How to configure Aruba IAP ( firmware 6.5 + )

This guide is valid only for IAP firmware newer than 6.5 if your AP firmware is older, please follow
If not done already, install Spotipo on your sever by following tutorial available here.
Make sure you have enabled ports 1812 and 1813 in your firewall for UDP traffic.

Add an Aruba Central Site in Spotipo

Each location is represented by a Site. A site can have multiple routers (of the same type)

After adding the client add a new site by clicking on the Add New Site button in the drop down menu on top right.

Select the Site type as Aruba Central and configure the correct timezone and Save

Now proceed with site activation and license subscription.

Add a Network

In the newly created site, navigate to Networks tab and create a New Network.

Provide a name to identify your network

After adding the network, take a note on the URL, NAS ID and Radius Secret

Configure Aruba IAP

Connect to IAP web portal and use the New Network option.

Enter the SSID you would like to have and keep the network type as Guest

In the security tab, select splash-page type as external and add a new captive portal profile. Fill in with the IP of Spotipo server and provide the generated URL

Next add a new auth server by providing spotipo IP and generated NAS ID, radius secret.

Enable accounting to the same server as well and use 2 min as Accounting Interval

Enable Domain ACL for all the for all the required domains

Walled garden settings are not available from 6.5.4 firmware version. Hence use Domain ACL

Save And Test

Click Next and Save the configuration. Wait for a few minutes and then connect to the SSID you have just created to test it out.


How did we do?