Wireless Access

 View Only
last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

Create multiple VLAN for AP

This thread has been viewed 19 times
  • 1.  Create multiple VLAN for AP

    Posted Nov 21, 2022 07:53 PM
    how do i create multiple VLAN for APs ?
    i need to create 3-4 VLAN for my aruba APs, eg. VLAN2 for management, VLANXX for clients, VLANYY for clients.


  • 2.  RE: Create multiple VLAN for AP

    EMPLOYEE
    Posted Nov 22, 2022 04:39 AM
    What equipment do you have? AP type? AP mode? Controller? Aruba Central?
    Is this about the switch configuration? Or the AP configuration?

    If this is about Instant Access points, you would configure your switch to have untagged VLAN2 on the port facing the AP, and have VLANXX and VLANYY tagged to the same port facing the AP. Then in your configuration, for management do nothing. For the clients, configure the VLANXX on the SSID/Wireless Network; and VLANYY on another SSID/Wireless Network. If a VLAN is assigned to a wireless network (or during authentication with a RADIUS server the Aruba-User-VLAN is returned with a VLAN ID), that client's traffic is automatically sent out tagged from the AP.

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 3.  RE: Create multiple VLAN for AP

    Posted Nov 23, 2022 03:06 AM
    Depending on the model you would create an SSID per VLAN or you could allow all tagged traffic. It really depends on your switch setup and how your tagging your VLANs


  • 4.  RE: Create multiple VLAN for AP

    Posted Nov 23, 2022 04:25 AM
    i am refering to aruba central.
    switch side is already configured as i have existing on-premise aruba controller that is working.
    we are planning to migrate our APs to aruba central.
    our AP consists of AP-303 and AP-345


  • 5.  RE: Create multiple VLAN for AP

    EMPLOYEE
    Posted Nov 23, 2022 09:26 AM
    Central is using Instant or AOS 10, so follow what I shared in my earlier response.

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 6.  RE: Create multiple VLAN for AP

    EMPLOYEE
    Posted Nov 23, 2022 04:13 PM
    since this is instant AP, make sure that the switch port that connects to the APs are configured for VLAN trunking.
    the APs will be in the untagged or native VLAN and then you can just reference VLAN IDs that are part of that VLAN trunk (tagged VLANs) in the Radius response as Herman mentioned. This will work only for the RADIUS based auth and not PSK based ones.

    for PSK based auth you can use this option




    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
    ------------------------------