ArubaOS and Controllers

Reply
Occasional Contributor I
Posts: 6
Registered: ‎09-15-2009

captive portal dhcp MAC spoof

Hello,

I have a problem with captive portal and dhcp, connected with user role logon, can't get an ip, problem occure frequently.
Is this problem as ever been reported, do we have to change the dhcp lease or upgrade to 3.4.4.0?
DHCP conf
lease 2hrs
network 10.0.2.0 netmask 255.255.254.0

It seams like mac address aren't deleted from the internal database.
Client are windows 7 laptop.
Sometime the client is detected as interfering, when you set it as valid can't get any ip neither.

Controller Model Aruba3600
Country FR
ArubaOS Version 3.4.2.3


Feb 8 14:51:37 192.168.100.1 2011 authmgr: <522025> |authmgr| MAC=c0:cb:38:30:35:43 IP=10.0.3.252 MAC spoof: new MAC=00:26:82:e9:76:af
Feb 8 14:51:38 192.168.100.1 2011 authmgr: <522025> |authmgr| MAC=c0:cb:38:30:35:43 IP=10.0.3.252 MAC spoof: new MAC=00:26:82:e9:76:af
Feb 8 14:51:39 192.168.100.1 2011 authmgr: <522025> |authmgr| MAC=c0:cb:38:30:35:43 IP=10.0.3.252 MAC spoof: new MAC=00:26:82:e9:76:af
Feb 8 14:51:39 192.168.100.1 2011 authmgr: <522025> |authmgr| MAC=c0:cb:38:30:35:43 IP=10.0.3.252 MAC spoof: new MAC=00:26:82:e9:76:af
Feb 8 14:51:40 192.168.100.1 2011 authmgr: <522025> |authmgr| MAC=c0:cb:38:30:35:43 IP=10.0.3.252 MAC spoof: new MAC=00:26:82:e9:76:af
Feb 8 14:51:41 192.168.100.1 2011 authmgr: <522005> |authmgr| MAC=c0:cb:38:30:35:43 IP=10.0.3.252 User entry deleted: reason=ip takeover


thanks a lot
acout
Guru Elite
Posts: 20,562
Registered: ‎03-29-2007

Re: captive portal dhcp MAC spoof

If you disable firewall spoofing detection does it work?


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor I
Posts: 6
Registered: ‎09-15-2009

mac spoofing

I find an issue to my probem, the DHCP scope was to short (512) i change my scope to 1024 @ip it seams ok now.
Anyway i might still have a problem with spoofing detection.

How do i disable firewall spoofing detection (cmd line or web) can't find this in documentation.

thanks a lot
acout
Guru Elite
Posts: 20,562
Registered: ‎03-29-2007

Re: captive portal dhcp MAC spoof

config t
no firewall prohibit-ip-spoofing


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
Showing results for 
Search instead for 
Did you mean: