Aruba Central
Here is a step-by-step guide on how to configure Aruba Central to work with VAULT.
Last updated
Here is a step-by-step guide on how to configure Aruba Central to work with VAULT.
Last updated
Setup a Group
Configure WLAN
Add Parameter
AP licensed in Aruba Central
AP with Firmware AOS 10.5.1 or above
Setup a Group for your AP’s connecting to the VAULT MPSK Environment
Add a Group Name
Select Access Points
Click Next
Continue Group Setup
Select ArubaOS 10
Select Campus/Branch
Click Add
Select the Config Wheel and Set a Device Password
Under the Security Tab add the Radius Authentication Server
The Configuration Parameters will be Provided by VAULT and are unique to your account
Enter the Following Information and Click Save
Name: VAULT
IP Address: xx.xx.xx.x
Shared Key: XXXXXXX
Retype Key: XXXXXX
Timeout: 5
Leave Radsec UNCHECKED
Auth Port: xxxx
NAS IP Address: Leave Blank
NAS Identifier: VAULT will provide the NAS-ID for each Venue
Retry Count: 3
Click Save
There are many parameters that can be customized. For now, we will create a simple WLAN network.
Select the WLAN Tab
Click the + Add Sign in the bottom right corner
General Tab
Type in the SSID: VAULT
Click Next
VLAN Tab
Select Dynamic
Click Next
Security Tab
Set the Key Management Dropdown to MPSK-AES
Set the Primary Server Dropdown to the Radius Server you Configured Above
If you Setup a Secondary Server, you can Setup Here
Expand the Advanced Settings and Disable 802.11r
Click Next Two More Times and Your WLAN SSID with MPSK AES Should be Complete
There is one more section that you must complete to finalize the configuration. We will be adding a parameter in the configuration via the Aruba Central Swagger API Interface.
At the Global Level Select Organization
Select Platform Integration
Select Rest API
Select the My Apps and Tokens Tab
Create a Token and Download the Token
Copy the Access Token to a Text Editor (It is valid for 2 hours)
Select the APIs Tab
Click on the Aruba Swagger Link and a New Tab will Open
Copy your Token from your Text Editor and Paste in the Access Token Area
Click the Right Arrow
Under Category, Select Configuration
Select AP Configuration
Select Get AP Configuration
Find and Select the Name of your Group
Click Get AP Configuration
Click Try
If everything is correct, you will get a copy of the Group AP Configuration
Copy the Entire Text Box from the Swagger Interface and Paste to a Text Editor
Within the Text Editor
Find the Section with the SSID Profile Name of what you Previously Created
At the Bottom, Before Auth-Server Section, Type in the Following: " mpsk-cloud-auth",
Copy Everything from the Text Editor Including the New Section
In the Swagger Interface, Select Replace AP Configuration
Where it says CLIs, Paste the Data from the Text Editor Including the " mpsk-cloud-auth"
Once you Replace the AP Configuration and Receive a “200” Response Code from the Swagger API, the Configuration will be Complete
