Wireless Access

We have an aruba 620 controller with one(1) unit Access Point(AP 105). The problem that im facing right now is I want to reconfigure the controller to fit our new setup. Currently our aruba controller is connected to existing setup which is 

                                                                internet

                                                                      |                                                                      |

                                                                      | 

                                                                 router          

                                                                      |   (10.118.10.0/24)

                                                                      |

                                                                     /  \

                                                                  /         \  

                                                               /              Aruba 620 ------------------>AP105

                                                        firewall            (10.118.10.10)              (10.118.10.15)

                                                    (vlan20,30)     

                                                           /

                                               Manage Switch

Firewall external IP(10.118.10.55)

                Internal IP(10.65.10.100)

VLAN 20 (10.65.1.0/24)

           DHCP Server(10.65.1.3)

VLAN 30 (192.168.10.0/24)

1. Currently the setup is from router to Aruba and its working well.

2. I added the firewall so I can create another VLAN and have multiple SSID.

3. Currently I was able to add the SSID(LAN and Guest) but when I check its not getting any IP address from our DHCP server 

From router to aruba(port is connected to Port 4 as access port. Port 0 is connected to AP as trunk) now from my manage switch(port 23 as trunk) I connect to Aruba port 7(as trunk) but im not getting any IP address from our DHCP server( 10.65.1.3). Do I need to create a route from Aruba or what I need to configure? Thanks.

Please help. 

Hi,:smileyhappy:

You shold define a native vlan.*your DHCP vlan *

In the Aruba Controller:

Go to Configuration/Ports - and choose the naitve vlan in the aruba controller (your dhcp vlan)

 Let us know if it's solved your issue.

me

BTW:

*Untag naitve vlan on your bb/core switch  (if using diffrent vlan numbering in the aruba controller) *

Hi Moderator,

I will check again tomorrow. I will let you know the outcome. Sure I will give you thumbs up once this will be solved. :)  Thanks.

Hi,

          After changing to the suggested, I cannot see the SSID. Please refer below screenshot config.

Currently, there are two trunks, port 0(connected to the AP105) and Port 7(connected to the manageable switch)

1. In the ssid profile ..did u choose working mode- tunnel / vlan 20?
2. does the vlan's numbers are tagged the same in your network and on the controller?
   

btw:  y did u screenschoot the uplink? it's not needed configuration for what u are looking to achive?

and also...be sure that the trunked port is trusted....(on all the vlan's)

I have just restarted the controller, now I can see the SSID being broadcast but still cannot connect to the dhcp server

ok...and in the AAA profile which Access rules are u using?

please do some screenshots

here is the AAA Profile. Thanks

I can see that you are doing 802.1x auth - right?

can you provide, 

show ap essid ( as you mentioned the ssid is not broadcasting)

show profile-errors

seems that trunking is not working. What I did is, I change the port 6 as accessport  for VLAN is 20. It works. The SSID is working with my external DHCP. Now, I do the same on port 5 to use for VLAN 30 but it doesnt work. Any advise? thnks

• Are u trunking - and using the same vlan tags?
• can u printout your port config of all the trunk port u configured in your aruba please

This is the Port config on Port 0 where in my AP105 is connected.

This is the config on my Port6 where in my VLAN 20 is connected. This is working.

This is the config on my Port6 where in my VLAN 30 is connected. This is not working. SSID is broadcast but no IP address from my DHCP server.

sorry the last image should be this one.

OK

OK

lets do here some order.

You dont need to trunk the port that your AP-105 is sitting on..it's only need to be able to get an IP and to establish GRE tunnel in front of the controller.

(all the need vlan's - you will choose to transmit on air-via ssid will arrive to the AP via the GRE tunnel from one vlan...)

Next...

From your screenshots.i can understand that you got two diffrent other port - one for vlan20 and one for vlan30 both of them configured as access ports.

can u confirm that on vlan30 - u getting resposne from the controller on (when testing ping from other equitment to the ip of the controller on vlan 30 192.168.10.99)

configure another port as access to vlan30 and connect your laptop to it...check if u reciving ip address from it - if not your vlan30 isnt configured right (sub or DHCP)

 update me if when 1 port with vlan30 is connected to your backbone (vlan30)  and one to your laptop (both access) - if you gettning an ip.

me

I dont want the trunking anymore. Its make more complicated. I will be make it simple. 1 SSID and 1 Vlan 1Aruba port. 

from my VLAN 20, I get response from my DHCP server
from my VLAN 30, I don't get response from my DHCP server.

I tried taking out the cable and connect to my laptop(straight from my switch), I can get IP Add, for both
VLAN 20 and VLAN 30

so - test with access role / AAA profile for both ssids.. check that u allowing users getting an IP (DHCP services) on the first role.

* i sent u a private msg - please read it*

it's a guest network - so why 802.1x?! and also...

can u please connect to this ssid (and printout - the clients windows from the aruba)

I love this guy(kdisc98). Im troubleshooting this issue for quite sometimes, but he was able to make it work in minutes.

>>>If you are in trouble, this is your man. thumbs up