Cloud Managed Networks

 View Only
Back to discussions
Expand all | Collapse all

Managing Authentication Servers in AOS10 with Aruba Central - Avoiding Duplication

This thread has been viewed 22 times

  • 1.  Managing Authentication Servers in AOS10 with Aruba Central - Avoiding Duplication

    Posted Mar 19, 2025 01:49 AM
    Edited by BrettV Mar 19, 2025 01:50 AM

    Hi all,

    I'm using Aruba Central to manage an AOS10 campus wireless setup with two Mobility Gateway clusters. These clusters terminate multiple groups with APs, but I'm struggling to understand the logic behind configuring Authentication Servers in this setup.

    Here's the issue:

    • When I create Authentication Servers in the groups where the Mobility Gateways reside, they aren't available for selection in other groups. As much as I hate this. It makes sense - groups don't share config.
    • However, when I create a WLAN within an AP group and specify RADIUS servers for authentication, Aruba Central automatically creates new server groups on the designated Gateway cluster for tunnel termination.

    Question time:

    1. Is there a way to reference existing Authentication Servers/Groups from an AP group instead of duplicating them?
    2. Can I prevent these automatically generated Authentication Servers/Groups from appearing on the gateways when defining them in an AP group?

    Surely, I'm missing something here - I'm already going crazy manually duplicating WLAN configs for every AP group (10 steps back from AOS8). Any help would be much appreciated!



    ------------------------------
    Brett V
    ------------------------------



  • 2.  RE: Managing Authentication Servers in AOS10 with Aruba Central - Avoiding Duplication

    Posted Mar 20, 2025 12:46 AM

    That's the way configuration works with today's Central.  Talk to your account team about what is coming in the future with new Central.



    ------------------------------
    Carson Hulcher, ACEX#110
    ------------------------------



  • 3.  RE: Managing Authentication Servers in AOS10 with Aruba Central - Avoiding Duplication

    Posted Mar 21, 2025 03:27 AM

    as Carson mentioned, this is with Classic Central. The idea behind it is that when you create your tunnel WLAN in the AP side, it would dynamically create all the relevant aaa profiles on the gateway side. so you only configure the AP groups and not worry about the gateways side. and what you are describing is its downside. 



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------

    Original Message


Related Content