Видео

Thank you so much Simon and really happy to hear that from you❤️❤️❤️

@@sirvic1506 thanks for the nice comment

You’re welcome

Exam HPE6-A73 certification-learning.hpe.com/TR/datacard/Certification/Aruba-ACSPn

@@austinaaron7018 many thanks for the comment surely 👍

Thanks my friend

Glad to hear that

@@peterbirtles3322 good luck 🤞

Most welcome

Symmetric IRB is good when you a large scale deployment and there limited MAC address tables then it is a good choice. It needs slightly few more commands to add

That is the main reason. I’ll look for you if there any other reason

Most welcome

Thanks for visiting

Wa alaikum assalam! I'm doing well, thank you! Lian is great too! We appreciate your kind words about the subscribers, Alhamdulillah!

Great to hear!

@@abdullahalhalabi1 thanks for the comments

@@tylersaini1535 sure

you are welcome my friend

Most welcome

Many thanks for watching

Thanks Abdulla

Thank you ❤

Thanks

Thanks Kareem appreciated

Thanks for that I am replacing it

@@nafithsalama thank you. All looks perfect now🥳🥳

There is no exam for clearpass

@@nafithsalama what's the replacement?

@@jjzz541 hi I am planning to do so I will create a whole new series labs only. Probably after summer

@@nafithsalama cheers :)

@@umangishchumun4886 many thanks . Yes you actually don’t assign the VLAN to the port where the client is connected to

So when you configure the cluster it should be symmetrical from VLAN respective meaning whatever VLAN you. Configure on one controller will be the same on the other gateway

So yes it is going to be fine in terms of user traffic assuming you planned well and as best practice design for N+N redundancy

Thank you

Many thanks i will include all of these modules as labs as well in the near future

Many many thanks

@nafithsalama we have one user cannot join the wifi. our CPPM integrated with DC. when user try to join gives error certificates. the user already joined domain

@@askmethod it can be different reasons. Is Certificate valid? Is it revoked? does the client machine trust the Certificate issuing CA?

@nafithsalama all clients jioned normally. specially this client refused to connect . when I checked CCPM it said trust CA certificate invalid

@@askmethod Did you look at the certificate details on the client

Many thanks for watching but I am sorry I can’t share the slides they’re copy righted

Hi Patrick. I will upload today just missing :)

@@nafithsalama thanks!! ;)

That is correct

You can use what so called dual SSID onboarding so first they’ll connect to and open ssid pretty much like guest then once onboarded they can use the secure one

@@nafithsalama first let me apologize for not spelling your name correctly but that auto-type. Thank you for your reply

I managed finally to do it. The thing is, i set up a rule to deny any from the guest pool ip to the mobility controlller as dest, but this rule wasn't the first one, i just moved it to the top and now works fine. i didn't know it should be the first otherwise don't work. Thanks a lots

Well done you see how Aruba solution is so flexible 😂

Interesting setup. Media type needs to be the same but not sure about the mode I never tried it

@@nafithsalama Thanks for the reply. I tried it and it works.

Thanks

Hi First of all many thanks for sharing your thoughts. for the BYOD to be implemented yes you need a license for that. you can try evaluation license if want to. For the different levels of Access you can have say employee one role and create your policies (FW) for the employee and guest usually get guest role which only allows them to access the internet (This might apply to the contractor as well in your case since you don't have proper OnBoard license). if you are going to use gateway to tunnel it might also be a good idea to terminate the guest tunnel on a separate gateway this gives you a more control over guest traffic If you need further clarification please let me know All the best

@@nafithsalama Hi Nafith, thank you very much for you reply, i really appreciate that; For the licence, i can't have one unfortunatelly, so for this reason, i was looking for a solution to do that. So you saying that the roles (employee and guest) are already different by default ? I mean if a guest get an access by guest role and an employee by employee role, they don't have already the same access ? is that correct ? if yes, what's the difference for exemple ? which kind of things the guest has a deny y default ? It's really a good idea for the tunnel and gateway, since im really new one to the clearpass, how i can technically do that ? how to terminate the guest tunnel on a separate gateway in real exemple? Thank you very much

@@amnayamnay6821 In nutshell ClearPass job (after authentication) is to assign the roles. the roles have policy(s) and each policy has rules (think of them as ACLs but they are session based in most cases) the details of the role is done on the device(s) such as APs. GWs.

@@nafithsalama sorry for thoses questions but i dont understand verry well. My config is like that : Aruba ap 515 (5 or 6), acting like on virtual controller and i have Clearpass Are you tryong to say that the roles needs to be set on the virtual controller and ont in the Clearpass ? If yes could you please give an exemple ?

Yes that is all done with your Access policy (FW)

Do you something like a design document or is it how Airwave is internally structured

@@nafithsalama three tier architecture for Airwave OS, Database and Application

Thanks ❤

Hi i am planning to post more videos on this topic. you can also attend the official training for this course.

You can archive the device and by doing so it is available to be used elsewhere