aruba配置手册

1、 Configure a public IP address for the controller.

2、 Configure the VPN server on the controller. The remote AP will be a VPN client to the server. 3、 Configure the remote AP role.

4、 Configure the authentication server that will validate the username and password for the remote AP. 5、 Provision the AP with IPSec settings, including the username and password

for the AP, before you install it at the remote location.

1、Cli： vlan

interface fastethernet / switchport access vlan interface vlan

ip address

2、Using the CLI to configure VPN server: vpdn group l2tp

ppp authentication PAP

ip local pool

crypto isakmp key address netmask 3、Using the CLI to configure the user role: (table1) (config) # user-role remote

(table1) (config-role) #session-acl allowall ip access-list session any any svc-papi permit any any svc-gre permit any any svc-l2tp permit

any alias mswitch svc-tftp permit any alias mswitch svc-ftp permit

4、Using the CLI to configure the VPN authentication profile:

4.1 aaa server-group auth-server 4.2 aaa authentication vpn default-role server-group

5、Using the CLI to enable double encryption:

ap system-profile double-encrypt

ap-name 需要插上远端AP后配置 ap-system-profile

Using the CLI to enable double encryption: ap system-profile

double-encrypt ap-name

ap-system-profile

Using the CLI to configure the AAA profile: aaa profile initial-role

authentication-dot1x dot1x-default-role dot1x-server-group

Using the CLI to define the backup configuration in the virtual AP profile: wlan ssid-profile essid opmode

wpa-passphrase (if necessary) wlan virtual-ap ssid-profile vlan

forward-mode bridge aaa-profile

rap-operation {always|backup|persistent} ap-group virtual-ap

or

ap-name virtual-ap

Using the CLI to configure the DHCP server on the AP: ap system-profile lms-ip master-ip

rap-dhcp-server-vlan wlan virtual-ap ssid-profile vlan

forward-mode bridge aaa-profile

rap-operation {always|backup|persistent} ap-group

ap-system-profile virtual-ap

or

ap-name

ap-system-profile virtual-ap