AP Uplinks

Most network devices such as APs, wireless routers, switches, and hubs are connected to a network backbone using Ethernet Ethernet is a network protocol for data transmission over LAN.. In enterprise networks, APs normally connect to a switch with an Ethernet uplink and at homes, an AP normally connects to an ISP Internet Service Provider. An ISP is an organization that provides services for accessing and using the Internet. modem or a small switch using Ethernet. Though Ethernet is the most common and widespread uplink used for APs, some remote networks in particular have certain special uplink requirements. The following are some of the factors that require the need for an alternative to the standard Ethernet uplink of APs:

• Redundancy—In remote deployments, organizations have limited or no IT support and require the network to be always up to ensure productivity. Such organizations often require a backup link when the primary uplink fails. Some examples of organizations that require uplink redundancy include:
  • Energy companies having unmanned remote sites that have to be remotely accessible for monitoring purposes.
  • Healthcare and retail companies having remote and satellite offices that are required to be always up and accessible to carry out business.
  • Organizations with remote offices where employees depend heavily on centralized or cloud based services.
• Lack of Ethernet uplink—Sometimes, extending an Ethernet uplink to a location is expensive or impossible due to geographical factors. In such situations, organizations require alternative uplink capabilities to connect to the internet and corporate resources. Some examples where an alternate uplink is required include:
  • Remote site where wired broadband services such as DSL Digital Subscriber Line. The DSL technology allows the transmission of digital data over telephone lines. A DSL modem is a device used for connecting a computer or router to a telephone line that offers connectivity to the Internet. and ADSL are expensive or unavailable.
  • Road warriors who need an AP to connect multiple devices but have limited or no access to Ethernet uplinks.
  • Mall Kiosks, mobile clinics, first response camps, and other emergency camps during catastrophic disasters.

Configuring AP1X

To configure 802.1X 802.1X is an IEEE standard for port-based network access control designed to enhance 802.11 WLAN security. 802.1X provides an authentication framework that allows a user to be authenticated by a central authority. authentication on uplink ports of an AP, complete the following steps in the WebUI:

1. In the Aruba Central app, set the filter to a group that contains at least one AP.
   The dashboard context for the group is displayed.
2. Under Manage, click Devices > Access Points.
3. Click the Config icon.
   The tabs to configure APs are displayed.
4. Click Show Advanced, and click the Interfaces tab.
   The Interfaces details page is displayed.
5. Click the Uplink accordion.
6. Under Modem enter the details for the parameters provided in the following table:

   Table 1: Modem Parameters

   Parameters	Description
   Type	Select Aruba USB Universal Serial Bus. USB is a connection standard that offers a common interface for communication between the external devices and a computer. USB is the most common port used in the client devices.  LTE Long Term Evolution. LTE is a 4G wireless communication standard that provides high-speed wireless communication for mobile phones and data terminals. See 4G. from the drop-down. A new Aruba USB LTE modem is introduced across Remote APs Remote APs extend corporate network to the users working from home or at temporary work sites. Remote APs are deplyed at branch office sites and are connected to the central network on a WAN link. and Gateways.
   Access point name (APN)	Enter the name of the Access Point to which the uplink connects.
   Public land mobile network (PLMN Public Land Mobile Network. PLMS is a network established and operated by an administration or by a Recognized Operating Agency for the specific purpose of providing land mobile telecommunications services to the public.)	Select Auto or Manual for the PLMN. If you select Manual, enter the PLMN ID in the text box. By default, PLMN is Auto mode.
   Mode	Select one of the following network modes: Auto—This mode keeps both 3G Third Generation of Wireless Mobile Telecommunications Technology. See W-CDMA. and 4G LTE options open and switches between the modes based on availability. 4G LTE—Connects to the 4G LTE cellular network and takes the default frequency band Band refers to a specified range of frequencies of electromagnetic radiation.. 3G—Connects to the 3G cellular network and takes the default frequency band.
   Enable GPS Global Positioning System. A satellite-based global navigation system.	Select this check box to enable GPS.

7. Select one of the following 802.1X authentication protocols to be used from the AP1X Type drop-down list:
   • Select TLS Transport Layer Security. TLS is a cryptographic protocol that provides communication security over the Internet. TLS encrypts the segments of network connections above the Transport Layer by using asymmetric cryptography for key exchange, symmetric encryption for privacy, and message authentication codes for message integrity. (Transport Layer Security) authentication type from the drop-down list and then select one of the following Certificate Types from the drop-down-list:
     • User - Select this option to configure the user-installed certificate for 802.1X authentication.
     • TPM Trusted Platform Module. TPM is an international standard for a secure cryptoprocessor, which is a dedicated microcontroller designed to secure hardware by integrating cryptographic keys into devices. - Select this option to configure a factory-installed TPM certificate for 802.1X authentication.
     • EST - Select this option as a Certificate Type.

     Validate Server will not be available if TPM is selected as Certificate Type.

   • Select PEAP (Protected Extensible Authentication Protocol) authentication type.
8. Check the Validate Server check-box to enable or disable server certificate verification by the AP.

9. Click Save Settings.
10. Reboot the AP for the configuration to take effect.