5. Enter the following information.
a.
Mode
—You can specify any of the following modes:
l
Access
—Select this mode to allow the port to carry a single VLAN specified as the native VLAN.
l
Trunk
—Select this mode to allow the port to carry packets for multiple VLANs specified as allowed
VLANs.
b. Specify any of the following values for
Client IP Assignment
:
l
Virtual Controller Assigned
: Select this option to allow the VC to assign IP addresses to the wired
clients. When the VC assignment is used, the source IP address is translated for all client traffic that
goes through this interface. The VC can also assign a guest VLAN to a wired client.
l
Network Assigned
: Select this option to allow the clients to receive an IP address from the network
to which the VC is connected. On selecting this option, the
New
button to create a VLAN is displayed.
Create a new VLAN if required.
c. If the
Trunk
mode is selected:
l
Specify the
Allowed VLAN
, enter a list of comma separated digits or ranges: for example, 1,2,5 or 1–
4, or all. The Allowed VLAN refers to the VLANs carried by the port in Access mode.
l
If the
Client IP Assignment
is set to
Network Assigned
, specify a value for
Native VLAN
. A VLAN
that does not have a VLAN ID tag in the frames is referred to as Native VLAN. You can specify a value
within the range of 1–4093.
d. If the
Access
mode is selected:
l
If the
Client IP Assignment
is set to
Virtual Controller Assigned
, proceed to step 2.
l
If the
Client IP Assignment
is set to
Network Assigned
, specify a value for
Access VLAN
to
indicate the VLAN carried by the port in the
Access
mode.
6. Click
Next
to configure
or
external captive portal authentication
for the
guest users.
In the CLI
To configure the settings for the wired profile:
(Instant AP)(config)# wired-port-profile <name>
(Instant AP)(wired ap profile <name>)# type <guest>
(Instant AP)(wired ap profile <name>)# speed {10|100|1000|auto}
(Instant AP)(wired ap profile <name>)# duplex {half|full|auto}
(Instant AP)(wired ap profile <name>)# no shutdown
(Instant AP)(wired ap profile <name>)# poe
(Instant AP)(wired ap profile <name>)# uplink-enable
(Instant AP)(wired ap profile <name>)# content-filtering
(Instant AP)(wired ap profile <name>)# spanning-tree
To configure VLAN settings for a wired profile:
(Instant AP)(config)# wired-port-profile <name>
(Instant AP)(wired ap profile <name>)# switchport-mode {trunk|access}
(Instant AP)(wired ap profile <name>)# allowed-vlan <vlan>
(Instant AP)(wired ap profile <name>)# native-vlan {<guest|1…4095>}
To configure a new VLAN assignment rule:
(Instant AP)(config)# wired-port-profile <name>
(Instant AP)(wired ap profile <name>)# set-vlan <attribute>{equals|not-equals|starts-
with|ends-with|contains|matches-regular-expression} <operator> <VLAN-ID>|value-of}
Aruba Instant 6.5.0.0-4.3.0.0 | User Guide
Captive Portal for Guest Access |
125