Aruba Instant On how to setup 802.1x with Windows NPS

Hello guys, today I will talk about how you can setup a WPA2/3 enterprise wifi with aruba Instant On Access Points. Because I don’t have an AD integrated notebook in my private test environment, I limit myself to username / password and don’t do any authentication by computer account. Settings in the Instant On Portal … Read more

Aruba Mobility Controller with Sophos SG/XG hotspot Portal

Hello Guys,   today I will talk about how to configuring a guest Wifi with a Aruba Mobility Controller and the Sophos hotspot solution. In this example I will using the Sophos SG hotspot solution. With Sophos XG, it’s basically the same. Sophos SG Create a new Interface It’s recommandet, to use a own interface … Read more

How to setup a redundant WLAN point-to-point connection with aruba AP 387

Hello guys, today I want to tell you how to create a redundant point-to-point connection with Aruba 387 access points.   Update for this setup the firmware version 8.6.0.6 or newer is absolutely needed. Because in the older versions the bug AOS-216445 is not fixed yet.   AOS-216445 Clients connected to the mesh portal AP … Read more

VLAN based QoS on a HPE comware Switch

Good afternoon my fellows! There are many ways to configure quality of service (QoS) on a switch. First we need to classify what we want to be on a higher priority. You can classify an access-list, vendor-mac-addresses or just everything/any. In my case I wanted to prioritize a whole VLAN (ID 17 in my case). … Read more

How to use 802.1x/mac-auth and dynamic VLAN assignment

Hello guys! Today I want to show you how to secure your edge-switches with 802.1x and mac-authentication fallback in combination with HPE comware-based switches. The 802.1x protocol is used for network access control. For devices like printers, cameras, etc. we will use mac-authentication as a fallback. We will also use dynamic VLAN assignment for the … Read more

Virtual Router Redundancy Protocol with Comware Switches

Virtual Router Redundancy Protocol is easy to configure on a comware switch. Each device needs an IP address within the subnet, after this you can configure a virtual-IP for the VLAN-interface: CoreSwitch1: interface Vlan-interface1 ip address 10.0.0.135 255.192.0.0 vrrp vrid 1 virtual-ip 10.0.0.54 vrrp vrid 1 priority 120 CoreSwitch2: interface Vlan-interface1 ip address 10.0.0.136 255.192.0.0 … Read more

Spanning-Tree between HP Comware and Cisco

In the past, I had many problems with a heterogene infrastructure containing HPE 5000 Comware devices and Cisco Catalyst switches. I couldn’t get Multiple Spanning-Tree (MSTP) on the run (same revision number, same case-sensitive region-name). So we decided to go on with Per VLAN Rapid Spanning-Tree. But this also didn’t work, also no other VLANs that … Read more