Wireless Access

Reply
Contributor II
Posts: 58
Registered: ‎02-23-2015

Client claims that his Laptop is having IP conflict

  • It happens almost everywhere (doesn't matter what AP or AP group he's connecting).
  • It happened to both GUEST VAP and Dot1x VAP we have. GUEST IP pool is /16 . The other has a limited IP space but we know it's never full.
  • He and his friend seem to be the only ones having this out of 10,000+ clients. We still have to contact his friend and make sure he has the same issue though.
  • The Client device OS is Win 7.
  • Reccuring words in log "Dropping EAPOL, Valid Client Not Using Encryption, Block ACK DoS Attack"

 

Logs attached.

Guru Elite
Posts: 21,029
Registered: ‎03-29-2007

Re: Client claims that his Laptop is having IP conflict

You have your IDS settings too high.

 

I would execute the following to see if that is the case:

 

wms client <mac address> of client mode interfering

If he can connect temporarily to the guest network after executing that, that is the problem.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Contributor II
Posts: 58
Registered: ‎02-23-2015

Re: Client claims that his Laptop is having IP conflict

Hello,

 

I got this 

Controller1#wms client c8:xx:33:xx:xx:x6 mode interfering 

Database is disabled. Command not allowed

thanks.

Guru Elite
Posts: 21,029
Registered: ‎03-29-2007

Re: Client claims that his Laptop is having IP conflict

Type "show ap blacklist-clients" and see if his client is listed there.  If so, remove it by typing "stm remove-blacklist-client <mac address of client>"

 

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Contributor II
Posts: 58
Registered: ‎02-23-2015

Re: Client claims that his Laptop is having IP conflict

Thanks but I found none.

 

(cpp-098b-aruba-wc1) #show ap blacklist-clients

Blacklisted Clients
-------------------
STA  reason  block-time(sec)  remaining time(sec)
---  ------  ---------------  -------------------

(cpp-098b-aruba-wc1) #
Guru Elite
Posts: 21,029
Registered: ‎03-29-2007

Re: Client claims that his Laptop is having IP conflict

The messages you posted before were IDS messages.  You should revert your IDS settings to the defaults. 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Guru Elite
Posts: 21,029
Registered: ‎03-29-2007

Re: Client claims that his Laptop is having IP conflict

The messages you posted before were IDS messages.  You should revert your IDS settings to the defaults. 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Contributor II
Posts: 58
Registered: ‎02-23-2015

Re: Client claims that his Laptop is having IP conflict

Hello,

 

The IDS profile we're using is default. Should I untick Detect Block Ack Dos?

IDS profile.PNG

 

Also, is it smart to lower IDS setting for one guy? My concern here is that we have over 10k clients and yet he's the only one experiencing this (one more that he claims but unconfirmed). I am just wondering  if his device is doing something bad hence getting filtered.

 

Thanks.

Guru Elite
Posts: 21,029
Registered: ‎03-29-2007

Re: Client claims that his Laptop is having IP conflict

Anything that has "Detect" does not cause any issues.  Anything that has "Protect" *could* cause issues.

 

What wireless adapter does the client have and what driver version?

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

New Contributor
Posts: 3
Registered: ‎05-28-2015

Re: Client claims that his Laptop is having IP conflict

Hello,

 

My WiFi card is:

 

Intel Centrino Advanced-N 6235

Driver: 15.0.1.1

 

Thank you.

Search Airheads
Showing results for 
Search instead for 
Did you mean: