Aruba Woes

[kidpressingbuttons]

Can someone please guide me how to install a new ssl on my aruba virtual controller so I can setup guest access?

 

Dont know if it is just me but the documentation is awful. Inherited a very broken setup!

[willtech]

Have you got a public trusted certificate ?

[kidpressingbuttons]

Have you got a public trusted certificate ?

 

Got a ssl from godaddy. No idea how to upload as a server certificate. Client seems straightforward

[willtech]

. Navigate to the Maintenance > Certificates page.

 

2. To upload a certificate, click Upload New Certificate. The New Certificate window is displayed.

 

3. Browse and select the file to upload.

 

4. Select any of the following types of certificates from the Certificate type drop-down list:

 

Captive portal server—Captive portal server certificate to verify the identity of internal captive portal server to the client.

 

5. Select the certificate format from the Certificate format drop-down list.

 

6. If you have selected Auth Server, Captive portal server, WebUI, or RadSec as the type of certificate, enter a passphrase in Passphrase and retype the passphrase. If the certificate does not include a passphrase, there is no passphrase required.

 

7. Click Browse and select the appropriate certificate file, and click Upload Certificate. The Certificate Successfully Installed message is displayed.

 

8. Try your Captive portal.

[Davit2005]

Campus APs where you use a controller you need to select the certificate in the general settings too under Captive Portal. Not sure if it is still the same as we are running older version of controller software.

 

Never done this on Instant APs though.

[kidpressingbuttons]

Thanks all- cannot work out how to generate a CSR from the Instant Aps. Any ideas?

[Davit2005]

You may have to use OpenSSL to generate a CSR.

 

A few months ago had to do the same but on a controller cluster for the first time, not sure if it is the same on the Instant APs if someone will clarify.

 

Basic of what I did:

Generate a CSR with a private key using OpenSSL

When the cert comes back from issuer you might need to generate a cert file using Notepad or Notepad++ with the un-encrypted private key in following order:

 

server cert

server private key (needs to be unencrypted)

intermediate cert/s

root cert

[kidpressingbuttons]

Hi all, cannot get Instant On to see these APs at all. Even on a whitelisted connection. Any ideas?

[snagrat]

Hi all, cannot get Instant On to see these APs at all. Even on a whitelisted connection. Any ideas?

 

Firewall?

[Davit2005]

So this is using Instant-On not Instant APs (aka Unified APs)?

 

Lol, blooming Aruba and it's naming convention.

[kidpressingbuttons]

Uhhhh I assume Instant Aps...