반응형
SMALL

Aruba AP CLI

convert-aos-ap <mode> <controller-IP>
convert-aos-ap RAP 218.36.6.60


Table 1: AP Console Commands
Command
 Description

setenv ipaddr <ipaddr>
 IP address to be assigned to the AP.

setenv netmask <netmaskip>
 Netmask to be assigned to the AP.

setenv gatewayip <ipaddr> IP address of the internet gateway used by the AP.

setenv name <ap name>
Name of the AP.

setenv group <group name> Name of the AP group to which the AP should belong.

setenv master <ipaddr>
 IP address of the AP’s master controller.

setenv serverip <ipaddr>
 IP address of the TFTP server from which the AP can download its boot image.

setenv dnsip <ipaddr>
 IP address of the DNS server used by the AP.

setenv domainname <domain> Domain name used by the AP.

 

반응형
LIST
반응형
SMALL
Aruba Controller CLI
 
#show ip interface brief
#show ip route
#show port status
#show license
#aaa user delete all
#show running-config | include adp
#show user
#show user-table
#show ap active
#show ap database
#show ap essid
#show vpdn l2tp local pool
#show ap config ap-group ISD
#show crypto ipsec sa
#show crypto isakmp sa
# show datapath session | include 7.7.7.1
#clear gap-db ap-name AP1
 
Client Match 설정
#configure terminal
(config) # rf arm-profile default
(Adaptive Radio Management Profile "default")#cm-report-interval 30
(Adaptive Radio Management Profile "default")#cm-sticky-check-interval 3
(Adaptive Radio Management Profile "default")#cm-sticky-snr 25
(Adaptive Radio Management Profile "default")#cm-sticky-snr-delta 10
(Adaptive Radio Management Profile "default")#cm-sticky-min-signal 70
(Adaptive Radio Management Profile "default")#cm-steer-timeout 20
(Adaptive Radio Management Profile "default")#cm-lb-thresh 20
(Adaptive Radio Management Profile "default")#cm-stale-age 120
(Adaptive Radio Management Profile "default")#cm-max-steer-fails 5
(Adaptive Radio Management Profile "default")#cm-lb-client-thresh 10

 

(Adaptive Radio Management Profile "default")#cm-lb-snr-thresh 30

 

 

반응형
LIST
반응형
SMALL
## Aruba Controller 초기 설정
 
* 공장 초기화 설정
. 호스트 네임 : [aruba2400]
. 기본 접속 IP : [172.16.0.254]
. 넷마스크 : [255.255.255.0]
. 게이트웨이 IP : [none]
. 컨트롤러의 역활 : (master|local) [master]
. 국가코드 : KR
. 국가코드 재확인 : (yes|no)
. 시간대역 : GMT+9:0
. 현재시간 : [09:49:30]
. 현재날짜 : [6/2/2014]
. Admin패스워드 : (up to 32 chars)
. Admin패스워드 확인
. Enable패스워드
. Enable패스워드 확인
. Port Shutdown 여부 : (yes|no) [no] - 보안을 위해 ㅣ본적으로 모든 포트를 막을 것인지 여부
 
* Telnet Port : 2300
 
* AP 설정
apboot> location
apboot> ipaddr
apboot> netmask
apboot> gatewayip
apboot> serverip
apboot> master
apboot> group
 
apboot> purge
apboot>printenv
 
* AP Controller Configuration
1. Interface
- Configuration / controller / lookback Interface - 임의의 IP 설정
- Configuration / IP / VLANs Edit - Use the following IP Address 설정
- Configuration / VLANs - VLAN 생성 - Enable Inter-VLAN Routing [V]
- Configuration / Ports / Port Selection / Port Mode [Access], Vlan [Vlan ID]
- Configuration / Ports / Port Selection / Port Mode [Trunk], Allow VLANS 선택
- Configuration / Controller / Loopback IP Address - 삭제
- Configuration / IP / VLAN 선택 / Enable source NAT for this VLAN [V]
- IP / DHCP Server / Enable DHCP Server [V], 추가 - Pool name, 기타 등등
 
2. Authentication (RADIUS Server Profile)
- Configuration / Authentication / RADIUS Server / 추가 - Host(IP), Key(Preshare) 설정, Mode [V]
- Configuration / Access Control / Policies / 추가 - Policy Name 추가 / Add - 정책
- Configuration / Access Control / User Roles / 추가 -Role Name 추가 - Choose from Configured Policies에서 생성된 Policy 선택
- Configuration / Authentication / Server Group / 추가 / New - 인증 서버 선택, Server Rules - Condition [Filter-ID], Operation [Value-OF], Set [Set role] 추가 (인증서버 리턴값)
- Configuration / Authentication / Server Group / 수정 / Server Rules - Condition [Filter-ID], Operation [Equals] [test], Set [Set role], Value [authenticated] 추가Configuration / Authentication / Internal DB / Add User (Internal DB 계정 생성)
 
3. 802.1x
- Configuration / All Profiles / Wireless Lan / 802.1x Authentication / 새로운 항목 추가 / Advanced - Validate PMKID [V], Termination [V], Termination EAP Type [eap-peap], Termination Inner EAP-Type [eap-maschapv2]
- Configuration / All Profiles / Wireless Lan / AAA Profile / 새로운 항목 추가 / 802.1x Authentication / 802.1x Authentication Profile 선택
- Configuration / All Profiles / Wireless Lan / AAA Profile / 추가된 항목 / 802.1x Authentication Server Group - 802.1x Authentication Server Group [추가된 인증 서버 그룹]
- Configuration / All Profiles / Wireless Lan / AAA Profile / 추가된 항목 / RADIUS Accounting Server Group [인증 서버 선택]
- Configuration / All Profiles / Wireless Lan / SSID Profile / 새로운 항목 추가 / Network Name(SSID) [SSID], Network Authentication [WPA2], Encryption [AES]
- Configuration / All Profiles / Wireless Lan / Virtual AP Profiles / 새로운 항목 추가 / VLAN 선택, Band Steering [V]
- Configuration / All Profiles / Wireless Lan / Virtual AP Profiles / 추가된 항목 / AAA Profile - AAA Profile 선택
- Configuration / All Profiles / Wireless Lan / Virtual AP Profiles / 추가된 항목 / SSID Profile - SSID Profile 선택
- Configuration / All Profles / AP Configuration / AP Group / 새로운 항목 추가 후 Edit / Wireless Lan / Virtual APs / Virutal APS [신규로 생성된 Profile 선택]

 

- Configuration / AP Installation / AP 목록에서 선택 후 Provision / AP Parameters [생성된 AP 구룹 선택], Apply and Reboot

 

 

반응형
LIST

+ Recent posts