Owners manual

l 172.16.20.0/24 subnet is used for NAT mode – used for wired network.
l Client count in each branch is 200.
l Contractors are only permitted to reach 10.16.0.0/16 network.
AP Configuration
This section provides information on configuration steps performed through the CLI or the UI.
Configuration Steps CLI Commands UI Procedure
1. Configure the primary IP
address. This IP address
is the Public IP address of
the controller. Fast
failover is enabled for fast
convergence.
(ap)(config)# vpn primary <public IP of primary
controller>
(ap)(config)# vpn backup <public IP of backup
controlleres>
(ap)(config)# vpn preemption
(ap)(config)# vpn fast-failover
See
Configuring an
IPSec Tunnel
2. Configure routing profiles
to tunnel traffic through
IPSec.
(ap)(config)# routing-profile
(ap)(routing-profile)# route 0.0.0.0 0.0.0.0 <public IP of primary
controller>
(ap)(routing-profile)# route 10.0.0.0 255.0.0.0 <public IP of backup
controller>
See
Configuring
Routing
Profiles
3. Configure Enterprise
DNS for split DNS. The
example in the next
column uses a specific
enterprise domain to
tunnel all DNS queries
matching that domain to
corporate.
(ap)(config)# internal-domains
(ap)(domains)# domain-name corpdomain.com
See
Configuring
Enterprise
Domains
4. Configure distributed L3
DHCP profiles with VLAN
30 and 40.
Distributed L3 profile with VLAN30
(ap)(config)# ip dhcp l3-dhcp
(ap)(DHCP profile "l3-dhcp")# server-type
Distributed,L3
(ap)(DHCP profile "l3-dhcp")# server-vlan 30
(ap)(DHCP profile "l3-dhcp")# ip-range 10.30.0.0
10.30.255.255
(ap)(DHCP profile "l3-dhcp")# dns-server
10.1.1.50,10.1.1.30
(ap)(DHCP profile "l3-dhcp")# domain-name
corpdomain.com
(ap)(DHCP profile "l3-dhcp")# client-count 200
Distributed L3 profile with VLAN40
(ap)(config)# ip dhcp l3-dhcp
(ap)(DHCP profile "l3-dhcp")# server-type
Distributed,L3
(ap)(DHCP profile "l3-dhcp")# server-vlan 40
(ap)(DHCP profile "l3-dhcp")# ip-range 10.40.0.0
10.40.255.255
(ap)(DHCP profile "l3-dhcp")# dns-server
10.1.1.50,10.1.1.30
(ap)(DHCP profile "l3-dhcp")# domain-name
corpdomain.com
(ap)(DHCP profile "l3-dhcp")# client-count 200
Local profile with VLAN 20
See
Configuring
Distributed
DHCP Scopes
and
Configuring
Local and
Local,L3
DHCP Scopes
Table 74: IAP Configuration for Scenario 3 - IPSec: Multiple Datacenter Deployment
Aruba Instant 6.4.0.2-4.1 | User Guide IAP-VPN Deployment Scenarios | 372