Wireless Access

last person joined: 19 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

Remote office - Selective traffic forwarding (Tunneling) to controller

This thread has been viewed 0 times
  • 1.  Remote office - Selective traffic forwarding (Tunneling) to controller

    Posted Mar 20, 2012 09:03 AM

    Hello folks

     

    I am planning to install Aruba AP's for our remote offices which have 30-60 users. We have a 3600 controller in in HQ and have three WLAN's Internal, Contractor, Visitor. I want the AP's to send the traffic from Internal WLAN to local gateway and Contractor and Visitor traffic should be send (tunneled) to the controller in HQ.

     

    We are using AP105 at the HQ now. I would like to know if this can be done and the best AP's which can suit this setup.

     

    Thanks you very much in advance


    #3600


  • 2.  RE: Remote office - Selective traffic forwarding (Tunneling) to controller

    EMPLOYEE
    Posted Mar 20, 2012 09:06 AM

    Are those offices on your on private WAN?

     



  • 3.  RE: Remote office - Selective traffic forwarding (Tunneling) to controller

    Posted Mar 20, 2012 09:07 AM

    Yes, They all are on private WAN



  • 4.  RE: Remote office - Selective traffic forwarding (Tunneling) to controller
    Best Answer

    EMPLOYEE
    Posted Mar 20, 2012 09:24 AM

    Allright.  You do not need any special access points to accomplish this.  You can continue to use the 105 APs that you have right now. Here is what you need:

     

    1.  ArubaOS 5.x or greater

    2.  Control-Plane-Security Enabled and Auto Cert provisoning  turned on (Configuration>Network > Controller > System Settings>Control Plane Security).  WARNING: If you do not have this turned on in a production network, but you decide to , it will cause an approx. 8 minute outage until all your access points get certificates.

    3.  Run the WLAN/LAN Wizard and create a new group that will house the APs at those remote sites.  Make sure you create a Wlan of the same name as your internal, except that the forwarding mode is bridged.  Put a VLAN-id of 1.

    4.  When you are finished creating that new group and WLAN go to that new group and add the Virtual APs of the visitor and contractor wlans to it (configuration> Wireless> AP Configuration> Edit New AP Group.  Expand Wireless Lan, Click on Virtual AP and in the dropdown to the right, find your contractor and guest WLANs and add them to that ap group

    5.  Provision new APs to that group and test.

     

     

     



  • 5.  RE: Remote office - Selective traffic forwarding (Tunneling) to controller

    Posted Mar 20, 2012 09:33 AM

    Awesome. Thanks Joseph for a fast turnaround.