Cloud Managed Networks

 View Only

  • 1.  CNX Local profiles Question

    Posted 22 hours ago

    I'm having a great deal of trouble trying the understand the way profiles overrides (Local profiles) work in CNX.

    In AOS8 you had settings the was enherited down through the organisation hierarchy. That means you could use common settings on everything except the one setting you created an override for on a specific device.

    In CNX it's been my experience so far that overrides are not done on a settings basis, but on a whole profile. This effective renders common settings useless if you need some overrides on devices, because saving as a local profile will disconnect the whole profile from the library/Hierachy profile.

    So fx. If I need to change a setting on my management VLAN, I effectively have to visit all 100 switches in the inventory individually and change the setting. This is needed because I need to create a Local profile override to set the IP address of the switch in the manegement VLAN.

    Is this really the case or am I doing something wrong?



  • 2.  RE: CNX Local profiles Question

    Posted 20 hours ago
    CNX Will override the complete profile. You’re correct, If you make a change later in the library profile, that change isn’t pushed to the devices with the overridden configuration.

    For this type of scenarios the Alias is available. An alias is a kind of variable. How it works

    - create an alias in the library and assign it to the scope ( for example an alias for VLAN IPv4 address)
    - with the profile ( for example VLAN use the alias as the IP object
    - on device level to set the IP, override the alias and set the IP



    ---------------------------------
    Willem Bargeman
    Systems Engineer Aruba
    ACEX #125
    ---------------------------------





  • 3.  RE: CNX Local profiles Question

    Posted 20 hours ago

    ?? So changing the ALIAS at the device level - without saving as local profile - does not change the ALIAS preselected in the library/hierachy profile?

    Does that go for all profiles? - as in:
    Using an ALIAS as a setting is a part of the library/hierachy profile, but the actual ALIAS choosen is a Hierarchy level attribute where you can choose another at a different hierarchy level?


    Original Message


  • 4.  RE: CNX Local profiles Question

    Posted 13 hours ago

    The alias must be overridden at the device level by saving it as a local profile. VLAN IP addresses can only be configured at the device level.

    Other types of aliases, such as a RADIUS/Auth Server shared secret, can be defined at any level in the hierarchy.

    For example:

    • An Auth Server shared secret (MySecret) is created in the library and assigned globally.
    • The default value in the library for this alias is mysecuresecret.

    While mysecuresecret remains the default value, it can be overridden at any scope by saving the alias as a local profile-for example, at the site level.



    ------------------------------
    Willem Bargeman
    Systems Engineer Aruba
    ACEX #125
    ------------------------------

    Original Message


  • 5.  RE: CNX Local profiles Question

    Posted 12 hours ago

    ?? Now I'm confused. You still have to save it as a local profile at the device level, but if you are using an Alias, the remaining profile settings are not overwritten and are still inherited from the hierachy? Really?

    Or are you saying there is no way to let devices inherit changes to the hierachy profile if they need to be configured with static IP?


    Original Message


  • 6.  RE: CNX Local profiles Question
    Best Answer

    Posted 12 hours ago

    Yeah sorry. I guess my post was not clear.

    Don't override the configuration profiles. So just use assign the VLAN to the right scope

    Within the VLAN configuration profile you will use the alias. The alias will make a part of the profile dynamic like the VLAN IP.

    The alias itself needs to be overridden on the right scope to set the IP

    Let me explain it with some screenshots

    Alias object for VLAN IP

    VLAN profiles (within this profile the VLAN IP alias is referenced).
    This is the library profile and assigned to global for example.

    Set the IP for a switch at device level in the alias. This is done by overriding the Alias at device level



    ------------------------------
    Willem Bargeman
    Systems Engineer Aruba
    ACEX #125
    ------------------------------

    Original Message


  • 7.  RE: CNX Local profiles Question

    Posted 12 hours ago

    Ahhh, now it makes sense :-) Maybe a little "cumbersome" in UI clicks and settings, but that CNX for you…

    Thanks a lot.


    Original Message


  • 8.  RE: CNX Local profiles Question

    Posted 4 hours ago

    Willem has the best useable answer. As you found out; when you use a local profile and go back to the parent. Anytime changes are done to the parent they are not updated to the configs that are local. You do have to be careful when you modify a profile from child level in hierarchy. It does not warn you will override the top level. I have made some suggestions a while back as I have always thought it could be dangerous. I could see a peer not paying full enough attention and changing a vlan on wifi globally. 

    There are quite a few alias. I have setup my configs so the general settings are linked to the site collection. When you want to overwrite something for the site its pretty easy to do. In our case its named vlans. It can be a bit difficult finding what sites or devices have local overrides. Im sure this will be adjusted at some point in the near future. 


    Original Message


Related Content