Aruba Instant & Cloud Wi-Fi

Reply
Occasional Contributor II
Posts: 14
Registered: ‎05-08-2013

RAP-109 Provisioning Error

Hi all

I am having an issue with provisioning a RAP-109. This device worked fine before. I have had it disconnected for a while and when I plugged it up it had a broadcast ssid of "instant". So I connected to it and tried to re-provision it. However, in this process, I encountered an error. 

 

I have verified that the configuration is still in the Remote AP whitelist.

 

My controller information is as follows:

Name:Aruba Operating System Software.
Model:Aruba3600
Version:6.3.1.8
Compiled:2014-06-10 at 18:09:03 PDT (build 44205) by p4build

 

I have attached the error file that was generated. 

 

Any help to remedy this issue will be greatly appreciated.

 

Guru Elite
Posts: 20,801
Registered: ‎03-29-2007

Re: RAP-109 Provisioning Error

It almost looks like you don't have it in the RAP whitelist:

 

Notify: AUTHENTICATION_FAILED (ESP spi=93163f00)
May 23, 12:19:16: InNotify AP authentication failed
ike2_state.c (7882): errorCode = ERR_IKE_NOTIFY_PAYLOAD
May 23, 12:19:16: IKE_SAMPLE_ikeStatHdlr(CHILD_SA): dwPeerAddr:d8890e43 index:0 mPeerType:0
May 23, 12:19:16: IKE SA failed reason = ERR_IKE_XAUTH_FAILED, errorcode = -8952 ikeVer 2
May 23, 12:19:16: send_sapd_error: InnerIP:0  error:45 debug_error:0

May 23, 12:19:16: send_sapd_error: error:45 debug_error:0

May 23, 12:19:16: IKE_SAMPLE_ikeStatHdlr(SA): dwPeerAddr:d8890e43 index:0 mPeerType:0
May 23, 12:19:16: IKE_SA [v2 I] (id=0xd6d38218) flags 0x41000015 failed reason = ERR_IKE_XAUTH_FAILED, errorcode = -8952
May 23, 12:19:16: IKE_SAMPLE_ikeStatHdlr(IST_FAIL): g_ikeversion:2
Timer ID: 1 Deleted 
rapperSendStatusCB


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II
Posts: 14
Registered: ‎05-08-2013

Re: RAP-109 Provisioning Error

I actually do have it in the whitelist. I deleted it and re-added. See pics.

Guru Elite
Posts: 20,801
Registered: ‎03-29-2007

Re: RAP-109 Provisioning Error

on the controller, do this:

 

config t
logging level debugging security subcat ike
logging level debugging security process aaa
logging level debugging security process authmgr
logging level debugging security subcat l2tp
logging level debugging security subcat vpn

Attempt to convert/connect your RAP, then type "show log security 50" to see if there are any clues.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II
Posts: 14
Registered: ‎05-08-2013

Re: RAP-109 Provisioning Error

cjospeh

 

Here is the output I got.......

Guru Elite
Posts: 20,801
Registered: ‎03-29-2007

Re: RAP-109 Provisioning Error

Check to make sure your configuration is like in the picture below:

rap.png



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II
Posts: 14
Registered: ‎05-08-2013

Re: RAP-109 Provisioning Error

I have ensured that is the case. 

Guru Elite
Posts: 20,801
Registered: ‎03-29-2007

Re: RAP-109 Provisioning Error

Okay.  You need to check below:

sg.png



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II
Posts: 14
Registered: ‎05-08-2013

Re: RAP-109 Provisioning Error

Here is what I have there.

Guru Elite
Posts: 20,801
Registered: ‎03-29-2007

Re: RAP-109 Provisioning Error

If the default server group is modified, it could make it so that you cannot bring up a RAP.

 

Find out why it is configured like you have it.  If you do not know, please revert to how I have it and retest your RAP.  The default server group needs to point to the internal database, but without what you have, to make RAPs come up.

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
Showing results for 
Search instead for 
Did you mean: