Controllerless Networks

 View Only
last person joined: 22 hours ago 

Instant Mode - the controllerless Wi-Fi solution that's easy to set up, is loaded with security and smarts, and won't break your budget
Back to discussions
Expand all | Collapse all

Instant AP - Single SSID with both local forwarding + IAP-VPN?

This thread has been viewed 8 times

  • 1.  Instant AP - Single SSID with both local forwarding + IAP-VPN?

    Posted Aug 26, 2021 04:18 PM
    Hi Airheads,

    Does anyone know if it is possible to have a single SSID which can support role based VLAN assignment from ClearPass where:
    - Role A is a local VLAN (i.e. will bridge traffic onto the local network)
    - Role B is a VLAN with a corresponding Centralised DHCP scope configured

    The objective is to have a single SSID which can support both bridged and L2 tunnelled access.

    ------------------------------
    Chris Denham
    ------------------------------


  • 2.  RE: Instant AP - Single SSID with both local forwarding + IAP-VPN?

    EMPLOYEE
    Posted Aug 26, 2021 07:01 PM
    yes i think that should work as long as the authentication is dot1x.
    you can assign the VLANs to the user-role that are configured on the VC.

    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
    ------------------------------

    Original Message


  • 3.  RE: Instant AP - Single SSID with both local forwarding + IAP-VPN?

    Posted Aug 26, 2021 07:04 PM
    Thanks, in this case it will be MPSK :)

    ------------------------------
    Chris Denham
    ------------------------------

    Original Message


  • 4.  RE: Instant AP - Single SSID with both local forwarding + IAP-VPN?

    EMPLOYEE
    Posted Aug 26, 2021 07:18 PM
    i think that will work as you need ClearPass to send back the MPSK pass phrase, so you can add a user role to be sent as well.
    i have not tested it myself but do let us know how you go.

    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
    ------------------------------

    Original Message