Higher Education

We will soon  have a remote location with service to be provided by Comcast and a dynamic IP address.  We have five IAP-105s, a Juniper 2200 switch, and a RAP-3WN.

I originally thought of setting the IAPs to a VPN tunnel out one interface on the Juniper. The management interface would uplink through the RAP-3 tunnel connection back to campus.  One issue with this setup is that it would be best to have static IP address with Comcast for allowing access to our AirWave.

Does anyone have any better suggestions for setting this up with the above hardware?

Thanks,

Jason Henley

Washington and Lee University

Yes...use the VPN functionality within the IAPs.  They will build a tunnel to an Aruba controller and use the INNER IP address to be managed via Airwave.  That way...you won't need to worry about a static IP (with that cost) added to Comcast.  So long as the inner IP address is routable on your LAN, you and Airwave can reach that remote site.  Very cool!

The virtual controller is showing up on the controller and AirWave as a vpn client. Is that right, or have a messed something up?

That is correct on the controller.  Can you send a screenshot from Airwave and the output of "show iap table" on the controller?