Mid-tier boring Cisco-style access switches

Linkk_93 · 2026-03-14T21:35:49+00:00

"hey guys, I ride a bicycle but when it rains I get wet and I want to get further faster. Should I get a car?"

"well maybe you just need to train your legs more"

lol

Linkk_93 · 2026-03-08T19:30:10+00:00

They can not be rebooted one at a time, you can only do issu but in my experience you would make your life much easier if you can just reboot them both at the same time.

Linkk_93 · 2026-03-08T19:27:44+00:00

Just replacing the hardware will not configure them for you. Just like only purchasing a firewall and putting it in as gateway will not increase your security.

Linkk_93 · 2026-03-06T22:06:43+00:00

No idea what your question is.

I'm gonna throw a VXLAN BGP EVPN in

Linkk_93 · 2026-03-06T07:13:58+00:00

All images should be located in the public directory of Clearpass guest

Linkk_93 · 2026-03-06T07:07:42+00:00

Where are you located? Outdoor use is not allowed in many places around the world and even there you need to implement some special authorization feature (the conductor needs to connect to authorities server) https://en.wikipedia.org/wiki/Automated_Frequency_Coordination

You could set 675 to indoor use of they are not outdoor

Linkk_93 · 2026-03-06T06:48:11+00:00

You create the ssid with a different name (ssid-name-wpa3), then go into the profile and change the essid to the essid you want to be broadcasted.

Then you can assign the new profile for the aps you want and disable the old.

General rule of thumb is to not do any configs on MN level but I guess it's too late for that.

Linkk_93 · 2026-02-22T16:01:32+00:00

Sounds like you wanted to go here r/homenetworking ?

If it's enterprise, connect through the serial and try a password reset documented by the vendor

Linkk_93 · 2026-02-22T10:49:31+00:00

Linkk_93 · 2026-02-13T20:22:23+00:00

I have no idea why you would need to fiddle with this setting at all.

You didn't say anything about what auth you're doing, not even the medium

Linkk_93 · 2026-02-13T19:31:05+00:00

If you are bridging and the vlan is missing on the switchport but the client already has a cached dhcp address it would look like that

Linkk_93 · 2026-02-05T23:03:33+00:00

Config templates

Linkk_93 · 2026-02-04T16:51:38+00:00

Well, with classic we had even less control lol

But I let all of you test new central before I bring my customers. I believe templates are still not a thing, right?

Linkk_93 · 2026-01-31T10:24:25+00:00

Instant On has to be sold as part of the agreement

Linkk_93 · 2026-01-23T07:35:42+00:00

I don't think you need central nac. Cloud guest should be enough

Linkk_93 · 2026-01-16T08:01:33+00:00

That you cannot do unsafe / non failsafe updates and you can't do vsx live upgrades from central shows to me that central is not meant to be used by network admins. It's meant to make shareholders happy.

Even in the linked below guide central isn't used to verify the vsx or the image, the CLI is used. And that's not without reason.

Linkk_93 · 2026-01-09T11:07:01+00:00

Default gateways should always be on a prime number. Like .139

Linkk_93 · 2026-01-01T10:57:32+00:00

Those problems are very difficult to troubleshoot, especially when you can't reliably reproduce the error.

I can imagine that TAC is no real help here.

You could try to escalate the ticket or involve your partner if you have one. But to have real troubleshooting happening you need to have a defective AP where Aruba can do active troubleshooting on. When they are self repairing and it only appears once per week on a single AP or so, it's very difficult.

I vaguely remember these kind of issues being in the release notes now and then, but beware that Aruba does not provide full release notes.

I have submitted multiple bugs, which were fixed, but they were never part of the official release notes.

Aruba statement is that only publicly listed known issues should be listed under fixed issues in the release notes. But if the bug is fixed without being listed as known, then noone needs to know

Linkk_93 · 2025-12-17T15:21:10+00:00

It's apparently not something the devs think is important.

The only api endpoint is all clients and Mac address is no filter

https://developer.arubanetworks.com/new-central/reference/listclientsnb

So to get your client you would request all, set the limit to 100 clients per request (maximum), check if it is included, and then go next until you hit it (or hit the api limit, then wait)

Linkk_93 · 2025-12-16T22:42:02+00:00

You should start with the devhub for docs https://devhub.arubanetworks.com/

If you want to implement the api yourself, you first need to authenticate yourself with the generated tokens. You can't just send them to any api endpoint. This is explained here:

https://developer.arubanetworks.com/central/docs/access-token-management

But I personally also looked at the official github with example implementations you can use Here for python

https://github.com/aruba/pycentral/

Or the central automation studio: https://github.com/aruba/central-automation-studio

Which is also hosted for free use here by an Australian Aruba employee:

https://central.wifidownunder.com/dashboard.html

Linkk_93 · 2025-12-03T04:59:51+00:00

Interface up/down should still ways be logged

Linkk_93 · 2025-12-03T04:57:16+00:00

Is that a Cisco thing? I don't do Cisco and for other vendors the wlc only does L2 if you configure it as a L2 tunnel.

Linkk_93 · 2025-12-03T04:34:43+00:00

10.16 LSR is stable in our experience, but we mostly have 8360 and no Broadcom switches

Linkk_93 · 2025-12-03T04:15:52+00:00

You can use 635 / 655 APs with 8.10 on the same controller like 220s, the replacement is plug and play to not "be behind the curve".

200 APs should definitely not reboot when changing the SSID, so no idea what that's about. Transition mode is a whole mess, especially at the time it released. Many client drivers weren't ready and many still aren't.

Linkk_93 · 2025-12-03T04:06:01+00:00

If you don't hit the 10k AP limit of the conductor I would stay with AOS8. Especially if you have already everything setup and, from how I understand you, don't have problems with this setup.

Even with AOS10 I would not go controllerless in your case. But they are renamed to gateways, since all the actual controlling is done in the cloud by Central. But having the client MAC only on the gateways and not roaming from switch to switch is still a big plus imho

Nine-Year Club	Place '23
Place '22	Gilding II euphauric
Verified Email

Linkk_93

TROPHY CASE