Cloud Managed Networks

Hai Guys,

I am a newbie into the networking world.I am setting up a new WiFi Solution using Aruba central.I have 2 SSIDs .

1.First SSID should authenticate through Azure Cloud.What the customer said was "The ssid access will be allowed if has Orbital Account via SAML.Could some one guide how to set this up in Aruba Central and what should be done in Azure cloud.

2.Second SSID access should be allowed through Certificate.How could i Implement that ?

If anyone could help me with any documentation or Guidance or even videos it will be really appreciated.

For the second SSID, with certificate authentication (EAP-TLS), you can check this video playlist on how to set that up with ClearPass.

For Azure/SAML Onboarding or Guest, you can check the guide Onboard and Azure Active Directory (Configuration Guide: Onboard and Cloud Identity Providers) which is posted on ClearPass Docs | Configuration & Integration Guides, Solution Guides, Release Notes, User Guides - Airheads Community 

Note that SAML and 802.1X doesn't work together because for SAML authentication there is web communication needed which is not available before the 802.1X authentication. The guide explains a method to trigger EAP-TLS Onboarding based on Azure AD SAML authentication to meet the requirement.

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------

Original Message:
Sent: Aug 01, 2022 05:29 PM
From: Fayas Palliparambil Abdul Salam
Subject: Aruba central SSID authenticates through Azure Cloud and using Certificate

Hai Guys,

I am a newbie into the networking world.I am setting up a new WiFi Solution using Aruba central.I have 2 SSIDs .

1.First SSID should authenticate through Azure Cloud.What the customer said was "The ssid access will be allowed if has Orbital Account via SAML.Could some one guide how to set this up in Aruba Central and what should be done in Azure cloud.

2.Second SSID access should be allowed through Certificate.How could i Implement that ?

If anyone could help me with any documentation or Guidance or even videos it will be really appreciated.

Dear Herman,

Actually they are not planning to do it with Aruba Clear pass.They want to configure all these Aruba Central ,Could you help me with the documents for the same.
Original Message:
Sent: Aug 02, 2022 03:50 AM
From: Herman Robers
Subject: Aruba central SSID authenticates through Azure Cloud and using Certificate

For the second SSID, with certificate authentication (EAP-TLS), you can check this video playlist on how to set that up with ClearPass.

For Azure/SAML Onboarding or Guest, you can check the guide Onboard and Azure Active Directory (Configuration Guide: Onboard and Cloud Identity Providers) which is posted on ClearPass Docs | Configuration & Integration Guides, Solution Guides, Release Notes, User Guides - Airheads Community 

Note that SAML and 802.1X doesn't work together because for SAML authentication there is web communication needed which is not available before the 802.1X authentication. The guide explains a method to trigger EAP-TLS Onboarding based on Azure AD SAML authentication to meet the requirement.

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.

Original Message:
Sent: Aug 01, 2022 05:29 PM
From: Fayas Palliparambil Abdul Salam
Subject: Aruba central SSID authenticates through Azure Cloud and using Certificate

Hai Guys,

I am a newbie into the networking world.I am setting up a new WiFi Solution using Aruba central.I have 2 SSIDs .

1.First SSID should authenticate through Azure Cloud.What the customer said was "The ssid access will be allowed if has Orbital Account via SAML.Could some one guide how to set this up in Aruba Central and what should be done in Azure cloud.

2.Second SSID access should be allowed through Certificate.How could i Implement that ?

If anyone could help me with any documentation or Guidance or even videos it will be really appreciated.

You may have a look at Cloud Authentication & Policy. Documentation is here. If you need more, you very likely will need ClearPass.

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------

Original Message:
Sent: Aug 02, 2022 04:39 AM
From: Fayas Palliparambil Abdul Salam
Subject: Aruba central SSID authenticates through Azure Cloud and using Certificate

Dear Herman,

Actually they are not planning to do it with Aruba Clear pass.They want to configure all these Aruba Central ,Could you help me with the documents for the same.
Original Message:
Sent: Aug 02, 2022 03:50 AM
From: Herman Robers
Subject: Aruba central SSID authenticates through Azure Cloud and using Certificate

For the second SSID, with certificate authentication (EAP-TLS), you can check this video playlist on how to set that up with ClearPass.

For Azure/SAML Onboarding or Guest, you can check the guide Onboard and Azure Active Directory (Configuration Guide: Onboard and Cloud Identity Providers) which is posted on ClearPass Docs | Configuration & Integration Guides, Solution Guides, Release Notes, User Guides - Airheads Community 

Note that SAML and 802.1X doesn't work together because for SAML authentication there is web communication needed which is not available before the 802.1X authentication. The guide explains a method to trigger EAP-TLS Onboarding based on Azure AD SAML authentication to meet the requirement.

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.

Original Message:
Sent: Aug 01, 2022 05:29 PM
From: Fayas Palliparambil Abdul Salam
Subject: Aruba central SSID authenticates through Azure Cloud and using Certificate

Hai Guys,

I am a newbie into the networking world.I am setting up a new WiFi Solution using Aruba central.I have 2 SSIDs .

1.First SSID should authenticate through Azure Cloud.What the customer said was "The ssid access will be allowed if has Orbital Account via SAML.Could some one guide how to set this up in Aruba Central and what should be done in Azure cloud.

2.Second SSID access should be allowed through Certificate.How could i Implement that ?

If anyone could help me with any documentation or Guidance or even videos it will be really appreciated.

Dear Herman,

Is it possible for me to create an SSID using Certificate authentication.Only those clients where the certificate is installed only will be allowed to connect to the SSID.Can that be done on aruba central with out clear pass ?

Original Message:
Sent: Aug 02, 2022 08:02 AM
From: Herman Robers
Subject: Aruba central SSID authenticates through Azure Cloud and using Certificate

You may have a look at Cloud Authentication & Policy. Documentation is here. If you need more, you very likely will need ClearPass.

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.

Original Message:
Sent: Aug 02, 2022 04:39 AM
From: Fayas Palliparambil Abdul Salam
Subject: Aruba central SSID authenticates through Azure Cloud and using Certificate

Dear Herman,

Actually they are not planning to do it with Aruba Clear pass.They want to configure all these Aruba Central ,Could you help me with the documents for the same.
Original Message:
Sent: Aug 02, 2022 03:50 AM
From: Herman Robers
Subject: Aruba central SSID authenticates through Azure Cloud and using Certificate

For the second SSID, with certificate authentication (EAP-TLS), you can check this video playlist on how to set that up with ClearPass.

For Azure/SAML Onboarding or Guest, you can check the guide Onboard and Azure Active Directory (Configuration Guide: Onboard and Cloud Identity Providers) which is posted on ClearPass Docs | Configuration & Integration Guides, Solution Guides, Release Notes, User Guides - Airheads Community 

Note that SAML and 802.1X doesn't work together because for SAML authentication there is web communication needed which is not available before the 802.1X authentication. The guide explains a method to trigger EAP-TLS Onboarding based on Azure AD SAML authentication to meet the requirement.

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.

Original Message:
Sent: Aug 01, 2022 05:29 PM
From: Fayas Palliparambil Abdul Salam
Subject: Aruba central SSID authenticates through Azure Cloud and using Certificate

Hai Guys,

I am a newbie into the networking world.I am setting up a new WiFi Solution using Aruba central.I have 2 SSIDs .

1.First SSID should authenticate through Azure Cloud.What the customer said was "The ssid access will be allowed if has Orbital Account via SAML.Could some one guide how to set this up in Aruba Central and what should be done in Azure cloud.

2.Second SSID access should be allowed through Certificate.How could i Implement that ?

If anyone could help me with any documentation or Guidance or even videos it will be really appreciated.

Hello FA11

Herman already gave you the answer but here are videos you can watch 

(170) Aruba Cloud Auth - Azure AD Setup & Aruba Central Integration - YouTube

Here you can see the User onboarding and how to do it

(170) Aruba Cloud Auth - Onboarding & Certificate Management - YouTube

Here is another one, its on another language but you can see all the process and also how to create the ssid 

(170) [How to] Setup Aruba Cloud Authentication with Azure AD - YouTube

Original Message:
Sent: Feb 12, 2023 07:20 AM
From: FA11
Subject: Aruba central SSID authenticates through Azure Cloud and using Certificate

Dear Herman,

Is it possible for me to create an SSID using Certificate authentication.Only those clients where the certificate is installed only will be allowed to connect to the SSID.Can that be done on aruba central with out clear pass ?

Original Message:
Sent: Aug 02, 2022 08:02 AM
From: Herman Robers
Subject: Aruba central SSID authenticates through Azure Cloud and using Certificate

You may have a look at Cloud Authentication & Policy. Documentation is here. If you need more, you very likely will need ClearPass.

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.

Original Message:
Sent: Aug 02, 2022 04:39 AM
From: Fayas Palliparambil Abdul Salam
Subject: Aruba central SSID authenticates through Azure Cloud and using Certificate

Dear Herman,

Actually they are not planning to do it with Aruba Clear pass.They want to configure all these Aruba Central ,Could you help me with the documents for the same.
Original Message:
Sent: Aug 02, 2022 03:50 AM
From: Herman Robers
Subject: Aruba central SSID authenticates through Azure Cloud and using Certificate

For the second SSID, with certificate authentication (EAP-TLS), you can check this video playlist on how to set that up with ClearPass.

For Azure/SAML Onboarding or Guest, you can check the guide Onboard and Azure Active Directory (Configuration Guide: Onboard and Cloud Identity Providers) which is posted on ClearPass Docs | Configuration & Integration Guides, Solution Guides, Release Notes, User Guides - Airheads Community 

Note that SAML and 802.1X doesn't work together because for SAML authentication there is web communication needed which is not available before the 802.1X authentication. The guide explains a method to trigger EAP-TLS Onboarding based on Azure AD SAML authentication to meet the requirement.

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.

Original Message:
Sent: Aug 01, 2022 05:29 PM
From: Fayas Palliparambil Abdul Salam
Subject: Aruba central SSID authenticates through Azure Cloud and using Certificate

Hai Guys,

I am a newbie into the networking world.I am setting up a new WiFi Solution using Aruba central.I have 2 SSIDs .

1.First SSID should authenticate through Azure Cloud.What the customer said was "The ssid access will be allowed if has Orbital Account via SAML.Could some one guide how to set this up in Aruba Central and what should be done in Azure cloud.

2.Second SSID access should be allowed through Certificate.How could i Implement that ?

If anyone could help me with any documentation or Guidance or even videos it will be really appreciated.