Instant On - Wireless

 View Only
Expand all | Collapse all

Using AP11D for WAN Access

  • 1.  Using AP11D for WAN Access

    Posted 12-15-2022 11:34 AM

    I am planning on building the following network primarily based on pre-existing cabling in my three-story house.  I would really like if I could use the 1930 switch to power both of my AP11Ds, but am not sure I can use another port on the AP11D to connect for WAN access.  Also, I was planning to insert a pfSense FW between the AP11D and the Modem.

    Any suggestions?


    ------------------------------
    David
    ------------------------------


  • 2.  RE: Using AP11D for WAN Access

    Posted 12-16-2022 09:19 AM
    If you will use pfSense for firewall/router functions, then you can use AP11D as normal AP and not as a router.
    Anyhow you can use the same switch for AP11Ds and you only need port P0 for AP11Ds in this case.
    So in short

    Modem > pfSense > switch > APs

    Best, Gorazd

    ------------------------------
    Gorazd Kikelj
    ------------------------------



  • 3.  RE: Using AP11D for WAN Access

    Posted 12-17-2022 04:54 PM
    Thank you, but because of the preexisting wiring, I have to have the AP11D between the modem/FW and the switch. So, the question is if I can use something other than the P0 port for connecting to modem/FW.

    Thanks!

    ------------------------------
    David
    ------------------------------



  • 4.  RE: Using AP11D for WAN Access

    Posted 12-18-2022 03:15 AM
    You can only use P0 port to connect to modem if you use AP11D in the router mode. 
    This is described in ION User Guides.

    If not already, look into ION Deployment guide for additional ideas.

    If you will be using AP11D as normal AP, then you can use different port to connect to modem and put this port in separate vlan and pass traffic to the switch where you have pfSense as the main router/FW.

    Maybe a better idea would be to put 8p ION POE switch near the modem and create a separate vlan for modem and pfSense WAN port. This would overcome limitations with AP11D and provide better performance on the uplink.


    Best, Gorazd

    ------------------------------
    Gorazd Kikelj
    ------------------------------



  • 5.  RE: Using AP11D for WAN Access

    Posted 12-18-2022 09:19 AM

    Ok, thank you, I will take a look at the deployment guide and may try some of the alternatives you suggested. Unfortunately I have to put the switch on the third floor to support the APs on the second and third floors. There is only a single cable from the third floor to the basement, where my fiber comes into the house, so I can't put the switch next to the modem. I could plug both the switch and the AP 11D directly into the pfSense FW or modem provided router though. 


    i would have liked to have had all my APs powered by the switch and just have used another port on the AP11D, as if it were a port on the 1930 switch.  But not sure what kind of performance or other issues this may cause.



    ------------------------------
    David
    ------------------------------



  • 6.  RE: Using AP11D for WAN Access

    Posted 12-18-2022 10:19 AM
    You don't want to go through the AP11D anyway since it currently limits both wifi clients and switch clients to under 500mbps.  I don't believe Aruba has fixed this yet.  Now if you have coax between floors you could use a pair of these to connect to the router in the basement to the 3rd floor switch and then use the CAT to send POE back down to the AP11D so it's powered by the switch but IMHO there's no real benefit to powering the AP11D off the switch.

    Network to 1st ScreenBeam, coax to 2nd ScreenBeam then ethernet to your switch.  The linked model has a 2.5g back bone but only a 1g port but they have models that have a full 2.5g port too.  Normally these are used in a star or ring topology so one data in to many clients out but when I need to use them I like point to point and for $130.00 it beats trying to at a CAT6.

    Amazon.com: ScreenBeam MoCA 2.5 Network Adapter for Higher Speed Internet, Ethernet Over Coax - Starter Kit (Model: ECB6250K02) : Everything Else


  • 7.  RE: Using AP11D for WAN Access

    Posted 12-18-2022 06:22 PM
    Thank you for the suggestion! I do have coaxial between the floors, so maybe will consider this, but rather than buy more equipment I probably will look at other alternatives first.

    My previous network was using the 2 AP11Ds, with one powering the other.  The performance was fine in that configuration.  With the cabling in my new location though, I was needing to add the 1930 switch and an AP22 in order to cover all three floors.

    ------------------------------
    David
    ------------------------------



  • 8.  RE: Using AP11D for WAN Access

    Posted 12-18-2022 10:01 AM

    If you simply need an alternate means of powering the AP11D, you can pick up an external power adapter. 

    Also, there is no Port labelled P0… there's E0/PT, unless there's been an undocumented change. 


    Aruba IO products need a connection at Port E0/PT or they will revert to Wireless extended mode (mesh). 

    Sounds like you'll need an external power adapter for this topology. 



    ------------------------------
    Ethan
    ------------------------------



  • 9.  RE: Using AP11D for WAN Access

    Posted 12-18-2022 06:24 PM
    I was just doing this for a cleaner install.  I can just use the power supply with the AP11D, so this is not an issue.  Thank you!

    Also, my hope was to use E0 connected to the 1930, but use another port on the AP11D to connect to the modem/FW.  Similar to if the 1930 was connected directly to the modem/FW, from what I can tell, any port on the 1930 could be used for the WAN uplink.

    ------------------------------
    David
    ------------------------------



  • 10.  RE: Using AP11D for WAN Access

    Posted 12-19-2022 11:58 AM

    I see. Well, test it out and let us know if your theory can work! 

    By the way, you keep mentioning the WAN / WAN uplink. This is confusing. Looking at your topology, you're looking for a LAN uplink, not a WAN link. The Router would link to the WAN, not the APs or switches. 

    Am I incorrect here? Best of luck with this - hope you get a chance to test it out and find some success. 



    ------------------------------
    Ethan
    ------------------------------



  • 11.  RE: Using AP11D for WAN Access

    Posted 12-19-2022 01:01 PM

    Thanks Ethan, fair enough, I guess I am just considering a typical router that has a WAN port identified on it, that you normally would use for uplink connection to the modem.

    I guess part of my concern and inexperience, is that the WAN port gets assigned an IP by the modem/router. You then have a 'LAN' on each side of this 'WAN' port, one created by router/modem, one created by your APs/switches. But what I want to do is connect my Aruba network to the modem/router or FW, using a LAN port on the AP11D. 


    i do have the pfSense device that does have both a LAN port and an OPT port on it.  Not sure if they could get their IPs assigned by Aruba, or if I need to disable DHCP on Aruba or something and let the pfSense device assign IPs to the mgmt LAN 1 network.



    ------------------------------
    David
    ------------------------------



  • 12.  RE: Using AP11D for WAN Access

    Posted 12-19-2022 01:16 PM

    The "WAN" port on the AP11-D is a combo port: E0/PT. It acts as a WAN port when set up as router and a LAN port when acting solely as an AP. 

    I recommend all routing being handled by the pfSense router. It has much more capability and flexibility. The AP11-D's routing functions are great for basic requirements and a real bonus to have built into such a neat and tidy package. But if you have alternatives, I'd utilize those. 



    ------------------------------
    Ethan
    ------------------------------



  • 13.  RE: Using AP11D for WAN Access

    Posted 01-06-2023 12:24 PM
    Linking follow up discussion on topic of using pfSense as router to your network.  BTW, I was able to build the network above, only by using AP11D as the router, meaning the E0 port was plugged directly to the ISP router / FW.  

    https://community.arubainstanton.com/communities/community-home/digestviewer?communitykey=4736ee52-dc5c-4a73-b8cf-0a44640d7ff7

    ------------------------------
    David
    ------------------------------