Support for Downloadable User Roles in Cluster Deployments

Starting fromArubaOS8.4.0.0, support is extended for downloadable user roles in cluster deployments. This feature provides a seamless redundancy for dynamic policy assignments.

In this deployment, eachArubaOSswitch establishes a connection with the activemanaged deviceand a secondary connection to the stand-bymanaged device. This allows the applied client role to be automatically replicated on the secondarymanaged device, thus minimizing the risk of clients loosing connectivity if the activemanaged devicegets disconnected.

In case of downloadable user role implementation forWLANWireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection.clients, APs will maintain two connections with the cluster and not withArubaOSswitches.

ClearPass Policy Managerwill be used to define the roles and policies, which will be downloaded to themanaged devicesin the cluster that is performing Dynamic Segmentation.ArubaOSswitches that have Dynamic Segmentation activated on the port will also have downloadable role support.

If multiple authentication servers that are configured in a managed device point to the same CPPM address, which is used for CPPM role download, then all authentication servers should be updated with the CPPM credentials.