Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Bridge/Persistent Configuration

This thread has been viewed 1 times

  • 1.  Bridge/Persistent Configuration

    Posted Oct 27, 2015 08:49 AM

    Multiple controller setup with RAP's. One 802.1x SSID configured in bridge mode and Remote-AP Operation "persistent". AP system profile has IPSEC retries set to 0 and multiple LMS.

     

    The RADIUS communication is only working when there is controller connectivity, RADIUS is also installed on the central site. However already authenticated clients should be able to continue to work locally when there is a controller connectivity outage.

     

    When I break connectivity with the controller, I still have connectivity for 20-30 seconds to the local bridged network. Afterwards all network connectivity stops working.

     

    The 802.1x SSID remains broadcasted however. And I'm appear still connected to the SSID, Not 100% sure but I don't think the AP deauths me...

     

    Are there extra parameters to configure? Which logging can i check?



  • 2.  RE: Bridge/Persistent Configuration

    EMPLOYEE
    Posted Oct 27, 2015 09:00 AM
    You would need to stand up a backup PSK ssid for use when the controller is not reachable. If you need auth survivability, consider using Instant or a 7000 series controller on site.


    Thanks,
    Tim


  • 3.  RE: Bridge/Persistent Configuration

    Posted Oct 27, 2015 09:05 AM

    I understand you would need other solutions for new 802.1x authentications.

    However I assumed that existing 802.1x should continue to work with persistent bridge ssid's? This question concerns existing 802.1x sessions.