Table of contents
Configuring Group Settings for Wireless
Aruba Central uses a two-level hierarchy for configuration tasks. A device’s final configuration is a result of configuration that is applied at the group level, along with configuration that is applied at a device level. Parameters added at the device level override the configuration performed at the group level. Aruba recommends performing the bulk of the configuration at the group level and only using device-level configurations when specific overrides are needed.
Configure AP Group Settings
Use this procedure to configure group settings for APs. An AP Group guarantees common settings are consistently applied across a group of APs in the network.
Note:The best practice is to use the fewest groups necessary to provide logical organization for the network and consistent configuration between devices. Configuration cannot be shared between groups.
Step 1Navigate toCentraland login using administrator credentials.
Step 2On the Central Account Home page, launch theNetwork Operations应用程序。
Step 3In the filter drop-down list, select an AOS10 Group name. In this example, selectUI-WIRELESS.
Step 4From the left menu, selectDevices.
Step 5In the upper right of the Access Points page, selectConfig, and then selectShow Advanced.
Step 6On the Access Points page, select theSystemtab.
Step 7On the System tab, implement the following settings, and then selectSave Settings.
- Set Country code for group:US - United States
- Timezone:Pacific-Time UTC-08
- Preferred Band:All
- NTP Server:10.2.120.99, 10.2.120.98
Caution:Incorrect time synchronization within the network can lead to authentication errors.
Note:All APs in the group must have the same country code, so you must create a group for each country code in the network. The country code must be set before a configuration is pushed to an AP.
An NTP server defined in the Group configuration takes precedence over NTP configured with DHCP.
Step 8On the Access Points page, select theServicestab, expand theAppRFsection, implement the following settings, and then selectSave Settings.
- Deep Packet Inspection:All
- Application Monitoring:Slide to the right
- AirSlice Policy:Slide to the right
Note:Aruba AppRF is an application aware firewall running within the APs providing application visibility and control capabilities. APs with Deep Packet Inspection (DPI) enabled can inspect the data payload within packets to identify applications in use. DPI also allows the creation of rules to determine client access to applications and websites, as well as traffic shaping policies. For a complete overview of Aruba AppRF, refer to the appropriate version ArubaOS User Guide.
Occasionally Central features are released under Select Availability. If a documented feature does not appear in the Central application, contact an Aruba SE or Aruba TAC to request feature access.
Configure Gateway Group Settings
Use this procedure to configure group settings for gateways. The best practice is to put APs and gateways in the same group in order to simplify navigation between the two settings tabs when deploying the network.
Step 1Navigate toCentraland login using administrator credentials.
Step 2On the Aruba Central Account Home page, launch theNetwork Operations应用程序。
Step 3In the filter drop-down list, select an AOS10Groupname.
Step 4From the left menu, selectDevices, and then at the top, selectGateways.
Step 5In the upper right of the Gateways page, selectConfig.
Step 6If this is the first time using the AOS10 group to configure a gateway, the Set Group Type pop-up will appear. SelectGatewayand clickSave Settings.
Caution:IfBranch Gatewayis the only “Gateway” option, go back to theGlobal > Organization > Groupsconfiguration page and convert the group to AOS10 before returning here to set the group type to Gateway. Do not select Branch Gateway or VPNC as they are only used for SD-Branch deployments and once the group type is set, it cannot be changed.
Step 7Select theSystemtab and then theGeneraltab.
Step 8In theBasic Infosection, implement the following settings, and the clickSave Settings.
- Password for user admin:password
- Retype password:password
Note:配置更改并不适用于一个设备until it has a System IP Address. This will be added later at the device level.
Step 9Expand theClocksection and in the lower left corner of theNTP serverstable, select the+sign.
Step 10On theAdd NTP Serverpage, implement the following settings, and then clickSave Settings.
- IPv4/IPv6/FQDN:IPv4
- IPv4 address:10.2.120.98
- Burst mode:checkmark
Step 11Repeat the two previous steps to enter additional NTP servers.
Step 12In the Clock section at the bottom, clickChoose a timezone, select the timezone from the drop-down list, and then clickSave Settings.
Step 13Expand theDomain Name Systemsection, implement the following settings, and then clickSave Settings.
- Domain name:Example.Local
- Enable DNS name resolution:checkmark IPv4
Step 14In the lower left corner of theDNS serverstable, select the+sign.
Step 15On the Add DNS server page, implement the following setting, and then clickSave Settings.
- IPv4 address:10.2.120.98
Step 16Repeat the two previous steps to enter additionalDNS servers.
Step 17In the upper right of the Gateways page, selectShow Advanced.
Step 18On the Gateways page, select theHigh Availabilitytab.
Step 19In the Cluster mode section, disableAutomaticclustering by moving the slider to the left.
Step 20On the Cluster group mode popup, selectContinue.
