Wireless Access

Reply
Occasional Contributor II

Aruba Controller 7030

Hi,

 

My company got an Aruba 7030 controller and I had to provisionning our APs. But there are 2 probelms:

 

First of all, I can't activate the licence, I've already register my product on My HPE Portal but I didn't get the email with the licence key.

 

And I can't find my APs in the AP Configuration and AP Installation menu on the WEBUI.Even the directcly connected APs on the controller.

 

Can someone help me?

Re: Aruba Controller 7030

Call TAC for the license issue.

Do your Aps get an IP Address?
Pasquale Monardo | Senior Network Solutions Consultant
ACDX #420 | ACMP
[If you found my post helpful, please give kudos!]
Guest Blogger

Re: Aruba Controller 7030

Normally when you register the license on the HPE portal, you can also search and find the license again on the HPE portal. If not, I would also suggest to open a TAC case.

 

With regards to the APs. Several issues can prevent the APs from showing up in the controller.

 

During the boot process the AP has several ways to contact the controller. The auto-discovery of the controller is possible via multiple options, like:

  1. Broadcast (ADP - Aruba Discovery Protocol): the access-points and controller(s) are in the same VLAN;
  2. DHCP option 43
  3. DNS record "aruba-master.<domain-name>"

Another issue could be the configuration of Control Plane Security. Do you have cp-sec (control plane security) enabled without the Auto Cert Provisioning option? If so, you must manually provision the APs to the AP white-list first before they show up in the controller. When you go to the Configuration tab and you see a flag next to "Save Configuration" it means that the controller is denying one or more APs access. 

 

A good way to troubleshoot is to check what's happing on the console of the access-point during the boot process.

@rene_booches | ACMX #438 / ACCP / CCNP Routing & Switching / CEH
Co-owner/Solution Specialist@4IP / blog owner@booches.nl
Occasional Contributor II

Re: Aruba Controller 7030

My AP got an IP address from my DHCP server. It was in controller mode. After a conversion to campus mode, my 7030 controller find it and I provide it but the AP is Inactive ( "I" flag).

 

My cp-sec is enabled with Auto cert option enabled. The AP recognize the provisionning profile but doesn't broadcast the SSID and I can't connect to the AP Wifi. Is that due to my unlicenced controller?

Guru Elite

Re: Aruba Controller 7030

Type "show ap database" on the controller commandline.  If it is because of a license, it would have an "L" flag.  If you did not create a SSID, it would also have an "I" flag.  Type "show log system 50" to see if you can get other clues..



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II

Re: Aruba Controller 7030

I have create a SSID in the campus WLAN wizard and it appear on my SSID list. I have 2IL Flags on my AP. Everything seems ok with show log system comand.

 

show ap database

AP Database
-----------
Name               Group    AP Type  IP Address     Status     Flags  Switch IP      Standby IP
----               -----    -------  ----------     ------     -----  ---------      ----------
24:de:c6:c4:a6:44  default  105      192.168.1.151  Up 5m:44s  2IL    192.168.1.100  0.0.0.0


#show wlan ssid-profile

SSID Profile List
-----------------
Name                References  Profile Status
----                ----------  --------------
default             1
New_WLAN-ssid_prof  1
Test-ssid_prof      1

Total:3

show ap-group default

AP group "default"
------------------
Parameter                                Value
---------                                -----
Virtual AP                               New_WLAN-vap_prof
Virtual AP                               Test-vap_prof
802.11a radio profile                    default
802.11g radio profile                    default
Ethernet interface 0 port configuration  default
Ethernet interface 1 port configuration  default
Ethernet interface 2 port configuration  shutdown
Ethernet interface 3 port configuration  shutdown
Ethernet interface 4 port configuration  shutdown
AP system profile                        default
802.11a Traffic Management profile       N/A
802.11g Traffic Management profile       N/A
Regulatory Domain profile                default
RF Optimization profile                  default
RF Event Thresholds profile              default
IDS profile                              default
Mesh Radio profile                       default
Mesh Cluster profile                     N/A
Provisioning profile                     default
AP authorization profile                 N/A

 show log system 50

Feb 20 08:33:20 :307001:  <3789> <DBUG> |cfgm|  Check function is used handleMgmtMessage
Feb 20 08:33:20 :307001:  <3789> <DBUG> |cfgm|  Check function is used handleOldStyleMgmtMessage
Feb 20 08:33:20 :307002:  <3789> <DBUG> |cfgm|  master:Got a management message
Feb 20 08:33:20 :307195:  <3789> <DBUG> |cfgm|  In executeCommandObject() 13
Feb 20 08:33:22 :307048:  <3789> <DBUG> |cfgm|  Got a message from 8231:5010
Feb 20 08:33:22 :307050:  <3789> <DBUG> |cfgm| Received a IPSEC CFG Message
Feb 20 08:33:22 :307219:  <3789> <DBUG> |cfgm| Sending the IPSEC Configuration
Feb 20 08:33:35 :307026:  <3789> <DBUG> |cfgm|  master: Refreshing the lms list
Feb 20 08:33:35 :307027:  <3789> <DBUG> |cfgm|  Checking the LMS not responding flag for local 192.168.1.100 flag value is 1, missedHB 0 socketID -1
Feb 20 08:33:37 :307048:  <3789> <DBUG> |cfgm|  Got a message from 8231:5010
Feb 20 08:33:37 :307050:  <3789> <DBUG> |cfgm| Received a IPSEC CFG Message
Feb 20 08:33:37 :307219:  <3789> <DBUG> |cfgm| Sending the IPSEC Configuration
Feb 20 08:33:52 :307048:  <3789> <DBUG> |cfgm|  Got a message from 8231:5010
Feb 20 08:33:52 :307050:  <3789> <DBUG> |cfgm| Received a IPSEC CFG Message
Feb 20 08:33:52 :307219:  <3789> <DBUG> |cfgm| Sending the IPSEC Configuration
Feb 20 08:33:55 :307026:  <3789> <DBUG> |cfgm|  master: Refreshing the lms list
Feb 20 08:33:55 :307027:  <3789> <DBUG> |cfgm|  Checking the LMS not responding flag for local 192.168.1.100 flag value is 1, missedHB 0 socketID -1
Feb 20 08:34:07 :307048:  <3789> <DBUG> |cfgm|  Got a message from 8231:5010
Feb 20 08:34:07 :307050:  <3789> <DBUG> |cfgm| Received a IPSEC CFG Message
Feb 20 08:34:07 :307219:  <3789> <DBUG> |cfgm| Sending the IPSEC Configuration
Feb 20 08:34:15 :307026:  <3789> <DBUG> |cfgm|  master: Refreshing the lms list
Feb 20 08:34:15 :307027:  <3789> <DBUG> |cfgm|  Checking the LMS not responding flag for local 192.168.1.100 flag value is 1, missedHB 0 socketID -1
Feb 20 08:34:22 :307048:  <3789> <DBUG> |cfgm|  Got a message from 8231:5010
Feb 20 08:34:22 :307050:  <3789> <DBUG> |cfgm| Received a IPSEC CFG Message
Feb 20 08:34:22 :307219:  <3789> <DBUG> |cfgm| Sending the IPSEC Configuration
Feb 20 08:34:35 :307026:  <3789> <DBUG> |cfgm|  master: Refreshing the lms list
Feb 20 08:34:35 :307027:  <3789> <DBUG> |cfgm|  Checking the LMS not responding flag for local 192.168.1.100 flag value is 1, missedHB 0 socketID -1
Feb 20 08:34:37 :307048:  <3789> <DBUG> |cfgm|  Got a message from 8231:5010
Feb 20 08:34:37 :307050:  <3789> <DBUG> |cfgm| Received a IPSEC CFG Message
Feb 20 08:34:37 :307219:  <3789> <DBUG> |cfgm| Sending the IPSEC Configuration
Feb 20 08:34:37 :307048:  <3789> <DBUG> |cfgm|  Got a message from 8344:5005
Feb 20 08:34:37 :399814:  <3789> <DBUG> |cfgm|  replyGetLmsListRequest:329 Sending IP 192.168.1.100 to 8344
Feb 20 08:34:52 :307048:  <3789> <DBUG> |cfgm|  Got a message from 8231:5010
Feb 20 08:34:52 :307050:  <3789> <DBUG> |cfgm| Received a IPSEC CFG Message
Feb 20 08:34:52 :307219:  <3789> <DBUG> |cfgm| Sending the IPSEC Configuration
Feb 20 08:34:55 :307026:  <3789> <DBUG> |cfgm|  master: Refreshing the lms list
Feb 20 08:34:55 :307027:  <3789> <DBUG> |cfgm|  Checking the LMS not responding flag for local 192.168.1.100 flag value is 1, missedHB 0 socketID -1
Feb 20 08:35:07 :307048:  <3789> <DBUG> |cfgm|  Got a message from 8231:5010
Feb 20 08:35:07 :307050:  <3789> <DBUG> |cfgm| Received a IPSEC CFG Message
Feb 20 08:35:07 :307219:  <3789> <DBUG> |cfgm| Sending the IPSEC Configuration
Feb 20 08:35:15 :307026:  <3789> <DBUG> |cfgm|  master: Refreshing the lms list
Feb 20 08:35:15 :307027:  <3789> <DBUG> |cfgm|  Checking the LMS not responding flag for local 192.168.1.100 flag value is 1, missedHB 0 socketID -1
Feb 20 08:35:22 :307048:  <3789> <DBUG> |cfgm|  Got a message from 8231:5010
Feb 20 08:35:22 :307050:  <3789> <DBUG> |cfgm| Received a IPSEC CFG Message
Feb 20 08:35:22 :307219:  <3789> <DBUG> |cfgm| Sending the IPSEC Configuration
Feb 20 08:35:35 :307026:  <3789> <DBUG> |cfgm|  master: Refreshing the lms list
Feb 20 08:35:35 :307027:  <3789> <DBUG> |cfgm|  Checking the LMS not responding flag for local 192.168.1.100 flag value is 1, missedHB 0 socketID -1
Feb 20 08:35:37 :307048:  <3789> <DBUG> |cfgm|  Got a message from 8231:5010
Feb 20 08:35:37 :307050:  <3789> <DBUG> |cfgm| Received a IPSEC CFG Message
Feb 20 08:35:37 :307219:  <3789> <DBUG> |cfgm| Sending the IPSEC Configuration

Guest Blogger

Re: Aruba Controller 7030

The flags (2IL) on the show ap database command tell you what's wrong:

 

I = Inactive

L = Unlicensed

 

You are definitely missing the AP (and PEF) license.

 

Flags: U = Unprovisioned; N = Duplicate name; G = No such group; L = Unlicensed
       I = Inactive; D = Dirty or no config; E = Regulatory Domain Mismatch
       X = Maintenance Mode; P = PPPoE AP; B = Built-in AP; s = LACP striping
       R = Remote AP; R- = Remote AP requires Auth; C = Cellular RAP;
       c = CERT-based RAP; 1 = 802.1x authenticated AP; 2 = Using IKE version 2
       u = Custom-Cert RAP; S = Standby-mode AP; J = USB cert at AP
       i = Indoor; o = Outdoor
       M = Mesh node; Y = Mesh Recovery
@rene_booches | ACMX #438 / ACCP / CCNP Routing & Switching / CEH
Co-owner/Solution Specialist@4IP / blog owner@booches.nl
Occasional Contributor II

Re: Aruba Controller 7030

How can I turn my AP to Active? Does this require the controller licence?

Guest Blogger

Re: Aruba Controller 7030

Yes, you should purchase and register an AP and PEF (Policy Enforcement Firewall) license per AP. If you have 10 APs, you should purchase 10 AP licenses and 10 PEF licenses. Ask you reseller for the licenses.

@rene_booches | ACMX #438 / ACCP / CCNP Routing & Switching / CEH
Co-owner/Solution Specialist@4IP / blog owner@booches.nl
Occasional Contributor II

Re: Aruba Controller 7030

Is there a free evaluation licence( AP and PEF) for the Aruba controller 7030 that allow me to active my AP and connect on them? Pending the real licence.

 

 

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: