Wireless Access

Hi all,

This may be a quick obvious question; but on the 7210 controller - is there a limit to the maximum number of L2TP pools I can configure in my policy?

Many thanks

Anyone know where I might find the answer for this?

Thanks

What are you trying to get accomplished ?

Sent from Mail for Windows 10

I want users to go to a certain pool depending on which AD group they are a part of.

I’m happy how to configure this, but just wandered if there was a limit on how many L2TP pools I can configure on my controller?

For example, if I have 20 different IP subnets, 20 different AD groups to match, could I configure 20 L2TP pools to house these different subnets?

Thanks

That’s not really the intent of using the L2TP pool.

Typically it is used for Remote AP or IAP-VPN (inner IP) and in most cases it is not required to build that many pools.

I don’t think there’s a hard set limit but you want to use an external DHCP server for what you are trying to achieve

Sent from Mail for Windows 10

Thanks Victor,

Only issue we have, this is for VIA clients and I was under the impression you couldn’t configure this to work with an external DHCP server?

So basically I want to segment everyone who is a VIA client into groups depending on their department. Approx 20 departments and I want them all to have their own IP range ... would this work with L2TP pools or is there a way to have a DHCP server working with VIA clients.

Thanks

Ahh i see , I missed that you were using VIA

Are using a RADIUS server to authenticate the VIA clients ?



Thank you

Victor Fabian

Pardon typos sent from Mobile

Using Clearpass to authenticate the users.

Clearpass checks what AD group the user is in, then assigns the role for them to use. That role is held on the controller and uses its own L2TP pool

Thanks

You can use the user-roles you are returning from CPPM to apply the different access policies based on the user-role and use the same L2TP pool




Thank you

Victor Fabian

Pardon typos sent from Mobile

Thanks - however I would need all these different departments to have separate layer 3 addresses.

At present, I can only see a different L2TP pool for each department as an option.

Do you think there’s a limit on number of L2TP pools you can config / use?

No hard set limit

https://community.arubanetworks.com/t5/Controller-Based-WLANs/What-is-the-max-number-of-address-that-can-be-assign-by-local/ta-p/176560

Thank you

Victor Fabian

Pardon typos sent from Mobile

Thanks Victor