ArubaOS and Controllers

Reply
Occasional Contributor II
Posts: 13
Registered: ‎06-16-2009

Remote AP w/Captive Portal

I'm having an issue with our setup where an authticated CP user's session will time out randomly.When trying to reach the CP page to reauth, the user will only get a"Web Authentication Disabled" page and will not be able to login for up to 30 minutes. Has anyone seen this before?
Guru Elite
Posts: 20,774
Registered: ‎03-29-2007

The Big Question

Eddie:

Two questions:

- What version of Aruba OS?
- Is the SSID tunneled?


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II
Posts: 13
Registered: ‎06-16-2009

Re: Remote AP w/Captive Portal

ArubaOS 3.3.2.8-rn-2.0

Split Tunneled


Thanks for the quick reply! : )


Eddie:

Two questions:

- What version of Aruba OS?
- Is the SSID tunneled?


Highlighted
Aruba Employee
Posts: 49
Registered: ‎04-02-2007

Remote AP w/Captive Portal

You have to look at the forward mode which is configured in the vap

(800-lab) #show wlan virtual-ap default

Virtual AP profile "default"
----------------------------
Parameter Value
--------- -----
Virtual AP enable Enabled
Allowed band all
AAA Profile default
802.11K Profile default
SSID Profile default
VLAN N/A
Forward mode tunnel <----
Deny time range N/A
Mobile IP Enabled
HA Discovery on-association Disabled
DoS Prevention Disabled
Station Blacklisting Enabled
Blacklist Time 3600 sec
Authentication Failure Blacklist Time 3600 sec
Multi Association Disabled
Strict Compliance Disabled
VLAN Mobility Disabled
Remote-AP Operation standard
Drop Broadcast and Multicast Disabled
Convert Broadcast ARP requests to unicast Disabled
Band Steering Disabled
Guru Elite
Posts: 20,774
Registered: ‎03-29-2007

Web Authentication Disabled

Eddie,

1. What is the initial role that the user gets when he associates to the "Guest" SSID? When you do show rights on the commandline, does it have a captive portal profile?

2. When the user cannot connect, what is is role at that time? Does that role have a captive portal profile when you do show rights on the commandline?


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II
Posts: 13
Registered: ‎06-16-2009

Web Authentication

The intial role is Rap-Split-intial-logon...


the authenticated role is rap-split-authenticated -rap-user... when the session is stuck it stays in the authenticated role.

Here's the output of the command you asked me to run

)#show rights rap-split-authenticated-rap-user

Derived Role = 'rap-split-authenticated-rap-user'
Up BW:No Limit Down BW:No Limit
L2TP Pool = default-l2tp-pool
PPTP Pool = default-pptp-pool
Periodic reauthentication: Disabled
ACL Number = 44/0
Max Sessions = 65535
Guru Elite
Posts: 20,774
Registered: ‎03-29-2007

Upgrade

Eddie,

Without using up your time with more detailed questions, there is an Version of RN code that is on the support site that is 3.3.2.11-rn-3.0.2_21327. You should upgrade to this version before trying anything else. A great deal of issues have been dealt with since your version.


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II
Posts: 13
Registered: ‎06-16-2009

Re: Remote AP w/Captive Portal

Thanks alot Colin I'll try the new code tommorrow.
Occasional Contributor II
Posts: 13
Registered: ‎06-16-2009

Re: Remote AP w/Captive Portal

Is there a special place for RN code on the support site? All I see is non RN stuff : (
Guru Elite
Posts: 20,774
Registered: ‎03-29-2007

Uh...

The RN train is still in beta code and testing and evaluation is coordinated with your partner or Aruba Sales/Engineering team, so that they can provide support, as well as collect your feedback.


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
Showing results for 
Search instead for 
Did you mean: