User Tools

Site Tools


aruba_networks:opening_firewall_ports_for_device_communication

This is an old revision of the document!


Opening Firewall Ports for Device Communication

Aruba Central can be accessed from the HPE GreenLake portal using the following URLs.

https://console.greenlake.hpe.com/

https://common.cloud.hpe.com/

The URLs redirect to https://auth.hpe.com/ to present the HPE GreenLake login page.

Note: Starting 2024, the https://common.cloud.hpe.com/ URL will be deprecated.

For more information about accessing the HPE GreenLake portal and adding the Aruba Central app, Creating an Aruba Central Account.

Most of the communication between devices on the remote site and Aruba Central server in the cloud is carried out through HTTPS (TCP 443). To allow devices to communicate over a network firewall, ensure that the following domain names and ports are open.

This section includes the following topics:

  • Domain Names for Aruba Central Portal Access
  • Domain Names for Device Communication with Aruba Central
  • Domain Names for Device Communication with Aruba Activate
  • Cloud Guest Server Domains for Guest Access Service
  • Domain Names for OpenFlow
  • Domain Names for RCS
  • Other Domain Names

This section includes the following topics:

Domain Names for Aruba Central Portal Access

Domain names for hybrid endpoint

RegionDomain NameProtocol
US-1app1.hybrid.central.arubanetworks.comHTTPS TCP port 443
US-2hc-prod2.central.arubanetworks.com HTTPS TCP port 443
US Westuswest4-hc.central.arubanetworks.comHTTPS TCP port 443
EU-1central-eu-hc.central.arubanetworks.comHTTPS TCP port 443
CA Centralca-hc.central.arubanetworks.comHTTPS TCP port 443
AP South apac-hc.central.arubanetworks.comHTTPS TCP port 443
AP Northeastapaceast-hc.central.arubanetworks.comHTTPS TCP port 443
AP-SouthEastapacsouth-hc.central.arubanetworks.comHTTPS TCP port 443
UAE North uaenorth1.central.arubanetworks.com HTTPS TCP port 443

Domain Names for Device Communication with Aruba Central

Table 2: Domain Names for Device Communication with Aruba Central

RegionAruba Central URLURL for Device ConnectivityProtocolFQDNs for Overlay Route Orchestrator (ORO) and Overlay Tunnel Orchestrator (OTO) Service
US-1app.central.arubanetworks.comapp1.central.arubanetworks.comHTTPS TCP port 443app1-h2.central.arubanetworks.com
US-2app-prod2.central.arubanetworks.comdevice-prod2.central.arubanetworks.comHTTPS TCP port 443device-prod2-h2.central.arubanetworks.com
US Westapp-uswest4.central.arubanetworks.comdevice-uswest4.central.arubanetworks.comHTTPS TCP port 443device-uswest4-h2.central.arubanetworks.com
EU-1app2-eu.central.arubanetworks.comdevice-eu.central.arubanetworks.comHTTPS TCP port 443device-eu-h2.central.arubanetworks.com
EU Centraleucentral3.central.arubanetworks.comdevice-eucentral3.central.arubanetworks.comHTTPS TCP port 443device-eucentral3-h2.central.arubanetworks.com
CA Centralapp-ca.central.arubanetworks.comdevice-ca.central.arubanetworks.comHTTPS TCP port 443device-ca-h2.central.arubanetworks.com
CN Northapp.central.arubanetworks.com.cndevice.central.arubanetworks.com.cnHTTPS TCP port 443device-h2.central.arubanetworks.com.cn
AP Southapp2-ap.central.arubanetworks.comapp1-ap.central.arubanetworks.comHTTPS TCP port 443app1-ap-h2.central.arubanetworks.com
AP Northeastapp-apaceast.central.arubanetworks.comdevice-apaceast.central.arubanetworks.comHTTPS TCP port 443device-apaceast-h2.central.arubanetworks.com
AP-SouthEastapp-apacsouth.central.arubanetworks.comdevice-apacsouth.central.arubanetworks.comHTTPS TCP port 443 device-apacsouth-h2.central.arubanetworks.com
UAE Northapp-uaenorth1.central.arubanetworks.comdevice-uaenorth1.central.arubanetworks.comHTTPS TCP port 443device-uaenorth1-h2.central.arubanetworks.com

Domain Names for AOS-CX Device Communication with Aruba Central

Table 3: Domain Names for AOS-CX Device Communication with Aruba Central

RegionAruba Central URLURL for Device ConnectivityProtocol
US-1app.central.arubanetworks.comdevice-prod2-d2.central.arubanetworks.comHTTPS TCP port 443
US-2app-prod2.central.arubanetworks.comdevice-prod2.central.arubanetworks.comHTTPS TCP port 443
US Westapp-uswest4.central.arubanetworks.comdevice-uswest4-d2.central.arubanetworks.comHTTPS TCP port 443
EU-1app2-eu.central.arubanetworks.comdevice-eu.central.arubanetworks.comHTTPS TCP port 443
EU Centraleucentral3.central.arubanetworks.comdevice-eucentral3-d2.central.arubanetworks.comHTTPS TCP port 443
CA Centralapp-ca.central.arubanetworks.comdevice-ca.central.arubanetworks.comHTTPS TCP port 443
CN Northapp.central.arubanetworks.comdevice.central.arubanetworks.comHTTPS TCP port 443
AP Southapp2-ap.central.arubanetworks.com app1-ap.central.arubanetworks.comHTTPS TCP port 443
AP Northeastapp-apaceast.central.arubanetworks.comdevice-apaceast.central.arubanetworks.comHTTPS TCP port 443
AP-SouthEastapp-apacsouth.central.arubanetworks.comdevice-apacsouth.central.arubanetworks.comHTTPS TCP port 443
UAE Northapp-uaenorth1.central.arubanetworks.comdevice-uaenorth1-d2.central.arubanetworks.comHTTPS TCP port 443

Domain Names for Device Communication with Aruba Activate

Table 4: Domain Names for Device Communication with Aruba Activate

Domain NameProtocol
device.arubanetworks.comHTTPS TCP port 443
devices-v2.arubanetworks.comHTTPS TCP port 443
est.arubanetworks.com *HTTPS TCP port 443

* Required for Aruba 2530 switches to provision certificate using the EST server in activate.

Note: For the switches to establish connection with the Activate server, when a proxy server is configured on the network, the URLs in this table must be added to the list of allowed URLs on the proxy server.

Cloud Guest Server Domains for Guest Access Service

Table 5: Domain Names for Cloud Guest Server Access

RegionDomain NameProtocol
US-1naw2.cloudguest.central.arubanetworks.comTCP port 2083 TCP port 443
US-1naw2-elb.cloudguest.central.arubanetworks.comHTTPS TCP port 443
US-2nae1.cloudguest.central.arubanetworks.comTCP port 2083 TCP port 443
US-2nae1-elb.cloudguest.central.arubanetworks.comHTTPS TCP port 443
US Westuswest4.cloudguest.central.arubanetworks.comTCP port 2083 TCP port 443
US Westuswest4-elb.cloudguest.central.arubanetworks.comHTTPS TCP port 443
EU-1euw1.cloudguest.central.arubanetworks.comTCP port 2083 TCP port 443
EU-1euw1-elb.cloudguest.central.arubanetworks.comHTTPS TCP port 443
EU Centraleuw1.cloudguest.central.arubanetworks.comTCP port 2083 TCP port 443
EU Centraleuw1-elb.cloudguest.central.arubanetworks.comHTTPS TCP port 443
CA Centralca.cloudguest.central.arubanetworks.comTCP port 2083 TCP port 443
CA Centralca-elb.cloudguest.central.arubanetworks.comHTTPS TCP port 443
AP Southap1.cloudguest.central.arubanetworks.comTCP port 2083 TCP port 443
AP Southap1-elb.cloudguest.central.arubanetworks.comHTTPS TCP port 443
AP NorthEastapaceast.cloudguest.central.arubanetworks.comTCP port 2083 TCP port 443
AP NorthEastapaceast-elb.cloudguest.central.arubanetworks.comHTTPS TCP port 443
AP SouthEastapacsouth.cloudguest.central.arubanetworks.comTCP port 2083 TCP port 443
AP SouthEastapacsouth-elb.cloudguest.central.arubanetworks.comHTTPS TCP port 443
UAE Northasw1.cloudguest.central.arubanetworks.comTCP port 2083 TCP port 443
UAE Northasw1-elb.cloudguest.central.arubanetworks.comHTTPS TCP port 443

Domain Names for OpenFlow

Table 6: Domain Names for OpenFlow

aruba_networks/opening_firewall_ports_for_device_communication.1708275093.txt.gz · Last modified: 2024/02/18 11:51 by aperez

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki