Developer

 View Only
last person joined: 5 hours ago 

Expand all | Collapse all

Aruba Activate API

This thread has been viewed 10 times
  • 1.  Aruba Activate API

    Posted Aug 01, 2023 05:25 AM

    Hi!

    I'm trying to figure out how to setup IAP-VPN to virtual controller for a lab. But I get stuck since I cannot find any detailed documentation on this.

    Basically all I find is this:

    "Starting from Aruba Instant 8.3.0.0, IAP-VPN is supported on Mobility Controller Virtual Appliance by using default self-signed certificate (Aruba PKI). For Instant AP to establish IPsec connection with Mobility Controller Virtual Appliance, the controller presents a default self-signed certificate which is uploaded on the Instant AP using Activate.

    To terminate IAP-VPN connections on a Mobility Controller Virtual Appliance , the default self signed certificate or Trust Anchor (TA) certificate of the Virtual Mobility Controller in the case of standalone controllers or the TA certificate of the Virtual Mobility Conductor that manages the Virtual Mobility Controller must be uploaded to the Instant AP to authenticate the identity of the Mobility Controller Virtual Appliance and establish an IPsec tunnel. The Trust Anchor certificate must be uploaded to Activate which will then be sent to the Instant AP, to authenticate and establish an IPsec tunnel to virtual controller.

    For information on uploading and managing TA certificates on Activate for IAP-VPN termination on Mobility Controller Virtual Appliances, see Aruba Activate APIs section in the Aruba Activate User Guide."

    Configuring Controller for IAP-VPN Operations

    I figured I'll test it out even though it's not very clear on what to do.

    But when trying to access the API , I get error 403, Forbidden.

    I'm using my normal login credentials that has access to activate.

    Anyone knows how to use the activate API and/or how to get virtual Controller and IAP-VPN running ?

    Tested with postman and curl:

    curl -d "credential_0=${actusername}&credential_1=${actpassword}" -c Activate-cookie.txt -v https://activate.arubanetworks.com/LOGIN --trace /dev/stdout

    https://support.hpe.com/hpesc/public/docDisplay?docId=a00120791en_us&page=GUID-538FAA17-AFA9-4F3E-A4C4-76532B0D15B6.html



  • 2.  RE: Aruba Activate API

    Posted Aug 01, 2023 05:50 AM

    Never mind after fiddling around for a long time I finaly tested out using token instead of password and now it works as expected.

    https://support.hpe.com/hpesc/public/docDisplay?docId=a00120791en_us&page=GUID-57DE7B17-AC32-45E4-98DF-03A3F26C0279.html

    Any one knows how the cert is pushed to IAPs though ? Would be nice to have more details regarding this.