Wireless Access

 View Only
  • 1.  Aruba AOS10 and Downloadable User Roles (DUR)

    Posted Feb 03, 2025 02:36 PM

    It's now 2025 and we are working to implement a few things, one of them being Downloadable User Roles (DUR). We are currently on 8.10.0.15 and have been attempting to get DUR's working, with a few issues, I'm not asking about DUR's in the 8.10 version though.

    Doing some searching in the community it was brought up that DUR is dead in AOS10. (Airheads Community

    Airheads Community remove preview
    Airheads Community
    Hi All,I have referred a Aruba documentations , Airhead broadcasting youtube channels to setup a DUR in wireless by using Aruba central & CPPM components.For Wi
    View this on Airheads Community >

    )

    So I'm wondering if this is still true or not before we go down this route. If DUR is dead, then maybe we should stop what we are working on. Would love to hear from an employee regarding this as it doesn't seem TAC or others know.



  • 2.  RE: Aruba AOS10 and Downloadable User Roles (DUR)

    Posted Feb 03, 2025 05:25 PM

    DUR is not supported with AOS 10.



    ------------------------------
    Carson Hulcher, ACEX#110
    ------------------------------



  • 3.  RE: Aruba AOS10 and Downloadable User Roles (DUR)

    Posted Feb 03, 2025 05:56 PM

    You can still use DUR with AOS8.x (instant and controller based) and with CX and AOS-S switches.

    But as most organisations use Aruba Central for their configuration and mgmt, user-roles can be configured at group level and hence one can easily use local user roles (LUR) without the hassle of replicating the configuration across all the IAPs, AOS-S and Cx switches.



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------



  • 4.  RE: Aruba AOS10 and Downloadable User Roles (DUR)

    Posted Feb 06, 2025 12:52 PM

    So DUR's on AOS8.x Instant seem to be hit and miss.

    We rolled out our first two, that touched our BYOD networks and we thought went well. When we began to run it on our internal team, we noticed odd behaviors.  Such as a user couldn't get access to any internal resources even though they had the ROLE applied. Then if we polled the role on the AP, it would show a 'Failed' message. If the user moved to a neighboring AP, they would have full access. Also found that often no ROLE would be applied and the user would full access. We have since gone back to local roles which work.

    After further investigation it appears that our initial DUR's would also have the same issue, but since that group is smaller and is very limited in access it wasn't noticed.

    For now, I think we will stop the DUR role out as we will move to AOS10.x at some point, but no rush as it seems to be missing other features or will require a complete revamp as the configs don't move.




  • 5.  RE: Aruba AOS10 and Downloadable User Roles (DUR)

    Posted Feb 07, 2025 10:28 AM

    What features do you think are missing?  AOS 10 has deprecated features that were present in AOS 8 and Instant, but those features aren't missing but rather no longer available or moved to something else.



    ------------------------------
    Carson Hulcher, ACEX#110
    ------------------------------



  • 6.  RE: Aruba AOS10 and Downloadable User Roles (DUR)

    Posted Feb 06, 2025 11:34 AM

    Carson,

    Appreciate the info and thanks.

    -Chris