Aruba
Integrate Aruba Central to retrieve network access control and policy management data
This document describes how to configure the Aruba Central connector, allowing OverView to retrieve network access control data via the Aruba API.
Objective
The Aruba connector retrieves the following information:
- Network device inventory (access points, switches, controllers)
- Network Access Control (NAC) policies
- Connected client status
Prerequisites
- Access to Aruba Central with administrator rights.
- An API application (OAuth2) created in Aruba Central.
Information to provide in OverView
| Field | Description |
|---|---|
| Client ID | OAuth2 application identifier created in Aruba Central |
| Client Secret | Secret associated with the OAuth2 application |
| Region | Region of your Aruba Central instance (e.g. EU Central3) |
Procedure
Create an API Client in Aruba ClearPass
- Log in to your Aruba ClearPass administration interface.
- Go to Guest > Administration > API Services > API Clients.
- Click Create API Client.
- Configure the OAuth2 application:
- Operator Profile: Choose or create a profile with appropriate read permissions.
- Grant Type: Select
client_credentials.
- Complete the configuration and confirm.
- Note the auto-generated Client ID and Client Secret.
Configure the connector in OverView
- In OverView, go to Data Sources Settings > Sources.
- Select Aruba and click Configure.
- Choose the API Connection mode.
- Fill in the required fields:
- Client ID: Your OAuth2 application identifier.
- Client Secret: The associated secret.
- Click Save Configuration.
Alternative: file import through DropPoint
The API access described above is the recommended method for this connector. Where it is not available (a segregated network, a version or licence without API, an export you already produce), OverView accepts file exports, to be uploaded to the bucket dedicated to Aruba.
Bucket : s3://aruba/
Example : s3://aruba/export.csv
The procedure is described in the OverView DropPoint guide: generating credentials, configuring the client, then sending files from the OverView web interface, the AWS CLI or an SDK. Its examples come pre-filled with this bucket when you follow this link.
Official Documentation
For additional information, refer to the Aruba ClearPass API Client documentation.
Required permissions
The API application must have read permissions on:
- Devices (network equipment)
- Clients (connected users)
- Network policies
!!! tip "Best practice" Use an application dedicated to OverView in Aruba Central so you can revoke access independently without impacting other integrations.