Wired Intelligent Edge

last person joined: yesterday 

Bring performance and reliability to your network with the HPE Aruba Networking Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of your switching devices, and find ways to improve security across your network to bring together a mobile-first solution
Back to discussions
Expand all | Collapse all

Bridge Mode for Campus AP

This thread has been viewed 20 times

  • 1.  Bridge Mode for Campus AP

    Posted Aug 26, 2019 08:08 AM

    Dear Experts, 

     

    I need to configure Campus AP (CPSec enabled) for bridge mode. I want to do 802.1x authentication with CPPM, Controller is VMC.

     

    I think it should be done simply, i tried configuring bridge mode in SSID but it doesnt broadcast the SSID then. 

     

    Can someone highlight the process i need to follow to get it working?



  • 2.  RE: Bridge Mode for Campus AP

    EMPLOYEE
    Posted Aug 26, 2019 08:46 AM

    Changing the Forwarding Mode will momentarily restart the radio on various AP models (according to the User Guide for 8.3.0.x - 

    200 Series, AP-205H, 210 Series, 220 Series, 270 Series and 320 Series access points).

     

    "When the radio restarts, wireless services will be briefly interrupted. Clients will automatically reconnect to the network when the radio is again up and running."



  • 3.  RE: Bridge Mode for Campus AP

    EMPLOYEE
    Posted Aug 26, 2019 08:55 AM

    ArubaOS 8.3.0.x User Guide states within the Remote Access Points section that "ArubaOS does not support Wired 802.1X authentication in bridge mode for a s. 802.1X authentication is supported only in tunnel and split modes."

     

    It then specifies this under the Understanding Bridge section on page 724.



  • 4.  RE: Bridge Mode for Campus AP

    EMPLOYEE
    Posted Aug 26, 2019 09:32 AM

    Best is to study the User Guide. There is a chapter called "Behavior and Defaults" where all limitations in the dedicated forwarding modes are descripted.

    Most of them affect Voice over Wireless or Application handling.

    Remote Access Point is another operating mode. I guess the original demand is to bridge Client Traffic to the switchport of the AP. Here is 802.1X with ClearPass full supported.

     



  • 5.  RE: Bridge Mode for Campus AP

    Posted Aug 26, 2019 09:42 AM

    Maybe if you implement 802.1x on your switch where the AP is plugged into. In bridge mode the client is connected directly to the switch where the AP is connected the AP is acting as a bridge. 

     

    The problem is the controller is the authenticator for Radius works for Tunnel mode controlling the client in the controller. I was thinking if you make your switch where the AP is connected to also a radius authenticator it might work.  You would also need to work out how to authenticate the AP as well because it's usually port based.