Controllerless Networks

Running IAP-105 in a flat layer 2 network with network DHCP in the same subnet. Employee users are able to connect and works fine while Guest users can connect but the splash screen does not appear.

This is the error we get in the AP log:

Jan  5 17:41:13  awc[1022]: isc_init: could not resolve 'device.arubanetworks.com'

Are there particular settings we need within the Windows 2008 RC2 SP1 DNS server or on the clients themselves?

cheers,

Tracy 

Guest login is from IAP internal Dbase

DHCP is from network in the same broadcast domain

Here is my VC config:

version 6.2.0.0-3.2.0
virtual-controller-country US
virtual-controller-key eb9980910145da2be6e8f1695f60baa8470dc5e5cb13569107
name Instant-CB:30:43
clock timezone none 00 00
rf-band 5.0

allow-new-aps
allowed-ap 00:24:6c:cb:30:43

arm wide-bands 5ghz
min-tx-power 18
max-tx-power 127
band-steering-mode prefer-5ghz
air-time-fairness-mode fair-access
client-aware
ip dhcp pool
dns-server 192.168.26.12
domain-name wthd.local

internal-domains
domain-name wthd.local

syslog-level debug ap-debug
syslog-level debug network
syslog-level warn security
syslog-level warn system
syslog-level warn user
syslog-level warn user-debug
syslog-level warn wireless

user tracya c85b41ebe38ac06c222955032741594b43c479630d3ba3a3 portal
mgmt-user admin 1432ae2499f6a2ebe9feb32cd14425ac

wlan access-rule default_wired_port_profile
rule any any match any any any permit
wlan access-rule guest_ROBO
rule any any match any any any permit
wlan access-rule dell_ROBO
rule any any match any any any permit
wlan ssid-profile guest_ROBO
index 0
type guest
essid guest_ROBO

opmode opensystem
max-authentication-failures 0
auth-server InternalServer
rf-band all
captive-portal internal
dtim-period 1
inactivity-timeout 1000
broadcast-filter none

dmo-channel-utilization-threshold 90
local-probe-req-thresh 0
max-clients-threshold 64

wlan ssid-profile dell_ROBO
index 1
type employee
essid dell_ROBO
wpa-passphrase 9fb11962d8f5609ef4d0e96ab41806803ff9919352c01179
opmode wpa2-psk-aes
max-authentication-failures 0
auth-server InternalServer
rf-band all
captive-portal disable
dtim-period 1
inactivity-timeout 1000
broadcast-filter none
dmo-channel-utilization-threshold 90
local-probe-req-thresh 0
max-clients-threshold 64

enet-vlan guest
auth-survivability cache-time-out 24

wlan captive-portal
background-color 65280 banner-color 255
redirect-url "http://www.dell.com"
banner-text "Welcome to Guest Network"
terms-of-use "This network is not secure, and use is at your own risk" use-policy "Please read terms and conditions before using Guest Network"
authenticated

wlan external-captive-portal
server localhost
port 80
url "/"
auth-text "Authenticated"

blacklist-time 3600
auth-failure-blacklist-time 3600

ids
wireless-containment none

wired-port-profile default_wired_port_profile
switchport-mode access
allowed-vlan all
native-vlan 1
shutdown
access-rule-name default_wired_port_profile
speed auto
duplex full
no poe
type guest
auth-server InternalServer
captive-portal internal
no dot1x

enet0-port-profile default_wired_port_profile
enet1-port-profile default_wired_port_profile
enet2-port-profile default_wired_port_profile

uplink preemption
enforce none
failover-internet-pkt-lost-cnt 10
failover-internet-pkt-send-freq 30
failover-vpn-timeout 180

airgroup disable

airgroupservice airplay
disable
description AirPlay
id _airplay._tcp
id _raop._tcp

airgroupservice airprint
disable
description AirPrint
id _ipp._tcp
id _pdl-datastream._tcp
id _printer._tcp
id _scanner._tcp
id _universal._sub._ipp._tcp
id _printer._sub._http._tcp
id _http._tcp
id _http-alt._tcp
id _ipp-tls._tcp
id _fax-ipp._tcp
id _riousbprint._tcp
id _cups._sub._ipp._tcp
id _cups._sub._fax-ipp._tcp
id _ica-networking._tcp
id _ptp._tcp
id _canon-bjnp1._tcp

Take a look on the following guide:

http://community.spiceworks.com/how_to/show/4757-how-to-set-up-an-employee-and-guest-wi-fi-network-using-aruba-instant

tell me if u configure you guest networks the same and if not what is the diffrent - you can enlage all the screenshots there.

me

Kdisc,  in that scenario he is using the VC to provide DHCP IP addresses to the wireless guest clients while we are trying to use the local network since this is a small branch office setup.  We can do this but what addresses will the VC hand out? Are they routable addresses as our local network is in the 192.168 space so we do not have IP routing enabled in the switch as it is operating purely at L2. 

Also,  since we already have a DHCP in the network would the VC DHCP cause conflicts?

AustinGator,

If you use the magic VLAN (VC assigned) for guests, the traffic will be natted out of the VC.  That is the best way to do it.