Controller Based WLANs

Product and Software: This article applies to all Aruba controllers and ArubaOS 2.x and 3.x. 

“Aliases” on wireless controllers can be used to represent source, destination, and services. The use of aliases in rules and policies simplifies repetitive configuration and increases the readability. Aliases also provide an advantage if you make any changes to network addresses or want to add new subnets to rules. You will be able to modify your alias, instead of correcting or adding addresses in many rules/policies. 

Preconfigured Aliases 
User:  represents the IP address of the user and can only be used in firewall policies. 
mswitch:  represents the switch IP of the controller. 

A list of preconfigured service aliases exists. You can also create your own aliases for source, destination, or services. 

Examples 
netdestination Internal 
network 10.16.10.0 255.255.255.0 
network 192.168.10.0 255.255.255.0 
Now Internal can be used to reference both networks. 

netservice svc-esp 50 
This defines a service that used protocol 50 (IPsec).