Aruba Activate User Manual
ArubaActivate
User Guide
Copyright Information
© Copyright 2018 Hewlett Packard Enterprise Development LP.
Open Source Code
This product includes code licensed under the GNU General Public License, the GNU Lesser General Public
License, and/or certain other open source licenses. A complete machine-readable copy of the source code
corresponding to such code is available upon request. This offer is valid to anyone in receipt of this information and
shall expire three years following the date of the final distribution of this product version by Hewlett Packard
Enterprise Company. To obtain such source code, send a check or money order in the amount of US $10.00 to:
Hewlett Packard Enterprise Company
Attn: General Counsel
3000 Hanover Street
Palo Alto, CA 94304
USA
0511311-1 | October 2018 Activate | User Guide
Table of Contents
Table of Contents 3
Welcome to Aruba Activate! 5
Get started here... 5
...see what's new... 5
...or find the information you need 5
Basic Provisioning Workflow 6
Rules Overview 6
Troubleshooting 8
Device Setup and Provisioning 10
Create and Manage Folders 10
Define Rules 13
Assign Devices to Folders 19
Manually Add Devices 20
Managing Users 23
View User Information 23
Manage User Accounts 25
Managing Device Data 27
Monitor all Devices 27
Monitor Individual Devices 31
Create Whitelists 33
Export Device Data 34
ArubaActivate APIs 35
Inventory API-Update Example 36
Inventory API-Query Example 37
File API-Query Example 42
Folder API-Update Example 44
Folder API-Query Example 45
Rule API-Update Example 46
Aruba Activate Release 6| User Guide Table of Contents | 3
Rule API-Query Example 47
Customer API-Query Example 49
Whitelist Query API 50
Firmware API-Query Example 52
Device History API-Query Example 53
Sample Curl Code 54
Client.java Sample 55
Request.java Sample 55
What's New in Activate 62
Known Issues 62
Improvements and Modifications 62
64
4 | Table of Contents Aruba Activate Release 6| User Guide
Chapter 1
Welcome to Aruba Activate!
ArubaActivate is a cloud-based service that helps provision your Aruba devices and maintain your inventory.
For network administrators with experience deploying Aruba infrastructure, installing and configuring one or two
individual access points (APs) is a relatively simple and straightforward process. Provisioning APs in a large
corporate network is also a straightforward process, accomplished through ArubaOS Layer-2 discovery, DHCPor
DNS. But what if you want to install an AP at a branch office or remote site where no network administrator is
available? Or what if you need to deploy several APs all at once? A simple solution for this type of deployment is
ArubaActivate.
Activate automates the provisioning process, allowing a single IT technician to easily and rapidly deploy devices
throughout a distributed enterprise. When your company orders a new access point (AP) from Aruba, that device is
automatically added to your inventory in Activate. Once a device is in your inventory it can be automatically or
manually associated to a folder and provisioning rule. A remote technician only needs to connect the Instant AP to
the Internet, and that device will securely connect to Activate, retrieve its provisioning information, then use the
provisioning information to connect to its configuration master (controller or AMP) and update its configuration. This
entire process takes less than ten minutes and requires no human intervention, allowing for true zero-touch
provisioning.
Get started here...
The Basic Provisioning Workflow section of this guide provides a general overview of each step required to configure
your Aruba Instant points for remote deployment. If you are new to ArubaActivate, this is a good place to start.
...see what's new...
The What's New in Activate section of this guide describes the latest changes and improvements to the Aruba
Activate Release 6 service.
...or find the information you need
Other sections of this guide include detailed information on how to set up, monitor, and manage your devices and
device data. Select any of the headings in the navigation bar or click any of the following links for step-by-step
instructions on how to accomplish a specific task using ArubaActivate.
l Device Setup and Provisioning on page 10: Create and manage device folders, configure provisioning and
notification rules, and assign devices to a specific folder.
l Managing Users on page 23: View and manage your company's user accounts, and set folder permission levels
for each account.
l Managing Device Data on page 27: Review configuration details for a specific device, or view and sort an
inventory list of all your Instant or Remote AP devices. You can create and export whitelists of Arubadevices
that can be input into your controller or an external database.
l The Rules Overview on page 6 provides detailed information about the different rule types that supply
provisioning information to Instant APs, auto-assign devices to folders, and trigger notification events.
l Troubleshooting on page 8 provides suggestions for troubleshooting and fixing common issues.
Aruba Activate Release 6| User Guide Welcome to Aruba Activate! | 5
Basic Provisioning Workflow
Activate enables zero-touch auto-configuration of Instant APs by associating the devices to the configuration master
(your AirWave server) from which they can retrieve their configurations. Before you begin setting up ArubaActivate
to provision your APs, though, you should be able to answer the following questions:
l Will all my devices have similar configuration requirements?
l Do I know which configuration I want to assign to my device? An Instant AP must be assigned to an organization-
specific configuration (folder/group) on an AirWave server. If your distributed APs have different requirements,
you may want to identify multiple configurations for different AP types or deployment locations.
Step 1: Identify Configurations
Before you can provision new Instant APs, you must identify the AirWave Management Platform (AMP) or Aruba
controller information you want to push to new devices.
Step 2: Create Folders
Folders allow you to group devices based on common provisioning scenarios. Each folder may contain one or more
rules. Create a new folder for each AMP, or AMP group policy. You may also find it useful to create groups of folders
for different device types or branch office locations, then add subfolders with Instant AP provisioning rules under
those higher-level folders.
Step 3: Define Rules
Create custom rules to supply provisioning information to Instant APs. You can also use rules to automatically
assign devices to folders, and identify events that will trigger email notifications.
Step 4: Select Devices
Sort and filter the device list to display just those devices you want to assign to a new folder. If you want to assign
new, unprovisioned devices, consider sorting the list by the "Last Seen" or "Ship Date" table columns to display the
newest entries at the top of the list.
To convert an instant AP to a remote AP, you must first create a rule that will supply provisioning information to the
AP and add the remote AP's MAC address to the remote AP whitelist on the controller. ArubaActivate allows you to
create a remote AP whitelist that you can input into Aruba controller.
Step 5: Assign Devices to Folders
All new devices are assigned to the default folder. When you assign devices to a different folder, the device will
immediately inherit the rules within the folder.
Rules Overview
ArubaActivate supports three categories of rules:
l Provisioning Rule: Provision devices with configuration master information.
l Move to Folder Rule: Move all devices matching certain criteria to the specified folder. You can move devices
based on shipping info, device category, part number, or customer PO.
l Notification Rule: Notify recipients when a device ships to your company, or when a specific provisioning or
"move to folder" rule has run, or the device requests a new firmware version.
Each rule category is described in detail in the sections below.
6 | Welcome to Aruba Activate! Aruba Activate Release 6| User Guide
Provisioning Rules
When a device in factory-default mode sends its MAC address, serial number, and mode to ArubaActivate, Activate
will respond with proper provisioning information based on the device's operating mode and rule definition within a
folder. Activate will only respond to a device when the device is associated with a customer that has enabled
Activate by configuring a provisioning rule.
Table 1:
Provisioning Rule Types
Rule Type Description
IAPto AirWave An IAP-to-AirWave rule instructs Activate to send a device operating in Instant AP
mode the IP address of the AirWave (AMP) server that will act as the device's
configuration master, and the AMP organization and shared secret. AMP uses
the organization information to segregate the AP into configuration and reporting
groups. The shared secret sent by Activate acts as the trust mechanism between
the Instant AP and AMP.
NOTE: The first device added to a new organization within an AMP must be
manually authorized using the AMP user interface. All subsequent APs in that
organization with the proper shared secret will be auto-authorized without human
intervention into the AMP.
IAP to RAP This rule instructs Activate to send a device operating in Instant mode the IP
address of the remote AP's configuration master, and instructions to convert the
device to operate in remote AP mode. IAP-to-RAP rules require you to specify an
APgroup for the device, but this information is not sent directly to the AP. When
you use Activate to generate a remote APwhitelist to upload into the controller,
the device's AP group is included in that whitelist information. The AP group
instructions tell the controller how to configure the remote AP. For more
information on creating a remote APwhitelist, see Create Whitelists.
IAP to CAP This rule converts an Instant AP to a campus AP, and provisions the campus AP
to communicate with its configuration master controller.
Switch to AirWave A Switch-to-AirWave rule instructs Activate to send an Aruba Mobility Access
Switch (MAS) or a HPE ArubaOS Switch, the IP address of the AirWave (AMP)
server that will act as the device's configuration master, and the shared secret for
the server. AirWave uses the group and folder information in the rule to
segregate the switch into configuration and reporting groups. The shared secret
sent by Activate acts as the trust mechanism between the switch and the AirWave
server.
Controller to AirWave A Controller-to-AirWave rule instructs Activate to send the controller the IP
address of the AirWave (AMP) server that will act as the device's configuration
master, the Activate folder and group to which the controller should be
associated, and the AMP shared secret, which acts as the trust mechanism
between the controller and AMP server.
Branch to Master Controller Provision an Aruba branch controller to communicate with its configuration
master controller.
Managed Device to Master
Controller
Provision a managed device to communicate with its configuration master
controller.
Aruba Activate Release 6| User Guide Welcome to Aruba Activate! | 7
Move-to-Folder Rules
A move-to-folder rule automatically moves a device to a chosen folder based upon specific device criteria. A
Category move-to-folder rule moves devices to a selected folder based upon the category of that device. Activate
allows you to define category move-to-folder rules for each of the following category types:
l Instant AP
l Remote AP
l controller
l Switch
Part Number move-to-folder rules move APs to specific folders according to the device's part number. Customer
PO and Shipping Info rules move APs that match a specified string contained within customer PO or shipping data
for that device.
Notification Rules
A Shipment notification rule sends an email notification when Activate receives information that devices are being
shipped to your company. (Note, however, that Activate may not receive shipment information until up to a day after
the equipment has actually left Aruba or your device reseller.) A shipment notification rule can only be assigned to
the default folder, because that the folder to which all new devices are assigned.
Provisioning rules send email notifications when a device requests provisioning information from Activate, and FW
Check rules notify users when the device requests a firmware upgrade from Activate. The Move-to-folder
notification rule alerts users when devices are automatically or manually moved to another folder.
See also:
Creating a New Rule
Modifying an Existing Rule
Troubleshooting
Use the following steps to troubleshoot problems using ArubaActivate.
Connectivity Issues
Ensure that the Instant AP can access
l Verify that the AP has a valid IP address by associating the AP with the SSID and viewing the IP address.
l Verify that the network does not have a proxy server. (An Instant AP does not support auto-detection of proxy
servers.)
l Verify that the subnet does not contain another Instant AP.
l Make sure the local DHCP or DNS servers are not providing provisioning data to the Instant AP.
l Verify that the AP is in factory- default mode. You can reset an Instant AP back to factory-default mode by
pushing the factory reset button or clearing the configuration from the Instant AP’s WebUI.
l Check to make sure the Instant AP is running ArubaOS 3.0 or later. If the Instant AP is running an earlier version
of ArubaOS, click Check for New Firmware in the the Instant AP’s WebUI. Upgrade to the recommended
version, and the Instant AP should auto-connect to Activate for provisioning.
device.arubanetworks.com:443
by verifying the following:
Activate Issues
The device must be included in the Activate inventory and properly associated with folder and rule.
l Make sure the device shows up in your device inventory. You can validate this by searching for the MAC or serial
number in the Devices list.
8 | Welcome to Aruba Activate! Aruba Activate Release 6| User Guide
l Make sure the AP resides in a folder with proper rule.
l Make sure there are no historical communication history records with an error status.
AMP Configuration Master Issues
Ensure the AP is retrieving the proper configuration by checking the following issues:
l Verify AMP has an IP address that is exposed to the Internet port 443.
l Verify AMP is not handing back an internal IP address to the device in the template. You can see the IP address
that the Instant AP uses to communicate with AMP in the Instant AP’s WebUI. You may need to change the
template variable ams-ip %manager_ip_address% to hardcode the external IP address. The new setting
would be in the format
l Make sure AMP contains a group and folder that correlates to the organization name configured in the
provisioning rule in Activate.
l Verify that template exists for the AMP group that correlates to the organization name configured in the
provisioning rule in Activate.
l Check to make sure this device is not the first AP that has been added for this organization. If it is the first AP for
this organization, it will show up in APs/Devices > New list in the AMP and will need to be manually added.
l Set the Automatically Authorize Virtual Controller Mode setting in the the AMP Setup > General >
Automatic Authorization section to Manage Read/Write.
l Set the Add New Thin APs Location setting in the Groups > Basic > Automatic Authorization section to
Same Group/Folder as Discovering Device.
l Set the Audit Configuration on Devices setting in the Groups > Basic > Basic section to Yes.
ams-ip xxx.xxx.xxx.xxx
.
Browser Compatibility
The Activate application has been designed to work best with Google Chrome Browser version 40+. You may
experience issues while using other browsers.
Aruba Activate Release 6| User Guide Welcome to Aruba Activate! | 9
Chapter 2
Device Setup and Provisioning
When an APin factory-default mode powers on and connects to the Internet, it will automatically check into Aruba
Activate. Activate supplies provisioning data to the Instant AP, which will then communicate with its configuration
master (controller or AirWave Management Platform). The AP's configuration master will push the configuration and
any required firmware update to the AP.
If the requirements for these devices ever change and you need to reprovision an AP, move the AP to another folder
within Activate, then set the APback to its factory-default setting by pushing the factory reset button. The AP will
repeat the provisioning process, applying the provisioning rules in its new folder.
Devices are grouped into folders that can contain a set of provisioning and email notification rules. If you want to
group your devices by unique provisioning requirements, you can create separate folders that each contain different
provisioning rules. You can also group devices by location or device type by creating folders or subfolders for each
device type or installation site.
For information on setting up ArubaActivate to provision your devices, refer to the following sections of this user
guide:
l Create and Manage Folders: Define folders for your devices, then view and manage the list of folders.
l Define Rules: Create and edit provisioning, folder, or notification rules to supply provisioning information to Aruba
devices, auto-assign devices to folders, and trigger notification events.
l Assign Devices to Folders : Filter and sort the Devices list to select the devices you want to move to a different
folder. After the move, the devices will inherit the rules in the new folder. You can automatically move devices
into a folder by configuring a move-to-folder rule based on shipping info, purchase order, device category, or part
number.
Create and Manage Folders
Each folder can have one or more rules that assign provisioning information to Instant APs, and identify events that
will trigger email notifications. When you move a device into a folder, the device will inherit the rules in the folder. A
users' access to ArubaActivate depends upon the folder to which the user account is assigned. Users cannot
assign devices to a folder to which they do not have access.
When the first user for your company accesses ArubaActivate, the system shows only one folder, the top-level
default
and notification rules, then you need to create additional folders. You must create at least one unique folder for each
configuration master. A folder can have both an Instant AP provisioning rule and a IAP-to-remote AP provisioning
rule, but cannot have more than one provisioning rule of each type. You may also find it useful to create groups of
folders for different device types or branch office locations, then add subfolders with provisioning rules under those
higher-level folders.
folder. If you want to use the Activate to provision your network devices with different configuration policies
Creating a New Folder
To add a new folder to the Folders list:
1. Click the Setup icon ( ) to display the Setup page.
2. Click the New link in the title bar of the Folders list. The Create a New Folder window appears.
3. Enter the following information for the folder:
Aruba Activate Release 6| User Guide DeviceSetup and Provisioning | 10
l Name: Name of the new folder. The folder name must be 100 characters or less, and cannot include the
characters ?, # or &.
l Parent: The new folder's parent folder. The new folder will be created under the selected parent.
l Notes: (Optional) Use this field to add any additional notes about the folder.
4. Click Done to save the new folder.
Sort and Filter the Folders List
The Folders list displays the following information types for each folder.
Table 2:
Folders List
Column Description
Name Name of the folder
Parent Name of the parent folder. A top level folder will have the Default parent folder. Lower-level sub-
folders will display their immediate parent folder in this column.
Devices Number of devices in the selected folder. If a folder contains subfolders with their own devices, this
column will still only show the devices assigned to that folder, not its subfolders.
By default, the Setup page displays aggregate information for all folders. When you select an individual entry in the
Folders list, the Folder Detail section at the bottom of the window displays information about the user that created
the folder, the date it was created, and any folder notes. The Rules and Users tables on the Setup page
automatically filter to display just those rules and users associated to the selected folder.
ArubaActivate allows you to sort and filter folder data to display just the information you need. By default, the
Folders list displays the all folders, sorted by folder name. Click any of the Folders list column headings to sort the
information in the list by that column criteria. You can also click the filter icon ( ) and select which entries to
display. The filter mechanism for each heading depends upon the type of column, and number of unique entries in
that column.
Filtering Small to Medium-Sized Folders Lists by Folder Name, Parent or Customer
To filter data in a Folders list with fewer than fifty unique entries:
1. Click the Setup icon ( ) to display the Setup page.
2. Select the filter icon ( ) above a Folder Name, Parent or Customer column heading. The filter displays a
checkbox for each entry type.
3. To select an individual entry, uncheck the select all option and select the entry you want to display.
4. Click OK. The filter icon by the column heading will turn blue to indicate that column has an active filter.
11 | Device Setup and Provisioning Aruba Activate Release 6| User Guide
To remove a filter:
1. Select the filter icon ( ) above a column heading with an active filter.
2. Click the clear filter icon ( ) in the filter header to clear the current filter settings.
Filtering Large Folders Lists with 50+ Unique Entries by Folder Name, Parent or Customer
Columns with more than fifty unique entries allow you to search within that column for a specific text string.
To filter data in a column with more than fifty unique entries:
1. Click the Setup icon ( ) to display the Setup page.
2. Select the filter icon ( ) above a Folder Name, Parent or Type column heading.
3. Select one of the following search types:
l Contains: Search for entries that contain the search string.
l Matches: Search for entries that exactly match the search string
l Does not Match: Search for entries that do not exactly match the text string
4. Enter the search string into the search field.
5. Click OK. The filter icon by the column heading will turn blue to indicate that column has an active filter.
To remove a filter:
1. Select the filter icon ( ) above a column heading with an active filter.
2. Click the clear filter icon ( ) in the header to clear the current filter settings.
Filtering Folders Lists by Devices, Users or Rules
To filter the Folders list by the numbers of associated devices, users or rules:
1. Click the Setup icon ( ) to display the Setup page.
Aruba Activate Release 6| User Guide DeviceSetup and Provisioning | 12
2. Select the filter icon ( ) above a Devices, Users or Rules column heading.
3. Select All to view all entries, or select and click the drop-down list to search the list using one of the following
options:
l >: Display entries with a value greater than the search value.
l >=: Display entries with a value greater than or equal to the search value.
l <: Display entries with a value less than the search value.
l <=:Display entries with a value less than or equal to the search value.
4. Enter a number into the search field.
5. Click OK. The filter icon by the column heading will turn blue to indicate that column has an active filter.
To remove an filter:
1. Select the filter icon ( ) above a column heading with an active filter.
2. Click the clear filter icon ( ) to clear the current filter settings.
Modifying an Existing Folder
Any folder created by a user can be deleted or modified. Note that you cannot edit or delete the default folder, or
delete any folder that contains a subfolder, or has associated users, rules or devices.
To delete or modify the description and settings of an existing folder:
1. Click the Setup icon ( ) to display the Setup page.
2. Select any folder entry from the Folders list.
3. Click the Edit button below the Folder Detail section at the bottom of the page.
4. Change the folder name, folder parent or note fields as desired, then click Done to save your settings.
Define Rules
ArubaActivate uses rules to supply provisioning information to Aruba devices, auto-assign devices to folders, and
trigger notification events. A provisioning rule supplies provisioning information when a device in factory-default
mode communicates with the cloud. When Activate receives information about a device's current operating mode,
Activate responds with proper provisioning information based on the devices operating mode and folder rule
definitions.
Refer to the Rules Overview for detailed information about of the different provisioning, notification and move-to-folder
rule types supported by ArubaActivate.
Creating a New Rule
To create a new provisioning rule:
1. Click the Setup icon ( ) to display the Setup page.
2. Click the New link in the title bar of the Rules list. The Create a New Rule window appears at the bottom of the
page. The individual configuration settings displayed in this window vary, depending upon the type of rule you
configure.
l Table 3 describes Provisioning rule settings.
l Table 4 describes Move to Folder rule settings
l Table 5 describes Notification rule settings.
3. Enter a value in each field for the selected rule type, then click Done to save your settings.
13 | Device Setup and Provisioning Aruba Activate Release 6| User Guide
Table 3:
Provisioning Rule Configuration Settings
Provisioning Rule Type Provisioning Rule Settings
IAP to AirWave Provision an Instant AP (IAP) to communicate with its configuration master AirWave
(AMP) server. To create an IAP-to-AirWaverule, configure the following settings:
l Rule Type: Select Provisioning Rule from this drop-down list.
l Parent Folder: The rule applies to devices within this folder.
l Provision Type: Select IAP to AirWave.
l AMP IP: The IP address of an AirWave server that will act as the device's
configuration master. This field does not support DNSnames.
l Shared Secret: The shared secret sent by Activate acts the trust mechanism
between the Instant AP and AMP.
l Organization: AMP uses this organization information to segregate the AP into
a configuration policy.
l AMP-CN: Specify the common name of the AirWave server.
l Controller: IP address of the controller that will manage the IAP.
l Controller-MAC: MAC address of the controller that will manage the IAP.
l Rule Name: Activate suggests a name for the new rule, based upon the rule
type and folder. You can use this suggested name, or create your own custom
name for the rule.
IAP to RAP Convert an Instant AP to a remote AP (RAP), and provision the remote AP to
communicate with its configuration master controller. To create an IAP-to-RAPrule,
configure the following settings:
l Rule Type: Select Provisioning Rule from this drop-down list.
l Parent Folder: The rule applies to devices within this folder.
l Provision Type: Select IAP to RAP(Controller).
l AP Group: Name of the AP group to which the device will be associated.
l Controller: IP address of the controller that will manage the RAP.
l Controller-MAC: MAC address of the controller that will manage the RAP.
l Rule Name: Activate suggests a name for the new rule, based upon the rule
type and folder. You can use this suggested name, or create your own custom
name for the rule.
IAP to CAP Convert an Instant AP to a campus AP, and provision the campus AP to
communicate with its configuration master controller. To create an IAP-to-CAPrule,
configure the following settings:
l Rule Type: Select Provisioning Rule from this drop-down list.
l Parent Folder: The rule applies to devices within this folder.
l Provision Type: Select IAP to CAP(Controller).
l AP Group: The AP group defines a group of configuration settings for a campus
AP. Enter the name of the AP group to specify the group into which the device
will be placed.
l Controller: IP address of the controller that will manage the campus AP..
l Persist Controller IP: Select this check box if you want the controller IPto
Aruba Activate Release 6| User Guide DeviceSetup and Provisioning | 14
Table 3:
Provisioning Rule Configuration Settings
Provisioning Rule Type Provisioning Rule Settings
persist.
l Rule Name: Activate suggests a name for the new rule, based upon the rule
type and folder. You can use this suggested name, or create your own custom
name for the rule.
Switch to AirWave Provision an Aruba Mobility Access Switch (MAS) or an HPE ArubaOS Switch to com-
municate with its configuration master AirWave (AMP) server. To create a Switch-toAirWave rule, you must configure the following settings:
l Rule Type: Select Provisioning Rule from this drop-down list.
l Parent Folder: The rule applies to devices within this folder.
l Provision Type: Select Switch to AirWave.
l AMP IP: The IP address of an AirWave server that will act as the device's
configuration master. This field does not support DNSnames.
l Shared Secret: The shared secret sent by Activate acts the trust mechanism
between the Instant AP and AMP.
l AMP Group: The AMP group defines a group of configuration settings for an
Aruba switch. Enter the name of the AMP group to specify the group into which
the device will be placed.
l AMP Folder: An AMP folder defines permissions for devices placed within that
folder. Enter the name of an AMP folder to specify the folder into which the
device will be placed.
l Controller: If your deployment requires a site-to-site tunnel between the Mobility
Access Switch or HPE ArubaOS Switch and AirWave, select the MAC address
of the controller that will act as a VPN concentrator for the AirWave server side
of the VPNtunnel.
l Backup Ctrl IP: If your deployment has a backup controller, specify the
IPaddress of the backup controller.
l Rule Name: Activate suggests a name for the new rule, based upon the rule
type and folder. You can use this suggested name, or create your own custom
name for the rule.
Branch to Master Controller Provision a branch controller to communicate with the master controller from which
the branch will download its configuration. To create abranch-to-master-controller
rule, configure the following settings:
l Rule Type: Select Provisioning Rule from this drop-down list.
l Parent Folder: The rule applies to devices within this folder.
l Provision Type: Select Branch to Master Controller.
l Primary Controller: MAC address of the primary master controller. Activate
sends a branch controller whitelist with information about the controllers in this
folder to the master controller with this MAC address.
l Primary Ctrl IP: IP address of the primary master controller.
l Backup Controller: (Optional) MAC address of a backup master controller, for
deployments that require Layer-3 redundancy.
l Backup Ctrl IP: (Optional) Enter the IP address of the secondary (backup)
master controller.
15 | Device Setup and Provisioning Aruba Activate Release 6| User Guide
Table 3:
Provisioning Rule Configuration Settings
Provisioning Rule Type Provisioning Rule Settings
l Count ry Code: Select a country code to be assigned to the branch controllers in
the specified folder.
l Branch Config Group: Enter the name of a branch config group to assign that
group of branch configuration settings to the branch controllers in the specified
folder.
l Rule Name: Activate suggests a name for the new rule, based upon the rule
type and folder. You can use this suggested name, or create your own custom
name for the rule
Managed Device to Master
Controller
Provision a Managed Device to communicate with the master controller from which
the managed device can download its configuration. To create aManaged Deviceto-Master-controller rule, configure the following settings:
l Rule Type: Select Provisioning Rule from this drop-down list.
l Parent Folder: The rule applies to devices within this folder.
l Provision Type: Select Managed Device to Master Controller.
l Redundancy Level: There are two available options—No redundancy and L2.
l Config Node Path: The configuration node path for the managed device.
l Master Controller: MAC address of the primary master controller.
l Master Controller IP: IP address of the primary master controller.
l VPNConcentrator MAC: MAC address of a VPN concentrator. This parameter
is only required for network topologies where the managed device creates a
VPN tunnel to a VPN concentrator which lies outside the firewall containing the
master controller.
l VPN Concentrator IP: IP address of a VPN concentrator, This parameter is only
required for network topologies where the managed device creates a VPN
tunnel to a VPN concentrator which lies outside the firewall containing the
master controller.
l Backup VPN Concentrator MAC: MAC address of a secondary VPN
concentrator. This parameter is only required for network topologies where the
managed device creates a VPN tunnel to a secondary VPN concentrator which
lies outside the firewall containing the master controller.
l Count ry Code: Select a country code to be assigned to the managed device in
the specified folder.
l Rule Name: Activate suggests a name for the new rule, based upon the rule
type and folder. You can use this suggested name, or create your own custom
name for the rule.
Aruba Activate Release 6| User Guide DeviceSetup and Provisioning | 16
Table 4:
Move to Folder Rule Configuration Setting
Move to Folder Rule
Setting
Description
Rule Type Click the Rule Type drop-down list, and select Move to Folder.
Move to Folder Select the destination folder into which the AP will be moved.
Move by Click the Move By drop-down list and specify one of the following filtering criteria:
l Device Category: Filter by device type (AP, Instant AP, controller, or switch).
l Part Number: Move devices with a specific model number.
l PO Number: Move devices whose purchase order contains a specified string.
l Billing Info: Move devices whose billing data contains a specified string.
l External IPaddress range: Move devices within an specific IP address range.
Rule Name ArubaActivate suggests a name for the new rule, based upon the rule type and folder. You
can use this suggested name, or create your own custom name for the rule.
Table 5:
Notification
Rule Settings
Notification Rule Configuration Settings
Description
Rule Type Click the Rule Type drop-down list, and select Notification.
Email on Select the event type that will trigger the notification:
l Shipment: Notify when a device is shipped to your company by Arubaor a reseller
l Provisioning: Notify when a device requests provisioning information.
l Firmware Update: Notify when a device requests the latest firmware
l Move to Folder: Notify when a device has been moved to a new folder.
For Rule
For Provisioning and Move to Folder rules only
Specify the name of the rule that triggers the email notification.
Parent Folder
For Firmware Upgrade rules only
Specify folder of the devices whose firmware upgrade triggers the notification event.
Email To Enter a comma-separated list of email addresses to be sent a notification message when the
specified event is triggered.
Rule Name ArubaActivate suggests a name for the new rule, based upon the rule type and folder. You can
use this suggested name, or create your own custom name for the rule.
Sort and Filter the Rules List
The rules list displays the following information types for each folder.
17 | Device Setup and Provisioning Aruba Activate Release 6| User Guide
Table 6:
Rules List Information
Column Description
Folder Folder to which the rule is assigned
Name Name of the rule
Type
The rule is one of the following rule types:
l Notification
l Provisioning
l Firmware Upgrade
l Move to Folder
When you select an individual entry in the Rules list, the Rule Detail section at the bottom of the page also displays
information about the user that created the rule, and the date it was created.
ArubaActivate allows you to sort and filter folder data in every column to display just the information you need. By
default, the rules table displays the entire Rules list, sorted by rule name. Click any of the list's column headings to
sort the information in the list by that column criteria. You can also click the filter icon ( ) and filter the list of entries
to display. The filter mechanism for each heading depends upon the number of unique entries in that column.
Filtering Small to Medium-Sized Rules Lists
To filter data in Rules lists with fewer than fifty unique entries:
1. Click the Setup icon ( ) to display the Setup page.
2. Select the filter icon ( ) above a Rules list column heading. The filter displays a checkbox for each entry type.
3. To select an individual rule, uncheck the Select All checkbox and then click the checkbox next to the rule you
want to display.
4. Click OK. The filter icon by the column heading will turn blue to indicate that column has an active filter.
To remove a filter:
1. Select the filter icon ( ) above a column heading with an active filter.
2. Click the clear filter icon ( ) in the filter header to clear the current filter settings.
Filtering Large Rules Lists with 50+ unique entries
Rules list columns with more than fifty unique entries allow you to search within that column for a specific text string.
Aruba Activate Release 6| User Guide DeviceSetup and Provisioning | 18
To filter data in columns with more than fifty unique entries:
1. Click the Setup icon ( ) to display the Setup page.
2. Select the filter icon ( ) above a Rules list column heading.
3. Select one of the following search types:
l Contains: Search for entries that contain the search string.
l Matches: Search for entries that exactly match the search string
l Does not Match: Search for entries that do not exactly match the text string
4. Enter the search string into the search field.
5. Click OK. The filter icon by the column heading will turn blue to indicate that column has an active filter.
Modifying an Existing Rule
Any rule can be deleted or modified by a user with access to the folder in which the rule resides.
To delete or modify the description and settings of an existing folder:
1. Click the Setup icon ( ) to display the Setup page.
2. Select the rule you want to edit from the Rules list.
3. Click the Edit button below the Rules Detail section at the bottom of the page.
4. Change the rule name, email addresses, or rule and folder settings as desired, or click Delete to delete the rule.
5. Click Done to save your settings.
Assign Devices to Folders
Each folder can contain one or more rules that supply provisioning information to Instant APs, auto-assign devices to
folders, and trigger notification events. When a device moves into a folder, the device immediately inherits all the
rules in the folder. A users' access privileges within ArubaActivate depends upon the folder to which the user
account is assigned. Users cannot assign devices to a folder to which they do not have access.
When you click the Move to Folder button, Activate re-assigns all devices currently appearing in the Devices list, so
make sure to filter the table until it displays only those devices you want to move. If you do not filter the table to display a
subset of devices, the folder assign process will move the entire device list into the selected folder.
To assign a device or group of devices to a folder:
19 | Device Setup and Provisioning Aruba Activate Release 6| User Guide
1. Click the Devices icon ( ) at the top of the page to display the Devices page
2. Click the filter icon ( ) by any Devices list column heading and choose which entries to display. (For more
information, see Sort and Filter Device Data.) You can repeat this step and filter the list by multiple criteria types
until the list shows just those devices you want to move to a new folder.
3. Click the Move to Folder button at the top of the Devices page. A drop-down window with all folder names
appears.
4. Select the destination folder for the devices.
5. A confirmation window appears, showing the total number of devices that will be moved.
6. Click OK to confirm the change, or click Cancel to cancel the move.
You can also assign an individual device to a new folder by selecting that device from the Devices list and manually
changing its parent folder in the Device Details window.
Manually Add Devices
Instant APs running Instant versions 6.2.1.0-3.3.0.3 and later , Mobility Access Switches running ArubaOS 7.3 and
later, or HPE ArubaOS Switch versions 16.02.0012 and later can be manually added to your Activate account using
the device's cloud activation key and MAC address.
The IAP, Mobility Access Switch, or the HPE ArubaOS Switch must establish an HTTPS connection to
device.arubanetworks.com to learn the Cloud Activation Key. If the key does not appear on a device running a
supported version of Instant or ArubaOS, check to ensure that the device can securely connect to
device.arubanetworks.com.
Locate the Cloud Activation Key
The cloud activation key for an Instant device appears in the Instant WebUI. For a Mobility Access Switch or HPE
ArubaOS Switch, the key is displayed in the Mobility Access Switch or the HPEArubaOS Switch command-line
interface, respectively.
To locate the cloud activation key for an Instant device:
1. Log in to the IAP WebUI interface.
2. Select the Maintenance link in the upper right corner of the window. The Maintenance pop-up window appears.
3. Select the About tab. The key appears at the bottom of the tab.
Aruba Activate Release 6| User Guide DeviceSetup and Provisioning | 20
Loading...