Wired Intelligent Edge (Campus Switching and Routing)

Reply

Automatic VLAN/ACL/QoS policies deployment

Hi guys,

 

I have a network made of 2930F and 2930M switches at the edge.

We need to implement VLAN/ACL/QoS policies in an automatic way and by user profiles.

I think that this can be done implementing a CPPM and Colorless ports.

Do I also need to deploy a Mobility Controller? ... I have budget restrictions for this deployment.

Any suggestion will be appreciated.

Regards


PS: If you feel this information is useful and solved your question or problem, please do not forget to mark it as a solution and give me some kudos.
Highlighted

Re: Automatic VLAN/ACL/QoS policies deployment

User roles would be the appropriate way to deploy this.

 

You don't necessarily need a controller, only if you want to tunnel the traffic to the controller and segment the traffic via the firewall and utilize the controller applications..  You can locally switch the users using user roles. 

 

If you have existing Aruba Wireless infrastructure, you can by all means utilize that and tunnel appropriate wired users to those controllers as well.

Super Contributor I

Re: Automatic VLAN/ACL/QoS policies deployment

Please keep in mind that switches has limited TCAM space. You can use acl’s in the user roles in the switches but not unlimited. Also acl’s are stateless.

Willem Bargeman ACMX#935 | ACCX #822

Please give me kudos if my post was useful!
If your issue is solved mark the post as solution!
MVP Expert

Re: Automatic VLAN/ACL/QoS policies deployment


@N3tw0rk3r wrote:

Hi guys,

 

I have a network made of 2930F and 2930M switches at the edge.

We need to implement VLAN/ACL/QoS policies in an automatic way and by user profiles.

I think that this can be done implementing a CPPM and Colorless ports.

Do I also need to deploy a Mobility Controller? ... I have budget restrictions for this deployment.

Any suggestion will be appreciated.

Regards


You don't need a MM (it is only if need UBT)

 

but with User Role, you can have Vlan/ACL/QoS




PowerArubaSW: Powershell Module to use Aruba Switch API for Vlan, VlanPorts, LACP, LLDP... More info


PowerArubaCP: Powershell Module to use ClearPass API (create NAD, Guest...) More info


PowerArubaCX: Powershell Module to use ArubaCX API (get interface/vlan/ports info)


PowerArubaIAP: Powershell Module to use Aruba Instant AP




ACMP 6.4 / ACMX #107 / ACCP 6.5
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: