Table of Contents
Advertisement
option CAPWAP 171.0.0.3, 192.168.20.31;
class "vendor-class" {
match substring (option vendor-class-identifier,0,2);
#match option vendor-class-identifier;
}
subclass "vendor-class" "HP" {
vendor-option-space ArubaInstantAP;
#option ArubaInstantAP.cfg "runningConfig_5400R.txt";
#option ArubaInstantAP.img "KB_16_01_0004.swi";
option ArubaInstantAP.org "aw_group:fold,171.0.0.100,secret1234";
}
subclass "vendor-class" "Ar" {
vendor-option-space ArubaInstantAP;
#option ArubaInstantAP.cfg "runningConfig_5400R.txt";
#option ArubaInstantAP.img "KB_16_01_0004.swi";
option ArubaInstantAP.org "aw_group:fold,171.0.0.100,secret1234";
}
range 192.168.20.10 192.168.20.30;
}
Limitations
•
The HTTPS check-in to AirWave does not support HTTPS proxy.
•
For non-ZTP cases, the AirWave check-in starts by validating the following condition:
Primary or Management VLAN must be configured with the IP address and one of the interfaces must be UP.
By default, VLAN 1 is the primary VLAN.
•
OOBM redirection is not supported by VSF.
Best Practices
•
Implement ZTP in a secure and private environment. Any public access may compromise the security of the
switch, as follows:
◦
Since ZTP is enabled only on the factory default configuration of the switch, DHCP snooping is not
enabled. The Rogue DHCP server must be manually managed.
◦
The DHCP offer is in plain data without encryption. Therefore, the offer can be listened by any device on
the network and they can in turn obtain the AirWave information.
◦
The TLS certificate of the server is not validated by the switch during the HTTPs check-in to AirWave. The
AirWave server must be hosted in a private and secure environment of the switch.
Configure AirWave details manually
This section focuses on configuring the switch manually to reach out to AirWave. Manual configuration may be
required, if ZTP is disabled due to the following scenarios or if AirWave credentials are not provided during the
DHCP offer:
•
Switch with configuration that explicitly disables ZTP
•
Switch with nondefault configuration
•
Switches that have upgraded from older images to 16.xx
Chapter 10 Zero Touch Provisioning with AirWave and Central
309
Advertisement
Table of Contents
Troubleshooting
