Wireless Access

Hi there,

What happens with ArubaOS when a role acl has per-role rules (ex.: "role workstation can speak to role lab") if end user devices are connected to different controllers. Does this work? Are all the controllers in the cluster aware of all the user+roles on the cluster and enforce the rules inside all the cluster, or do the rules only work properly for users sharing the same controller?

Thanks

------------------------------
Ricardo Duarte
------------------------------

yes all the MDs that are part of the cluster are aware of the user roles and user sessions.

------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
------------------------------

Original Message:
Sent: May 08, 2021 03:18 PM
From: Ricardo Duarte
Subject: Per-role rules + cluster?

Hi there,

What happens with ArubaOS when a role acl has per-role rules (ex.: "role workstation can speak to role lab") if end user devices are connected to different controllers. Does this work? Are all the controllers in the cluster aware of all the user+roles on the cluster and enforce the rules inside all the cluster, or do the rules only work properly for users sharing the same controller?

Thanks

------------------------------
Ricardo Duarte
------------------------------

Thanks for your answer.

Do you know if there is a way to make it work also across clusters connected to the same master (conductor)?

Thanks

------------------------------
Ricardo Duarte
------------------------------

Original Message:
Sent: May 08, 2021 08:18 PM
From: Ariya Parsamanesh
Subject: Per-role rules + cluster?

yes all the MDs that are part of the cluster are aware of the user roles and user sessions.

------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.

Original Message:
Sent: May 08, 2021 03:18 PM
From: Ricardo Duarte
Subject: Per-role rules + cluster?

Hi there,

What happens with ArubaOS when a role acl has per-role rules (ex.: "role workstation can speak to role lab") if end user devices are connected to different controllers. Does this work? Are all the controllers in the cluster aware of all the user+roles on the cluster and enforce the rules inside all the cluster, or do the rules only work properly for users sharing the same controller?

Thanks

------------------------------
Ricardo Duarte
------------------------------