ArubaOS User Guide

ArubaOS 8.11.0.0 is a Short Supported Release (SSR).

AirMatch provides support for dynamic selection of the opmode, in addition to assigning channel and EIRP Effective Isotropic Radiated Power or Equivalent Isotropic Radiated Power. EIRP refers to the output power generated when a signal is concentrated into a smaller area by the Antenna. to the current opmode in 610 Series access points (AP-615). AirMatch selects the opmode dynamically depending on the RF Radio Frequency. RF refers to the electromagnetic wave frequencies within a range of 3 kHz to 300 GHz, including the frequencies used for communications or Radar signals. coverage for each radio band—2.4 GHz Gigahertz., 5 GHz Gigahertz. and 6 GHz Gigahertz..

ArubaOS can now bypass Apple Wireless Direct Link protocol frames. The user can also select whether to discard and stop IDS Intrusion Detection System. IDS monitors a network or systems for malicious activity or policy violations and reports its findings to the management system deployed in the network. from processing captured frames.

Starting from this release, APs with Gen-2 BLE Bluetooth Low Energy. The BLE functionality is offered by Bluetooth® to enable devices to run for long durations with low power consumption./IoT Internet of Things. IoT refers to the internetworking of devices that are embedded with electronics, software, sensors, and network connectivity features allowing data exchange over the Internet. radios will adjust the calibrated RSSI Received Signal Strength Indicator. RSSI is a mechanism by which RF energy is measured by the circuitry on a wireless NIC (0-255). The RSSI is not standard across vendors. Each vendor determines its own RSSI scale/values. values for iBeacon advertisements when BLE Bluetooth Low Energy. The BLE functionality is offered by Bluetooth® to enable devices to run for long durations with low power consumption. transmit power levels are modified using the ble-txpower setting in the IoT Internet of Things. IoT refers to the internetworking of devices that are embedded with electronics, software, sensors, and network connectivity features allowing data exchange over the Internet. Radio Profile configuration. The calibrated values can then be verified using the show ap debug ble-advertisement-info command.

The cipher-suite parameter is introduced to replace ciphers parameter. This feature allows users to select specific ciphers from the supported list of ciphers. Cipher suites are streamlined in such a way that only strong cipher suites are enabled by default. This is compatible with the FIPS Federal Information Processing Standards. FIPS refers to a set of standards that describe document processing, encryption algorithms, and other information technology standards for use within non-military government agencies, and by government contractors and vendors who work with these agencies. mode as well. As a part of this enhancement, users are given the option to selectively enable and disable the remaining cipher suits while configuring the web server profile.

The maximum number of concurrent VIA Virtual Intranet Access. VIA provides secure remote network connectivity for Android, Apple iOS, Mac OS X, and Windows mobile devices and laptops. It automatically scans and selects the best secure connection to the corporate network. VPN Virtual Private Network. VPN enables secure access to a corporate network when located remotely. It enables a computer to send and receive data across shared or public networks as if it were directly connected to the private network, while benefiting from the functionality, security, and management policies of the private network. This is done by establishing a virtual point-to-point connection through the use of dedicated connections, encryption, or a combination of the two. session per user is restricted. The admin is enabled to configure a value between 1-32 to restrict the concurrent VIA Virtual Intranet Access. VIA provides secure remote network connectivity for Android, Apple iOS, Mac OS X, and Windows mobile devices and laptops. It automatically scans and selects the best secure connection to the corporate network. VPN Virtual Private Network. VPN enables secure access to a corporate network when located remotely. It enables a computer to send and receive data across shared or public networks as if it were directly connected to the private network, while benefiting from the functionality, security, and management policies of the private network. This is done by establishing a virtual point-to-point connection through the use of dedicated connections, encryption, or a combination of the two. sessions per user.

A new SNMP Simple Network Management Protocol. SNMP is a TCP/IP standard protocol for managing devices on IP networks. Devices that typically support SNMP include routers, switches, servers, workstations, printers, modem racks, and more. It is used mostly in network management systems to monitor network-attached devices for conditions that warrant administrative attention.  trap, wlsxLicenseThresholdLimitHit, is introduced that sends an alert when the license usage is more than 75% of the allocated licenses and before all licenses are used.

Starting from ArubaOS 8.11.0.0, you can use the ip default-gateway mgmt <nexthop> CLI Command-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions. command to configure the default gateway Gateway is a network node that allows traffic to flow in and out of the network. on the OOB management port for 7000 Seriescontrollers.

Starting from ArubaOS 8.11.0.0, the default value for global firewall Firewall is a network security system used for preventing unauthorized access to or from a private network. parameter Monitor/Police ARP Attack (non Gratuitous ARP) rate (per 30 seconds) is set to 100.

ArubaOS now supports the detection and containment of devices associated to WIFI-Direct groups.

The Aruba USB Universal Serial Bus. USB is a connection standard that offers a common interface for communication between the external devices and a computer. USB is the most common port used in the client devices. LTE Long Term Evolution. LTE is a 4G wireless communication standard that provides high-speed wireless communication for mobile phones and data terminals. See 4G. Modem now supports dual access point names (APN)s for the Remote APs automatically.

The BLE Bluetooth Low Energy. The BLE functionality is offered by Bluetooth® to enable devices to run for long durations with low power consumption. Telemetry setting can now be enabled or disabled in the webUI. A new CLI Command-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions. parameter blePeriodicTelemetryReporting is introduced in the iot transportProfile command to disable periodic telemetry reporting.

ArubaOS 8.11.0.0 enables FILS for the 6GHz VAPs configured on the AP that allows the 6GHz clients to obtain the SSID Service Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. when the 2.4GHz and 5GHz VAPs are unavailable.

As an enhancement, a new wlanStaApName MIB Management Information Base. A hierarchical database used by SNMP to manage the devices being monitored. object is added to the wlsxWlanStationTable MIB Management Information Base. A hierarchical database used by SNMP to manage the devices being monitored. to simplify the correlation of APs and Stations.

ArubaOS 8.11.0.0 now supports flex dual band Band refers to a specified range of frequencies of electromagnetic radiation. support on Aruba AP-615 that provides flexibility for the radios to operate on different radio bands Band refers to a specified range of frequencies of electromagnetic radiation.. AP-615 access points operate in 2.4 GHz Gigahertz. and 5 GHz Gigahertz. radio bands Band refers to a specified range of frequencies of electromagnetic radiation. by default. To enable the AP to broadcast on 6 GHz Gigahertz. radio band Band refers to a specified range of frequencies of electromagnetic radiation., set the flexible dual band Band refers to a specified range of frequencies of electromagnetic radiation. radio mode to either 5 GHz Gigahertz. and 6 GHz Gigahertz. or 2.4 GHz Gigahertz. and 6 GHz Gigahertz. mode.

AirGroup The application that allows the end users to register their personal mobile devices on a local network and define a group of friends or associates who are allowed to share them. AirGroup is primarily designed for colleges and other institutions. AirGroup uses zero configuration networking to allow Apple mobile devices, such as the AirPrint wireless printer service and the AirPlay mirroring service, to communicate over a complex access network topology. now allows the 802.1x authenticated users to view the list of all servers that share the same username.

The show ap debug iot-audit-trail command is introduced to display all the action commands executed in the CLI Command-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions. and report the Southbound API Application Programming Interface. Refers to a set of functions, procedures, protocols, and tools that enable users to build application software. messages received from the server.

The IPM Intelligent Power Monitoring. IPM is a feature supported on certain APs that actively measures the power utilization of an AP and dynamically adapts to the power resources. power reduction steps use radio indices (0,1, and 2) that replace all references to the radio bands Band refers to a specified range of frequencies of electromagnetic radiation. (2.4 GHz Gigahertz., 5 GHz Gigahertz., secondary 5 GHz Gigahertz., and 6 GHz Gigahertz. bands Band refers to a specified range of frequencies of electromagnetic radiation.) associated with radio power restrictions.

ArubaOS 8.11.0.0 now supports the Jumbo frames in both IPv4 and IPv6 networks over an IPsec Internet Protocol security. IPsec is a protocol suite for secure IP communications that authenticates and encrypts each IP packet in a communication session. site-to-site tunnel between two managed devices.

The write erase all, halt, and reload commands can be issued only from the /mm and /mm/mynode nodes of the Mobility Conductor.

ArubaOS no longer supports WEP Wired Equivalent Privacy. WEP is a security protocol that is specified in 802.11b and is designed to provide a WLAN with a level of security and privacy comparable to what is usually expected of a wired LAN. parameters for configuring Wi-Fi Wi-Fi is a technology that allows electronic devices to connect to a WLAN network, mainly using the 2.4 GHz and 5 GHz radio bands. Wi-Fi can apply to products that use any 802.11 standard. uplink profile. The following parameters have been removed from Wi-Fi Wi-Fi is a technology that allows electronic devices to connect to a WLAN network, mainly using the 2.4 GHz and 5 GHz radio bands. Wi-Fi can apply to products that use any 802.11 standard. uplink profile:

• Static WEP Wired Equivalent Privacy. WEP is a security protocol that is specified in 802.11b and is designed to provide a WLAN with a level of security and privacy comparable to what is usually expected of a wired LAN.

• WEP Wired Equivalent Privacy. WEP is a security protocol that is specified in 802.11b and is designed to provide a WLAN with a level of security and privacy comparable to what is usually expected of a wired LAN. Key 1

• WEP Wired Equivalent Privacy. WEP is a security protocol that is specified in 802.11b and is designed to provide a WLAN with a level of security and privacy comparable to what is usually expected of a wired LAN. Key 2

• WEP Wired Equivalent Privacy. WEP is a security protocol that is specified in 802.11b and is designed to provide a WLAN with a level of security and privacy comparable to what is usually expected of a wired LAN. Key 3

• WEP Wired Equivalent Privacy. WEP is a security protocol that is specified in 802.11b and is designed to provide a WLAN with a level of security and privacy comparable to what is usually expected of a wired LAN. Key 4

• WEP Wired Equivalent Privacy. WEP is a security protocol that is specified in 802.11b and is designed to provide a WLAN with a level of security and privacy comparable to what is usually expected of a wired LAN. Transmit Key Index

ArubaOS allows users to configure OOB 6 GHz Gigahertz. scanning settings for AP-615 access points. The oob-switch parameter is introduced in the regulatory domain profile to enable and disable OOB 6 GHz Gigahertz. scanning for AP-615 access points. Disabling oob-switch, disables 6 GHz Gigahertz. scanning and it is applicable only when AP-615 access points are in the 5GHz-and-2.4GHz operation mode.

ArubaOS allows users to disable the opmode-transition parameter for virtual APs to be deployed on 6 GHz Gigahertz. bands Band refers to a specified range of frequencies of electromagnetic radiation. using MFP.

Organizational Unit (OU) is no longer a mandatory parameter for VIA Virtual Intranet Access. VIA provides secure remote network connectivity for Android, Apple iOS, Mac OS X, and Windows mobile devices and laptops. It automatically scans and selects the best secure connection to the corporate network. Domain Name profiles. This is because the OU parameter is now deprecated by various certificate authorities. Hence, OU is an optional parameter under Add New window of Configuration > Authentication > L3 Authentication > VIA Virtual Intranet Access. VIA provides secure remote network connectivity for Android, Apple iOS, Mac OS X, and Windows mobile devices and laptops. It automatically scans and selects the best secure connection to the corporate network. Connection > default > VIA Virtual Intranet Access. VIA provides secure remote network connectivity for Android, Apple iOS, Mac OS X, and Windows mobile devices and laptops. It automatically scans and selects the best secure connection to the corporate network. Domain Name Profiles in the WebUI. In the CLI Command-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions., the OU sub-parameter is optional under the dn-profile parameter of aaa authentication via connection-profile command.

ArubaOS allows users to control RTS Request to Send. RTS refers to the data transmission and protection mechanism used by the 802.11 wireless networking protocol to prevent frame collision occurrences. See CTS. frame transmission to the clients.

ArubaOS now includes all available flags associated with an AP in the show ap database flags <flags> command.

ArubaOS 8.11.0.0 now supports the bucket based client load balancing feature that distributes the buckets based on the platform capacity in a cluster.

ArubaOS 8.11.0.0 now supports deploying a Mobility Controller Virtual Appliance or a Mobility Conductor Virtual Appliance using CentOS 7.9 or Ubuntu 20.04 KVM Hypervisor.

Starting from ArubaOS 8.11.0.0, Ethernet Ethernet is a network protocol for data transmission over LAN. Port 0 can be assigned as the downlink port if Ethernet Ethernet is a network protocol for data transmission over LAN. Port 1 is configured or running as the primary uplink. This enhancement is supported in AP-318, AP-374, AP-375, AP-375ATEX, AP-377, AP-584, AP-585, AP-585EX, AP-587, and AP-587EX.

The following two new ABB sensors are supported by Instant APs:

• DFU Target Device—The DFU target device sensor is recognized by service class UUID : 0xFE59.

• SALT Star Vario—The SALT Star Vario sensor is recognized by local name : perma. When the local name is parsed to the Instant AP, the identity of the sensor is assigned as SALT + MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network.  Address. For example, if device's MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address is 00:80:25:FB:1A:73, then its identity is SALT008036FB1A73.

ArubaOS 8.11.0.0 now supports deploying a Mobility Controller Virtual Appliance or a Mobility Conductor Virtual Appliance using Hyper-V Version Windows Server 2019.

The following two commands are introduced to support packet debugging functionality to troubleshoot the data packets through the AP datapath:

• ap remote-debug-pkt

• show ap remote-debug-pkt

ArubaOS supports UNII-4 (channels 169-177) on 530 Series, 550 Series, 630 Series, and 650 Series access points.

ArubaOS 8.11.0.0 now supports 1024 clients on the 2G and 5G bands Band refers to a specified range of frequencies of electromagnetic radiation. of an AP-655.

ArubaOS allows users to control frame bursting if one or more active clients are associated to the AP.

ArubaOS allows to configure exclusions for IDS Intrusion Detection System. IDS monitors a network or systems for malicious activity or policy violations and reports its findings to the management system deployed in the network. containment based on vendor specific IE information. This feature allows APs to be exempted from containment even when the devices use randomized MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. addresses.

VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. derivation support is extended to wired and wireless clients using split-tunnel forwarding mode along with tunnel, bridge and decrypt-tunnel modes.

ArubaOS supports Wi-Fi Wi-Fi is a technology that allows electronic devices to connect to a WLAN network, mainly using the 2.4 GHz and 5 GHz radio bands. Wi-Fi can apply to products that use any 802.11 standard. uplink feature on 610 Series access points for 2.4 GHz Gigahertz., 5 GHz Gigahertz., and 6 GHz Gigahertz. radio bands Band refers to a specified range of frequencies of electromagnetic radiation..

ArubaOS supports zero-wait DFS Dynamic Frequency Selection. DFS is a mandate for radio systems operating in the 5 GHz band to be equipped with means to identify and avoid interference with Radar systems. feature on 650 Series access points for 5 GHz Gigahertz. radio band Band refers to a specified range of frequencies of electromagnetic radiation. only.

ArubaOS now supports a maximum of 1024 wireless clients per radio. This value is controlled by using the max-client parameter in the wlan Wireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. ssid-profile command.

ArubaOS 8.11.0.0 now extends mesh support for AP-615. The mesh link and Wi-Fi Wi-Fi is a technology that allows electronic devices to connect to a WLAN network, mainly using the 2.4 GHz and 5 GHz radio bands. Wi-Fi can apply to products that use any 802.11 standard. uplink features continue to operate on the band Band refers to a specified range of frequencies of electromagnetic radiation. configured in the AP system profile. When the radio modes are changed, the mesh and wifi uplink modules will restart and resume on the radio defined in the existing configuration.

AP-204, AP-205

AP-203H

AP-203R, AP-203RP

AP-205H

AP-207

AP-214, AP-215

AP-224, AP-225

AP-228

AP-274, AP-275, AP-277

AP-324, AP-325

AP-334, AP-335

AP-344, AP-345