Wireless Access

Hey Guys,

I am currently struggling whitelisting APs after upgrade from Aos6 to Aos8.

All APs are working and broadcasting their SSIDs. No complaints from users or other clients.

But what I don't understand is, that all APs are unapproved. And switch back to unapproved when I approve them manually on CLI:

#show control-plane-security

Control Plane Security Profile
------------------------------
Parameter Value
--------- -----
Control Plane Security Enabled
Auto Cert Provisioning Enabled
Auto Cert Allow All Enabled
Expiry timer(dd:hh) 00:02
Auto Cert Allowed Addresses N/A
Auto Cert Allowed IPv6 Addresses N/A

When using this command, the status is approved. After some time their are unapproved again.

whitelist-db cpsec modify mac-address 9c:1c:XX:XX:XX:XX state approved-ready-for-cert

But when I approve them on the WebGui they stay approved.

So what is the difference and what I am doing wrong?

Best regards,
Morris



------------------------------
Maurice Groth
------------------------------

Auto Cert Allow All Enabled <---------------

That means the controller will automatically distribute certificates.  Turn that off and APs will not come up unless you manually add them to the whitelist.  That is what you should use to admit/disallow APs.

I would leave the unapproved/approval mechanism alone, because it refers to the status of certificates, rather than being an allow/disallow mechanism workflow:  https://community.arubanetworks.com/community-home/digestviewer/viewthread?MID=32738

------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
------------------------------