24:de:c6:c9:8b:14# show ap-env Antenna Type:Internal ipaddr:10.100.103.191 netmask:255.255.255.0 gatewayip:10.100.103.254 dnsip:10.100.101.10 domainname:lan.matrixintegration.com standalone_mode:1 enet0_bridging:1 iap_master:1 24:de:c6:c9:8b:14# show run version 6.3.1.0-4.0.0 virtual-controller-country US virtual-controller-key 58b33228017d4b7f99451400063b8d4b843ca60b610fa8a640 name Instant-C9:8B:14 terminal-access clock timezone none 00 00 rf-band all allow-new-aps allowed-ap 24:de:c6:c9:8b:14 arm wide-bands 5ghz 80mhz-support min-tx-power 18 max-tx-power 127 band-steering-mode prefer-5ghz air-time-fairness-mode fair-access client-aware scanning syslog-level warn ap-debug syslog-level warn network syslog-level warn security syslog-level warn system syslog-level warn user syslog-level warn user-debug syslog-level warn wireless mgmt-user admin 9b53b8b4d3b5b23593986d88f71fc4d3 wlan access-rule default_wired_port_profile index 0 rule any any match any any any permit wlan access-rule wired-instant index 1 rule 10.100.103.191 255.255.255.255 match tcp 80 80 permit rule 10.100.103.191 255.255.255.255 match tcp 4343 4343 permit rule any any match udp 67 68 permit rule any any match udp 53 53 permit wlan access-rule test-remote index 2 rule any any match any any any permit wlan access-rule test_profile index 3 rule any any match any any any deny wlan ssid-profile test-remote enable index 0 type employee essid test-remote opmode opensystem max-authentication-failures 0 vlan 1 auth-server InternalServer rf-band all captive-portal disable dtim-period 1 inactivity-timeout 1000 broadcast-filter none dmo-channel-utilization-threshold 90 local-probe-req-thresh 0 max-clients-threshold 64 auth-survivability cache-time-out 24 wlan external-captive-portal server localhost port 80 url "/" auth-text "Authenticated" auto-whitelist-disable https blacklist-time 3600 auth-failure-blacklist-time 3600 ids wireless-containment none wired-port-profile wired-instant switchport-mode access allowed-vlan all native-vlan guest no shutdown access-rule-name wired-instant speed auto duplex auto no poe type guest captive-portal disable no dot1x wired-port-profile default_wired_port_profile switchport-mode access allowed-vlan all native-vlan 1 no shutdown access-rule-name default_wired_port_profile speed auto duplex full no poe type employee captive-portal disable no dot1x wired-port-profile test_profile switchport-mode access allowed-vlan all native-vlan 1 no shutdown access-rule-name test_profile speed auto duplex auto no poe type employee captive-portal disable no dot1x enet0-port-profile default_wired_port_profile wlan sta-profile essid Test cipher-suite wpa2-ccmp-psk wpa-passphrase 7be46fe217669fe1f77ac7d96214446a374b7a4c85f0c1e6 uplink-band dot11a uplink preemption enforce none failover-internet-pkt-lost-cnt 10 failover-internet-pkt-send-freq 30 failover-vpn-timeout 180 uplink-priority ethernet 2 uplink-priority wifi 1 uplink-priority cellular 3 airgroup disable airgroupservice airplay disable description AirPlay airgroupservice airprint disable description AirPrint 24:de:c6:c9:8b:14# sh ver Aruba Operating System Software. ArubaOS (MODEL: 135), Version 6.3.1.4-4.0.0.5 Website: http://www.arubanetworks.com Copyright (c) 2002-2014, Aruba Networks, Inc. Compiled on 2014-04-03 at 12:50:20 PDT (build 43022) by p4build AP uptime is 32 minutes 9 seconds Reboot Time and Cause: AP rebooted Mon Jun 9 19:44:18 UTC 2014; User reboot 24:de:c6:c9:8b:14# sh wifi-uplink status configured :YES enabled :YES interfaces :aruba001 peer mac :24:de:c6:57:ac:6a up time :0 hour 31 min 33 sec now :2014-06-09 20:17:23 RSSI :51 madwifi SM :RUN INIT --> INIT 0 times INIT --> SCAN 0 times INIT --> JOIN 1 times INIT --> AUTH 0 times INIT --> ASSOC 0 times INIT --> RUN 0 times SCAN --> INIT 0 times SCAN --> SCAN 0 times SCAN --> JOIN 0 times SCAN --> AUTH 0 times SCAN --> ASSOC 0 times SCAN --> RUN 0 times JOIN --> INIT 0 times JOIN --> SCAN 0 times JOIN --> JOIN 0 times JOIN --> AUTH 1 times JOIN --> ASSOC 0 times JOIN --> RUN 0 times AUTH --> INIT 0 times AUTH --> SCAN 0 times AUTH --> JOIN 0 times AUTH --> AUTH 0 times AUTH --> ASSOC 1 times AUTH --> RUN 0 times ASSOC --> INIT 0 times ASSOC --> SCAN 0 times ASSOC --> JOIN 0 times ASSOC --> AUTH 0 times ASSOC --> ASSOC 0 times ASSOC --> RUN 1 times RUN --> INIT 0 times RUN --> SCAN 0 times RUN --> JOIN 0 times RUN --> AUTH 0 times RUN --> ASSOC 0 times RUN --> RUN 0 times Latest 20 failure: ------------------ index type time ----- --------- --------------- 24:de:c6:c9:8b:14# sh wifi-uplink auth ---------------------------------------------------------------------- wifi uplink auth configuration: ---------------------------------------------------------------------- ctrl_interface=/tmp/sta_supplicant_ctrl ctrl_interface_group=0 eapol_version=1 ap_scan=1 fast_reauth=1 network={ ssid="Test" scan_ssid=1 proto=WPA RSN key_mgmt=WPA-PSK pairwise=CCMP TKIP group=CCMP TKIP psk="aruba123" priority=9 } ---------------------------------------------------------------------- wifi uplink auth log: ---------------------------------------------------------------------- [1779]2000-01-01 00:00:25.227: Global control interface '/tmp/supp_gbl' [1779]2000-01-01 00:00:48.542: CTRL_IFACE GLOBAL INTERFACE_REMOVE 'aruba001' [1779]2000-01-01 00:00:48.542: CTRL_IFACE GLOBAL INTERFACE_ADD 'aruba001 /aruba/bin/wpa_sta_supplicant.conf madwifi "Test" - ***' [1779]2000-01-01 00:00:48.632: wpa_supplicant_add_iface 2626 wifi-uplink [1779]2000-01-01 00:00:48.632: wpa_sapd_socket_init 2889 [1779]2000-01-01 00:00:48.632: wpa_sapd_socket_tx_radio_used 2948 [1779]2000-01-01 00:00:49.553: RX ctrl_iface - hexdump_ascii(len=11): 52 45 43 4f 4e 46 49 47 55 52 45 RECONFIGURE [1779]2000-01-01 00:00:49.642: State: DISCONNECTED -> SCANNING [1779]2000-01-01 00:00:49.642: Scan results: 0 [1779]2000-01-01 00:00:54.335: Scan results: 1 [1779]2000-01-01 00:00:54.335: Trying to associate with 24:de:c6:57:ac:6a (SSID='Test' freq=5745 MHz) [1779]2000-01-01 00:00:54.335: keys cleared. Forcing clear again [1779]2000-01-01 00:00:54.336: State: SCANNING -> ASSOCIATING [1779]2000-01-01 00:00:54.340: Calling w_s_initiate_eapol [1779]2000-01-01 00:00:54.344: wpa_supplicant_event_assoc: 00:00:00:00:00:00 [1779]2000-01-01 00:00:54.344: State: ASSOCIATING -> ASSOCIATED [1779]2000-01-01 00:00:54.344: wpa_sapd_socket_tx_radio_channel 2986 [1779]2000-01-01 00:00:54.344: Associated to a new BSS: BSSID=24:de:c6:57:ac:6a [1779]2000-01-01 00:00:54.345: keys cleared. Forcing clear again [1779]2000-01-01 00:00:54.345: Associated with 24:de:c6:57:ac:6a [1779]2000-01-01 00:00:54.345: WPA: Association event - clear replay counter [1779]2000-01-01 00:00:54.347: IEEE 802.1X RX: version=1 type=3 length=117 [1779]2000-01-01 00:00:54.347: EAPOL-Key type=2 [1779]2000-01-01 00:00:54.347: key_info 0x8a (ver=2 keyidx=0 rsvd=0 Pairwise Ack) [1779]2000-01-01 00:00:54.347: replay_counter - hexdump(len=8): 00 00 00 00 00 00 00 01 [1779]2000-01-01 00:00:54.347: key_nonce - hexdump(len=32): d7 08 12 5f 10 04 a8 8a 0d 64 95 ee a2 28 95 d5 55 c6 36 45 18 20 fc d0 c1 1e 37 86 e4 de 03 a2 [1779]2000-01-01 00:00:54.347: key_iv - hexdump(len=16): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [1779]2000-01-01 00:00:54.347: State: ASSOCIATED -> 4WAY_HANDSHAKE [1779]2000-01-01 00:00:54.348: WPA: RX message 1 of 4-Way Handshake from 24:de:c6:57:ac:6a (ver=2) [1779]2000-01-01 00:00:54.348: l2_packet_send:l=121 p=0x888e [1779]2000-01-01 00:00:54.348: Sending fd=9 L=153 [1779]2000-01-01 00:00:54.432: IEEE 802.1X RX: version=1 type=3 length=151 [1779]2000-01-01 00:00:54.432: EAPOL-Key type=2 [1779]2000-01-01 00:00:54.432: key_info 0x13ca (ver=2 keyidx=0 rsvd=0 Pairwise Install Ack MIC Secure Encr) [1779]2000-01-01 00:00:54.432: replay_counter - hexdump(len=8): 00 00 00 00 00 00 00 02 [1779]2000-01-01 00:00:54.432: key_nonce - hexdump(len=32): d7 08 12 5f 10 04 a8 8a 0d 64 95 ee a2 28 95 d5 55 c6 36 45 18 20 fc d0 c1 1e 37 86 e4 de 03 a2 [1779]2000-01-01 00:00:54.432: key_iv - hexdump(len=16): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [1779]2000-01-01 00:00:54.432: State: 4WAY_HANDSHAKE -> 4WAY_HANDSHAKE [1779]2000-01-01 00:00:54.433: WPA: RX message 3 of 4-Way Handshake from 24:de:c6:57:ac:6a (ver=2) [1779]2000-01-01 00:00:54.433: l2_packet_send:l=99 p=0x888e [1779]2000-01-01 00:00:54.433: Sending fd=9 L=131 [1779]2000-01-01 00:00:54.434: State: 4WAY_HANDSHAKE -> GROUP_HANDSHAKE [1779]2000-01-01 00:00:54.434: WPA: Key negotiation completed with 24:de:c6:57:ac:6a [PTK=CCMP GTK=CCMP] [1779]2000-01-01 00:00:54.434: State: GROUP_HANDSHAKE -> COMPLETED [1779]2000-01-01 00:00:54.434: CTRL-EVENT-CONNECTED - Connection to 24:de:c6:57:ac:6a completed (auth) [id=0 id_str=] [1779]2000-01-01 00:00:54.434: inform_wifi_uplink_status 632 informing wifi-uplink of result: 2 [1779]2014-06-09 19:53:05.733: Scan results: 1 [1779]2014-06-09 19:59:45.125: Scan results: 1 [1779]2014-06-09 20:07:38.815: Scan results: 1 [1779]2014-06-09 20:15:32.509: Scan results: 1 24:de:c6:c9:8b:14# show arp IP address HW type Flags HW address Mask Device 10.100.103.254 0x1 0x2 00:18:71:cb:ae:00 * br0 172.31.98.2 0x1 0x6 24:de:c6:18:b1:51 * br0 24:de:c6:c9:8b:14# 24:de:c6:c9:8b:14# show arp IP address HW type Flags HW address Mask Device 10.100.103.254 0x1 0x2 00:18:71:cb:ae:00 * br0 10.100.103.190 0x1 0x2 24:de:c6:cd:7a:c6 * br0 172.31.98.2 0x1 0x6 24:de:c6:18:b1:51 * br0 10.100.103.195 0x1 0x2 d8:9d:67:cf:e5:a6 * br0 24:de:c6:c9:8b:14# ping 10.100.103.195 <--- Client PC Press 'q' to abort. PING 10.100.103.195 (10.100.103.195): 56 data bytes 64 bytes from 10.100.103.195: icmp_seq=0 ttl=128 time=1.7 ms 64 bytes from 10.100.103.195: icmp_seq=1 ttl=128 time=0.9 ms 64 bytes from 10.100.103.195: icmp_seq=2 ttl=128 time=0.8 ms 64 bytes from 10.100.103.195: icmp_seq=3 ttl=128 time=0.7 ms 64 bytes from 10.100.103.195: icmp_seq=4 ttl=128 time=0.7 ms --- 10.100.103.195 ping statistics --- 5 packets transmitted, 5 packets received, 0% packet loss round-trip min/avg/max = 0.7/0.9/1.7 ms 24:de:c6:c9:8b:14# ping 10.100.103.190 Press 'q' to abort. PING 10.100.103.190 (10.100.103.190): 56 data bytes 64 bytes from 10.100.103.190: icmp_seq=0 ttl=64 time=4.9 ms 64 bytes from 10.100.103.190: icmp_seq=1 ttl=64 time=0.9 ms 64 bytes from 10.100.103.190: icmp_seq=2 ttl=64 time=0.8 ms 64 bytes from 10.100.103.190: icmp_seq=3 ttl=64 time=0.8 ms 64 bytes from 10.100.103.190: icmp_seq=4 ttl=64 time=1.0 ms --- 10.100.103.190 ping statistics --- 5 packets transmitted, 5 packets received, 0% packet loss round-trip min/avg/max = 0.8/1.6/4.9 ms Wired Client List ----------------- Name IP Address MAC Address OS Network Access Point Role Speed (mbps) ---- ---------- ----------- -- ------- ------------ ---- ------------ 10.100.103.195 d8:9d:67:cf:e5:a6 eth0 24:de:c6:c9:8b:14 default_wired_port_profile - Info timestamp :2088 C:\Users\Steven>ping 10.100.103.191 Pinging 10.100.103.191 with 32 bytes of data: Reply from 10.100.103.191: bytes=32 time<1ms TTL=64 Reply from 10.100.103.191: bytes=32 time<1ms TTL=64 Reply from 10.100.103.191: bytes=32 time<1ms TTL=64 Ping statistics for 10.100.103.191: Packets: Sent = 3, Received = 3, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 0ms, Average = 0ms Control-C ^C C:\Users\Steven>ping 10.100.103.190 Pinging 10.100.103.190 with 32 bytes of data: Request timed out. Request timed out. Request timed out. Ping statistics for 10.100.103.190: Packets: Sent = 3, Received = 0, Lost = 3 (100% loss), Control-C ^C C:\Users\Steven>