> For the complete documentation index, see [llms.txt](https://docs.roamingiq.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.roamingiq.com/network-equipment/access-point-configuration-guides/aruba-central.md).

# Aruba Central

Here is a step-by-step guide on how to configure Aruba Central to work with VAULT.

### **Configuration Steps Overview**

1. Setup a Group
2. Configure WLAN
3. Add Parameter

### **Assumptions**

* AP licensed in Aruba Central
* AP with Firmware AOS 10.5.1 or above

### **In Aruba Central – Setup a Group for APs**

1. Setup a Group for your AP’s connecting to the VAULT MPSK Environment
   * Add a Group Name
   * Select Access Points
   * Click Next

![](https://content.gitbook.com/content/NprJ0XFnRpdKFYqrNB2L/blobs/Cm8LmLGrTuAlYrwoRTZW/0.png)

2. Continue Group Setup

* Select ArubaOS 10
* Select Campus/Branch
* Click Add

![](https://content.gitbook.com/content/NprJ0XFnRpdKFYqrNB2L/blobs/PxmTWB40ysk1AzdhHYHR/1.png)

3. Select the Config Wheel and Set a Device Password

![](https://content.gitbook.com/content/NprJ0XFnRpdKFYqrNB2L/blobs/YohPCeDHj2ygpIqArHfa/2.png) ![](https://content.gitbook.com/content/NprJ0XFnRpdKFYqrNB2L/blobs/41nGzly5pMt9hcTe8uqU/3.png)

4. Under the Security Tab add the Radius Authentication Server

![](https://content.gitbook.com/content/NprJ0XFnRpdKFYqrNB2L/blobs/joTTLqWFMLtQCfeynrZX/4.png)

5. The Configuration Parameters will be Provided by VAULT and are unique to your account

* Enter the Following Information and Click Save
  * Name: VAULT
  * IP Address: xx.xx.xx.x
  * Shared Key: XXXXXXX
  * Retype Key: XXXXXX
  * Timeout: 5
  * Leave Radsec UNCHECKED
  * Auth Port: xxxx
  * NAS IP Address: Leave Blank
  * NAS Identifier: VAULT will provide the NAS-ID for each Venue
  * Retry Count: 3
* Click Save

![](https://content.gitbook.com/content/NprJ0XFnRpdKFYqrNB2L/blobs/crlHYuorMOMA8RsWrDl3/5.png)

### **Configure WLAN**

\
There are many parameters that can be customized. For now, we will create a simple WLAN network.

1. Select the WLAN Tab
   * Click the + Add Sign in the bottom right corner

![](https://content.gitbook.com/content/NprJ0XFnRpdKFYqrNB2L/blobs/unybsHdbO3wj93vDJwAq/6.png)<br>

2. General Tab

* Type in the SSID: VAULT
* Click Next

![](https://content.gitbook.com/content/NprJ0XFnRpdKFYqrNB2L/blobs/XtJ7C9kY9DFraDnenfGb/7.png)

3. VLAN Tab

* Select Dynamic
* Click Next

![](https://content.gitbook.com/content/NprJ0XFnRpdKFYqrNB2L/blobs/k5QePrkL7N8YOpXLYvLo/8.png)

4. Security Tab

* Set the Key Management Dropdown to MPSK-AES
* Set the Primary Server Dropdown to the Radius Server you Configured Above
* If you Setup a Secondary Server, you can Setup Here

![](https://content.gitbook.com/content/NprJ0XFnRpdKFYqrNB2L/blobs/u7pfD9nbvuUXpMnKcK5Z/9.png)

* Expand the Advanced Settings and Disable 802.11r

![](https://content.gitbook.com/content/NprJ0XFnRpdKFYqrNB2L/blobs/TqN4qkYqMGj1bwGkbso2/10.png)

* Click Next Two More Times and Your WLAN SSID with MPSK AES Should be Complete

![](https://content.gitbook.com/content/NprJ0XFnRpdKFYqrNB2L/blobs/9wxuKB44Y7PHSNCbjZ5Z/11.png)

### **Add Parameter**

There is one more section that you must complete to finalize the configuration. We will be adding a parameter in the configuration via the Aruba Central Swagger API Interface.

1. At the Global Level Select Organization
   * Select Platform Integration
   * Select Rest API

![](https://content.gitbook.com/content/NprJ0XFnRpdKFYqrNB2L/blobs/TJeNtcVU8k5FYljhz9VZ/12.png)

2. Select the My Apps and Tokens Tab

* Create a Token and Download the Token
* Copy the Access Token to a Text Editor (It is valid for 2 hours)

![](https://content.gitbook.com/content/NprJ0XFnRpdKFYqrNB2L/blobs/4nWdF8YhripnSxTLk1aK/13.png)

3. Select the APIs Tab

* Click on the Aruba Swagger Link and a New Tab will Open

![](https://content.gitbook.com/content/NprJ0XFnRpdKFYqrNB2L/blobs/VfwpwWZEnsXyY6Cg214m/14.png)

4. Copy your Token from your Text Editor and Paste in the Access Token Area

* Click the Right Arrow

!\[A screenshot of a computer

Description automatically generated with low confidence]\(../../.gitbook/assets/15.png)

5. Under Category, Select Configuration

* Select AP Configuration
* Select Get AP Configuration

![](https://content.gitbook.com/content/NprJ0XFnRpdKFYqrNB2L/blobs/7G8g3Efkr3Go078ItOhA/16.png)

6. Find and Select the Name of your Group

* Click Get AP Configuration

!\[A screenshot of a computer

Description automatically generated with medium confidence]\(../../.gitbook/assets/17.png)

7. Click Try

* If everything is correct, you will get a copy of the Group AP Configuration
* Copy the Entire Text Box from the Swagger Interface and Paste to a Text Editor

![](https://content.gitbook.com/content/NprJ0XFnRpdKFYqrNB2L/blobs/B0JCo1w67QF5NdAbyvZ8/18.png)

8. Within the Text Editor

* Find the Section with the SSID Profile Name of what you Previously Created
* At the Bottom, Before Auth-Server Section, Type in the Following: " mpsk-cloud-auth",

!\[A picture containing text, screenshot, font, algebra

Description automatically generated]\(../../.gitbook/assets/19.png)

9. Copy Everything from the Text Editor Including the New Section

* In the Swagger Interface, Select Replace AP Configuration
* Where it says CLIs, Paste the Data from the Text Editor Including the " mpsk-cloud-auth"
* Once you Replace the AP Configuration and Receive a “200” Response Code from the Swagger API, the Configuration will be Complete

!\[A screenshot of a computer

Description automatically generated with medium confidence]\(../../.gitbook/assets/20.png)