Adding Instant APs and Switches Using PSK

HPE Aruba Networking Central On-Premises supports adding devices using a pre-shared key (PSK Pre-shared key. A unique  shared secret that was previously shared between two parties by using a secure channel. This is used with WPA security, which requires the owner of a network to provide a passphrase to users for network access.  ). If you want to add Instant APs and switches to HPE Aruba Networking Central On-Premises, you must configure a shared secret key on the DHCP Dynamic Host Configuration Protocol. A network protocol that enables a server to automatically assign an IP address to an IP-enabled device from a defined range of numbers configured for a given network. server. When you add the same shared secret key in HPE GreenLake, the devices with the known PSK string are added to the HPE GreenLake device inventory.

This section includes the following topics:

Adding Instant APs Using PSK

To add Instant APs using PSK with DHCP server, complete the following steps:

  1. Configure the following parameters on the DHCP server to which the Instant APs connect:
    • Option 60 with ArubaInstantAP.

      For example,

      option 60 text "ArubaInstantAP"

    • Option 43 in the format <Group>:<Topfolder>:<folder1>,<Aruba-Central IP>,<shared secret>.

      For example,

      option 43 text "3810_switch:top:default,100.100.100.10,secret_key"

    Ensure that you provide only the IP address and not the host name.

  2. In the HPE GreenLake account home page, click Devices > Auto-Provisioning.

    The Provisioning Profiles page is displayed by default.

  3. Click Add Key in the Pre-Shared Keys column.

    The Create Pre-Shared Key pop-up window is displayed.

  4. Configure the following parameters:

    • Name—Enter a name for the pre-shared key.

    • Pre-Shared Key—Enter the pre-shared key in hexadecimal or plain text string.

    • Confirm Key—Re-enter the pre-shared key.

  5. Click Create.

    The new profile name is created and listed in the Pre-Shared Keys column.

  6. Reboot the Instant APs.

    The Instant APs receive the IP address from the DHCP server and connect to HPE Aruba Networking Central On-Premises.

Adding Switches Using PSK

To onboard switches using PSK, complete the following steps:

  1. Configure the following parameters on the DHCP server:

    Option 43 in the format <Group>:<Topfolder>:<folder1>,<Aruba-Central IP>,<shared secret>

    Ensure that the switches are running factory default configuration.

  2. In the HPE GreenLake account home page, click Devices > Auto-Provisioning.

    The Provisioning Profiles page is displayed by default.

  3. Click Add Key in the Pre-Shared Keys column.

    The Create Pre-Shared Key pop-up window is displayed.

  4. Configure the following parameters:

    • Name—Enter a name for the pre-shared key.

    • Pre-Shared Key—Enter the pre-shared key in hexadecimal or plain text string.

    • Confirm Key—Re-enter the pre-shared key.

  5. Click Create.

    The new profile name is created and listed in the Pre-Shared Keys column.

  6. Reboot the switches.

    The switches receive the IP address from the DHCP server and connect to HPE Aruba Networking Central On-Premises.

    In HPE Aruba Networking Central On-Premises, the devices do not move automatically to a group or folder during onboarding The process of preparing a device for use on an enterprise network, by creating the appropriate access credentials and setting up the network connection parameters. as mentioned in Option 43, as there is no mapping between folder to sites or labels. In the Option 43 format, any string can replace the placeholder of group or folder.