For AOS-S, you would use the HPE-Port-Dot1x-Port-Mode (for 802.1X authentication of your AP):
Or HPE-Port-MACPort-Mode in case of MAC authenticaiton of your AP:
I prefer returning Named VLANs, where if you prepend them with '2' they are untagged (example: Untrusted VLAN), with '1' prepended they are tagged (example: Voice VLAN). With VLAN ID you would need to do all kinds of math to get to the numeric VLAN ID so Named VLANs are much simpler.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------
Original Message:
Sent: May 07, 2025 10:35 AM
From: MH33
Subject: Port-access device-mode on AOS-S
Is there an equivalent to device-mode for AOS-S switches when using port-access security?
When authenticating an Aruba AP, we want to authenticate only the first device (the AP), not the clients. The wireless system will obviously handle authentication for wireless clients, so we don't need/want the switches to do anything with them.
On CX switches we would put these ports in auth-mode device-mode. I have not been able to find the equivalent for AOS-S switches.