Controllerless Networks

New Contributor

IAP Static Host entry?

I'm trying to get my guest network users to use public DNS servers (Google...), but be able to get to my CPPM server via the FQDN for authentication. I don't want to use my internal DNS servers.


Is there a way to add a static host entry for the guest network? I don't want to use an IP because of the cert error.


The only other option I can think of is to build another DNS server to handle these requests. 

Guru Elite

Re: IAP Static Host entry?

You would need to rely on an upstream routers DNS proxy capability.


| Tim Cappalli | Aruba Security | @timcappalli | |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
Frequent Contributor II

Re: IAP Static Host entry?

maybe a Destination NAT on the pre-auth role for the Guest network.

If you found my post helpful, please give kudos!
New Contributor

Re: IAP Static Host entry?

 We actually using PA-200/500's upstream of these, and they have DNS-Proxy built-in. Managed to get it working that way, will also let me do some other things down the line. 

Search Airheads
Showing results for 
Search instead for 
Did you mean: