# Aruba Central

### **Configuration Steps Overview**

1. Setup a Group
2. Configure WLAN
3. Add Parameter

### **Assumptions**

* AP licensed in Aruba Central
* AP with Firmware AOS 10.5.1 or above

### **In Aruba Central – Setup a Group for APs**

1. Setup a Group for your AP’s connecting to the VAULT MPSK Environment
   * Add a Group Name
   * Select Access Points
   * Click Next

![](/files/HaGZfaWOjqPK6aE9QGfD)

2. Continue Group Setup

* Select ArubaOS 10
* Select Campus/Branch
* Click Add

![](/files/EQAXjzHGzHLp3DvV0akc)

3. Select the Config Wheel and Set a Device Password

![](/files/Be4y1sSj56FIrTDgTBNB) ![](/files/8F8aLTSugMWShZtRCo3Q)

4. Under the Security Tab add the Radius Authentication Server

![](/files/vAUtB17PlQ9G4KgY4TDF)

5. The Configuration Parameters will be Provided by VAULT and are unique to your account

* Enter the Following Information and Click Save
  * Name: VAULT
  * IP Address: xx.xx.xx.x
  * Shared Key: XXXXXXX
  * Retype Key: XXXXXX
  * Timeout: 5
  * Leave Radsec UNCHECKED
  * Auth Port: xxxx
  * NAS IP Address: Leave Blank
  * NAS Identifier: VAULT will provide the NAS-ID for each Venue
  * Retry Count: 3
* Click Save

![](/files/JKVFkGTTZZB5pPxxph5t)

### **Configure WLAN**

\
There are many parameters that can be customized. For now, we will create a simple WLAN network.

1. Select the WLAN Tab
   * Click the + Add Sign in the bottom right corner

![](/files/ghHH7nzodyYKLJuA1hpq)<br>

2. General Tab

* Type in the SSID: VAULT
* Click Next

![](/files/hl2IAcImD7hkAfFnaUjI)

3. VLAN Tab

* Select Dynamic
* Click Next

![](/files/CwRzELhxKDB6CKc8kz1E)

4. Security Tab

* Set the Key Management Dropdown to MPSK-AES
* Set the Primary Server Dropdown to the Radius Server you Configured Above
* If you Setup a Secondary Server, you can Setup Here

![](/files/KHwLW5lrSt1VZNy40yOJ)

* Expand the Advanced Settings and Disable 802.11r

![](/files/xb7zSWQXEY7L9LzLdCFm)

* Click Next Two More Times and Your WLAN SSID with MPSK AES Should be Complete

![](/files/XrjHR0KTCjuHYZKO4uzo)

### **Add Parameter**

There is one more section that you must complete to finalize the configuration. We will be adding a parameter in the configuration via the Aruba Central Swagger API Interface.

1. At the Global Level Select Organization
   * Select Platform Integration
   * Select Rest API

![](/files/yHEnR3Q0RoGcgDjH44e1)

2. Select the My Apps and Tokens Tab

* Create a Token and Download the Token
* Copy the Access Token to a Text Editor (It is valid for 2 hours)

![](/files/nsevOr05z8SWXebWv16L)

3. Select the APIs Tab

* Click on the Aruba Swagger Link and a New Tab will Open

![](/files/TuW4YXn0sqq0GIinb24o)

4. Copy your Token from your Text Editor and Paste in the Access Token Area

* Click the Right Arrow

!\[A screenshot of a computer

Description automatically generated with low confidence]\(/files/GVAgsQGTZOsyXxit0IGp)

5. Under Category, Select Configuration

* Select AP Configuration
* Select Get AP Configuration

![](/files/AF4oJHePVo6T8ZINgk00)

6. Find and Select the Name of your Group

* Click Get AP Configuration

!\[A screenshot of a computer

Description automatically generated with medium confidence]\(/files/GD6dErqtUZ2Ogun5HAN0)

7. Click Try

* If everything is correct, you will get a copy of the Group AP Configuration
* Copy the Entire Text Box from the Swagger Interface and Paste to a Text Editor

![](/files/ZUh1c1WF4NjrZAXqsT1H)

8. Within the Text Editor

* Find the Section with the SSID Profile Name of what you Previously Created
* At the Bottom, Before Auth-Server Section, Type in the Following: " mpsk-cloud-auth",

!\[A picture containing text, screenshot, font, algebra

Description automatically generated]\(/files/LSzwSllICMUUOMZtmIj1)

9. Copy Everything from the Text Editor Including the New Section

* In the Swagger Interface, Select Replace AP Configuration
* Where it says CLIs, Paste the Data from the Text Editor Including the " mpsk-cloud-auth"
* Once you Replace the AP Configuration and Receive a “200” Response Code from the Swagger API, the Configuration will be Complete

!\[A screenshot of a computer

Description automatically generated with medium confidence]\(/files/46FBDfqjYJt1m1zp1ooZ)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.roamingiq.com/network-equipment/access-point-configuration-guides/aruba-central.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
