> For the complete documentation index, see [llms.txt](https://docs.roamingiq.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.roamingiq.com/network-equipment/access-point-configuration-guides/aruba-central.md).

# Aruba Central

### **Configuration Steps Overview**

1. Setup a Group
2. Configure WLAN
3. Add Parameter

### **Assumptions**

* AP licensed in Aruba Central
* AP with Firmware AOS 10.5.1 or above

### **In Aruba Central – Setup a Group for APs**

1. Setup a Group for your AP’s connecting to the VAULT MPSK Environment
   * Add a Group Name
   * Select Access Points
   * Click Next

![](/files/HaGZfaWOjqPK6aE9QGfD)

2. Continue Group Setup

* Select ArubaOS 10
* Select Campus/Branch
* Click Add

![](/files/EQAXjzHGzHLp3DvV0akc)

3. Select the Config Wheel and Set a Device Password

![](/files/Be4y1sSj56FIrTDgTBNB) ![](/files/8F8aLTSugMWShZtRCo3Q)

4. Under the Security Tab add the Radius Authentication Server

![](/files/vAUtB17PlQ9G4KgY4TDF)

5. The Configuration Parameters will be Provided by VAULT and are unique to your account

* Enter the Following Information and Click Save
  * Name: VAULT
  * IP Address: xx.xx.xx.x
  * Shared Key: XXXXXXX
  * Retype Key: XXXXXX
  * Timeout: 5
  * Leave Radsec UNCHECKED
  * Auth Port: xxxx
  * NAS IP Address: Leave Blank
  * NAS Identifier: VAULT will provide the NAS-ID for each Venue
  * Retry Count: 3
* Click Save

![](/files/JKVFkGTTZZB5pPxxph5t)

### **Configure WLAN**

\
There are many parameters that can be customized. For now, we will create a simple WLAN network.

1. Select the WLAN Tab
   * Click the + Add Sign in the bottom right corner

![](/files/ghHH7nzodyYKLJuA1hpq)<br>

2. General Tab

* Type in the SSID: VAULT
* Click Next

![](/files/hl2IAcImD7hkAfFnaUjI)

3. VLAN Tab

* Select Dynamic
* Click Next

![](/files/CwRzELhxKDB6CKc8kz1E)

4. Security Tab

* Set the Key Management Dropdown to MPSK-AES
* Set the Primary Server Dropdown to the Radius Server you Configured Above
* If you Setup a Secondary Server, you can Setup Here

![](/files/KHwLW5lrSt1VZNy40yOJ)

* Expand the Advanced Settings and Disable 802.11r

![](/files/xb7zSWQXEY7L9LzLdCFm)

* Click Next Two More Times and Your WLAN SSID with MPSK AES Should be Complete

![](/files/XrjHR0KTCjuHYZKO4uzo)

### **Add Parameter**

There is one more section that you must complete to finalize the configuration. We will be adding a parameter in the configuration via the Aruba Central Swagger API Interface.

1. At the Global Level Select Organization
   * Select Platform Integration
   * Select Rest API

![](/files/yHEnR3Q0RoGcgDjH44e1)

2. Select the My Apps and Tokens Tab

* Create a Token and Download the Token
* Copy the Access Token to a Text Editor (It is valid for 2 hours)

![](/files/nsevOr05z8SWXebWv16L)

3. Select the APIs Tab

* Click on the Aruba Swagger Link and a New Tab will Open

![](/files/TuW4YXn0sqq0GIinb24o)

4. Copy your Token from your Text Editor and Paste in the Access Token Area

* Click the Right Arrow

!\[A screenshot of a computer

Description automatically generated with low confidence]\(/files/GVAgsQGTZOsyXxit0IGp)

5. Under Category, Select Configuration

* Select AP Configuration
* Select Get AP Configuration

![](/files/AF4oJHePVo6T8ZINgk00)

6. Find and Select the Name of your Group

* Click Get AP Configuration

!\[A screenshot of a computer

Description automatically generated with medium confidence]\(/files/GD6dErqtUZ2Ogun5HAN0)

7. Click Try

* If everything is correct, you will get a copy of the Group AP Configuration
* Copy the Entire Text Box from the Swagger Interface and Paste to a Text Editor

![](/files/ZUh1c1WF4NjrZAXqsT1H)

8. Within the Text Editor

* Find the Section with the SSID Profile Name of what you Previously Created
* At the Bottom, Before Auth-Server Section, Type in the Following: " mpsk-cloud-auth",

!\[A picture containing text, screenshot, font, algebra

Description automatically generated]\(/files/LSzwSllICMUUOMZtmIj1)

9. Copy Everything from the Text Editor Including the New Section

* In the Swagger Interface, Select Replace AP Configuration
* Where it says CLIs, Paste the Data from the Text Editor Including the " mpsk-cloud-auth"
* Once you Replace the AP Configuration and Receive a “200” Response Code from the Swagger API, the Configuration will be Complete

!\[A screenshot of a computer

Description automatically generated with medium confidence]\(/files/46FBDfqjYJt1m1zp1ooZ)