Wireless Access

Reply
Frequent Contributor I

Client claims that his Laptop is having IP conflict

  • It happens almost everywhere (doesn't matter what AP or AP group he's connecting).
  • It happened to both GUEST VAP and Dot1x VAP we have. GUEST IP pool is /16 . The other has a limited IP space but we know it's never full.
  • He and his friend seem to be the only ones having this out of 10,000+ clients. We still have to contact his friend and make sure he has the same issue though.
  • The Client device OS is Win 7.
  • Reccuring words in log "Dropping EAPOL, Valid Client Not Using Encryption, Block ACK DoS Attack"

 

Logs attached.

Guru Elite

Re: Client claims that his Laptop is having IP conflict

You have your IDS settings too high.

 

I would execute the following to see if that is the case:

 

wms client <mac address> of client mode interfering

If he can connect temporarily to the guest network after executing that, that is the problem.


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.3 User Guide
InstantOS 8.3 User Guide
Airheads Knowledgebase
Frequent Contributor I

Re: Client claims that his Laptop is having IP conflict

Hello,

 

I got this 

Controller1#wms client c8:xx:33:xx:xx:x6 mode interfering 

Database is disabled. Command not allowed

thanks.

Guru Elite

Re: Client claims that his Laptop is having IP conflict

Type "show ap blacklist-clients" and see if his client is listed there.  If so, remove it by typing "stm remove-blacklist-client <mac address of client>"

 

 


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.3 User Guide
InstantOS 8.3 User Guide
Airheads Knowledgebase
Frequent Contributor I

Re: Client claims that his Laptop is having IP conflict

Thanks but I found none.

 

(cpp-098b-aruba-wc1) #show ap blacklist-clients

Blacklisted Clients
-------------------
STA  reason  block-time(sec)  remaining time(sec)
---  ------  ---------------  -------------------

(cpp-098b-aruba-wc1) #
Guru Elite

Re: Client claims that his Laptop is having IP conflict

The messages you posted before were IDS messages.  You should revert your IDS settings to the defaults. 


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.3 User Guide
InstantOS 8.3 User Guide
Airheads Knowledgebase
Guru Elite

Re: Client claims that his Laptop is having IP conflict

The messages you posted before were IDS messages.  You should revert your IDS settings to the defaults. 


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.3 User Guide
InstantOS 8.3 User Guide
Airheads Knowledgebase
Frequent Contributor I

Re: Client claims that his Laptop is having IP conflict

Hello,

 

The IDS profile we're using is default. Should I untick Detect Block Ack Dos?

IDS profile.PNG

 

Also, is it smart to lower IDS setting for one guy? My concern here is that we have over 10k clients and yet he's the only one experiencing this (one more that he claims but unconfirmed). I am just wondering  if his device is doing something bad hence getting filtered.

 

Thanks.

Guru Elite

Re: Client claims that his Laptop is having IP conflict

Anything that has "Detect" does not cause any issues.  Anything that has "Protect" *could* cause issues.

 

What wireless adapter does the client have and what driver version?

 


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.3 User Guide
InstantOS 8.3 User Guide
Airheads Knowledgebase
New Contributor

Re: Client claims that his Laptop is having IP conflict

Hello,

 

My WiFi card is:

 

Intel Centrino Advanced-N 6235

Driver: 15.0.1.1

 

Thank you.

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: