Aruba Wireless, Part 7: RF Management (ARM, AirMatch, ClientMatch) and Troubleshooting

Part 7 of the Aruba Wireless series: ARM versus AirMatch, ClientMatch steering, radio and regulatory-domain profiles, channel width and DFS choices, spectrum analysis and WIDS/RFProtect, a layered troubleshooting method with the key AOS 8 commands, and how AOS 10 changes the architecture.

Comments Off on Aruba Wireless, Part 7: RF Management (ARM, AirMatch, ClientMatch) and Troubleshooting

Aruba Wireless, Part 6: Controller Clustering, Redundancy, Roaming and Live Upgrade

Part 6 of the Aruba Wireless series: legacy controller redundancy (VRRP, LMS, HA groups), AOS 8 controller clustering with AAC/S-AAC and UAC/S-UAC, the bucket map, L2- vs L3-connected clusters, hitless failover, load balancing, CoA in clusters, fast roaming with OKC, 802.11r/k/v, and Live Upgrade.

Comments Off on Aruba Wireless, Part 6: Controller Clustering, Redundancy, Roaming and Live Upgrade

Aruba Wireless, Part 5: User Roles, the Policy Enforcement Firewall, AAA and ClearPass

Part 5 of the Aruba Wireless series: user roles and the Policy Enforcement Firewall, session ACL syntax and aliases, AppRF, bandwidth contracts, role and VLAN derivation (UDR, default roles, server derivation rules, Aruba VSAs), downloadable user roles, Change of Authorization, MAC authentication, external captive portals, and integrating ClearPass Policy Manager.

Comments Off on Aruba Wireless, Part 5: User Roles, the Policy Enforcement Firewall, AAA and ClearPass

Aruba Wireless, Part 4: Building WLANs with Profiles — 802.1X, PSK, WPA3 and Guest SSIDs

Part 4 of the Aruba Wireless series: the AOS 8 profile model (AP group, virtual AP, SSID profile, AAA profile, server groups) and complete CLI builds of an 802.1X enterprise WLAN, a WPA2/WPA3 PSK IoT WLAN and a captive-portal guest WLAN, plus WPA3 and 6 GHz rules, data rates, multicast optimization, VLAN pools and verification commands.

Comments Off on Aruba Wireless, Part 4: Building WLANs with Profiles — 802.1X, PSK, WPA3 and Guest SSIDs

Aruba Wireless, Part 3: Access Points — Boot, Discovery, Provisioning and Forwarding Modes

Part 3 of the Aruba Wireless series: Aruba access point hardware and naming, the AP boot and controller discovery process (static, DHCP option 43, ADP, DNS), AP groups and provisioning, AP modes, control plane security and the CPsec whitelist, PAPI and GRE tunnels, forwarding modes, Remote APs, and AP troubleshooting from APBoot to show ap database.

Comments Off on Aruba Wireless, Part 3: Access Points — Boot, Discovery, Provisioning and Forwarding Modes

Aruba Wireless, Part 2: Mobility Conductor, Mobility Controllers and the Configuration Hierarchy

Part 2 of the Aruba Wireless series: Mobility Conductor and Mobility Controller platforms, the AOS 8 configuration hierarchy and inheritance, onboarding a managed device with the setup dialog, controller interfaces and trusted ports, Conductor redundancy, and centralized licence pools.

Comments Off on Aruba Wireless, Part 2: Mobility Conductor, Mobility Controllers and the Configuration Hierarchy

Aruba Wireless, Part 1: Architecture, Product Families and Operating Systems

Part 1 of a seven-part Aruba Wireless series: the Aruba product families (Instant APs, Mobility Controllers, Mobility Conductor, Aruba Central, ClearPass), the AOS 6, AOS 8 and AOS 10 operating systems, the management/control/data plane split, forwarding modes, and how to build a home lab.

Comments Off on Aruba Wireless, Part 1: Architecture, Product Families and Operating Systems

IS-IS Deep Dive: The Intermediate System to Intermediate System Routing Protocol

A complete guide to IS-IS: NSAP/NET addressing, Level-1/Level-2 hierarchy, PDUs and TLVs, adjacency formation, DIS election, LSP flooding, metrics, SPF/PRC, route leaking, authentication, IPv6 and multi-topology, modern extensions (TE, Segment Routing, Flex-Algo), an IS-IS vs OSPF comparison, and working configs for Cisco IOS-XE, IOS-XR and FRRouting.

Comments Off on IS-IS Deep Dive: The Intermediate System to Intermediate System Routing Protocol

BGP for CCNP ENCOR, Part 4: The Best Path Selection Algorithm

Part 4 of the BGP series for CCNP ENCOR 350-401 v1.2: the complete 13-step best path selection algorithm with a worked tie-break at every level, the two validity gates that run before step 1, the MED comparison rule that catches everyone, hot potato routing, multipath, and four hands-on labs.

Comments Off on BGP for CCNP ENCOR, Part 4: The Best Path Selection Algorithm

BGP for CCNP ENCOR, Part 3: Advertising Routes and Path Attributes

Part 3 of the BGP series for CCNP ENCOR 350-401 v1.2: the four ways to originate a prefix, why the network statement needs an exact mask match, the iBGP next-hop problem and next-hop-self, the four path attribute categories, and how weight, local preference, AS_PATH, origin, MED and communities differ in scope — with four hands-on labs.

Comments Off on BGP for CCNP ENCOR, Part 3: Advertising Routes and Path Attributes