Campus Switching and Routing

Reply
Frequent Contributor II

s2500 is contacting 104.36.249.201

I just noticed some output from our firewall that says several S2500s are contacting IP 104.36.249.201 which resolves to Aruba. Looks to be mostly random but it happens as often as 30 seconds-5 minutes

 

Why would this be happening?

Guru Elite

Re: s2500 is contacting 104.36.249.201

Is it brand new, out of the box? Might be Activate.


Thanks,
Tim

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Aruba

Re: s2500 is contacting 104.36.249.201

Yes, Cappalli is correct. The switches are attempting to reach out to device.arubanetworks.com as part of their Zero Touch Provisioning process. To disable them from trying to reach out, you can disable the following services.

 

activate-service-firmware

  no enable
!
aruba-central

  no enable

!

 

Frequent Contributor II

Re: s2500 is contacting 104.36.249.201

Will it continue indefinetly or does it stop after a certain time period?

Aruba

Re: s2500 is contacting 104.36.249.201

Prior to 7.3.2.X, the MAS checks in to Activate when it is in a factory default state, upon a reboot and once every 7 days (assuming activate firmware service is enabled).

After 7.3.2.X, we now check in to Activate for Aruba Central every 5 minutes.

So I would disable the aruba-central service to stop the 5 minute checkins.

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: