Wireless Group Configuration
HPE Aruba Networking Central uses a two-level hierarchy for configuration tasks. A device’s final configuration is the result of common configuration applied at the group level, along with individual configuration applied at the device level. Parameters added at the device level override the configuration assigned at the group level. Best practice is to perform the bulk of the configuration at the group level and use device-level configurations only when specific overrides are needed.
Table of contents
Configure a Central Group for Wireless Management
Use this procedure to create a group for configuring and managing the wireless environment. This group consists of APs and gateways deployed with the AOS10 architecture. The APs are deployed as campus devices along with gateways, since an AP-only deployment does not offer advanced features such as UBT. The WLAN profiles can be configured to forward traffic in Bridged mode, Tunnel mode, or mixed mode.
The gateways serve as Mobility gateways to support WLAN and LAN functions in the campus network. They do not support WAN capabilities in this mode. For more guidance on AP and gateway deployment, refer to the Access Point Deployment and Gateway Deployment page of the AOS 10 Fundamentals Guide. This section assumes that the AP’s and Gateways are placed in the same group to streamline navigation between the two settings tabs during network deployment.
Step 1 Login to HPE Greenlake and go to HPE Aruba Networking Central.
Step 2 In the left navigation pane, in the Maintain section, select Organization.
Step 3 Select the Groups tab.
Step 4 Click the + (plus sign) at the top right to create a new group.
Step 5 Type a name for the group and select the two checkboxes for Gateways and Access points. Click Next.
Step 6 On the Add Group page, assign the following settings, and click Add.
- Architecture for access points and gateways in this group: ArubaOS 10
- Network role of the access points in this group: Campus/Branch
- Network role of the gateways in this group: Mobility
Configure AP Settings for Group
Use this procedure to configure AP settings in the group. This procedure assumes that the APs are deployed with the AOS 10 operating system.
Step 1 Login to HPE Greenlake and go to HPE Aruba Networking Central.
Step 2 In the filter dropdown, select the wireless group. In this example, the group is RSVCP-WIRELESS.
Step 3 On the left menu, select Devices.
Step 4 In the upper right corner of the Access Points page, click Config.
Step 5 Enter and confirm a password for the group. Click Set Password.
Step 6 On the Access Points page, select the System tab.
Step 7 Expand the General section on the System tab, assign the following settings, then click Save Settings.
- Set Country code for group: US - United States
- System Location: Roseville
- Timezone: Pacific-Time UTC-08
- NTP Server: 10.2.120.99, 10.2.120.98
Caution: Incorrect time synchronization within the network can lead to authentication errors. An NTP server defined in the Group configuration takes precedence over an NTP configured with DHCP. Ensure that time synchronization is consistent across the network.
Note: All APs in the group must have the same country code. Create a group for each country code in the network. The country code must be set before a configuration is pushed to an AP.
Step 8 Click the Services tab and expand the AppRF section. Assign the following settings, then click Save Settings.
Deep Packet Inspection: All
Application Monitoring: Slide to the right
Configure Gateway Settings for Group
An AOS-10 Mobility Gateway group or an AOS-10 Mobility Gateway can be configured using Guided Setup, Basic mode, or Advanced mode. This section outlines the procedure for configuring group settings for Mobility Gateways using Advanced mode, which offers more options for customizing gateway deployment.
Step 1 Select the Gateways tab. On the left menu, select Devices.
Step 2 In the upper right of the Gateways page, click Config.
Step 3 Click Cancel to exit the Guided Setup wizard and switch to Advanced setup. Then click Exit at the EXIT GUIDED SETUP prompt.
Step 4 Expand the Basic Info section on the General tab and update the password. Click Save Settings.
Configure NTP and Time Zone Settings
Step 1 Select the General tab and expand the Clock section. Click the + (plus sign) to add a reachable NTP server.
Step 2 Assign the following settings. Click Save Settings.
- IPv4/IPv6/FQDN: IPv4
- IPV4 ADDRESS: 10.2.120.98
- Burst Mode: Enabled
Step 3 Repeat the previous step to enter additional NTP servers.
Step 4 Select the Timezone, then click Save Settings.
Configure Domain and DNS Settings
Step 1 Expand the Domain Name System section on the General tab and assign the domain name. Click on the + (plus sign) to add a reachable DNS server.
- Domain name: EXAMPLE.LOCAL
Step 2 Assign the following settings. Click Save.
- IP version: IPv4
- IPV4 ADDRESS: 10.2.120.98
Step 3 Repeat the previous step to enter additional DNS servers. Finally click Save Settings.
Configure Gateway Cluster Settings
AOS 10 supports automatic and manual clustering modes to support gateways that are deployed for wireless access, User Based Tunneling (UBT), or VPN Concentrators (VPNCs). This section details the process to set up a gateway cluster using Auto Group mode, which gives the flexibility of forming clusters of gateways belonging to different sites. With auto group clusters, APs can reside in the same configuration group as the gateways or in a separate group and can be assigned to WLAN profiles configured for tunnel and mixed forwarding mode. For more guidance, refer to the Auto Group Clustering section of the AOS 10 Fundamentals Guide.
Step 1 On the Gateways tab, click the High Availability tab.
Step 2 Select the Clusters tab and click the toggle to turn on Automatic cluster mode. Click the radio button next to Auto Group, then click Save Settings.
Note: Only one auto group cluster is permitted for each configuration group. Campus deployments with multiple clusters will implement one configuration group for each cluster.
Configure Jumbo Frame Processing
Enable jumbo frame processing to accommodate frames exceeding 1500 bytes. This ensures that encapsulated frames, such as within VXLAN packets, are able to transit the network unfragmented.
Step 1 Go to the Central UI group with the gateways and select Devices.
Step 2 Select the Gateways tab.
Step 3 Click Config to enter configuration mode.
Step 4 Select the Security tab.
Step 5 On the Security tab, select the Firewall page.
Step 6 Move the slider right to enable Jumbo frame processing.
Step 7 Set the Jumbo MTU to the following value:
- Jumbo MTU[1789-9216] bytes: 9198.
Step 8 Click Save Settings.
