01-04-2019 07:45 AM - edited 01-04-2019 07:50 AM
We are iin the process of rolling out a dedicated guest network using Aruba switches and Aruba Instant APs.
I have a question on the DHCP scope for the wireless clients and are wondering what other users are doing.
Do you create the DHCP scope on the switches or on the IAPs?
Is there an advantage of putting them on the switches rather then on the IAPs?
Solved! Go to Solution.
Re: DHCP On Switch Or IAP
01-05-2019 02:27 AM - edited 01-05-2019 04:11 AM
For guests I prefer to use a separate client vlan that is extended to the firewall. To prevent guests from accessing my corperate dhcp server, I prefer to use dhcp on the firewall to completely separate it and still maintain a central point of control.
But offcourse there are more possibilities such as use internal vlan with snat, rather than my external vlan example.
Please read the Aruba-Instant-Validated-Reference-Design, the dhcp options are well described, link.
HPE ASE Flexnetwork | ACMP | ACCP - Was this post usefull, Kudos are welcome.
01-06-2019 03:09 AM - edited 01-06-2019 03:09 AM
There are many options as Marcel already told.
If there is no seperate firewall for guest traffic you can use the internal DHCP and 'magic' VLAN on the instant. It is designed to help in guest networks. You can use the internal firewall roles on the instant to make sure the guest can't access internal networks.
But without more information I can't advise on the 'best' solution.
Hoep this helps.
AirHeads MVP Expert | Aruba Partner Ambassador| AMFX#22| ACCX#613| ACMX#733| ACDX#744
If you like my posts, kudo's are welcome. If it solves your problem, please click 'Accept as Solution'