poc - aruba central · 2018-12-12 · agenda •setup mobility controller as branch gateway...

WiFi GuestServicePoC - ArubaCentral

PoC - Diagram

CableModem

Internet

VLAN10:172.16.0.0/24- Employee/ManagementVLANVLAN20:192.168.10.0/24- GuestVLAN<–> SSID“Store_Free_WiFi”VLAN90:192.168.0.0/24- CableModemVLAN

AOSv8.2.2

AOS-SWv16.07

Port4

SSIDStore_Free_WiFi

Guest

VLAN10172.16.0.200/24

ArubaCentral

Agenda

• SetupMobilityControllerasBranchGateway• SetupArubaswitch2930FviaCLI• RegisterAP303H@ArubaCentral

• SetupArubaCentral• SetupFacebookWi-Fi• SetupSocialLoginFacebook• ImportexistingswitchconfigurationandmanagetheswitchviaArubaCentral

SetupBranchGateway

Factory reset to Branch Gateway

Power on the 7010 Branch Gateway

Complete the setup wizard

Check configuration made via wizard

• Config – Interfaces – Click on “+”

• Vlans created

• Interfaces – VLANs – VLAN90 – NAT Outside

• Interfaces – VLANs – VLAN10 – NAT Inside

• Interfaces – VLANs – VLAN20 – NAT Inside

• Config – Interfaces - Ports – Click on GE 0/0/5 – Mode Trunk

• System - General – Clock NTP

• Submit Changes

•Disable ADP via CLI

• Show running-config Branch Gateway

SetupswitchviaCLI

• Show running-config. 2930F switch

RegisterAP303HArubaCentral

•Add AP and Assign subscriptions in Aruba Central

• PC connected to interface 4 -- Check access to Internet

• Factory reset to AP via console port

•Check DHCP -- 172.16.0.2 IP address assigned to AP

•AP 303 set as Master (IAP)

•After 5min à Firmwave Upgrade from Aruba Central

•AP managed from Aruba Central (athena-mgmt)

•AP is ready to be configured via Aruba Central

SetupArubaCentral

• Site Label created and assigned to AP

•Assign Label to AP

•Create a new group

•Move the AP to the new Group

• Change the name to AP

•Change the name to AP

• Firmware upgrade to recommended version

•Check firmware version running

• Set installation type

• Enable DPI

•Configure DHCP for Guest SSID

•Create splash page

•Configure Redirect URL

•Configure Logos, Background and Terms&Conditions

• Localization

• Test Captive Portal

•Create Guest SSID

•Guest SSID – Limit Bandwidth

•Guest SSID – Set VLAN and DHCP Server

• Guest SSID – Set Captive Portal

•Guest SSID – Deny access to Employee Network

• Testing service using Android - smartphone

•Guest SSID – Device connected

SetupFacebookWi-Fi

• Create Facebook Page

https://www.facebook.com/Demo-WifiLogin-303563190479308

• Page created

• Enter a location

• Edit Captive Portal

• Enable Facebook WiFi

• Edit Facebook WiFi configuration

• Enter facebook credentials

• Select Facebook page

• Facebook Wi-Fi login enabled

SetupSocialLoginFacebook

• Copy the URL mapped in the Splash page

•Click on “ Create new App”

•Name the app

• Click on Facebook Login - Setup

• Click on web

• Enter URL -- Aruba Central

• Click on Settings

•Check OAuth client is set to “yes” and paste the URL -- append “/oauth/reply”

• Click on “app review”

• Public the Facebook App

• Copy App ID and App Secret

• Create a new splash page

• Enter App ID and App Secret

•New splash page ready

• Edit the Wireless SSID

• Security – Splash page Profile

• Testing

•Done!

ImportswitchconfigurationtoArubaCentral

•Check serial and MAC Address

•Check default gateway and DNS server config

•Add switch to Aruba Central

•Assign subscription to Switch

• Enter the command “include-credentials”

• Set the management VLAN, DNS server and cloud provisioning

• Switch registered to Aruba Central

• Switch in Central as “unprovisioned”

•Create new Template Group

•Move the switch to the new Template Group

• Click on “config” template

•Click on “+”

• Create the new template importing the existing configuration

• Click on save to create the new template

•Done! Switch is managed by Central