Wireless Access

Hi all,

 

I think this is a short and simple one... But however I am not able to manage it :-(

I am using AOS 8 in Lab and noticed that I can see all clients in GUI, but not on CLI.

I tried to "cd" to all nodes or the MM but for example "show user" does say 0 all the time. Also show auth-tracebuf and all this nice stuff is blank on the CLI ! What am I doing wrong ?

-By the way... "show ap database" just works fine...

 

 

Thanks

Stefan

What version of AOS 8?

 

8.2.1.0

"show auth-tracebuf" should only work on the device that the access points terminate on.  See if other commands like "show ap active" and "show ap association" work.

unfortunately not :-(

 

(MM) [mynode] #
(MM) [mynode] #show ap association

The phy column shows client's operational capabilities for current association

Flags: A: Active, B: Band Steerable, H: Hotspot(802.11u) client, K: 802.11K client, M: Mu beam formee, R: 802.11R client, W: WMM client, w: 802.11w client V: 802.11v BSS trans capable

PHY Details: HT   : High throughput;      20: 20MHz;  40: 40MHz; t: turbo-rates (256-QAM)
             VHT  : Very High throughput; 80: 80MHz; 160: 160MHz; 80p80: 80MHz + 80MHz
             <n>ss: <n> spatial streams

Association Table
-----------------
Name  bssid  mac  auth  assoc  aid  l-int  essid  vlan-id  tunnel-id  phy  assoc. time  num assoc  Flags  Band steer moves (T/S)  phy_cap
----  -----  ---  ----  -----  ---  -----  -----  -------  ---------  ---  -----------  ---------  -----  ----------------------  -------
Num Clients:0
Total num of dual-band capable clients:0
Total num of dual-band capable clients in 2.4G band:0
Total num of dual-band capable clients in 5G band:0
Total num of single-band only clients:0
(MM) [mynode] #show ap active

Active AP Table
---------------
Name  Group  IP Address  11g Clients  11g Ch/EIRP/MaxEIRP  11a Clients  11a Ch/EIRP/MaxEIRP  AP Type  Flags  Uptime  Outer IP
----  -----  ----------  -----------  -------------------  -----------  -------------------  -------  -----  ------  --------

Flags: 1 = 802.1x authenticated AP; 2 = Using IKE version 2;
       A = Enet1 in active/standby mode;  B = Battery Boost On; C = Cellular;
       D = Disconn. Extra Calls On; E = Wired AP enabled; F = AP failed 802.1x authentication;
       H = Hotspot Enabled; K = 802.11K Enabled; L = Client Balancing Enabled; M = Mesh;
       N = 802.11b protection disabled; P = PPPOE; R = Remote AP;
       S = AP connected as standby; X = Maintenance Mode;
       a = Reduce ARP packets in the air; d = Drop Mcast/Bcast On; u = Custom-Cert RAP;
       i = Provisioned as Indoor; o = Provisioned as Outdoor;
       r = 802.11r Enabled; f = No Spectrum FFT support;
       Q = DFS CAC timer running; T = Flex Radio Mode is 2.4GHz+5GHz;
       U = Flex Radio Mode is 5GHz; V = Flex Radio Mode is 2.4GHz; e = custom EST cert

Channel followed by "*" indicates channel selected due to unsupported configured channel.
"Spectrum" followed by "^" indicates Local Spectrum Override in effect.

Channel flags: +/- = 40 MHz, E = 80 MHz, S = 160 MHz, E+E = 80 + 80 MHz (i.e. 36E+149E)

Num APs:0
(MM) [mynode] #cd /md/Grp2/20:4c:03:1a:39:fc
(MM) [20:4c:03:1a:39:fc] #show ap active

Active AP Table
---------------
Name  Group  IP Address  11g Clients  11g Ch/EIRP/MaxEIRP  11a Clients  11a Ch/EIRP/MaxEIRP  AP Type  Flags  Uptime  Outer IP
----  -----  ----------  -----------  -------------------  -----------  -------------------  -------  -----  ------  --------

Flags: 1 = 802.1x authenticated AP; 2 = Using IKE version 2;
       A = Enet1 in active/standby mode;  B = Battery Boost On; C = Cellular;
       D = Disconn. Extra Calls On; E = Wired AP enabled; F = AP failed 802.1x authentication;
       H = Hotspot Enabled; K = 802.11K Enabled; L = Client Balancing Enabled; M = Mesh;
       N = 802.11b protection disabled; P = PPPOE; R = Remote AP;
       S = AP connected as standby; X = Maintenance Mode;
       a = Reduce ARP packets in the air; d = Drop Mcast/Bcast On; u = Custom-Cert RAP;
       i = Provisioned as Indoor; o = Provisioned as Outdoor;
       r = 802.11r Enabled; f = No Spectrum FFT support;
       Q = DFS CAC timer running; T = Flex Radio Mode is 2.4GHz+5GHz;
       U = Flex Radio Mode is 5GHz; V = Flex Radio Mode is 2.4GHz; e = custom EST cert

Channel followed by "*" indicates channel selected due to unsupported configured channel.
"Spectrum" followed by "^" indicates Local Spectrum Override in effect.

Channel flags: +/- = 40 MHz, E = 80 MHz, S = 160 MHz, E+E = 80 + 80 MHz (i.e. 36E+149E)

Num APs:0
(MM) [20:4c:03:1a:39:fc] #show ap association

The phy column shows client's operational capabilities for current association

Flags: A: Active, B: Band Steerable, H: Hotspot(802.11u) client, K: 802.11K client, M: Mu beam formee, R: 802.11R client, W: WMM client, w: 802.11w client V: 802.11v BSS trans capable

PHY Details: HT   : High throughput;      20: 20MHz;  40: 40MHz; t: turbo-rates (256-QAM)
             VHT  : Very High throughput; 80: 80MHz; 160: 160MHz; 80p80: 80MHz + 80MHz
             <n>ss: <n> spatial streams

Association Table
-----------------
Name  bssid  mac  auth  assoc  aid  l-int  essid  vlan-id  tunnel-id  phy  assoc. time  num assoc  Flags  Band steer moves (T/S)  phy_cap
----  -----  ---  ----  -----  ---  -----  -----  -------  ---------  ---  -----------  ---------  -----  ----------------------  -------
Num Clients:0
Total num of dual-band capable clients:0
Total num of dual-band capable clients in 2.4G band:0
Total num of dual-band capable clients in 5G band:0
Total num of single-band only clients:0
(MM) [20:4c:03:1a:39:fc] #show auth-tracebuf

Auth Trace Buffer
-----------------


(MM) [20:4c:03:1a:39:fc] #

 

 

But I have four clients on this MD... (Also visible on the GUI)

If you do not see access points, you should not see clients.  If there is indeed access points and clients on that MD, please open a TAC case.

You can run the following commands:

Show switches - See all the connected MDs
show AP database - See all the APs across the MDs
Show global-user table - See all the users across the MDs

You can do run the logon to login / SSH directly into the MDs






Thank you

Victor Fabian

Pardon typos sent from Mobile

Hey Victor,

 

thanks! SSH to the MD did the trick. Also the command global-user-table does work.

 

If you see the APs and clients on the mds but not the mm, verify the AMON connection between the mm and md(s). If that is incorrect or missing, the symptom would be similar to what you’re seeing.

This is what Charlie is talking about :

https://community.arubanetworks.com/t5/tkb/articleprintpage/tkb-id/ControllerBasedWLANs/article-id/2621




Thank you

Victor Fabian

Pardon typos sent from Mobile