Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Aruba Controller 7030

This thread has been viewed 17 times

  • 1.  Aruba Controller 7030

    Posted Feb 19, 2017 01:13 AM

    Hi,

     

    My company got an Aruba 7030 controller and I had to provisionning our APs. But there are 2 probelms:

     

    First of all, I can't activate the licence, I've already register my product on My HPE Portal but I didn't get the email with the licence key.

     

    And I can't find my APs in the AP Configuration and AP Installation menu on the WEBUI.Even the directcly connected APs on the controller.

     

    Can someone help me?



  • 2.  RE: Aruba Controller 7030

    Posted Feb 19, 2017 08:20 AM
    Call TAC for the license issue.

    Do your Aps get an IP Address?


  • 3.  RE: Aruba Controller 7030

    Posted Feb 19, 2017 08:52 AM

    Normally when you register the license on the HPE portal, you can also search and find the license again on the HPE portal. If not, I would also suggest to open a TAC case.

     

    With regards to the APs. Several issues can prevent the APs from showing up in the controller.

     

    During the boot process the AP has several ways to contact the controller. The auto-discovery of the controller is possible via multiple options, like:

    1. Broadcast (ADP - Aruba Discovery Protocol): the access-points and controller(s) are in the same VLAN;
    2. DHCP option 43
    3. DNS record "aruba-master.<domain-name>"

    Another issue could be the configuration of Control Plane Security. Do you have cp-sec (control plane security) enabled without the Auto Cert Provisioning option? If so, you must manually provision the APs to the AP white-list first before they show up in the controller. When you go to the Configuration tab and you see a flag next to "Save Configuration" it means that the controller is denying one or more APs access. 

     

    A good way to troubleshoot is to check what's happing on the console of the access-point during the boot process.



  • 4.  RE: Aruba Controller 7030

    Posted Feb 19, 2017 01:16 PM

    My AP got an IP address from my DHCP server. It was in controller mode. After a conversion to campus mode, my 7030 controller find it and I provide it but the AP is Inactive ( "I" flag).

     

    My cp-sec is enabled with Auto cert option enabled. The AP recognize the provisionning profile but doesn't broadcast the SSID and I can't connect to the AP Wifi. Is that due to my unlicenced controller?



  • 5.  RE: Aruba Controller 7030

    EMPLOYEE
    Posted Feb 19, 2017 03:46 PM

    Type "show ap database" on the controller commandline.  If it is because of a license, it would have an "L" flag.  If you did not create a SSID, it would also have an "I" flag.  Type "show log system 50" to see if you can get other clues..



  • 6.  RE: Aruba Controller 7030

    Posted Feb 20, 2017 12:10 AM

    I have create a SSID in the campus WLAN wizard and it appear on my SSID list. I have 2IL Flags on my AP. Everything seems ok with show log system comand.

     

    show ap database

    AP Database
    -----------
    Name               Group    AP Type  IP Address     Status     Flags  Switch IP      Standby IP
    ----               -----    -------  ----------     ------     -----  ---------      ----------
    24:de:c6:c4:a6:44  default  105      192.168.1.151  Up 5m:44s  2IL    192.168.1.100  0.0.0.0


    #show wlan ssid-profile

    SSID Profile List
    -----------------
    Name                References  Profile Status
    ----                ----------  --------------
    default             1
    New_WLAN-ssid_prof  1
    Test-ssid_prof      1

    Total:3

    show ap-group default

    AP group "default"
    ------------------
    Parameter                                Value
    ---------                                -----
    Virtual AP                               New_WLAN-vap_prof
    Virtual AP                               Test-vap_prof
    802.11a radio profile                    default
    802.11g radio profile                    default
    Ethernet interface 0 port configuration  default
    Ethernet interface 1 port configuration  default
    Ethernet interface 2 port configuration  shutdown
    Ethernet interface 3 port configuration  shutdown
    Ethernet interface 4 port configuration  shutdown
    AP system profile                        default
    802.11a Traffic Management profile       N/A
    802.11g Traffic Management profile       N/A
    Regulatory Domain profile                default
    RF Optimization profile                  default
    RF Event Thresholds profile              default
    IDS profile                              default
    Mesh Radio profile                       default
    Mesh Cluster profile                     N/A
    Provisioning profile                     default
    AP authorization profile                 N/A

     show log system 50

    Feb 20 08:33:20 :307001:  <3789> <DBUG> |cfgm|  Check function is used handleMgmtMessage
    Feb 20 08:33:20 :307001:  <3789> <DBUG> |cfgm|  Check function is used handleOldStyleMgmtMessage
    Feb 20 08:33:20 :307002:  <3789> <DBUG> |cfgm|  master:Got a management message
    Feb 20 08:33:20 :307195:  <3789> <DBUG> |cfgm|  In executeCommandObject() 13
    Feb 20 08:33:22 :307048:  <3789> <DBUG> |cfgm|  Got a message from 8231:5010
    Feb 20 08:33:22 :307050:  <3789> <DBUG> |cfgm| Received a IPSEC CFG Message
    Feb 20 08:33:22 :307219:  <3789> <DBUG> |cfgm| Sending the IPSEC Configuration
    Feb 20 08:33:35 :307026:  <3789> <DBUG> |cfgm|  master: Refreshing the lms list
    Feb 20 08:33:35 :307027:  <3789> <DBUG> |cfgm|  Checking the LMS not responding flag for local 192.168.1.100 flag value is 1, missedHB 0 socketID -1
    Feb 20 08:33:37 :307048:  <3789> <DBUG> |cfgm|  Got a message from 8231:5010
    Feb 20 08:33:37 :307050:  <3789> <DBUG> |cfgm| Received a IPSEC CFG Message
    Feb 20 08:33:37 :307219:  <3789> <DBUG> |cfgm| Sending the IPSEC Configuration
    Feb 20 08:33:52 :307048:  <3789> <DBUG> |cfgm|  Got a message from 8231:5010
    Feb 20 08:33:52 :307050:  <3789> <DBUG> |cfgm| Received a IPSEC CFG Message
    Feb 20 08:33:52 :307219:  <3789> <DBUG> |cfgm| Sending the IPSEC Configuration
    Feb 20 08:33:55 :307026:  <3789> <DBUG> |cfgm|  master: Refreshing the lms list
    Feb 20 08:33:55 :307027:  <3789> <DBUG> |cfgm|  Checking the LMS not responding flag for local 192.168.1.100 flag value is 1, missedHB 0 socketID -1
    Feb 20 08:34:07 :307048:  <3789> <DBUG> |cfgm|  Got a message from 8231:5010
    Feb 20 08:34:07 :307050:  <3789> <DBUG> |cfgm| Received a IPSEC CFG Message
    Feb 20 08:34:07 :307219:  <3789> <DBUG> |cfgm| Sending the IPSEC Configuration
    Feb 20 08:34:15 :307026:  <3789> <DBUG> |cfgm|  master: Refreshing the lms list
    Feb 20 08:34:15 :307027:  <3789> <DBUG> |cfgm|  Checking the LMS not responding flag for local 192.168.1.100 flag value is 1, missedHB 0 socketID -1
    Feb 20 08:34:22 :307048:  <3789> <DBUG> |cfgm|  Got a message from 8231:5010
    Feb 20 08:34:22 :307050:  <3789> <DBUG> |cfgm| Received a IPSEC CFG Message
    Feb 20 08:34:22 :307219:  <3789> <DBUG> |cfgm| Sending the IPSEC Configuration
    Feb 20 08:34:35 :307026:  <3789> <DBUG> |cfgm|  master: Refreshing the lms list
    Feb 20 08:34:35 :307027:  <3789> <DBUG> |cfgm|  Checking the LMS not responding flag for local 192.168.1.100 flag value is 1, missedHB 0 socketID -1
    Feb 20 08:34:37 :307048:  <3789> <DBUG> |cfgm|  Got a message from 8231:5010
    Feb 20 08:34:37 :307050:  <3789> <DBUG> |cfgm| Received a IPSEC CFG Message
    Feb 20 08:34:37 :307219:  <3789> <DBUG> |cfgm| Sending the IPSEC Configuration
    Feb 20 08:34:37 :307048:  <3789> <DBUG> |cfgm|  Got a message from 8344:5005
    Feb 20 08:34:37 :399814:  <3789> <DBUG> |cfgm|  replyGetLmsListRequest:329 Sending IP 192.168.1.100 to 8344
    Feb 20 08:34:52 :307048:  <3789> <DBUG> |cfgm|  Got a message from 8231:5010
    Feb 20 08:34:52 :307050:  <3789> <DBUG> |cfgm| Received a IPSEC CFG Message
    Feb 20 08:34:52 :307219:  <3789> <DBUG> |cfgm| Sending the IPSEC Configuration
    Feb 20 08:34:55 :307026:  <3789> <DBUG> |cfgm|  master: Refreshing the lms list
    Feb 20 08:34:55 :307027:  <3789> <DBUG> |cfgm|  Checking the LMS not responding flag for local 192.168.1.100 flag value is 1, missedHB 0 socketID -1
    Feb 20 08:35:07 :307048:  <3789> <DBUG> |cfgm|  Got a message from 8231:5010
    Feb 20 08:35:07 :307050:  <3789> <DBUG> |cfgm| Received a IPSEC CFG Message
    Feb 20 08:35:07 :307219:  <3789> <DBUG> |cfgm| Sending the IPSEC Configuration
    Feb 20 08:35:15 :307026:  <3789> <DBUG> |cfgm|  master: Refreshing the lms list
    Feb 20 08:35:15 :307027:  <3789> <DBUG> |cfgm|  Checking the LMS not responding flag for local 192.168.1.100 flag value is 1, missedHB 0 socketID -1
    Feb 20 08:35:22 :307048:  <3789> <DBUG> |cfgm|  Got a message from 8231:5010
    Feb 20 08:35:22 :307050:  <3789> <DBUG> |cfgm| Received a IPSEC CFG Message
    Feb 20 08:35:22 :307219:  <3789> <DBUG> |cfgm| Sending the IPSEC Configuration
    Feb 20 08:35:35 :307026:  <3789> <DBUG> |cfgm|  master: Refreshing the lms list
    Feb 20 08:35:35 :307027:  <3789> <DBUG> |cfgm|  Checking the LMS not responding flag for local 192.168.1.100 flag value is 1, missedHB 0 socketID -1
    Feb 20 08:35:37 :307048:  <3789> <DBUG> |cfgm|  Got a message from 8231:5010
    Feb 20 08:35:37 :307050:  <3789> <DBUG> |cfgm| Received a IPSEC CFG Message
    Feb 20 08:35:37 :307219:  <3789> <DBUG> |cfgm| Sending the IPSEC Configuration



  • 7.  RE: Aruba Controller 7030
    Best Answer

    Posted Feb 20, 2017 02:36 AM

    The flags (2IL) on the show ap database command tell you what's wrong:

     

    I = Inactive

    L = Unlicensed

     

    You are definitely missing the AP (and PEF) license.

     

    Flags: U = Unprovisioned; N = Duplicate name; G = No such group; L = Unlicensed
       I = Inactive; D = Dirty or no config; E = Regulatory Domain Mismatch
       X = Maintenance Mode; P = PPPoE AP; B = Built-in AP; s = LACP striping
       R = Remote AP; R- = Remote AP requires Auth; C = Cellular RAP;
       c = CERT-based RAP; 1 = 802.1x authenticated AP; 2 = Using IKE version 2
       u = Custom-Cert RAP; S = Standby-mode AP; J = USB cert at AP
       i = Indoor; o = Outdoor
       M = Mesh node; Y = Mesh Recovery


  • 8.  RE: Aruba Controller 7030

    Posted Feb 20, 2017 04:46 AM

    How can I turn my AP to Active? Does this require the controller licence?



  • 9.  RE: Aruba Controller 7030
    Best Answer

    Posted Feb 20, 2017 05:19 AM

    Yes, you should purchase and register an AP and PEF (Policy Enforcement Firewall) license per AP. If you have 10 APs, you should purchase 10 AP licenses and 10 PEF licenses. Ask you reseller for the licenses.



  • 10.  RE: Aruba Controller 7030

    Posted Feb 20, 2017 07:33 AM

    Is there a free evaluation licence( AP and PEF) for the Aruba controller 7030 that allow me to active my AP and connect on them? Pending the real licence.

     

     



  • 11.  RE: Aruba Controller 7030

    Posted Feb 20, 2017 08:35 AM

    You should be able to get a license via your Aruba Partner.



  • 12.  RE: Aruba Controller 7030

    Posted Feb 20, 2017 12:48 PM

    I got an eval licence with HP support, my AP is active and broadcast SSID. Thank you all for your help.

     

    Now i'm going to configure the captive portal with different VLANs.



  • 13.  RE: Aruba Controller 7030

    Posted Feb 20, 2017 01:39 PM

    Please accept one reply as solution, so other it would be useful for other users with the same issue and give some kudos if you are happy with the solution.