAP (VC) to a Mobility Controller.
    On MC i worked lots of times with gre tunnels between different controllers so there it is usual to bind one vlan to the gre tunnel to use it on the other side.

    So i created a gre tunnel from IAP VC to MC as mentioned in documentation.
    Configuring a GRE Tunnel

    But how can I bind a specific vlan  to the gre tunnel on Instant side?
    GUI settings of GRE Tunneling is very simple without many options.

    It looks like GRE Tunnel on Instant side is alway up no matter if MC site is available or not.
    Is there a way to troubleshoot gre tunnels on instant side?

    Thanks a lot.


    ------------------------------
    Florian Kueck
    ------------------------------


  • 2.  RE: Instant and GRE VLAN Connection?

    EMPLOYEE
    Posted Jan 12, 2022 04:51 PM
    This is part of IAP-VPN solution that can create GRE/IPSEC tunnel to the anchor Aruba controller.
    you can refer to this as it describes the various forwarding modes.
    https://community.arubanetworks.com/blogs/rpavithran1/2018/08/22/aruba-instant-validated-reference-design-v20

    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
    ------------------------------



  • 3.  RE: Instant and GRE VLAN Connection?

    Posted Jan 13, 2022 01:31 AM
    Thanks for the answere, but the vrd is the same as the link I mentioned in my post.

    I configured the tunnel as it is described. But i miss the part where i can bind a vlan to the tunnel.

    Also I do not find the part of the configuration where I can configure the forwarding mode.

    ------------------------------
    Florian Kueck
    ------------------------------



  • 4.  RE: Instant and GRE VLAN Connection?

    EMPLOYEE
    Posted Jan 13, 2022 01:46 AM
    what is the forwarding mode you are using?

    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
    ------------------------------



  • 5.  RE: Instant and GRE VLAN Connection?

    EMPLOYEE
    Posted Jan 13, 2022 01:53 AM
    you need to configure the DHCP scope for the specific forwarding type and then reference it in your WLAN ->VLAN configuration



    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
    ------------------------------



  • 6.  RE: Instant and GRE VLAN Connection?

    Posted Jan 13, 2022 02:10 AM
    DHCP is Provided by the vlan i want to connect via gre tunnel. Do i have to configure a dhcp scope nevertheless?

    ------------------------------
    Florian Kueck
    ------------------------------



  • 7.  RE: Instant and GRE VLAN Connection?

    Posted Jan 13, 2022 01:55 AM
    I do not know where it can be configured. I am not familiar with Instant. I always worked with Controllerbased Aruba environments.
    Is it configured  in VLAN section of a SSID?
    IP is network assigned.

    I just want to connect an existing vlan  on my mobility controller via gre and put my wireless clients which are connected to my instant ap to this vlan.

    Why am i doing this, because the IAP is an AP-577 and my MC is on 8.6, no upgrade possible because of old AP105.
    So i want to get VLANs from MC to IAP.

    ------------------------------
    Florian Kueck
    ------------------------------



  • 8.  RE: Instant and GRE VLAN Connection?

    EMPLOYEE
    Posted Jan 13, 2022 02:07 AM
    yes it is referenced in VLAN section of a SSID?
    as an example, you configure your CL2



    then you need a routing profile entries for it VLAN99 in this case 10.10.99.0/24


    finally you need to configure this VLAN 99 on your controller,
    for initial testing you can configure DHCP scope for VLAN99 on this controller.

    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
    ------------------------------



  • 9.  RE: Instant and GRE VLAN Connection?

    Posted Jan 13, 2022 02:31 AM
    Ok thanks a lot. I now got it working, my client receives an ip from L2 connected network from controller.
    I can ping my router in this network and controller IP in this network.

    Internetconnection is not yet available.
    I do not have configured the route you mentioned. Because what kind of routing does it do?
    For my opinion my real router in my connected Network is reachable. VC should only connect L2 so routing sounds wrong for me at VC side.

    However what is the gateway ip you mentioned in your routing table for 10.10.99. ?

    ------------------------------
    Florian Kueck
    ------------------------------



  • 10.  RE: Instant and GRE VLAN Connection?
    Best Answer

    EMPLOYEE
    Posted Jan 13, 2022 06:41 AM
    you can refer this post
    https://community.arubanetworks.com/community-home/digestviewer/viewthread?MID=25268

    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
    ------------------------------



  • 11.  RE: Instant and GRE VLAN Connection?

    Posted Jan 17, 2022 03:07 AM
    Thanks a lot. It is working now.
    In comparison to the Controller OS is Instan OS sometimes as voodoo for me.

    ------------------------------
    Florian Kueck
    ------------------------------