topic AP150w ethernet configuration... in Aerohive Migrated Content

AP150w ethernet configuration...

sglassman — Sat, 03 Nov 2018 01:50:36 GMT

Does anyone have any advice/experience with the AP150w Ethernet configuration? Specifically with radius-we are using an external radius server for all of our wifi but with this AP/Switch it appears we can only configure a single management IP and they share it between the wired/wireless side? On the radius side of things we may need to configure things differently for wired and wireless and I could not find a way to separate them or maybe there isn't a way which would be a big disappointment.

Re: AP150w ethernet configuration...

samantha_lynn — Tue, 06 Nov 2018 03:26:08 GMT

The management IP is going to be per AP, and is typically just used to connect to the device. You can put your client traffic, wired or wireless, on different VLANs to separate the traffic if that's what you're looking for? For wireless clients it would be via the VLAN assignment in the user profile within the SSID they are connecting to. For wired clients, we would make a device template and set what VLANs each port is using via the device template port settings. Is that what you're looking for?

Re: AP150w ethernet configuration...

sglassman — Wed, 07 Nov 2018 21:43:30 GMT

I am talking about management of the 4 port switch that is part of this AP, not the wireless side of things.

Re: AP150w ethernet configuration...

samantha_lynn — Thu, 08 Nov 2018 04:44:59 GMT

Right, the 4 ports on the AP150w are not switch ports exactly, since the device is ultimately still an AP. There is only one management IP, but you can assign different port configurations to different ports to separate/direct your wired traffic if you'd like.

Re: AP150w ethernet configuration...

fredfish — Fri, 04 Oct 2019 23:33:42 GMT

Sam, I know this topic has been over a year old. I'm trying to allow a guest to plug into the switch ports and be managed as a guest like I do on the wireless user profiles. Is that possible and how to i configure the individual ports as there are not any options on the AP config for that.

Re: AP150w ethernet configuration...

samantha_lynn — Fri, 04 Oct 2019 23:38:23 GMT

What switch model are you using? You should be able to assign a user profile to a port type, and then apply that port type to all the ports you want guests connecting to in a switch template. If you can tell me which model you're using and which HiveManager platform you're using, I can give you more specific instructions.

Re: AP150w ethernet configuration...

fredfish — Fri, 04 Oct 2019 23:40:28 GMT

Thank you for the quick reply. I'm using an AP150W, and user profile to a port would work great. I guess since I have never done that I'm not sure where I configure the port in the User profile.

Re: AP150w ethernet configuration...

samantha_lynn — Fri, 04 Oct 2019 23:43:34 GMT

If you're using HiveManager (not HiveManager Classic), you'll want to go to Configure> Open the Network Policy> Device Template tab within the Network Policy> Create a new template for the AP150W> Select the port(s) you want to configure> Assign> Create New> Set the port as either an Access port (to allow only the Native VLAN) or a Trunk Port (to allow multiple VLANS)> Scroll down to the User Access Settings section and choose the user profile you want to apply to that port.

Re: AP150w ethernet configuration...

fredfish — Fri, 04 Oct 2019 23:46:51 GMT

So if I still have an OnPrem device I can't do this?

Re: AP150w ethernet configuration...

samantha_lynn — Sat, 05 Oct 2019 00:07:00 GMT

No, you can, that's why I was asking what HiveManager platform you're using, the instructions will depend on the platform. You are using HiveManager Classic so you'll want to go to Configuration> Open the Network Policy> Find Device Template and click Choose next to that> New> Name the device template> Click on Device Models and choose the AP150W> Save> Back on the Network Policy page highlight the port(s) you want to configure> Configure> New> Name the port template> Save> Back on the Network Policy page you should now see Port Types with the port template you just created> Click Add/Remove under User Profile> Add the user profile you want to apply to those ports.

Re: AP150w ethernet configuration...

fredfish — Sat, 05 Oct 2019 00:12:10 GMT

Sam, I really appreciate the help here. I was able to find the device templates but unfortunately my version only shows BR100 as devices available. Since I can't choose the AP150W, I gather I cannot manage this devices ports 😞

Re: AP150w ethernet configuration...

samantha_lynn — Sat, 05 Oct 2019 00:13:52 GMT

If you go to Configure and edit the network policy itself (gear icon next to the Network Policy when you highlight it)> Can you enable switching and see if that gives you more device template options?

Re: AP150w ethernet configuration...

fredfish — Sat, 05 Oct 2019 00:23:23 GMT

Yes, sir! That gave me the option for the AP150W and it looks correct for the switch ports displayed.

Now I have all three ports setup as a specified port type. Just how do I use that port type to 'limit' access as a guest. I already have all the UserProfiles existing to do that but don't see where to assign it to these ports. Just the Authentication type of MAC or 802.1x

Re: AP150w ethernet configuration...

fredfish — Sat, 05 Oct 2019 00:25:21 GMT

Sorry I see the User Profile now that I saved everything.

Sam you are life saver, nothing like a last minute change in program to upset the IT folks. But, thanks to having these AP150's I'm going to be able to handle their request.

Re: AP150w ethernet configuration...

samantha_lynn — Sat, 05 Oct 2019 00:26:19 GMT

Excellent, I'm glad you found it! Please don't hesitate to let me know if you run in to any further issues.

Re: AP150w ethernet configuration...

ckness — Fri, 11 Oct 2019 07:45:37 GMT

Can you tell me why when I try this exact configuration to apply a firewall guest policy on a ethernet interface it does not work and support tells me its not supported by design ?

case 284589

Dev Ops team confirmed that the Firewalls in the user profiles do not work at the port level. I apologize but it seems that the behavior is not a bug but instead is expected functionality. Your sales rep would be able to file a feature request on your behalf if that is functionality that you need.

Joceline Hernandez

(866) 365-9918 (US toll-free)

+1-408-510-6100 (International)

Re: AP150w ethernet configuration...

samantha_lynn — Mon, 14 Oct 2019 20:33:08 GMT

Thank you for letting me know. I've been following up on this for you and found the following:

Some APs (AP245x, AP630 for example) pass traffic to the forwarding engine, which will apply the user profile rules as discussed above. The AP 150W does not forward traffic to the forwarding engine but instead sends the traffic directly to the switching hardware, so the user profile rules (where the firewall rules are defined) do not get applied on this model. I'm sorry for any confusion, please let me know if I can clarify anything further.

Re: AP150w ethernet configuration...

fredfish — Mon, 14 Oct 2019 22:34:49 GMT

Sam, I really appreciate the assistance before and you following up with an answer. Although the AP150 will not do what I want I at least know it was not a setup issue. Thanks again.