Controllerless Networks

How do you setup a IAP with WPA2 Enteprise using PEAP?  I am familiar with creating a CSR in a controller and creating a cert and all that jazz but have not done it on an IAP yet.

This documents i found applies to EAP-TLS:

http://community.arubanetworks.com/aruba/attachments/aruba/indoor-aps-raps-and-mesh-routers/1305/1/Aruba%20Instant%20Certificate%20generation%20and%20upload%20edited.pdf

Or is it not worth the hassle trying to setup an IAP with WPA2 Enteprise using PEAP? and just go with EAP-TLS by following the previously linked document?

Thanks.

Protected EAP (PEAP) is an 802.1X authentication method that uses server-side public key certificates to authenticate clients with server.

You can upload a server certificate on Instant as shown in the attached screen shot.

Shashi

Do I still need to load a cert onto the Aruba Instant Virtual controller if I don't want to use termination on the controller?

No. You can use an external RADIUS server and just specify the RADIUS server's IP in IAP.

 I though you were trying to use IAP's internal RADIUS server to authenticate and if so you will need a cert installed.

Does this answer your question?

thanks,

Shashi

Sorry, i misunderstood the capabilites of the Aruba IAP, didn't know you can use the internal RADIUS server built-in to the virtual controller or external Radius. I thought the only way to use PEAP-MsChapv2 or EAP-TLS was to use the internal RADIUS server, which now i understand you would need to load a certificate into the virtual controller to do so.

Knowing that, it seems like it would be easier to just use the external RADIUS server rather than go through the headache of creating a cert and loading it in the IAP? or am i wrong?

YES!