Wired Intelligent Edge

 View Only
last person joined: 2 days ago 

Bring performance and reliability to your network with the Aruba Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of the ArubaOS-Switch and ArubaOS-CX devices, and find ways to improve security across your network to bring together a mobile first solution.
Back to discussions
Expand all | Collapse all

Dynamic Segmentation Aruba CX - Do I need a Controller/Central?

This thread has been viewed 12 times

  • 1.  Dynamic Segmentation Aruba CX - Do I need a Controller/Central?

    Posted 11 days ago

    Hi Guys,

    With Aruba CX switches, do I need a controller/Central to make this work?

    Thanks
    Champ



  • 2.  RE: Dynamic Segmentation Aruba CX - Do I need a Controller/Central?

    EMPLOYEE
    Posted 10 days ago

    you need a controller/gateway only if you want to statically of dynamically build overlay tunnels from your CX switches.
    but if you want the traffic from the authenticated users to be bridged then you dont need a Conytroller or Aruba Central.



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------

    Original Message


  • 3.  RE: Dynamic Segmentation Aruba CX - Do I need a Controller/Central?

    Posted 10 days ago

    Hi. 

    I just want user authenticating to be able to use Roles through services declared on clearpass. 

    Do CX switches natively support pef licensing?

    Just trying to work out how authentication dot1x actually gets passed to clearpass for further processing. 


    Original Message


  • 4.  RE: Dynamic Segmentation Aruba CX - Do I need a Controller/Central?
    Best Answer

    Posted 9 days ago

    Hi, 

    You are mixing different things. Let me break it down for you

    1) There is no PEF licensing in CX switches. PEF licensing is available in Wireless Controllers (aka Gateways)
    2) Dynamic Segmentation in a nutshell is authenticating users and assigning them network segments (Vlans/Roles). This is done as a standard Dot1x configuration. Switches are configured with AAA Radius Dot1x configuration on global and port level. Once the device connects to the port, the dot1x process initiates. Credentials are then forwarded to ClearPass for authentication, once authentication succeeds, the port is configured with returned attributes such as Roles, Vlans etc.


    Original Message


  • 5.  RE: Dynamic Segmentation Aruba CX - Do I need a Controller/Central?

    Posted 5 days ago

    Thanks@Ronin101 for clarifying.
    That makes sesnse now. 


    Original Message