PoC - Aruba Central Example

WiFi Guest Service PoC - Aruba Central

PoC - Diagram

VLAN 10 172.16.0.200/24

AOS-SW v16.07

Port 4

Cable Modem

AOS v8.2.2

SSID Store_Free_WiFi

Internet Guest

Aruba Central VLAN 10: 172.16.0.0/24 - Employee/Management VLAN VLAN 20: 192.168.10.0/24 - Guest VLAN SSID “Store_Free_WiFi” VLAN 90: 192.168.0.0/24 - Cable Modem VLAN

Agenda • Setup Mobility Controller as Branch Gateway • Setup Aruba switch 2930F via CLI • Register AP 303H @Aruba Central • Setup Aruba Central • Setup Facebook Wi-Fi • Setup Social Login Facebook • Import existing switch configuration and manage the switch via Aruba Central

Setup Branch Gateway

Factory reset to Branch Gateway

Power on the 7010 Branch Gateway

Complete the setup wizard

Check configuration made via wizard

• Config – Interfaces – Click on “+”

• Vlans created

• Interfaces – VLANs – VLAN90 – NAT Outside

• Interfaces – VLANs – VLAN10 – NAT Inside

• Interfaces – VLANs – VLAN20 – NAT Inside

• Config – Interfaces - Ports – Click on GE 0/0/5 – Mode Trunk

• System - General – Clock NTP

• Submit Changes

• Disable ADP via

CLI

• Show running-config Branch Gateway

Setup switch via CLI

• Show running-config. 2930F switch

Register AP 303H Aruba Central

• Add AP and Assign subscriptions in Aruba Central

• PC

connected to interface 4 -- Check access to Internet

• Factory

reset to AP via console port

• Check

• AP 303

DHCP -- 172.16.0.2 IP address assigned to AP

set as Master (IAP)

• After 5min à Firmwave Upgrade from Aruba Central

• AP managed

from Aruba Central (athena-mgmt)

• AP is

ready to be configured via Aruba Central

Setup Aruba Central

• Site

Label created and assigned to AP

• Assign

Label to AP

• Create

a new group

• Move

the AP to the new Group

• Change the name to AP

• Change

the name to AP

• Firmware

upgrade to recommended version

• Check

firmware version running

• Set installation type

• Enable

DPI

• Configure

DHCP for Guest SSID

• Create

splash page

• Configure

Redirect URL

• Configure

Logos, Background and Terms&Conditions

• Localization

• Test

Captive Portal

• Create

Guest SSID

• Guest

SSID – Limit Bandwidth

• Guest

SSID – Set VLAN and DHCP Server

• Guest SSID – Set Captive Portal

• Guest

SSID – Deny access to Employee Network

• Testing

service using Android - smartphone

• Guest

SSID – Device connected

Setup Facebook Wi-Fi

• Create Facebook Page

• Page

created

https://www.facebook.com/Demo-WifiLogin-303563190479308

• Enter

a location

• Edit

Captive Portal

• Enable

Facebook WiFi

• Edit

Facebook WiFi configuration

• Enter

facebook credentials

• Select Facebook page

• Facebook

Wi-Fi login enabled

Setup Social Login Facebook

• Copy the URL mapped in the Splash page

• Click

on “ Create new App”

• Name

the app

• Click on Facebook Login - Setup

• Click on web

• Enter URL -- Aruba Central

• Click on Settings

• Check

OAuth client is set to “yes” and paste the URL -- append “/oauth/reply”

• Click on “app review”

• Public the Facebook App

• Copy App ID and App Secret

• Create a new splash page

• Enter App ID and App Secret

• New

splash page ready

• Edit the Wireless SSID

• Security

– Splash page Profile

• Testing

• Done!

Import switch configuration to Aruba Central

• Check

serial and MAC Address

• Check

default gateway and DNS server config

• Add switch to Aruba Central

• Assign

subscription to Switch

• Enter

the command “include-credentials”

• Set

the management VLAN, DNS server and cloud provisioning

• Switch

registered to Aruba Central

• Switch

in Central as “unprovisioned”

• Create

new Template Group

• Move the switch to the new Template Group

• Click on “config” template

• Click

on “+”

• Create the new template importing the existing configuration

• Click on save to create the new template

• Done!

Switch is managed by Central