Security

 View Only

  • 1.  Onboarding Setup with a non aruba access point and cloud based wifi controller

    Posted Jul 21, 2025 04:30 AM

    Dear Team

    I am trying to setup onboarding  for a non Aruba IETF compatible Wi Fi network.

    I am trying  service templates but they are mostly aruba specific .For example there is no term like aruba user role with IETF.

    Kindly share the required configuration details

    Regards

    Avanindra Kumar Mishra

     



  • 2.  RE: Onboarding Setup with a non aruba access point and cloud based wifi controller

    Posted Jul 21, 2025 07:10 AM

    instead of Radius:Aruba VSA, you can use Radius:IETF

    Here is an example of using IETF radius attributes in an enforcement profile 



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------



  • 3.  RE: Onboarding Setup with a non aruba access point and cloud based wifi controller

    Posted Jul 23, 2025 01:44 AM

    Thanks Ariyap

    I am able to finish my configurations now

    regards

    Avanindra K Mishra


    Original Message


  • 4.  RE: Onboarding Setup with a non aruba access point and cloud based wifi controller

    Posted Jul 22, 2025 03:37 PM

    What exactly is the NAD? What is the use-case for OnBoard? Why not use an MDM instead?




  • 5.  RE: Onboarding Setup with a non aruba access point and cloud based wifi controller

    Posted Jul 23, 2025 12:16 AM

    Dear ahollifield

    Thanks for the response

    my NAD(Network ASccess Device) is Wifi6 Access Point (non aruba)

    We just purchased Onboarding license

    Use Case-----:Authenticating various clients with EapTLS, without the need to load the certificate manually

    Clients/supplicants are Windows/android/Apple/linux

    Regards

    Avanindra


    Original Message


  • 6.  RE: Onboarding Setup with a non aruba access point and cloud based wifi controller

    Posted Jul 23, 2025 02:16 AM
    Edited by HR-abaef5 Jul 23, 2025 02:17 AM

    EDIT: I just see that you could continue based on other guidance. Below left for reference.

    It's important to know what the brand/type equipment you use; that it's non-Aruba is not enough as configuration is based on standards and vendor specific configuration.

    You should make it possible for a non-onboarded device to connect to the ClearPass onboarding portal, which can be done through the guest network or another network that has access to the ClearPass server.

    For onboarded devices you would need to configure a WPA2-Enterprise or WPA3-Enterpise SSID that authenticates via Radius or RadSec to ClearPass.

    This approach (assuming ClearPass is involved) is the same for Aruba and non-Aruba, but how you do it exactly differs from brand to brand.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------

    Original Message


  • 7.  RE: Onboarding Setup with a non aruba access point and cloud based wifi controller
    Best Answer

    Posted Jul 23, 2025 01:51 PM

    What one exactly? Different vendors have different VSAs. Also you are going to have a really tough time with OnBoard, especially with modern device security hardening. 


    Original Message


Related Content