Release Notes

Usage Guidelines
Controllers enabled with control plane security will only send certificates to APs that you have identified as
valid APs on the network. If you are confident that all campus APs currently on your network are valid APs, you
can configure automatic certificate provisioning to send certificates from the controller to each campus AP, or
to all campus APs within a specific range of IP addresses. If you want closer control over each AP that gets
certified, you can manually add individual campus APs to the secure network by adding each AP's information
to a campus AP whitelist.
Example
The following command defines a range of IP addresses that should receive certificates from the controller,
and enables the control plane security feature:
(host)(config) # control-plane-security
auto-cert-allowed-addrs 10.21.18.10 10.21.10.90
cpsec-enable
Related Commands
Command Description Mode
show control-plane-security
Show the current configuration of the control
plane security profile.
Config mode
Command History
This command was introduced in ArubaOS 5.0.
Command Information
Platforms Licensing Command Mode
All platforms Base operating system. Config mode on master or local
controllers
Dell Networking W-Series ArubaOS 6.4.x | Reference Guide control-plane-security | 262