Wireless Access

Hi, 

I was using Aruba 6300 controller for few years, but was only for operation. Just been assigened to configure a new Aruba 7210 controller with OS 6.4.3.4. I wonder if someone can direct me how to get is configured. Here is requirements. 

Controller (Vlan46/50, 99(Guest)) =>Switch => (Vlan50)Firewall => Internet

                        ||

                      AP (Vlan46)

I have ran the configure wizards, input license, different gatway, I can ping the firewall IP from controller, but can't ping 8.8.8.8 from the controller. 

Can someone help?

You should open a TAC case in parallel, because there are many variables in this configuration;  some of the variables are the controller configuration and other variables are the network connection/routing/switching configuration.  It is even possible that the firewall configuration is stopping things from working.  All of those variables make it very painful to resolve problems like yours on this forum.  

If you are willing to take the time and work through things here, we can provide some answers, but you will also have to answer our detailed questions so that we can help....

1, All APs are on vlan 46, acces mode to switch

2, controller port 0/0/1 configured trunk with vlan 46, 50, 99 to switch

3, all guests get on vlan 99

4, controller use vlan 50 to reach firewall

5, firewall IP set as default gateway on the controller

6, controller uplink enabled and pick up vlan 50 IP as source IP. status show as *active* on gui

7, SSH to the controller, can ping firewall IP, but can't ping 8.8.8.8

8, guest are able to connect to WLAN, able to ping the controller, but not able to ping 8.8.8.8 or nslookup

What is the default gateway of VLAN 99?

The controller is running dhcp for vlan 99. IP .1 is the controller, also is default gateway for 99

Okay if the subnet for your guest VLAN is NOT routable (aka, your firewall does not know anything about it), you need to NAT the guest traffic at the controller:

config t

interface vlan 99

ip nat inside

You do not need to trunk VLAN 99 to your switch from the controller.

Thanks so much for everyone's help. I did open a ticket and finially found this is native vlan on uplink connection.

According to the information, Controller Uplink has to be access port or  switch/controller native vlan has to be the controller IP vlan on trunk mode.