Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

RAP and Control Plane Security (CPSEC)

This thread has been viewed 6 times

  • 1.  RAP and Control Plane Security (CPSEC)

    Posted Apr 03, 2018 05:05 AM

    Hello,

     

    I have a 7210 controller running 6.5.3.2. A few months back I ran into a major problem and one of the things that was done during troubleshooting was to disable Control Plane Security.

     

    I am currently trying to provision RAP 303's and they come up in the default group on the controller.

     

    Once I provision them and hit the "apply and reboot" button they never come back up.

     

    Is Control Plane Security required for RAPs to work properly?

     

    I know that if I enable CPSEC again all the APs will reboot. Are there any other things that can happen?

    Stuff like APs not coming up and such...

     

    Thanks for your help!

     

    best regards,

    Harald



  • 2.  RE: RAP and Control Plane Security (CPSEC)

    EMPLOYEE
    Posted Apr 03, 2018 05:33 AM

    CPSEC is only used for Campus APs.  It is not used for RAPs.

    Turning on CPSEC will give you an outage as all APS get a certificate.

     

    If your access points came up with no problems before and your discovery methods have not changed, turning on CPSEC would not change that.



  • 3.  RE: RAP and Control Plane Security (CPSEC)

    EMPLOYEE
    Posted Apr 03, 2018 09:38 AM

    Did you add your AP303(s) to the RAP whitelist on the controller?



  • 4.  RE: RAP and Control Plane Security (CPSEC)

    Posted Apr 03, 2018 10:38 AM

    Thanks for your help!

     

    Well, the problem with the 303's came down to a typo in the IKE PSK... :-/ I thought I copied in the correct PSK but obviously I did not.

     

    But I still need to enable CPSEC to be able to use bridge mode. That, however, is another story.

     

    Thanks for the info, much appreciated!