Aruba Central

Configuration Steps Overview

1. Setup a Group

2. Configure WLAN

3. Add Parameter

Assumptions

• AP licensed in Aruba Central

• AP with Firmware AOS 10.5.1 or above

In Aruba Central – Setup a Group for APs

1. Setup a Group for your AP’s connecting to the VAULT MPSK Environment

   • Add a Group Name

   • Select Access Points

   • Click Next

1. Continue Group Setup

• Select ArubaOS 10

• Select Campus/Branch

• Click Add

1. Select the Config Wheel and Set a Device Password

1. Under the Security Tab add the Radius Authentication Server

1. The Configuration Parameters will be Provided by VAULT and are unique to your account

• Enter the Following Information and Click Save

  • Name: VAULT

  • IP Address: xx.xx.xx.x

  • Shared Key: XXXXXXX

  • Retype Key: XXXXXX

  • Timeout: 5

  • Leave Radsec UNCHECKED

  • Auth Port: xxxx

  • NAS IP Address: Leave Blank

  • NAS Identifier: VAULT will provide the NAS-ID for each Venue

  • Retry Count: 3

• Click Save

Configure WLAN

There are many parameters that can be customized. For now, we will create a simple WLAN network.

1. Select the WLAN Tab

   • Click the + Add Sign in the bottom right corner

1. General Tab

• Type in the SSID: VAULT

• Click Next

1. VLAN Tab

• Select Dynamic

• Click Next

1. Security Tab

• Set the Key Management Dropdown to MPSK-AES

• Set the Primary Server Dropdown to the Radius Server you Configured Above

• If you Setup a Secondary Server, you can Setup Here

• Expand the Advanced Settings and Disable 802.11r

• Click Next Two More Times and Your WLAN SSID with MPSK AES Should be Complete

Add Parameter

There is one more section that you must complete to finalize the configuration. We will be adding a parameter in the configuration via the Aruba Central Swagger API Interface.

1. At the Global Level Select Organization

   • Select Platform Integration

   • Select Rest API

1. Select the My Apps and Tokens Tab

• Create a Token and Download the Token

• Copy the Access Token to a Text Editor (It is valid for 2 hours)

1. Select the APIs Tab

• Click on the Aruba Swagger Link and a New Tab will Open

1. Copy your Token from your Text Editor and Paste in the Access Token Area

• Click the Right Arrow

1. Under Category, Select Configuration

• Select AP Configuration

• Select Get AP Configuration

1. Find and Select the Name of your Group

• Click Get AP Configuration

1. Click Try

• If everything is correct, you will get a copy of the Group AP Configuration

• Copy the Entire Text Box from the Swagger Interface and Paste to a Text Editor

1. Within the Text Editor

• Find the Section with the SSID Profile Name of what you Previously Created

• At the Bottom, Before Auth-Server Section, Type in the Following: " mpsk-cloud-auth",

1. Copy Everything from the Text Editor Including the New Section

• In the Swagger Interface, Select Replace AP Configuration

• Where it says CLIs, Paste the Data from the Text Editor Including the " mpsk-cloud-auth"

• Once you Replace the AP Configuration and Receive a “200” Response Code from the Swagger API, the Configuration will be Complete