2017-04

CAPWAP routed into a second path

Basics HiveOS uses the default management interface (mgt0) to communicate with the CAPWAP server. If you need to refresh the behaviour, take a look here: http://blog.aerohive.ninja/post/capwap/ In certain circumstances you may need to use different path to reach out the CAPWAP server. For example, you need to do NAT over the mgt0, offload the main connectivity, testing and so on. Route traffic through a subinterface HiveOS has one main interface (mgt0) for the management and sixteen subinterfaces (mgt0.

2017-04-25

2017-01

Manual VPN L2 in HiveOS

Initial setup I recently did a manual S-CLI configuration for a VPN-L2 IPSec under HiveManager NG with the Build Version: 11.17.8.1. In my case, the VPN Server was an Access Point AP250 and two different AP130 as a VPN Client. As a quick remind, the main objects you need: VPN pool client size - in my case only four VPN IP Server - an 802.11ac access point or a Virtual HiveOS server HiveManager NG Certificates - you have to download from NG (Default_CA.

2017-01-22

NG S-CLI mac ppsk bind

Working in progress The features parity of HiveManager NG is almost done, but if you need to bind a Personal-PSK to a mac-address while joining an SSID, here is the S-CLI: Valid for Build Version: 11.17.8.1 and previous security-object simple-ssid security private-psk ppsk-server 10.10.1.21 security-object simple-ssid security private-psk mac-binding-enable where 10.10.1.21 is one of Access Point in the same hive to save temporarly the reletion between MAC address and PPSK until the next reboot.