Controllerless Networks

Reply
Occasional Contributor II

Can 802.11 wireless packages on IAP be de-crypted to troubleshoot an ARP issue?

Hi all,

 

We are having ARP issues on our IAP105 environment (managed by Airwave).

 

We are tracing as much as possible, also on wireless packages, just to be sure that ARP messages are actually leaving the wireless device. We use the remote pcap command on the IAP cli.

pcap start BSSID @IPofcomputer UDPPort format size

 

However, the packages are of course 802.11 encrypted. Is there any way to de-crypt the packages so we can see the ARP packages?

 

Thanks for you help!

Guru Elite

Re: Can 802.11 wireless packages on IAP be de-crypted to troubleshoot an ARP issue?

What encryption are the client devices using?

Can you install wireshark on the client device?

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Re: Can 802.11 wireless packages on IAP be de-crypted to troubleshoot an ARP issue?

Besides mirroring the port the ap is connected to, have you tried the 'debug pkt' command set?

 

debug pk type arp
debug pkt dump

If my post is helpful please give kudos, or mark as solved if it answers your post.

ACCP, ACMP, ACMX #294
mclarke@arubanetworks.com
Occasional Contributor II

Re: Can 802.11 wireless packages on IAP be de-crypted to troubleshoot an ARP issue?

Encryption is EAP-TLS

 

Installing Wireshark is difficult since we can't predict where the problem is going to occur next. We are trying to get netsh tracing on all clients.

Occasional Contributor II

Re: Can 802.11 wireless packages on IAP be de-crypted to troubleshoot an ARP issue?

Hi,

 

What does this do exactly?

Re: Can 802.11 wireless packages on IAP be de-crypted to troubleshoot an ARP issue?

It dumps those packet types onto the console.  This includes packets from wireless clients and packets that it is seeing on the wire.

Not as good as a wireshark...but the next best thing.  Try it.  It's pretty neat.  

Not sure what code this started on, so if you are on an older version, it may not work.

 


If my post is helpful please give kudos, or mark as solved if it answers your post.

ACCP, ACMP, ACMX #294
mclarke@arubanetworks.com
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: