InstantAP (IAP)
The video below shows the steps for configuring iotroam on an Aruba IAP wireless environment running AOS 8.2, so without gateway. Click on the thumbnail to start the movie.
If a proprietary RADIUS proxy is used, then of course the IP address of the proprietary RADIUS server must be configured in the appropriate setting. In the RADIUS proxy, the IP addresses of the iotroam RADIUS servers are then configured.
Gateway
These steps describe the configuration of iotroam on an Aruba wireless environment with gateway and AOS 8.10.0.10.
If a proprietary RADIUS proxy is used, then of course the IP address of the proprietary RADIUS server must be configured in the appropriate setting. In the RADIUS proxy, the IP addresses of the iotroam RADIUS servers are then configured.
- On your firewall, allow RADIUS traffic (1812/1813 UDP) to the 3 iotroam RADIUS servers and do not allow this traffic to be scanned.
- On your Mobility Conductor, open your Managed Network container and go to Configuration -> Authentication
- Add a new Server group and fill it with the 3 iotroam Radius servers.
- For each RADIUS Server, enter Shared Key that you configured in the iotroam portal at RADIUS Clients and if the controllers are NATted enter this IP address in NAS IP:
- Now go to WLANs.
- Create the new SSID iotroam and under Security set WPA2-Personal and 'Use Aruba Multi Pre-Shared Keys (MPSK)'. Add the 3 iotroam RADIUS Servers created in step 3 at Auth servers:
- Now register a client in the iotroam portal and test your connection.
