Controllerless Networks

Hi Experts,

we going to implement an Instant AP solution with Aruba AP-515. The AP's are connected to new Aruba 5400zl2 switches.

The first time we start, everyhing was fine: The APs were connected to a public VLAN with DHCP and Internet Access. I could Access the Instant Controller WebUI and do the Basic Setup (setMeup…). All APs where identified, I could rename the APs, upgrade the Firmware and create a first Wireless Network...perfect...

The final plan is, to put the APs in a Management VLAN and to assign Static IP's for the APs. The Wireless Networks should be connected to other VLANs like needed. On the 5406 Switches, the Network Ports to connect the APs are static assigned to the Management VLAN (Untagged) and the Wireless VLANs (all tagged). Currently, the Management VLAN does not have any Access to the Internet.

OK...the switch configuration was done and I startet to assign the static IP adresses to the APs. I also provided a dedicated IP Adress for the Instant Virtual Controller.

I disconnected the APs and connected them to the final ports, which I currently configured (as described). The first AP comes up and I could ping its IP Adress as well as the new Instant Mobility Controllers IP Adress. However I can't Access the WebGUI. I could also Access the Wireless Network...but no GUI Access.

I am also able to SSH to the APs

Does anybody has an idea?

Is it because of the missing Internet access in the Management VLAN ..? For some reason, this is not wanted and even not simple testable...

Any help welcome...

Kind Regards

If the guest WLAN is virtual controller assigned, the traffic is natted out of the VC, which does not have internet access.  That will not work.

Do your client have a route to the management VLAN?

Hi cjoseph,

thanks for your answer...but I think I miss something….

We want to have:

1. Employee VLAN with Internet Access with VLAN ID 100

2. Guest VLAN with independend Internet Access with VLAN ID 200

3. Management VLAN without Internet with VLAN 10

The Management of the Instant AP Cluster should be done from within the Management VLAN. Only Wired Management Clients should manage the Instant AP Cluster from within the Management VLAN.  THat is currently my Problem. The wired Client could ping the AP(s) but could not open/Access the Instant Virtual Controller Web GUI.

The Switchports where the AP(s) are  connected to is assigned to Managemt VLAN (Untagged), Emplyee VLAN (Tagged) and Guest VLAN (Tagged)

The Network address assignments to the Wireless Clients is done on Network Level, not on the APs...also the Internet Access is provided on VLAN Level with external Firewalls and ISPs

When I create a new Wireless Network (SSID) I could provide a VLAN ID. I would expect that the AP would tag all packets coming from Wireless Clients for this SSID to that VLAN, correct?

Hi, 

For your web gui issue, following will help you to resolve it

1) Have you tried accessing the GUI via VC IP instead of FQDN? It should open it without any problem

2) If you are accessing via the IP and its not accessible, what issue its giving? refused to connect, timedout etc?

Hi,

currently I use only th IP Adress to Access the Web GUI....

When I try to Access the WebGUI the browser simply times out...Nothing is displayed….

Hi, 

Can you access the IAP VC and share the config

Hi Ronin,

here is the config: