What's New in this Release

This section lists the new features, enhancements, or hardware platforms introduced in ArubaOS.

New Features

Table 1: New Features in ArubaOS 8.11.0.0

Enhancements

Description

ArubaOS 8.11.0.0 Short Supported Release

ArubaOS 8.11.0.0 is a Short Supported Release (SSR).

AirMatch Support for 610 Series Access Points

AirMatch provides support for dynamic selection of the opmode, in addition to assigning channel and EIRP Effective Isotropic Radiated Power or Equivalent Isotropic Radiated Power. EIRP refers to the output power generated when a signal is concentrated into a smaller area by the Antenna. to the current opmode in 610 Series access points (AP-615). AirMatch selects the opmode dynamically depending on the RF Radio Frequency. RF refers to the electromagnetic wave frequencies within a range of 3 kHz to 300 GHz, including the frequencies used for communications or Radar signals. coverage for each radio band—2.4 GHz Gigahertz., 5 GHz Gigahertz. and 6 GHz Gigahertz..

Apple Wireless Direct Link Protocol Bypass and Containment Avoidance

ArubaOS can now bypass Apple Wireless Direct Link protocol frames. The user can also select whether to discard and stop IDS Intrusion Detection System. IDS monitors a network or systems for malicious activity or policy violations and reports its findings to the management system deployed in the network. from processing captured frames.

BLE Bluetooth Low Energy. The BLE functionality is offered by Bluetooth® to enable devices to run for long durations with low power consumption. Daemon Support for Per-AP Calibrated RSSI Received Signal Strength Indicator. RSSI is a mechanism by which RF energy is measured by the circuitry on a wireless NIC (0-255). The RSSI is not standard across vendors. Each vendor determines its own RSSI scale/values. Tables

Starting from this release, APs with Gen-2 BLE Bluetooth Low Energy. The BLE functionality is offered by Bluetooth® to enable devices to run for long durations with low power consumption./IoT Internet of Things. IoT refers to the internetworking of devices that are embedded with electronics, software, sensors, and network connectivity features allowing data exchange over the Internet. radios will adjust the calibrated RSSI Received Signal Strength Indicator. RSSI is a mechanism by which RF energy is measured by the circuitry on a wireless NIC (0-255). The RSSI is not standard across vendors. Each vendor determines its own RSSI scale/values. values for iBeacon advertisements when BLE Bluetooth Low Energy. The BLE functionality is offered by Bluetooth® to enable devices to run for long durations with low power consumption. transmit power levels are modified using the ble-txpower setting in the IoT Internet of Things. IoT refers to the internetworking of devices that are embedded with electronics, software, sensors, and network connectivity features allowing data exchange over the Internet. Radio Profile configuration. The calibrated values can then be verified using the show ap debug ble-advertisement-info command.

Cipher Suites in Web Server Configuration

The cipher-suite parameter is introduced to replace ciphers parameter. This feature allows users to select specific ciphers from the supported list of ciphers. Cipher suites are streamlined in such a way that only strong cipher suites are enabled by default. This is compatible with the FIPS Federal Information Processing Standards. FIPS refers to a set of standards that describe document processing, encryption algorithms, and other information technology standards for use within non-military government agencies, and by government contractors and vendors who work with these agencies. mode as well. As a part of this enhancement, users are given the option to selectively enable and disable the remaining cipher suits while configuring the web server profile.

VIA VPN Sessions

The maximum number of concurrent VIA Virtual Intranet Access. VIA provides secure remote network connectivity for Android, Apple iOS, Mac OS X, and Windows mobile devices and laptops. It automatically scans and selects the best secure connection to the corporate network. VPN Virtual Private Network. VPN enables secure access to a corporate network when located remotely. It enables a computer to send and receive data across shared or public networks as if it were directly connected to the private network, while benefiting from the functionality, security, and management policies of the private network. This is done by establishing a virtual point-to-point connection through the use of dedicated connections, encryption, or a combination of the two. session per user is restricted. The admin is enabled to configure a value between 1-32 to restrict the concurrent VIA Virtual Intranet Access. VIA provides secure remote network connectivity for Android, Apple iOS, Mac OS X, and Windows mobile devices and laptops. It automatically scans and selects the best secure connection to the corporate network. VPN Virtual Private Network. VPN enables secure access to a corporate network when located remotely. It enables a computer to send and receive data across shared or public networks as if it were directly connected to the private network, while benefiting from the functionality, security, and management policies of the private network. This is done by establishing a virtual point-to-point connection through the use of dedicated connections, encryption, or a combination of the two. sessions per user.

Configuring SNMP Simple Network Management Protocol. SNMP is a TCP/IP standard protocol for managing devices on IP networks. Devices that typically support SNMP include routers, switches, servers, workstations, printers, modem racks, and more. It is used mostly in network management systems to monitor network-attached devices for conditions that warrant administrative attention.  Trap for License Capacity Threshold

A new SNMP Simple Network Management Protocol. SNMP is a TCP/IP standard protocol for managing devices on IP networks. Devices that typically support SNMP include routers, switches, servers, workstations, printers, modem racks, and more. It is used mostly in network management systems to monitor network-attached devices for conditions that warrant administrative attention.  trap, wlsxLicenseThresholdLimitHit, is introduced that sends an alert when the license usage is more than 75% of the allocated licenses and before all licenses are used.

Configuring the Default Gateway Gateway is a network node that allows traffic to flow in and out of the network. on the OOB Management Port

Starting from ArubaOS 8.11.0.0, you can use the ip default-gateway mgmt <nexthop> CLI Command-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions. command to configure the default gateway Gateway is a network node that allows traffic to flow in and out of the network. on the OOB management port for 7000 Seriescontrollers.

Default ARP Address Resolution Protocol. ARP is used for mapping IP network address to the hardware MAC address of a device. Rate Set for Global Firewall Firewall is a network security system used for preventing unauthorized access to or from a private network. Parameter - ARP Address Resolution Protocol. ARP is used for mapping IP network address to the hardware MAC address of a device. Attack

Starting from ArubaOS 8.11.0.0, the default value for global firewall Firewall is a network security system used for preventing unauthorized access to or from a private network. parameter Monitor/Police ARP Attack (non Gratuitous ARP) rate (per 30 seconds) is set to 100.

Detection and Containment of WIFI-Direct Devices

ArubaOS now supports the detection and containment of devices associated to WIFI-Direct groups.

Dual APN Support on Aruba USB LTE Modems

The Aruba USB Universal Serial Bus. USB is a connection standard that offers a common interface for communication between the external devices and a computer. USB is the most common port used in the client devices. LTE Long Term Evolution. LTE is a 4G wireless communication standard that provides high-speed wireless communication for mobile phones and data terminals. See 4G. Modem now supports dual access point names (APN)s for the Remote APs automatically.

Enable or Disable BLE Telemetry

The BLE Bluetooth Low Energy. The BLE functionality is offered by Bluetooth® to enable devices to run for long durations with low power consumption. Telemetry setting can now be enabled or disabled in the webUI. A new CLI Command-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions. parameter blePeriodicTelemetryReporting is introduced in the iot transportProfile command to disable periodic telemetry reporting.

Enabling Fast Initial Link Setup (FILS) for an AP in 6 GHz Only Mode

ArubaOS 8.11.0.0 enables FILS for the 6GHz VAPs configured on the AP that allows the 6GHz clients to obtain the SSID Service Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. when the 2.4GHz and 5GHz VAPs are unavailable.

Enhancement to the wlsxWlanStationTable MIB Management Information Base. A hierarchical database used by SNMP to manage the devices being monitored.

As an enhancement, a new wlanStaApName MIB Management Information Base. A hierarchical database used by SNMP to manage the devices being monitored. object is added to the wlsxWlanStationTable MIB Management Information Base. A hierarchical database used by SNMP to manage the devices being monitored. to simplify the correlation of APs and Stations.

Flex Dual Band Support for AP-615

ArubaOS 8.11.0.0 now supports flex dual band Band refers to a specified range of frequencies of electromagnetic radiation. support on Aruba AP-615 that provides flexibility for the radios to operate on different radio bands Band refers to a specified range of frequencies of electromagnetic radiation.. AP-615 access points operate in 2.4 GHz Gigahertz. and 5 GHz Gigahertz. radio bands Band refers to a specified range of frequencies of electromagnetic radiation. by default. To enable the AP to broadcast on 6 GHz Gigahertz. radio band Band refers to a specified range of frequencies of electromagnetic radiation., set the flexible dual band Band refers to a specified range of frequencies of electromagnetic radiation. radio mode to either 5 GHz Gigahertz. and 6 GHz Gigahertz. or 2.4 GHz Gigahertz. and 6 GHz Gigahertz. mode.

Grouping AirGroup Servers based on the Username

AirGroup The application that allows the end users to register their personal mobile devices on a local network and define a group of friends or associates who are allowed to share them. AirGroup is primarily designed for colleges and other institutions. AirGroup uses zero configuration networking to allow Apple mobile devices, such as the AirPrint wireless printer service and the AirPlay mirroring service, to communicate over a complex access network topology. now allows the 802.1x authenticated users to view the list of all servers that share the same username.

IoT Internet of Things. IoT refers to the internetworking of devices that are embedded with electronics, software, sensors, and network connectivity features allowing data exchange over the Internet. Audit Trail

The show ap debug iot-audit-trail command is introduced to display all the action commands executed in the CLI Command-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions. and report the Southbound API Application Programming Interface. Refers to a set of functions, procedures, protocols, and tools that enable users to build application software. messages received from the server.

IPM Radio Power Reduction Steps

The IPM Intelligent Power Monitoring. IPM is a feature supported on certain APs that actively measures the power utilization of an AP and dynamically adapts to the power resources. power reduction steps use radio indices (0,1, and 2) that replace all references to the radio bands Band refers to a specified range of frequencies of electromagnetic radiation. (2.4 GHz Gigahertz., 5 GHz Gigahertz., secondary 5 GHz Gigahertz., and 6 GHz Gigahertz. bands Band refers to a specified range of frequencies of electromagnetic radiation.) associated with radio power restrictions.

Jumbo Frames Support for IPsec site-to-site Tunnels

ArubaOS 8.11.0.0 now supports the Jumbo frames in both IPv4 and IPv6 networks over an IPsec Internet Protocol security. IPsec is a protocol suite for secure IP communications that authenticates and encrypts each IP packet in a communication session. site-to-site tunnel between two managed devices.

Modifications to CLI Command-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions. Commands

The write erase all, halt, and reload commands can be issued only from the /mm and /mm/mynode nodes of the Mobility Conductor.

No Support for WEP Wired Equivalent Privacy. WEP is a security protocol that is specified in 802.11b and is designed to provide a WLAN with a level of security and privacy comparable to what is usually expected of a wired LAN. Configuration in Wi-Fi Wi-Fi is a technology that allows electronic devices to connect to a WLAN network, mainly using the 2.4 GHz and 5 GHz radio bands. Wi-Fi can apply to products that use any 802.11 standard. Uplink Profile

ArubaOS no longer supports WEP Wired Equivalent Privacy. WEP is a security protocol that is specified in 802.11b and is designed to provide a WLAN with a level of security and privacy comparable to what is usually expected of a wired LAN. parameters for configuring Wi-Fi Wi-Fi is a technology that allows electronic devices to connect to a WLAN network, mainly using the 2.4 GHz and 5 GHz radio bands. Wi-Fi can apply to products that use any 802.11 standard. uplink profile. The following parameters have been removed from Wi-Fi Wi-Fi is a technology that allows electronic devices to connect to a WLAN network, mainly using the 2.4 GHz and 5 GHz radio bands. Wi-Fi can apply to products that use any 802.11 standard. uplink profile:

OOB 6 GHz Scanning for AP-615

ArubaOS allows users to configure OOB 6 GHz Gigahertz. scanning settings for AP-615 access points. The oob-switch parameter is introduced in the regulatory domain profile to enable and disable OOB 6 GHz Gigahertz. scanning for AP-615 access points. Disabling oob-switch, disables 6 GHz Gigahertz. scanning and it is applicable only when AP-615 access points are in the 5GHz-and-2.4GHz operation mode.

Opmode-transition Support for WPA3

ArubaOS allows users to disable the opmode-transition parameter for virtual APs to be deployed on 6 GHz Gigahertz. bands Band refers to a specified range of frequencies of electromagnetic radiation. using MFP.

Organizational Unit (OU) as an Optional Parameter

Organizational Unit (OU) is no longer a mandatory parameter for VIA Virtual Intranet Access. VIA provides secure remote network connectivity for Android, Apple iOS, Mac OS X, and Windows mobile devices and laptops. It automatically scans and selects the best secure connection to the corporate network. Domain Name profiles. This is because the OU parameter is now deprecated by various certificate authorities. Hence, OU is an optional parameter under Add New window of Configuration > Authentication > L3 Authentication > VIA Virtual Intranet Access. VIA provides secure remote network connectivity for Android, Apple iOS, Mac OS X, and Windows mobile devices and laptops. It automatically scans and selects the best secure connection to the corporate network. Connection > default > VIA Virtual Intranet Access. VIA provides secure remote network connectivity for Android, Apple iOS, Mac OS X, and Windows mobile devices and laptops. It automatically scans and selects the best secure connection to the corporate network. Domain Name Profiles in the WebUI. In the CLI Command-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions., the OU sub-parameter is optional under the dn-profile parameter of aaa authentication via connection-profile command.

RTS Frame Transmission to the Clients

ArubaOS allows users to control RTS Request to Send. RTS refers to the data transmission and protection mechanism used by the 802.11 wireless networking protocol to prevent frame collision occurrences. See CTS. frame transmission to the clients.

Support for All Flags in the AP Database

ArubaOS now includes all available flags associated with an AP in the show ap database flags <flags> command.

Support for Bucket Based Client Load Balancing

ArubaOS 8.11.0.0 now supports the bucket based client load balancing feature that distributes the buckets based on the platform capacity in a cluster.

Support for CentOS 7.9 and Ubuntu 20.04

ArubaOS 8.11.0.0 now supports deploying a Mobility Controller Virtual Appliance or a Mobility Conductor Virtual Appliance using CentOS 7.9 or Ubuntu 20.04 KVM Hypervisor.

Support for Ethernet 0 as Downlink Port

Starting from ArubaOS 8.11.0.0, Ethernet Ethernet is a network protocol for data transmission over LAN. Port 0 can be assigned as the downlink port if Ethernet Ethernet is a network protocol for data transmission over LAN. Port 1 is configured or running as the primary uplink. This enhancement is supported in AP-318, AP-374, AP-375, AP-375ATEX, AP-377, AP-584, AP-585, AP-585EX, AP-587, and AP-587EX.

Support for New ABB Sensors

The following two new ABB sensors are supported by Instant APs:

Support for Hyper-V Version Windows Server 2019

ArubaOS 8.11.0.0 now supports deploying a Mobility Controller Virtual Appliance or a Mobility Conductor Virtual Appliance using Hyper-V Version Windows Server 2019.

Support for Packet Debugging Functionality on AP

The following two commands are introduced to support packet debugging functionality to troubleshoot the data packets through the AP datapath:

  • ap remote-debug-pkt

  • show ap remote-debug-pkt

Support for UNII-4 channels (169-177)

ArubaOS supports UNII-4 (channels 169-177) on 530 Series, 550 Series, 630 Series, and 650 Series access points.

Support of 1024 clients on 2G and 5G Bands

ArubaOS 8.11.0.0 now supports 1024 clients on the 2G and 5G bands Band refers to a specified range of frequencies of electromagnetic radiation. of an AP-655.

Support to Enable Frame Bursting

ArubaOS allows users to control frame bursting if one or more active clients are associated to the AP.

Vendor Specific IE based Containment

ArubaOS allows to configure exclusions for IDS Intrusion Detection System. IDS monitors a network or systems for malicious activity or policy violations and reports its findings to the management system deployed in the network. containment based on vendor specific IE information. This feature allows APs to be exempted from containment even when the devices use randomized MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. addresses.

VLAN Derivation Support to Clients using Split-Tunnel Forwarding Mode

VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. derivation support is extended to wired and wireless clients using split-tunnel forwarding mode along with tunnel, bridge and decrypt-tunnel modes.

Wi-Fi Uplink Support for 610 Series Access Points

ArubaOS supports Wi-Fi Wi-Fi is a technology that allows electronic devices to connect to a WLAN network, mainly using the 2.4 GHz and 5 GHz radio bands. Wi-Fi can apply to products that use any 802.11 standard. uplink feature on 610 Series access points for 2.4 GHz Gigahertz., 5 GHz Gigahertz., and 6 GHz Gigahertz. radio bands Band refers to a specified range of frequencies of electromagnetic radiation..

Zero-Wait DFS Support for 650 Series Access Points

ArubaOS supports zero-wait DFS Dynamic Frequency Selection. DFS is a mandate for radio systems operating in the 5 GHz band to be equipped with means to identify and avoid interference with Radar systems. feature on 650 Series access points for 5 GHz Gigahertz. radio band Band refers to a specified range of frequencies of electromagnetic radiation. only.

Changes to the Default Setting for Max Clients in an SSID Service Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. Profile

ArubaOS now supports a maximum of 1024 wireless clients per radio. This value is controlled by using the max-client parameter in the wlan Wireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. ssid-profile command.

Mesh Support for AP-615

ArubaOS 8.11.0.0 now extends mesh support for AP-615. The mesh link and Wi-Fi Wi-Fi is a technology that allows electronic devices to connect to a WLAN network, mainly using the 2.4 GHz and 5 GHz radio bands. Wi-Fi can apply to products that use any 802.11 standard. uplink features continue to operate on the band Band refers to a specified range of frequencies of electromagnetic radiation. configured in the AP system profile. When the radio modes are changed, the mesh and wifi uplink modules will restart and resume on the radio defined in the existing configuration.

Modifications to CLI Command-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions. command parameters

The active-client-rebalance-threshold, standby-client-rebalance-threshold, and unbalance-threshold parameters of the lc-cluster group-profile command are not supported from ArubaOS 8.11.0.0 or later versions.

Table 2: New Hardware Platforms in ArubaOS 8.11.0.0

 

Check with your local Aruba sales representative on new managed devices and access points availability in your country.

Hardware

Description

610 Series Access Points—AP-615

The Aruba 610 Series access points (AP-615) are high performance, dual-radio, tri-band indoor access points that can be deployed in either controller-based (ArubaOS) or controller-less (Aruba Instant) network environments. These APs deliver high performance 2.4 GHz Gigahertz., 5 GHz Gigahertz., and 6 GHz Gigahertz. 802.11ax Wi-Fi Wi-Fi is a technology that allows electronic devices to connect to a WLAN network, mainly using the 2.4 GHz and 5 GHz radio bands. Wi-Fi can apply to products that use any 802.11 standard. (Wi-Fi Wi-Fi is a technology that allows electronic devices to connect to a WLAN network, mainly using the 2.4 GHz and 5 GHz radio bands. Wi-Fi can apply to products that use any 802.11 standard. 6E) functionality with dual radios (2x2 in 2.4 GHz Gigahertz., 5 GHz Gigahertz., and 6 GHz Gigahertz.), with the ability to operate these radios on any two out of three bands Band refers to a specified range of frequencies of electromagnetic radiation. simultaneously. Additionally, these APs deliver capacity with OFDMA (Orthogonal Frequency Division Multiple Access) technologies while also supporting 802.11a 802.11a provides specifications for wireless systems. Networks using 802.11a operate at radio frequencies in the 5 GHz band. The specification uses a modulation scheme known as orthogonal frequency-division multiplexing (OFDM) that is especially well suited to use in office settings. The maximum data transfer rate is 54 Mbps., 802.11b 802.11b is a WLAN standard often called Wi-Fi and is backward compatible with 802.11. Instead of the Phase-Shift Keying (PSK) modulation method used in 802.11 standards, 802.11b uses Complementary Code Keying (CCK) that allows higher data speeds and makes it less susceptible to multipath-propagation interference. 802.11b operates in the 2.4 GHz band and the maximum data transfer rate is 11 Mbps., 802.11g 802.11g offers transmission over relatively short distances at up to 54 Mbps, compared with the 11 Mbps theoretical maximum of 802.11b standard. 802.11g employs Orthogonal Frequency Division Multiplexing (OFDM), the modulation scheme used in 802.11a, to obtain higher data speed. Computers or terminals set up for 802.11g can fall back to speed of 11 Mbps, so that 802.11b and 802.11g devices can be compatible within a single network., 802.11n 802.11n is a wireless networking standard to improve network throughput over the two previous standards, 802.11a and 802.11g. With 802.11n, there will be a significant increase in the maximum raw data rate from 54 Mbps to 600 Mbps with the use of four spatial streams at a channel width of 40 MHz., and 802.11ac 802.11ac is a wireless networking standard in the 802.11 family that provides high-throughput WLANs on the 5 GHz band. wireless services.

Additional features include:

For complete technical details and installation instructions, see Aruba610 Series Access Points Installation Guide.

Deprecated APs

The following APs are no longer supported from ArubaOS 8.11.0.0 onwards.

Table 3: Deprecated AP Platforms

AP Family

AP Model

200 Series

AP-204, AP-205

203H Series

AP-203H

203R Series

AP-203R, AP-203RP

205H Series

AP-205H

207 Series

AP-207

210 Series

AP-214, AP-215

220 Series

AP-224, AP-225

228 Series

AP-228

270 Series

AP-274, AP-275, AP-277

320 Series

AP-324, AP-325

330 Series

AP-334, AP-335

340 Series

AP-344, AP-345

AP-387

AP-387