Wireless Access

 View Only
last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Multiple VLANs on Single SSID

This thread has been viewed 62 times

  • 1.  Multiple VLANs on Single SSID

    Posted Jan 28, 2023 01:12 AM
    Hello

    I have and running 8.7 AOS.

    I have one SSID with different campuses.

    I am unable to set VAP Profile on AP-Group, Because it contains same SSID Profile.

    My purpose is to have One SSID and Different Vlans on it by AP-Group. 

    I have AP-Groups by buildings. So I want same single SSID on the building but different Vlan on it.

    Regards.


  • 2.  RE: Multiple VLANs on Single SSID

    Posted Jan 29, 2023 09:05 AM
    Hello @guram1,

    AP-Group can be used with MAC-Auth or 802.1X authentication together with ClearPass.

    If you don't use authentication, you can use User Derivation Rule for dynamic VLAN assignment. You can create the user rules under Configuration/AuthenticationUser Rules. In the rule you can set either an Aruba user role or a VLAN.

    The Workflow for Assigning a User Role is explained here:https://www.arubanetworks.com/techdocs/ArubaOS_8.8.0_Web_Help/Content/arubaos-solutions/roles-policies/assi-user-role.htm?Highlight=UDR

    ------------------------------
    Regards,

    Waldemar
    ACCX # 1377, ACEP, ACA - Network Security
    If you find my answer useful, consider giving kudos and/or mark as solution
    ------------------------------

    Original Message


  • 3.  RE: Multiple VLANs on Single SSID

    Posted Mar 15, 2024 01:44 AM

    I don't have ClearPass, also it is not possible to match AP group at user rules as you mentioned to assign Vlan


    Original Message


  • 4.  RE: Multiple VLANs on Single SSID

    MVP
    Posted Jan 30, 2023 08:07 AM
    If your buildings all share the same cluster, you can make multiple Virtual AP Profiles referencing the same SSID profile. You assign a different VAP to each AP group.

    If the buildings are in different clusters, you can use named VLANs in the VAP and define the VLAN ID mapping at the cluster level.

    We have chosen to do the latter on some of our VAPs that share clusters.

    ------------------------------
    Bruce Osborne ACCP ACMP
    Liberty University

    The views expressed here are my personal views and not those of my employer
    ------------------------------

    Original Message


  • 5.  RE: Multiple VLANs on Single SSID

    Posted Mar 06, 2023 11:07 AM

    Yes you can reuse the SSID name, (from AP-Group to AP-Group)

    but be aware if users move, and there is cross coverage,

    It might happened they not "roam", and stay in "old" SSID/VLAN



    ------------------------------
    Steinar
    ------------------------------

    Original Message