Wireless Access

last person joined: 18 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

AOS8 bulk provision APs for wired 802.1X

This thread has been viewed 2 times
  • 1.  AOS8 bulk provision APs for wired 802.1X

    Posted Oct 22, 2019 09:46 PM

    Hello,

     

    AOS 8.3.0.x with MM (some controllers on 8.2.2.x)

     

    We have started a wired 802.1X initiative and I found that I cannot provision more than a single AP at a time if I want to set 802.1X settings. We wish to use EAP-TLS with factory cert. I also looked at the CLI audit-trail after provisioning an AP and found the following commands were pushed:

     

     

    clear provisioning-ap-list
    read-bootinfo ap-name AP-PLEA-6150-FLR2-18
    copy-provisioning-params ap-name AP-PLEA-6150-FLR2-18
    provision-ap 
    provision-ap apdot1x-tls
    provision-ap apdot1x-factory-cert
    reprovision ap-name AP-PLEA-6150-FLR2-18

    However, the "provision-ap apdot1x-tls" command does not exist from the CLI.

     

    Is there a known method to do this bulk re-provisioning so the APs will start sending their cert?

     

    We have ~1600 APs.



  • 2.  RE: AOS8 bulk provision APs for wired 802.1X
    Best Answer

    EMPLOYEE
    Posted Oct 22, 2019 10:07 PM

    You would use a provisioning profile for that:

    https://www.arubanetworks.com/techdocs/ArubaOS_85_Web_Help/Content/arubaos-solutions/1cli-commands/ap-ntw-pro.htm?Highlight=provisioning%20profile

     

    I would set it up using the GUI for simplicity and apply it to a test ap-group to make sure it works the way you need it to:

    Screenshot 2019-10-22 at 21.04.40.png

    Screenshot 2019-10-22 at 21.05.04.png