How to find which device interface / dev name is mapped for which SSID on Instant APs?

Aruba Employee
Aruba Employee
Q:

How to find which device interface / dev name is mapped for which SSID on Instant APs? 
What are the different dev names and dev numbers that we see in the "show datapath bridge" output? 



A:

The "show datapath bridge" command is usually used to find "on which vlan a given mac address is learned and which SSID it is destined to?"

In the "show datapath bridge" output, we can only see that every mac address has different dev interface number in the destination. Every device interface number has a separate device name like "aruba102", "aruba103", etc., mapped, but it doesn't actually show which SSID it corresponds to. 

The SSID and the radio (2.4 or 5 Ghz) that is mapped for every dev name can be found in the "show ap debug system-status" output. 

For example, we have the below SSIDs on this IAP, 

Rajaguru-IAP# show network

Networks
--------
Profile Name                    ESSID                           Clients  Type      Band  Authentication Method  Key Management  IP Assignment  Status   Zone  Coding   Active
------------                    -----                           -------  ----      ----  ---------------------  --------------  -------------  ------   ----  ------   ------
aruba-mesh                      aruba-mesh                      0        guest     all   None                   None            NAT Mode       Enabled  -     Default  Yes
OpenSystemAuthentication        OpenSystemAuthentication        0        guest     all   None                   None            NAT Mode       Enabled  -     Default  Yes
WEP-SharedKeyAuthentication     WEP-SharedKeyAuthentication     0        voice     all   None                   WEP             NAT Mode       Enabled  -     Default  Yes
PSK-PresharedKeyAuthentication  PSK-PresharedKeyAuthentication  0        voice     all   None                   WPA2-AES        NAT Mode       Enabled  -     Default  Yes
Mac-Auth                        Mac-Auth                        0        voice     all   MAC Address            None            NAT Mode       Enabled  -     Default  Yes
Dot1x-Auth                      Dot1x-Auth                      0        employee  all   Per User               WPA2-AES        NAT Mode       Enabled  -     Default  Yes


The different device numbers and the device names can be seen under the "Datapath Bridge Devices" of the "show datapath bridge" output. 
The destination of different MAC addresses can be seen under "Datapath Bridge Table Entries" of th "show datapath bridge" output. 

 

Rajaguru-IAP# show datapath bridge

Datapath Bridge Devices
-----------------------------
Flags: F - source-filter, T - trusted, Q - tagged, I - IP
       S - split-tunnel, B - bridge, M - mesh, P - PPPoE
       C - content-filter, O - corp-access, h - to HAP, f - to FAP
       h - dhcp-redirect b - blocked by STP

Dev  Name                      VLANs  PVID  ACLs         FramesRx  FramesTx  Flags
---  ------------------------  -----  ----  -----------  --------  --------  --------
3    bond0                     4095   1       0/0   106  9530532   5326100  FTQB
10   br0                       0      1     105/0     0   129881         0  IB
13   aruba002                  1      3333  134/0     0  5148787   6450209  B
14   aruba102                  1      3333  134/0     0    29227     49709  B
15   aruba000                  4095   1       0/0   106        0   2035763  TQBM
16   aruba003                  1      3333  136/0     0        0      1609  B
17   aruba103                  1      3333  136/0     0    17062     27950  B
18   aruba004                  1      3333  139/0     0        0      1609  B
19   aruba104                  1      3333  139/0     0        0      1609  B
20   aruba005                  1      3333  141/0     0        0      1609  B
21   aruba105                  1      3333  141/0     0        0      1609  B
22   aruba006                  1      3333  100/0     0        0      1609  B
23   aruba106                  1      3333  100/0     0       74      1609  B
24   aruba007                  1      3333  100/0     0        0      1609  B
25   aruba107                  1      3333  100/0     0        0      1609  B

Datapath Bridge Table Entries
-----------------------------
Flags: P - Permanent, D - Deny, R - Route, M - Mobile, X - Xsec, A - Auth
AP Flags: X - Awaiting 1X reply, B - Block all non-1X traffic, F - Force bridge role

      MAC          VLAN  Assigned VLAN  Destination  Flags  AP Flags  Bridge Role ACL
-----------------  ----  -------------  -----------  -----  --------  ---------------
00:1A:1E:01:2F:58  1     1              dev3                                        0
18:64:72:C3:C3:20  3333  3333           local        P                              0
00:0B:86:B7:54:97  1     1              dev3                                        0
00:0C:29:88:EB:08  1     1              vlan 1                                      0
00:0B:86:BC:03:27  1     1              dev3                                        0
00:0B:86:D4:F0:43  1     1              dev3                                        0
00:1A:1E:09:D9:00  1     1              dev3                                        0
18:64:72:C3:C3:20  1     1              local        P                              0
18:64:72:C3:C3:1E  1     1              dev3                                        0
00:0B:86:B9:6C:8C  1     1              dev3                                        0
24:DE:C6:CD:6C:34  1     1              vlan 1                                      0

 

The SSIDs and the radio mapped for the different dev names can be found in the output of "show ap debug system-status" as below. 

Rajaguru-IAP# show ap debug system-status
.
.
<TRUNCATED> 
.
.
ifconfig output for bond0
-------------------------
bond0     Link encap:Ethernet  HWaddr 18:64:72:C3:C3:20  
---------------------------------------------------------
          inet6 addr: fe80::1a64:72ff:fec3:c320/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:9577190 errors:0 dropped:0 overruns:0 frame:0
          TX packets:6926874 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:1855642418 (1.7 GiB)  TX bytes:1943062181 (1.8 GiB)

          Rx broadcast packet:0         Rx broadcast packet per second:0
          Rx multicast packet:0         Rx multicast packet per second:0
          Tx broadcast packet:0         Tx broadcast packet per second:0
          Tx multicast packet:0         Tx multicast packet per second:0

ifconfig output for br0
-----------------------
br0       Link encap:Ethernet  HWaddr 18:64:72:C3:C3:20  
---------------------------------------------------------
          inet addr:10.29.162.254  Bcast:10.29.162.255  Mask:255.255.255.0
          inet6 addr: fe80::1a64:72ff:fec3:c320/64 Scope:Link
          UP BROADCAST RUNNING ALLMULTI MULTICAST  MTU:1300  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:3 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

          Rx broadcast packet:0         Rx broadcast packet per second:0
          Rx multicast packet:0         Rx multicast packet per second:0
          Tx broadcast packet:0         Tx broadcast packet per second:0
          Tx multicast packet:0         Tx multicast packet per second:0

IP Information
--------------
Reassemble Timeout packet         0
-----------------------------------
Reassemble required packet        0
Reassemble ok packet              0
Reassemble failed packet          0
Fragments received ok packet      15
Fragments failed packet           0
Fragments created packet          0

iwconfig output for aruba000
----------------------------
aruba000  IEEE 802.11na  ESSID:"b712e65b2f86068b8315b25964213a5"  
Mode:Master  Frequency:5.805 GHz  Access Point: 18:64:72:BC:32:10   
Encryption key:A430-74D5-97CC-898E-341D-2940-AEC7-8B38 [2]   Security mode:restricted

iwconfig output for aruba002
----------------------------
aruba002  IEEE 802.11na  ESSID:"aruba-mesh"  
Mode:Master  Frequency:5.805 GHz  Access Point: 18:64:72:BC:32:12   
Encryption key:off          

iwconfig output for aruba003
----------------------------
aruba003  IEEE 802.11na  ESSID:"OpenSystemAuthentication"  
Mode:Master  Frequency:5.805 GHz  Access Point: 18:64:72:BC:32:13   
Encryption key:off          

iwconfig output for aruba004
----------------------------
aruba004  IEEE 802.11na  ESSID:"WEP-SharedKeyAuthentication"  
Mode:Master  Frequency:5.805 GHz  Access Point: 18:64:72:BC:32:14   
Encryption key:1122-3344-55   Security mode:restricted

iwconfig output for aruba005
----------------------------
aruba005  IEEE 802.11na  ESSID:"PSK-PresharedKeyAuthentication"  
Mode:Master  Frequency:5.805 GHz  Access Point: 18:64:72:BC:32:15   
Encryption key:2D8A-B1F5-C6D8-5C88-1E6E-5911-3085-2360 [2]   Security mode:restricted

iwconfig output for aruba006
----------------------------
aruba006  IEEE 802.11na  ESSID:"Mac-Auth"  
Mode:Master  Frequency:5.805 GHz  Access Point: 18:64:72:BC:32:16   
Encryption key:off          

iwconfig output for aruba007
----------------------------
aruba007  IEEE 802.11na  ESSID:"Dot1x-Auth"  
Mode:Master  Frequency:5.805 GHz  Access Point: 18:64:72:BC:32:17   
Encryption key:A440-7A3D-CB32-17E2-C466-5926-6199-44FC [2]   Security mode:restricted

iwconfig output for aruba102
----------------------------
aruba102  IEEE 802.11ng  ESSID:"aruba-mesh"  
Mode:Master  Frequency:2.462 GHz  Access Point: 18:64:72:BC:32:02   
Encryption key:off          

iwconfig output for aruba103
----------------------------
aruba103  IEEE 802.11ng  ESSID:"OpenSystemAuthentication"  
Mode:Master  Frequency:2.462 GHz  Access Point: 18:64:72:BC:32:03   
Encryption key:off          

iwconfig output for aruba104
----------------------------
aruba104  IEEE 802.11ng  ESSID:"WEP-SharedKeyAuthentication"  
Mode:Master  Frequency:2.462 GHz  Access Point: 18:64:72:BC:32:04   
Encryption key:1122-3344-55   Security mode:restricted

iwconfig output for aruba105
----------------------------
aruba105  IEEE 802.11ng  ESSID:"PSK-PresharedKeyAuthentication"  
Mode:Master  Frequency:2.462 GHz  Access Point: 18:64:72:BC:32:05   
Encryption key:98EF-140A-7B49-11D0-D65D-A8C7-BB28-227B [2]   Security mode:restricted

iwconfig output for aruba106
----------------------------
aruba106  IEEE 802.11ng  ESSID:"Mac-Auth"  
Mode:Master  Frequency:2.462 GHz  Access Point: 18:64:72:BC:32:06   
Encryption key:off          

iwconfig output for aruba107
----------------------------
aruba107  IEEE 802.11ng  ESSID:"Dot1x-Auth"  
Mode:Master  Frequency:2.462 GHz  Access Point: 18:64:72:BC:32:07   
Encryption key:B520-18DC-D5DF-47FB-50CD-8870-B06A-D29E [2]   Security mode:restricted

.
.
<TRUNCATED> 
.
.

 

The bond0 is the bonded (eth) interface and the br0 is the bridging interface. 

Version history
Revision #:
2 of 2
Last update:
‎12-25-2017 09:11 PM
Updated by:
 
Labels (1)
Contributors
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: