Wireless Access

Reply
Regular Contributor I
Posts: 232
Registered: ‎01-19-2013

Convert Controller AP to RAP

Hi community,

we have a 650er Controller with Aruba OS 6.4.0.3 and some APs (135er + 105er).

We have some rap3 they work fine, we hava iap105 convert to a rap it works also fine.

 

So now I want to convert a Controller AP to a RAP, under AP installation I mark the ap and deploy it like the other RAPs (whitelist it, giver group and external IP of controller...).

The AP restarts but it don´t come up to the controller, I cannot find anything in the eventlog.

 

Anyona an idea?

 

Thanks

Valued Contributor II
Posts: 804
Registered: ‎12-01-2014

Re: Convert Controller AP to RAP

HI,

 

In order to provision an AP as a RAP you should meet the following requirements,

 

1. VPN settings in the controller ( IKE pool and IKE PSK)

2. RAP whitelist in case if you are provisioning cert based RAP

3. a valid username and password ( Local Db) for PSK based deployment.

3. UDP 4500 traffic should be allowed in the network.

 

To ensure the above please run the following show commands,

 

1. Show log security -- to confirm IKE related config and whitelist

2. Show datapsth sessio -- to confirm whether 4500 traffic is flowing or not

 

If possible please share the output of "show datapath session"

 

Please feel free for any further help on this.

Cheers,
Venu Puduchery,
[Is my post helped you ? Give Kudos :) ]
Regular Contributor I
Posts: 232
Registered: ‎01-19-2013

Re: Convert Controller AP to RAP

Hi,

 

ok, here is the putty log with the informations:

I hope you find something

Valued Contributor II
Posts: 804
Registered: ‎12-01-2014

Re: Convert Controller AP to RAP

Hi,

 

I couldn't find any 4500 traffic in the datapath and IKE messages in the log. I suspect the configuration itself. please verify the configuration once again.

 

Hope the attached document will help you on solving the issue.

 

Please feel free for any further help on this.

Cheers,
Venu Puduchery,
[Is my post helped you ? Give Kudos :) ]
Regular Contributor I
Posts: 232
Registered: ‎01-19-2013

Re: Convert Controller AP to RAP

ok, but why does IAP and RAPs work fine?

Valued Contributor II
Posts: 804
Registered: ‎12-01-2014

Re: Convert Controller AP to RAP

Hi,

 

Please confirm me whether you are trying to deploy it as PSK based or Certbased ? I hope you are trying to deploy it in PSK based, so please ensure the PSK and username ans password are properly configured in both controller and RAP.

 

Please feel free for any further help on this.

Cheers,
Venu Puduchery,
[Is my post helped you ? Give Kudos :) ]
Regular Contributor I
Posts: 232
Registered: ‎01-19-2013

Re: Convert Controller AP to RAP

[ Edited ]

Hi 

I use PSK, it ist the same PSK and username as the RAPs, so I don´t understand it...

Valued Contributor II
Posts: 804
Registered: ‎12-01-2014

Re: Convert Controller AP to RAP

Hi,

 

I'm not seeing any 4500 traffic (NATT) between the AP and Controller. you need to work on this.

 

please enable IKE logging level (logging level debugging security process  crypto subcat ike) also ensure the IKE pool is not exhausted.

Cheers,
Venu Puduchery,
[Is my post helped you ? Give Kudos :) ]
Regular Contributor I
Posts: 232
Registered: ‎01-19-2013

Re: Convert Controller AP to RAP

The ike logging leven is on debugging.

How can I check that the ike pool is not exhausted?

Regular Contributor I
Posts: 232
Registered: ‎01-19-2013

Re: Convert Controller AP to RAP

[ Edited ]

I see natt is not enabled, but the raps and iaps work fine without...

Untitled.png

 

Search Airheads
Showing results for 
Search instead for 
Did you mean: