Antonio Perez

Lab Guides

At the end of this workshop, you will be able to implement basic ACLs which can be used to add security controls to various traffic flows on Aruba CX switches.

The main traffic characteristics that ACLs can filter on are as follows:

Protocol such as: ICMP, TCP, UDP Source and/or destination addresses (IPv4, IPv6, or MAC) Source and/or destination TCP/UDP ports (if applicable to the specified protocol)

Materials: In the attachments you will find:

• Overview Video
• Lab Guide
• EVE-NG Lab Import File

aos-cx_switch_simulator_-_acls_eve-ng_lab.zip

aos-cx_switch_simulator_-_acls_lab_guide.pdf

Lab Guides

At the end of this workshop, you will be able to implement the basic configuration to enable local mac match and also understand local role and device-profile. The main goal is to ensure a successful deployment of local mac match authentication.

Materials. Attached you will find:

• Overview Video
• Lab Guide
• EVE-NG Lab (UNL ZIP File)

aos-cx_simulator_-_local_mac_authentication_eve-ng_lab.zip

aos-cx_simulator_-_local_mac_authentication_lab_guide.pdf

Lab Guides

This workshop will provide guidance on how to configure Radius Port-access Mac Authentication in AOS-CX and how to

authenticate clients or devices. You will learn how to configure Radius port-access mac authentication and how to configure an

enforcement policy in Aruba ClearPass.

Materials. Attached you will find:

• Overview Video
• Lab Guide
• EVE-NG Lab (UNL ZIP File)

aos-cx_switch_simulator_-_radius_mac_authentication_eve-ng_lab.zip

aos-cx_switch_simulator_-_radius_mac_authentication_lab_guide.pdf

Lab Guides

This workshop will provide guidance on how to configure Radius Port-access DOT1X Authentication in AOS-CX and how to authenticate clients or devices. You will learn how to configure Radius port-access DOT1X authentication and how to configure an enforcement policy in Aruba ClearPass.

Materials In the attachments you will find:

• Overview Video
• Lab Guide
• EVE-NG Lab Import File

aos-cx_switch_simulator_-_radius_dot1x_authentication_eve-ng_lab.zip

aos-cx_switch_simulator_-_radius_dot1x_authentication_lab_guide.pdf

Lab Guides

This workshop will provide guidance on how to configure and validate Secure RADIUS (RadSec) in AOS-CX. The RadSec module secures the communication between the switch and RADIUS server using TLS connection. Using RADIUS over TLS provides users with the flexibility to host RADIUS servers across geographies and WAN networks. For enabling RADIUS security, a CLI option tls is provided with the command radius-server host, where TLS stands for Transport Layer Security.

Materials In the attachments you will find:

• Overview Video
• Lab Guide
• EVE-NG Lab Import File

aos-cx_simulator_lab_-_radsec_eve-ng_lab.zip

aos-cx_simulator_lab_-_radsec_lab_guide.pdf

Lab Guides

This workshop will provide guidance on how to configure Local User Roles in AOS-CX and how to authenticate clients or devices to use user roles. You will learn how to configure local user roles and how to configure an enforcement policy in ClearPass.

Materials In the attachments you will find:

• Overview Video
• Lab Guide
• EVE-NG Lab Import File

aos-cx_switch_simulator_-_local_user_roles_eve-ng_lab.zip

aos-cx_switch_simulator_-_local_user_roles_lab_guide.pdf

Lab Guides

This workshop will provide guidance on how to configure device profiles in AOS-CX and how to apply a device profile as a fallback for clients authenticated by MAC Authentication.

Materials In the attachments you will find:

• Overview Video
• Lab Guide
• EVE-NG Lab Import File

aos-cx_switch_simulator_-_device_profiles_eve-ng_lab.zip

aos-cx_switch_simulator_-_device_profiles_lab_guide.pdf