ラベル RAP の投稿を表示しています。 すべての投稿を表示
ラベル RAP の投稿を表示しています。 すべての投稿を表示

2015年8月4日火曜日

AOS: RAP password based

How to configure password-based RAP's configuration

Step1: setting isakmp key on controller
crypto isakmp key aruba123 address 0.0.0.0 netmask 0.0.0.0

Step2: setting password for each AP on controller
local-userdb add username kuro password aruba123 remote-ip 4.4.4.1 role ap-role

!provision-ap copy-provisioning-params ap-name "6c:f3:7f:cb:61:a6"

Step3: setting APs for RAP. AP needs to be connected to controller once based on CAP at least.

conf t
provision-ap
read-bootinfo  ap-name "6c:f3:7f:cb:61:a6"
pap-user "kuro"
pap-passwd "aruba123"
ikepsk "aruba123"
master 10.215.107.126
server-ip 10.215.107.126
ap-group "TK-BP"
ap-name "RAP-1"
remote-ap
show provisioning-params
reprovision ap-name "6c:f3:7f:cb:61:a6"

Step4: logging function

logging level debugging arm
logging level debugging arm subcat client-match
logging level debugging network process dhcpd
logging level informational network
logging level debugging network subcat dhcp
logging level debugging security process authmgr
logging level debugging security process crypto
logging level debugging security
logging level debugging security subcat aaa
logging level debugging security subcat ike
logging level debugging system process stm
logging level informational system
logging level debugging system process stm subcat ap
logging level debugging user
logging level debugging user subcat client-match
logging level informational wireless

2013年10月31日木曜日

AOS: RAP whitelist

RAP whitelist & "show user-table internal"

(A3600-3) #show whitelist-db rap


AP-entry Details
----------------
Name               AP-Group  AP-Name            Full-Name  Authen-Username  Revoke-Text  AP_Authenticated  Description  Date-Added                Enabled  Remote-IP
----               --------  -------            ---------  ---------------  -----------  ----------------  -----------  ----------                -------  ---------
6c:f3:7f:c5:13:1a  DCM       RAP-2                                                       Provisioned                    Tue Jan 27 13:01:25 2015  Yes      1.1.1.2
d8:c7:c8:c4:55:cc  DCM       d8:c7:c8:c4:55:cc                                           Provisioned                    Tue Jan 27 19:38:07 2015  Yes      1.1.1.3
d8:c7:c8:cd:d1:34  DCM       RAP-1                                                       Provisioned                    Tue Jan 13 20:17:15 2015  Yes      1.1.1.1

AP Entries: 3


(A3600-3) #show user-table internal

Users
-----
    IP              MAC            Name              Role      Age(d:h:m)  Auth  VPN link       AP name  Roaming  Essid/Bssid/Phy  Profile  Forward mode  Type
----------     ------------       ------             ----      ----------  ----  --------       -------  -------  ---------------  -------  ------------  ----
1.1.1.1        00:00:00:00:00:00  d8:c7:c8:cd:d1:34  ap-role   00:00:39    VPN   61.195.154.83  N/A                                         tunnel      
61.195.154.83  00:00:00:00:00:00                     logon     50:00:17    VPN                  N/A                                         tunnel      

User Entries: 2/2


(Aruba3600) #show local-userdb-ap

NOTE: This command has been deprecated. Please use "show whitelist-db rap" command.

WARNING: Following entries have been automatically upgraded.
                                                            If these entries don't exist in "show whitelist-db rap" command,
                                                                                                                             Please manually move to new table using "whitelist-db rap add" commands.


AP-entry Details
----------------
Name               AP-Group  AP-Name            Full-Name  Authen-Username  Revoke-Text  AP_Authenticated  Description  Date-Added                Enabled  Remote-IP
----               --------  -------            ---------  ---------------  -----------  ----------------  -----------  ----------                -------  ---------
00:24:6c:cd:13:ee  RAP       RAP2                                                        Provisioned                    Tue May 15 18:37:41 2012  Yes      0.0.0.0
00:0b:86:68:9a:2d  RAP       00:0b:86:68:9a:2d                                           Provisioned                    Sat May 19 15:22:16 2012  Yes      0.0.0.0
00:0b:86:66:d3:f5  Amigo     RAP-5                                                       Provisioned                    Fri Jul 13 13:06:34 2012  Yes      0.0.0.0
d8:c7:c8:c4:6b:ec  test      d8:c7:c8:c4:6b:ec                                           Provisioned                    Tue Aug  7 11:40:00 2012  Yes      0.0.0.0
d8:c7:c8:c4:22:6a  test      IAP105                                                      Provisioned                    Tue Aug  7 14:22:57 2012  Yes      0.0.0.0

AP Entries: 5