Understanding Basic Deployment and Configuration Tasks

This section describes typical deployment scenarios and the tasks you must perform while connecting to a managed device and Aruba AP to your wired network.

Deployment Scenario #1: Managed Device and APs on Same Subnet

Figure 1  Managed Device and APs on Same Subnet

Click to view this image in large size.

In this deployment scenario, the APs and managed device are on the same sub-network and will use IP addresses assigned to the sub-network. The router is the default gateway Gateway is a network node that allows traffic to flow in and out of the network. for the managed device and clients. There are no routers between the APs and the managed device. APs can be physically connected directly to the managed device. The uplink port on the managed device is connected to a layer-2 switch or router.

For this scenario, you must perform the following tasks:

  1. Run the initial setup wizard.
  2. Connect the uplink port on the managed device to the switch or router interface. By default, all ports on the managed device are access ports and will carry traffic for a single VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN..
  3. Deploy APs. The APs will use the ADP Aruba Discovery Protocol. ADP is an Aruba proprietary Layer 2 protocol. It is used by the APs to obtain the IP address of the TFTP server from which it downloads the AP boot image. to locate the managed device.
  4. Configure the SSID Service Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network.(s) with VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. 1 as the assigned VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. for all users.

Deployment Scenario #2: APs All on One Subnet Different from Managed Device Subnet

Figure 2  APs All on One Subnet Different from Managed Device Subnets

Click to view this image in larger size.

In this deployment scenario, the APs and the managed device are on different sub-networks and the APs are on multiple sub-networks. The managed device acts as a router for the wireless sub-networks (the managed device is the default gateway Gateway is a network node that allows traffic to flow in and out of the network. for the wireless clients). The uplink port on the managed device is connected to a layer-2 switch or router; this port is an access port in VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. 1.

For this scenario, you must perform the following tasks:

  1. Run the initial setup wizard.
  2. Connect the uplink port on the managed device to the switch or router interface.
  3. Deploy APs. The APs will use DNS Domain Name System. A DNS server functions as a phone book for the intranet and Internet users. It converts human-readable computer host names into IP addresses and IP addresses into host names. It stores several records for a domain name such as an address 'A' record, name server (NS), and mail exchanger (MX) records. The Address 'A' record is the most important record that is stored in a DNS server, because it provides the required IP address for a network peripheral or element. or DHCP Dynamic Host Configuration Protocol. A network protocol that enables a server to automatically assign an IP address to an IP-enabled device from a defined range of numbers configured for a given network.  to locate the managed device.
  4. Configure VLANs Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. for the wireless sub-networks on the managed device.
  5. Configure SSIDs Service Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. with the VLANs Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. assigned for each wireless sub-network.

Each wireless client VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. must be configured on the managed device with an IP address. On the uplink switch or router, you must configure static routes for each client VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN., with the managed device’s VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. 1 IP address as the next hop.

Deployment Scenario #3: APs on Multiple Different Subnets from Managed Devices

Figure 3  APs on Multiple Different Subnets from Managed Devices

Click to view a larger size.

In this deployment scenario, the APs and the managed device are on different sub-networks and the APs are on multiple sub-networks. There are routers between the APs and the managed device. The managed device is connected to a layer-2 switch or router through a trunk port that carries traffic for all wireless client VLANs Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN.. An upstream router functions as the default gateway Gateway is a network node that allows traffic to flow in and out of the network. for the wireless users.

The deployment scenario does not use VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. 1 to connect to the layer-2 switch or router through the trunk port. The initial setup prompts you for the IP address and default gateway Gateway is a network node that allows traffic to flow in and out of the network. for VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. 1; use the default values. In later steps, you configure the appropriate VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. to connect to the switch or router as well as the default gateway Gateway is a network node that allows traffic to flow in and out of the network..

For this scenario, you must perform the following tasks:

  1. Run the initial setup.
  2. Create a VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. that has the same VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. ID as the VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. on the switch or router to which you will connect the managed device. Add the uplink port on the managed device to this VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. and configure the port as a trunk port.
  3. Add client VLANs Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. to the trunk port.
  4. Configure the default gateway Gateway is a network node that allows traffic to flow in and out of the network. on the managed device. This gateway Gateway is a network node that allows traffic to flow in and out of the network. is the IP address of the router to which you will connect the managed device.
  5. Configure the loopback interface for the managed device.
  6. Connect the uplink port on the managed device to the switch or router interface.
  7. Deploy APs. The APs will use DNS Domain Name System. A DNS server functions as a phone book for the intranet and Internet users. It converts human-readable computer host names into IP addresses and IP addresses into host names. It stores several records for a domain name such as an address 'A' record, name server (NS), and mail exchanger (MX) records. The Address 'A' record is the most important record that is stored in a DNS server, because it provides the required IP address for a network peripheral or element. or DHCP Dynamic Host Configuration Protocol. A network protocol that enables a server to automatically assign an IP address to an IP-enabled device from a defined range of numbers configured for a given network.  to locate the managed device.
  8. Now configure VLANs Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. on the managed device for the wireless client sub-networks and configure SSIDs Service Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. with the VLANs Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. assigned for each wireless sub-network.