Downgrade five IAP-105

[utahbmxer]

Recently upgraded from 6.1.3.0-3.0.0 to 6.2.1.0-3.3.0 and now our Guest Network (setup as Employee) does not work.  Seems I can ping other wireless devices and also the switches (if I assign them a VLAN interface), but I can't ping the router.  If I plug into a switchport on the guest vlan I can get to the internet and ping the router.  I have tried wiresharking everything and can't for the life of me figure out what broke in the upgrade.  It almost as if the APs are filtering broadcasts.  If I assign a static ARP entry for the router, I can ping it fine.

How can I get a image of the old version so that I can downgrade? Aruba Support keeps telling me that they are under LLW so I only have access to the docs; WooWhoo.. that's a big help.  I am about to toss these things in the garbage.

[utahbmxer]

Just found this.  The 192.168.10.x net is supposed to be in VLAN 150.  Why is it showing as VLAN 3333 with dropping the route?  Also the netmask is wrong.  (255.255.255.0)

*********************************************************************************************************
 9/18/2013 16:25:44 PM    Target: AP1    Command: show datapath route
*********************************************************************************************************
Route Table Entries
-------------------

Flags: L - Local, P - Permanent,  T - Tunnel, I - IPsec, M - Mobile, A - ARP, D - Drop

       IP             Mask           Gateway       Cost  VLAN  Flags
---------------  ---------------  ---------------  ----  ----  -----
0.0.0.0          0.0.0.0          10.1.10.1           0     0           
192.168.10.0     255.255.254.0    192.168.10.1        0  3333  D        
10.1.10.0        255.255.255.0    10.1.10.235         0     1  L       

[utahbmxer]

Ok, ignore this.  After searching around for Aruba and VLAN 3333 turns out that it was 'Magic VLAN' or something.  Looks like it overlapped our guest network subnet and that route was dropping the traffic.  I just moved the guest network to new range and it's working now.  Odd.

[Victor Fabian]

Please do the following :

show ip interface brief

show access-rule-all