Access and firewall policy is then implemented on the controller to isolate guest access to the rest of the campus
network.
Figure 103: Wired Guest Traffic Segmentation
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-8)
JL323A
JL322A
JL320A
JL321A
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
Aux Port
Mgmt
Console
2930M
JL319A
10/100/1000 BASE-T Ports (1-24T)
10/100/1000 BASE-T Ports (1-24T)
Speed Mode: Of = 10 or 100 Mbps Slow Flash = 1 Gbps 2X Flash = 2.5 Gbps 3x Flash = 5 Gbps On =10Gbps Fast Flash = 40 Gbps
Spd Usr Back UIDPoE
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-24)
JL323A
JL322A
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-8)
JL323A
JL322A
JL320A
JL321A
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
Aux Port
Mgmt
Console
2930M
JL319A
10/100/1000 BASE-T Ports (1-24T)
10/100/1000 BASE-T Ports (1-24T)
Speed Mode: Of = 10 or 100 Mbps Slow Flash = 1 Gbps 2X Flash = 2.5 Gbps 3x Flash = 5 Gbps On =10Gbps Fast Flash = 40 Gbps
Spd Usr Back UIDPoE
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-24)
JL323A
JL322A
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
AuxPort
Mgmt
Console
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-8)
JL323A
JL322A
JL320A
JL321A
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
Aux Port
Mgmt
Console
2930M
JL319A
10/100/1000 BASE-T Ports (1-24T)
10/100/1000 BASE-T Ports (1-24T)
Speed Mode: Of= 10 or 100 Mbps Slow Flash = 1 Gbps 2X Flash = 2.5 Gbps 3x Flash = 5 Gbps On =10Gbps Fast Flash = 40 Gbps
Spd Usr Back UIDPoE
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-24)
JL323A
JL322A
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
AuxPort
Mgmt
Console
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-8)
JL323A
JL322A
JL320A
JL321A
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
Aux Port
Mgmt
Console
2930M
JL319A
10/100/1000 BASE-T Ports (1-24T)
10/100/1000 BASE-T Ports (1-24T)
Speed Mode: Of= 10 or 100 Mbps Slow Flash = 1 Gbps 2X Flash = 2.5 Gbps 3x Flash = 5 Gbps On =10Gbps Fast Flash = 40 Gbps
Spd Usr Back UIDPoE
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-24)
JL323A
JL322A
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-8)
JL323A
JL322A
JL320A
JL321A
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
Aux Port
Mgmt
Console
2930M
JL319A
10/100/1000 BASE-T Ports (1-24T)
10/100/1000 BASE-T Ports (1-24T)
Speed Mode: Of = 10 or 100 Mbps Slow Flash = 1 Gbps 2X Flash = 2.5 Gbps 3x Flash = 5 Gbps On =10Gbps Fast Flash = 40 Gbps
Spd Usr Back UIDPoE
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-24)
JL323A
JL322A
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-8)
JL323A
JL322A
JL320A
JL321A
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
Aux Port
Mgmt
Console
2930M
JL319A
10/100/1000 BASE-T Ports (1-24T)
10/100/1000 BASE-T Ports (1-24T)
Speed Mode: Of = 10 or 100 Mbps Slow Flash = 1 Gbps 2X Flash = 2.5 Gbps 3x Flash = 5 Gbps On =10Gbps Fast Flash = 40 Gbps
Spd Usr Back UIDPoE
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-24)
JL323A
JL322A
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-8)
JL323A
JL322A
JL320A
JL321A
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
Aux Port
Mgmt
Console
2930M
JL319A
10/100/1000 BASE-T Ports (1-24T)
10/100/1000 BASE-T Ports (1-24T)
Speed Mode: Of= 10 or 100 Mbps Slow Flash = 1 Gbps 2X Flash = 2.5 Gbps 3x Flash = 5 Gbps On =10Gbps Fast Flash = 40 Gbps
Spd Usr Back UIDPoE
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-24)
JL323A
JL322A
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
2930M
HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-8)
JL323A
JL322A
JL320A
JL321A
Spd Usr Back UIDPoE
Dual Personality Ports:
10/100/1000BASE-T PoE+(
T) or SFP(S)
LED Mode
Reset Clear
Status Console
Aux Port
Mgmt
Console
2930M
JL319A
10/100/1000 BASE-T Ports (1-24T)
10/100/1000 BASE-T Ports (1-24T)
Speed Mode: Of= 10 or 100 Mbps Slow Flash = 1 Gbps 2X Flash = 2.5 Gbps 3x Flash = 5 Gbps On =10Gbps Fast Flash = 40 Gbps
Spd Usr Back UIDPoE
LED Mode
Reset Clear
Status Console
10/100/1000 BASE-T PoE+ Ports (1-48T)
Aux Port
Mgmt
Console
HPE Smart Rate (1/2.5/5/10 GbE) PoE+ Ports (1-24)
JL323A
JL322A
2930M
ClearPass Policy Manager
RADIUS/Local Mac Authentication
Primary Mobility
Controller
Guest Users/Devices
Users/Devices and Policy Enforcement Recommendations
The following table specifies the enforcement recommendations for different type of users and devices. While it is
recommended to tunnel the traffic in some cases, other cases can be met by simply using local forwarding on the
switch.
Type Enforcement Description
Access Point Local Local infrastructure device.
Voice/Video Device Local Desk and conference phones, security cameras, and room media
systems.
Employee on Managed
Device
Local Users connecting from a healthy and managed device can stay
local to the Aruba switch.
Employee on Unmanaged
device
Tunnel Users connecting from an unmanaged or potentially untrusted
device can be tunneled.
New/Unknown Device Tunnel Tunnel new or unknown devices, potentially untrusted devices used
for profiling, potential onboarding, guest registration, and
quarantine.
Guest User Tunnel Guest users to DMZ guest network.
Table Continued
Chapter 18 Dynamic Segmentation 611