poc - aruba central · 2018-12-12 · agenda •setup mobility controller as branch gateway...
TRANSCRIPT
WiFi GuestServicePoC - ArubaCentral
PoC - Diagram
CableModem
Internet
VLAN10:172.16.0.0/24- Employee/ManagementVLANVLAN20:192.168.10.0/24- GuestVLAN<–> SSID“Store_Free_WiFi”VLAN90:192.168.0.0/24- CableModemVLAN
AOSv8.2.2
AOS-SWv16.07
Port4
SSIDStore_Free_WiFi
Guest
VLAN10172.16.0.200/24
ArubaCentral
Agenda
• SetupMobilityControllerasBranchGateway• SetupArubaswitch2930FviaCLI• RegisterAP303H@ArubaCentral
• SetupArubaCentral• SetupFacebookWi-Fi• SetupSocialLoginFacebook• ImportexistingswitchconfigurationandmanagetheswitchviaArubaCentral
SetupBranchGateway
Factory reset to Branch Gateway
Power on the 7010 Branch Gateway
Complete the setup wizard
Check configuration made via wizard
• Config – Interfaces – Click on “+”
• Vlans created
• Interfaces – VLANs – VLAN90 – NAT Outside
• Interfaces – VLANs – VLAN10 – NAT Inside
• Interfaces – VLANs – VLAN20 – NAT Inside
• Config – Interfaces - Ports – Click on GE 0/0/5 – Mode Trunk
• System - General – Clock NTP
• Submit Changes
•Disable ADP via CLI
• Show running-config Branch Gateway
SetupswitchviaCLI
• Show running-config. 2930F switch
RegisterAP303HArubaCentral
•Add AP and Assign subscriptions in Aruba Central
• PC connected to interface 4 -- Check access to Internet
• Factory reset to AP via console port
•Check DHCP -- 172.16.0.2 IP address assigned to AP
•AP 303 set as Master (IAP)
•After 5min à Firmwave Upgrade from Aruba Central
•AP managed from Aruba Central (athena-mgmt)
•AP is ready to be configured via Aruba Central
SetupArubaCentral
• Site Label created and assigned to AP
•Assign Label to AP
•Create a new group
•Move the AP to the new Group
• Change the name to AP
•Change the name to AP
• Firmware upgrade to recommended version
•Check firmware version running
• Set installation type
• Enable DPI
•Configure DHCP for Guest SSID
•Create splash page
•Configure Redirect URL
•Configure Logos, Background and Terms&Conditions
• Localization
• Test Captive Portal
•Create Guest SSID
•Guest SSID – Limit Bandwidth
•Guest SSID – Set VLAN and DHCP Server
• Guest SSID – Set Captive Portal
•Guest SSID – Deny access to Employee Network
• Testing service using Android - smartphone
•Guest SSID – Device connected
SetupFacebookWi-Fi
• Create Facebook Page
https://www.facebook.com/Demo-WifiLogin-303563190479308
• Page created
• Enter a location
• Edit Captive Portal
• Enable Facebook WiFi
• Edit Facebook WiFi configuration
• Enter facebook credentials
• Select Facebook page
• Facebook Wi-Fi login enabled
SetupSocialLoginFacebook
• Copy the URL mapped in the Splash page
•Click on “ Create new App”
•Name the app
• Click on Facebook Login - Setup
• Click on web
• Enter URL -- Aruba Central
• Click on Settings
•Check OAuth client is set to “yes” and paste the URL -- append “/oauth/reply”
• Click on “app review”
• Public the Facebook App
• Copy App ID and App Secret
• Create a new splash page
• Enter App ID and App Secret
•New splash page ready
• Edit the Wireless SSID
• Security – Splash page Profile
• Testing
•Done!
ImportswitchconfigurationtoArubaCentral
•Check serial and MAC Address
•Check default gateway and DNS server config
•Add switch to Aruba Central
•Assign subscription to Switch
• Enter the command “include-credentials”
• Set the management VLAN, DNS server and cloud provisioning
• Switch registered to Aruba Central
• Switch in Central as “unprovisioned”
•Create new Template Group
•Move the switch to the new Template Group
• Click on “config” template
•Click on “+”
• Create the new template importing the existing configuration
• Click on save to create the new template
•Done! Switch is managed by Central