Controllerless Networks

Hi,

I have a cluster of two IAP 103. I had a problem to surf in internet, while the cabled network was working fine.

I changed a IAP 103 with a IAP 205 and now I can surf internet, when I'm connected under the IAP 205, but still unable to surf if connected under the IAP 103.

The IAP 205 is the master so IAP 103 should have the same configuration.

I don't understand why I can't surf internet with the IAP 103. Any idea?

Thanks for the help.

Best regards

The SSID that you created, is the VLAN "Network Assigned" or "Virtual Controller Assigned"?

The ip address is network assigned and the vlan is the default one.

Are clients getting the same ip addresses when they attach to the IAP-103?  Does it have the same configuration as the 215?

The client maintain always the same ip address under IAP 103 and IAP 205. In every case I can ping the gateway, but when I'm under the IAP 103 I can't ping for example 8.8.8.8, insteed under IAP 105 I can do it.

Connecting in ssh to the IAP 103 I can ping 8.8.8.8, but not from the clients of this IAP.

Are the two IAPs in the same cluster?

Yes, same cluster.

Do you have an internet router?  Why would it block access from one IAP and not another.  Do the IAPs have statically assigned addresses?  If yes, maybe the subnet mask and default gateway are not correct on the IAP that cannot access the internet.

Yes, we have an internet router. We have statip ip address on the IAP and I verify many times the mask and gateway configuration, that is the same of the IAP 205. I also tried to assign the ip address of the IAP 205 to the IAP 103 but it still doesn't access to internet.

Can you ping the default gateway from the IAP-103?  Can you ping the next hop after that?

If I connect in ssh to the IAP 103 I can ping for example the 8.8.8.8, but a client can't ping the next hop of the gateway. The client can ping only the gateway.

What is the default gateway of the client?

The gateway is a Juniper and it is managed by the public carrier

Sorry I pressed the wrong key "accept as solution"

Are the IAPs on trunks?

No, they are in access. There aren't vlan configurations on the switch.

Maybe that specific client is blocked?  You said the IAP 103 can ping 8.8.8.8

I tried with many clients. All have the same symptoms.

I would create a new SSID in that cluster with no restrictions and see if you have the same problem.  I am out of guesses.

Thank you, we already tried it, without result. 

Do you have acls in user roles?  

no,  we don't have any ACL.

Please open a TAC case.

We opened a TAC and they asked to update to this version 6.4.4.8-4.2.4.1_55602.

Now it's working :)

Thanks!

Bye