Wired Intelligent Edge

last person joined: 22 hours ago 

Bring performance and reliability to your network with the HPE Aruba Networking Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of your switching devices, and find ways to improve security across your network to bring together a mobile-first solution
Back to discussions
Expand all | Collapse all

source-interface for http and https traffic on 2930 switch

This thread has been viewed 5 times

  • 1.  source-interface for http and https traffic on 2930 switch

    Posted May 20, 2020 06:34 AM

     

     

    Hello,

    Is it possible on Aruba 2930 switches to configure the source-interface for HTTP and HTTPS traffic?
    I'm using Clearpass for Radius authentication and I have the source-interface for radius communication configured with the command "ip source interface all vlan x"
    I'm now implementing DUR and I've noticed that for Http and Https traffic to the Clearpass server the switch is using it's IP address from the outgoing interface, which is different than the source-interface for Radius.
    Firewall rules are currently blocking the http and https trafic from the switch's outgoing IP to Clearpass.
    Is it possible to change the source-interface or is this a limitation on the 2930 switch?
    Is my only option to change the firewall rules?



  • 2.  RE: source-interface for http and https traffic on 2930 switch
    Best Answer

    EMPLOYEE
    Posted May 25, 2020 04:55 AM

    Source interface command is selected only for below features 

     

    Aruba-2930F-24G-PoEP-4SFP(config)# ip source-interface
    radius    The RADIUS protocol.
    sntp       The SNTP protocol.
    syslog   The syslog protocol.
    tacacs   The TACACS+ protocol.
    telnet     The Telnet protocol.
    tftp         The TFTP protocol.
    sflow      The sFlow protocol.
    tunneled-node-server The Tunneled Node Server protocol.
    radsec The RADIUS protocol using TLS over TCP.
    all All protocols above.

     

    The option all means all the features mentioned above. There is no option for http/https.