Aruba Instant & Cloud Wi-Fi

Reply
Occasional Contributor I
Posts: 7
Registered: ‎02-25-2015

225 with 50 clients before I even gave out the password?

[ Edited ]

Hi, I'm new here and I have a strange situation that I bet can be answered quickly.

I installed (5) Aruba 225 access points last years. I set them up in instant mode. I've been having a network issue for the last week with wireless IP phones. To track down that problem, I changed the password to wifi access. We have two VLANs and I changed the password for both. After that, I told the access points to reboot. I'm seeing 50 clients connected with addresses of 0.0.0.0. How can there be any clients? I haven't given the new passwords to anyone yet. I'm baffled. Maybe I have something misconfigured? It seems so odd. Can anyone shed any light on this? I'm on software version 6.3.1.8-4.0.0.9_47220. I checked and that seems to be the latest.

Thanks

Guru Elite
Posts: 8,458
Registered: ‎09-08-2010

Re: 225 with 50 clients before I even gave out the password?

Is there an open SSID configured?

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Occasional Contributor I
Posts: 7
Registered: ‎02-25-2015

Re: 225 with 50 clients before I even gave out the password?

Nope. Just the two. An employee and a guest SSID, each on a different subnet.

Moderator
Posts: 1,252
Registered: ‎10-16-2008

Re: 225 with 50 clients before I even gave out the password?

IP address of 0.0.0.0 sounds like they are pre-auth.  I wouldn't be surprised if these are just client devices that are randomly trying to connect to any visible SSID.  Is the guest SSID publicly visible or hidden?


Rob Gin
Senior QA Engineer - Network Services
Aruba Networks, a Hewlett Packard Enterprise Company
Occasional Contributor I
Posts: 7
Registered: ‎02-25-2015

Re: 225 with 50 clients before I even gave out the password?

Both SSIDs are visible. The DHCP servers that run our network obviously didn't give them an address. I don't see how I could have any clients showing. It baffles me. No one knows what the security passords are to try and connect via WiFi.

Does Aruba Instant setup any connections like that between each access point? Could that be the source of any connections? If not, then I'm back to scratching my head on this one.

Moderator
Posts: 1,252
Registered: ‎10-16-2008

Re: 225 with 50 clients before I even gave out the password?

Is there a captive portal page / role setup that puts clients into a pre-auth role?


Rob Gin
Senior QA Engineer - Network Services
Aruba Networks, a Hewlett Packard Enterprise Company
Occasional Contributor I
Posts: 7
Registered: ‎02-25-2015

Re: 225 with 50 clients before I even gave out the password?

Nope. The guest is setup the same as the employee. They are both setup as

Primary usage: Employee

Client IP assignment: Network assigned

VLAN is static; guest=2 employee=1

security WPA-2 &WPA passphrase 8-63 chars

Access is unrestricted

 

Thank you for the help. I really appreciate it.

Moderator
Posts: 1,252
Registered: ‎10-16-2008

Re: 225 with 50 clients before I even gave out the password?

I've forwarded the issue to see if some of our QA can replicate in house.  In the meantime, please open a TAC case.


Rob Gin
Senior QA Engineer - Network Services
Aruba Networks, a Hewlett Packard Enterprise Company
Occasional Contributor I
Posts: 7
Registered: ‎02-25-2015

Re: 225 with 50 clients before I even gave out the password?

Interestingly, I set the passwords back to their old psswords. All the clients with addresses of 0.0.0.0 went away. Strange day...

Aruba Employee
Posts: 10
Registered: ‎03-20-2014

Re: 225 with 50 clients before I even gave out the password?

all 0.0.0.0 clients are auth failed clients, it will not get SSID service. 

once client connect AP with wrong password, it will disappear as 0.0.0.0 until user input correct password.

And IAP will keep auth failed clients for several mins and then delete it by IAP check period. 

 

for you set SSID password back to old one, i think clients auto connect the AP with old password and got IP from APs. 

 

Search Airheads
Showing results for 
Search instead for 
Did you mean: