Wireless Access

Reply
New Contributor
Posts: 2
Registered: ‎12-11-2012

Controller blacklists clients spontaneously

[ Edited ]

Hi,

 

After upgrade to firmware version  6.1.3.6 our Aruba 3400 controller, has started to spontaneously blacklist clients with the reason "IP spoofing".

 

Any ideas why this happens, and what can we try to fix it?

 

Thank you.

Guru Elite
Posts: 21,290
Registered: ‎03-29-2007

Re: Controller blacklists clients spontaneously


TheMustangMan wrote:

Hi,

 

After upgrade to firmware version  6.1.3.6 our Aruba 3400 controller, has started to spontaneously blacklist clients with the reason "IP spoofing".

 

Any ideas why this happens, and what can we try to fix it?

 

Thank you.


There is a current bug with ip Spoofing incorrectly detecting clients and  Blacklisting them.  For now, please turn of ip spoofing and arp spoofing protection, for now.

 

It should be fixed in 6.1.3.7 when it comes out.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

New Contributor
Posts: 2
Registered: ‎12-11-2012

Re: Controller blacklists clients spontaneously


cjoseph wrote:
There is a current bug with ip Spoofing incorrectly detecting clients and  Blacklisting them.  For now, please turn of ip spoofing and arp spoofing protection, for now.

 

It should be fixed in 6.1.3.7 when it comes out.


Thank you. Where do I turn these things off?

Guru Elite
Posts: 21,290
Registered: ‎03-29-2007

Re: Controller blacklists clients spontaneously


TheMustangMan wrote:

cjoseph wrote:
There is a current bug with ip Spoofing incorrectly detecting clients and  Blacklisting them.  For now, please turn of ip spoofing and arp spoofing protection, for now.

 

It should be fixed in 6.1.3.7 when it comes out.


Thank you. Where do I turn these things off?


First, see how many clients are currently blacklisted "show ap blacklist-clients" on the commandline or "Blacklist Clients" on the GUI.  You can then turn off ARP and IP Spoofing detection by going to Configuration> Advanced > Stateful Firewall and then unchecking those options.

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Contributor II
Posts: 44
Registered: ‎02-07-2013

Re: Controller blacklists clients spontaneously

I recently updated to 6.2 and 6.202.  The IP-spoofing if out of hand.  I had to turn it off.  Is there not a way to toggle it?  I would like IP Spoofing turned on but I was spending the better part of an hour releasing valid users.

MVP
Posts: 1,414
Registered: ‎11-30-2011

Re: Controller blacklists clients spontaneously


MemphisBrothers wrote:

I recently updated to 6.2 and 6.202.  The IP-spoofing if out of hand.  I had to turn it off.  Is there not a way to toggle it?  I would like IP Spoofing turned on but I was spending the better part of an hour releasing valid users.


what do you mean with toggle?

New Contributor
Posts: 2
Registered: ‎03-04-2013

Re: Controller blacklists clients spontaneously

Hi 

 

We previously had 6.1.3.0 and  did not wanted to upgrade to 6.1.3.5 because of this false positive "IP-Spoofing" issue. We had to upgrade the firmware last week due to a known vulnerability issue. We figured if we skip the 6.1.3.X and  gone straight to 6.2.0. 3 since the problem was supposed to be resolved in 6.1.3.7. But what do you know. By the time we got report of clients not able to get on to our wireless network we had about 50+ users (most if not all Apple devices ) that were "black listed" . We had to turn off "Prohibit IP Spoofing". Will really like to know if Aruba know about this issue still exist and when will the fix come out

 

MVP
Posts: 777
Registered: ‎03-25-2009

Re: Controller blacklists clients spontaneously

If you read the releasenotes you'll see that 6.2.x.x split off from the 6.1.3.5 release and has since not merged back yet.

That together with 6.2.0.3 still being an early deployement release ...

Koen (ACMX #351 | ACDX #547 | ACCP)

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
New Contributor
Posts: 2
Registered: ‎03-04-2013

Re: Controller blacklists clients spontaneously

My bad for not reading the release note. But seriously, if this is a known issue for a while I would expect it been address in the new firmware release. Would you recommend to go back to 6.1.3.7? Thanks for the help.

MVP
Posts: 501
Registered: ‎04-03-2007

Re: Controller blacklists clients spontaneously

If you don't have 7200 controllers, stay on 6.1.3.x.

 

$0.02.

==========
Ryan Holland, ACDX #1 ACMX #1
The Ohio State University
Search Airheads
Showing results for 
Search instead for 
Did you mean: