Aruba Instant & Cloud Wi-Fi

Reply
Occasional Contributor II
Posts: 12
Registered: ‎11-12-2014

Can 802.11 wireless packages on IAP be de-crypted to troubleshoot an ARP issue?

Hi all,

 

We are having ARP issues on our IAP105 environment (managed by Airwave).

 

We are tracing as much as possible, also on wireless packages, just to be sure that ARP messages are actually leaving the wireless device. We use the remote pcap command on the IAP cli.

pcap start BSSID @IPofcomputer UDPPort format size

 

However, the packages are of course 802.11 encrypted. Is there any way to de-crypt the packages so we can see the ARP packages?

 

Thanks for you help!

Guru Elite
Posts: 21,010
Registered: ‎03-29-2007

Re: Can 802.11 wireless packages on IAP be de-crypted to troubleshoot an ARP issue?

What encryption are the client devices using?

Can you install wireshark on the client device?

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Aruba
Posts: 1,287
Registered: ‎08-29-2007

Re: Can 802.11 wireless packages on IAP be de-crypted to troubleshoot an ARP issue?

Besides mirroring the port the ap is connected to, have you tried the 'debug pkt' command set?

 

debug pk type arp
debug pkt dump

If my post is helpful please give kudos, or mark as solved if it answers your post.

ACCP, ACMP, ACMX #294
mclarke@arubanetworks.com
Occasional Contributor II
Posts: 12
Registered: ‎11-12-2014

Re: Can 802.11 wireless packages on IAP be de-crypted to troubleshoot an ARP issue?

Encryption is EAP-TLS

 

Installing Wireshark is difficult since we can't predict where the problem is going to occur next. We are trying to get netsh tracing on all clients.

Occasional Contributor II
Posts: 12
Registered: ‎11-12-2014

Re: Can 802.11 wireless packages on IAP be de-crypted to troubleshoot an ARP issue?

Hi,

 

What does this do exactly?

Aruba
Posts: 1,287
Registered: ‎08-29-2007

Re: Can 802.11 wireless packages on IAP be de-crypted to troubleshoot an ARP issue?

It dumps those packet types onto the console.  This includes packets from wireless clients and packets that it is seeing on the wire.

Not as good as a wireshark...but the next best thing.  Try it.  It's pretty neat.  

Not sure what code this started on, so if you are on an older version, it may not work.

 


If my post is helpful please give kudos, or mark as solved if it answers your post.

ACCP, ACMP, ACMX #294
mclarke@arubanetworks.com
Search Airheads
Showing results for 
Search instead for 
Did you mean: