Port mode
seems to be added in firmware YA/YB 16.01 for the 2530. Are you on a recent enough firmware version?
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------
Original Message:
Sent: Sep 01, 2022 05:51 PM
From: Cheryl Hanna
Subject: 2530 Local User Roles for IAP
I am working on configuring a ClearPass deployment for wired authentication with Aruba switches. We have configured local user roles on the 2930 and 2530 switches. On the 2930 switch, under the aaa authorization user-role name <role-name> I can configure a command 'device' and 'port-mode' for the ports where IAPs are connected. This allows the IAP to authenticate to the switch port and the wireless clients authenticate to the SSID and not the wired port.
I am looking for the same command under the user-role for the 2530 switch and appears that this command is not available. Is there a different command for the 2530 so the AP can authenticate to the switch port but not the wireless clients behind the AP?