Controller Based WLANs

Why am I unable to use SSH or Telnet to access the controller on an EVDO interface?

by on ‎07-05-2014 04:44 AM

Product and Software: This article applies to all Aruba controllers that support the USB Evolution Data Optimized (EVDO) interface.

If the cellular interface is active and an IP address was assigned to the controller interface on EVDO, then you should be able to access the controller remotely if SSH, Telnet, and web is not blocked by the ISP.

Different ISPs have different policies on whether or not to allow incoming SSH and Telnet traffic. For example, if you use a Sprint-EVDO card, you may have SSH, Telnet, and web access using your A-651. However, with Verizon, you may not.

Use these commands to check the cellular status:

show ip interface brief

show ip route

show uplink

(vab-A651) #show uplink

Uplink Manager: Enabled

Uplink Management Table
-----------------------
Id Uplink Type Properties Priorty State Status
-- ----------- ---------- ------- ----- ------
1 Cellular Novatel_U720 100 Connecting Dialing evdo_us

(vab-A651) #show uplink

Uplink Manager: Enabled

Uplink Management Table
-----------------------
Id Uplink Type Properties Priorty State Status
-- ----------- ---------- ------- ----- ------
1 Cellular Novatel_U720 100 Connected * Active *

(vab-A651) #show ip route

Codes: C - connected, O - OSPF, R - RIP, S - static
M - mgmt, U - route usable, * - candidate default

Gateway of last resort is Imported from DHCP to network 0.0.0.0 at cost 1
Gateway of last resort is Imported from CELL to network 0.0.0.0 at cost 1
Gateway of last resort is Imported from PPPOE to network 0.0.0.0 at cost 1
Gateway of last resort is 77.77.77.2 to network 0.0.0.0 at cost 1
S* 0.0.0.0/0 [1/0] via 75.208.225.173*
C 66.66.66.0 is directly connected, VLAN66



(vab-A651) #show ip interface b

Interface IP Address / IP Netmask Admin Protocol
vlan 1 unassigned / unassigned up down
CELL 75.208.225.174 / 255.255.255.0 up up
vlan 66 66.66.66.3 / 255.255.255.0 up up
vlan 77 77.77.77.3 / 255.255.255.0 up down
loopback unassigned / unassigned up up
mgmt unassigned / unassigned down down


In the following example, the service provider allows ICMP to the dynamic IP assigned on the EVDO interface, but SSH or Telnet is blocked. The service provider allows access on port 4343, so you can access the controller using the web.

(vab-A651) #show datapath session

Datapath Session Table Entries
------------------------------

Flags: F - fast age, S - src NAT, N - dest NAT
D - deny, R - redirect, Y - no syn
H - high prio, P - set prio, T - set ToS
C - client, M - mirror, V - VOIP
I - Deep inspect, U - Locally destined

Source IP Destination IP Prot SPort DPort Cntr Prio ToS Age Destination TAge Flags
-------------- -------------- ---- ----- ----- ---- ---- --- --- ----------- ---- -----
216.31.249.246 75.208.225.174 1 4098 2048 0 0 0 0 2/0 2 FYCI
75.208.225.174 216.31.249.246 1 4098 0 0 0 0 1 2/0 2 FI
66.66.66.3 127.1.0.1 47 0 0 0 0 0 0 local 243 FC
216.31.249.246 75.208.225.174 1 23272 2048 0 0 0 0 2/0 0 FYCI
216.31.249.246 75.208.225.174 1 22880 2048 0 0 0 0 2/0 2 FYCI
75.208.225.174 216.31.249.246 1 23272 0 0 0 0 0 2/0 0 FI
75.208.225.174 216.31.249.246 1 22880 0 0 0 0 0 2/0 2 FI
75.208.225.174 216.31.249.246 1 25631 0 0 0 0 0 2/0 1 FI
216.31.249.246 75.208.225.174 1 25631 2048 0 0 0 0 2/0 1 FYCI
127.1.0.1 66.66.66.3 47 0 0 0 0 0 1 local 243 F
216.31.249.246 75.208.225.174 6 12539 4343 0 0 0 0 2/0 15 C
75.208.225.174 216.31.249.246 6 4343 1082 0 0 0 1 2/0 10

 

Search Airheads
Showing results for 
Search instead for 
Did you mean: 
Is this a frequent problem?

Request an official Aruba knowledge base article to be written by our experts.