The EasyConnect Aruba Wi-Fi integration is an optional service which makes Aruba Wi-Fi Access Point (AP) integration secure and simple to deploy. It comprises a RADIUS server for authentication and VLAN configuration for secure guest access.
These capabilities, combined with standard Aruba Central and Aruba 200-series Access Point features, support a number of new use cases, including enterprise-grade Wi-Fi security.
Features of the Aruba Wi-Fi integration
Monitoring and UI Links
Monitoring of Aruba access point state in the Monitoring Console, providing a similar level of visibility to IT service providers as other network resource states such a WAN/LAN connectivity.
The Monitoring Console will report that the APs are available (in a ‘green’ state) provided each AP can be contacted. Additional data will be reported if the AP can be contacted, such as any fault states reported by the AP, resource usage and the number of connected clients.
Aruba AP checks are included in the User Control Console’s Network status reporting. As with other network checks, this will report the fault state of specific APs if they are uncontactable.
For simple and secure IT user authentication, use of the WPA-E protocol is supported. WPA-E requires that client requests to access a Wi-Fi AP are authenticated against the user’s own credentials, rather than a single shared password. A server therefore has the option of a preconfigured RADIUS server which provides a means for external services, like an AP, to authenticate client connection requests against the user credentials held in the server’s Active Directory.
WPA-E offers a number of security and user benefits, compared with protocols typically used by SMBs suck as WPA-PSK which relies on a single, shared password:
- IT users can connect to the Wi-Fi network’s APs using their normal network user name and password, instead of having to remember a separate password.
- When using Windows clients, a user logged-in to their client device can use single sign-on to automatically connect to the Wi-Fi without entering their credentials again.
- IT administrators can add/remove users’ access to the Wi-Fi network by adding/removing them from the server, either by using the User Control Console or Active Directory. This simplifies administration of new users and improves network security by revoking Wi-Fi privileges of departing users.
- The Wi-Fi network is further secured by the removal of the single, shared password used by most common Wi-Fi protocols like WPA-PSK, which is easily leaked or brute-force attacked.
Secure Guest Wi-Fi Access
A pre-configured VLAN is used to securely segregate unauthenticated traffic, such as a guest Wi-Fi connection, from the organization’s LAN and server VMs.
Guest traffic directed to this VLAN by Aruba APs will be routed through the server, without access to File Shares or VMs, but will be subject to Gateway web filtering and firewall rules.
How to install the Aruba Integration components
The Aruba integration components need to be installed by the support team. If you wish to make use of the Aruba Integration, please raise a new request (top right of this page) to request the installation of the Aruba Integration components.