Oxygen - Connect for life

Scalable WLAN Design & Implementation

Part Number: EDU-SWDI   |   Price: $1,950 USD   |   Duration: 3 Days

Course Overview

Using lectures and labs, the 3-day Scalable WLAN Design and Implementation (SWDI) course builds upon concepts introduced in the Implementing Aruba WLANs course. SWDI covers content enabling the student to understand and implement advanced topics included in Aruba's firewall features such as policy design, authentication and role derivation. Additionally, it covers subject material for building complex networks using Aruba's Remote APs and multi-controller environments based upon the Campus WLAN Reference Architecture 3.3 for network design and redundancy.

Who should attend?

Network engineers with more than a single controller in the network

Prerequisites

• Aruba Certified Mobility Associate (ACMA) certification required
• Implementing Aruba WLAN course recommended
• Ability to provision an Aruba controller with multiple SSIDs, captive portal and 802.1X

Course Contents

This course covers the following topics:

• Review of Aruba infrastructure

  • Initial controller setup lab

• Advanced Firewall

  • Basic firewall review
  • Detailed policy discussion
  • Policy creation
  • Assigning policies to AP groups
  • Understanding the valid user ACL
  • Client blacklisting
  • Protecting wired ports
  • Aruba ACLs
  • Global firewall policy
  • Aliases and destinations
  • Bandwidth contracts
  • Lab - common protocol policy for all users
  • Lab - client blacklist policy for guest users
  • Lab - assigning ACLs to wired ports to protect the management interface
  • Lab - creating and assigning bandwidth contracts to users
• Authentication, roles, and derivation
  o User role review
  o Fail through and fall through
  o AAA FastConnect
  o FQDN RADIUS
  o Machine authentication
  o User rule role derivation
  o Server rule role derivation
  o Troubleshooting roles, and derivation
  o Lab - enabling AAA FastConnect
  o Lab - management user role creation and policy assignment
  o Lab - server side role derivation
  o Lab - encryption based role derivation

• Wired Access

  • Secure Jack
  • Wired Multiplexers
  • Configuring Secure Jack operation
  • Lab - Configuring secure jack " RAP

• RAP review

  • Forwarding modes
  • Configuring bridge mode
  • Configuring split tunnel
  • Redundancy operation modes
  • Hotel connect
  • Server redundancy
  • Slow link support
  • IKE PSK refresh
  • RAP provisioning review
  • Lab - Configuring split tunnel policy
  • Lab - Applying split tunnel policy to users in the RAP AP group
  • Lab - Configuring hotel connect
  • Lab - Provisioning RAP APs " Master/local operation

• Master/local benefits

  • Inter-controller IPSec
  • Controller specific AP Groups
  • Lab - Reprovisioning controllers for master/local operation using the Setup Wizard
  • Lab - Reprorvisioning APs for master/local operation

• Mobility

  • 802.11 mobility review
  • L2 vs. L3 mobility
  • Understanding mobility domains
  • Configuring mobility domains
  • VLAN pooling
  • Lab - Configure L3 mobility and the home agent table

• Master redundancy

  • Understanding master redundancy
  • Configuring master redundancy and VRRP
  • Lab - Configuring master redundancy and VRRP

• Local redundancy

  • Understanding N+1 redundancy
  • Understanding active-active redundancy using VRRP
  • Lab - Configuring local redundancy using active-active and VRRP

• Wireless intrusion prevention

  • L1 attacks
  • L2 attacks
  • Management of IDS events
  • Rogue AP detection, location, and containment
  • Lab - Air monitor group creation and provisioning
  • Lab - Rogue containment

Registration:

Registering for any of the course is via sending an official PO with the amount mentioned above and 100% advanced payment. Your PO should be forwarded to This e-mail address is being protected from spambots, you need JavaScript enabled to view it .

To register online please click Online Registration.

Information:

For information related to training, please forwarrd your inquiries to This e-mail address is being protected from spambots, you need JavaScript enabled to view it .