Manualshelf

Owners manual

ManualsBrandsARUBA NETWORKS ManualsComputers & LaptopsAruba Instant IAP-325 IEEE 802.11ac 1.69 Gbit/s Wireless Access Point - 2.40 GHz, 5 GHz - 8 x Antenna(s) - 8 x Internal Antenna(
261262263264265266267268269270
In the CLI
To configure OpenDNS credentials:
(Instant AP)(config)# opendns <username <password>
(Instant AP)(config)# end
(Instant AP)# commit apply
Integrating an IAP with Palo Alto Networks Firewall
Palo Alto Networks (PAN) next-generation firewall offers contextual security for all users for safe enabling of
applications. A simple firewall beyond basic IP address or TCP port numbers only provides a subset of the enhanced
security required for enterprises to secure their networks. In the context of businesses using social networking sites,
legacy firewalls are not able to differentiate valid authorized users from casual social networking users.
The Palo Alto next-generation firewall is based on user ID, which provides many methods for connecting to sources
of identity information and associating them with firewall policy rules. For example, it provides an option to gather
user information from Active Directory or LDAP server.
Integration with Instant
The functionality provided by the PAN firewall based on user ID requires the collection of information from the
network. IAP maintains the network (such as mapping IP address) and user information for its clients in the network
and can provide the required information for the user ID feature on PAN firewall. Before sending the user-ID mapping
information to the PAN firewall, the IAP must retrieve an API key that will be used for authentication for all APIs.
IAP and PAN firewall integration can be seamless with the XML-API that available with PAN-OS 5.0 or later.
To integrate an IAP with PAN user ID, a global profile is added. This profile can be configured on an IAP with PAN
firewall information such as IP address, port, user name, password, firewall enabled or disabled status.
The IAP sends messages to PAN based on the type of authentication and client status:
l After a client completes the authentication and is assigned an ip address, IAP will send the login message.
l After a client is disconnected or dissociated from the IAP, the IAP sends a logout message.
Configuring an IAP for PAN integration
You can configure an IAP for PAN firewall integration using the Instant UI or CLI.
In the Instant UI
1. Click More > Services. The Services window is displayed.
2. Click Network Integration. The PAN firewall configuration options are displayed.
Aruba Instant 6.4.0.2-4.1 | User Guide Services | 268